$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft File: FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft (raw, json) Hash identifier: 5cOOop4QAQp9rtPCG661WQXYcmnk2oSqdJO5D0MjRkc= Subject key identifier: 21:E2:CA:8F:9A:01:AC:AB:F8:20:4C:93:5F:ED:6C:3E:F3:95:C5:A1 Authority key identifier: FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B Certificate issuer: /CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B Certificate serial: 40941C7C2B4138FA51C58E58F86E82E347C0C0EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft Manifest number: 0D Signing time: Tue 12 May 2026 08:09:37 +0000 Manifest this update: Tue 12 May 2026 08:04:37 +0000 Manifest next update: Wed 13 May 2026 10:47:37 +0000 Files and hashes: 1: FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl (hash: VVJKXP+Vq9pZNCe41tfLxfba3w/SO0XZDxfZenK+5BI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:94:1c:7c:2b:41:38:fa:51:c5:8e:58:f8:6e:82:e3:47:c0:c0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B Validity Not Before: May 12 08:04:37 2026 GMT Not After : May 13 10:47:37 2026 GMT Subject: CN=21E2CA8F9A01ACABF8204C935FED6C3EF395C5A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:a4:ae:64:de:16:ed:5c:60:d5:30:73:68: d9:e4:a2:16:ac:80:ff:4e:f7:00:e6:73:e2:36:e2: 83:20:f0:ef:14:61:89:ad:69:9f:a9:58:fe:1f:1e: d7:f2:25:40:ab:d6:0c:8e:7b:42:f1:e0:b7:15:85: cd:80:4f:38:b8:75:3c:7b:b7:24:6f:7c:84:72:09: a3:d0:94:5a:91:74:75:27:15:d9:5a:d5:c3:85:8f: 0a:f1:56:9f:22:c3:12:37:7c:45:34:26:d2:ae:9b: b9:49:bc:f9:27:17:5f:13:d6:14:d6:65:e1:9f:bc: 3a:e7:52:c2:0d:00:07:f5:b0:37:f8:05:df:a9:da: 4f:82:0c:90:dc:bf:c6:94:aa:50:1c:19:a2:26:74: 74:37:f9:66:ca:78:05:6e:5d:0a:30:27:c0:55:23: eb:f3:89:df:e5:69:8f:e9:fe:47:0e:52:49:43:90: cb:c6:48:69:9d:ef:96:09:e5:1c:ac:48:f8:59:78: 2e:21:85:f8:00:14:e3:e0:40:86:5a:3d:68:8e:66: f0:a9:83:d6:9f:5f:e4:2c:70:64:1c:c4:52:02:61: cc:9a:7f:d2:a7:cf:3d:62:b2:db:67:40:ab:f2:8d: 11:1f:71:74:4e:9e:75:d1:b5:a8:b5:53:3f:04:86: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E2:CA:8F:9A:01:AC:AB:F8:20:4C:93:5F:ED:6C:3E:F3:95:C5:A1 X509v3 Authority Key Identifier: keyid:FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d7:1a:23:82:b5:df:e8:d8:8d:54:e5:6a:35:db:41:5c:9e: 90:84:12:73:5f:25:3b:ce:93:b2:d9:b2:25:93:d0:05:d3:07: 65:c6:dc:63:5a:b6:b2:c0:32:f1:e5:cc:3a:a5:79:94:5d:88: e0:c0:d7:55:b3:7e:1a:d3:28:50:8e:37:87:2b:49:9a:c8:65: 1a:16:35:62:43:86:09:1e:a4:bb:5a:05:63:8b:14:55:4e:90: 1a:9f:76:01:1c:de:21:58:de:d1:94:20:b9:49:09:64:47:26: 8f:1e:79:50:47:c5:82:41:4f:ad:6f:74:b4:c2:5d:1f:61:76: 2c:df:91:e9:8d:49:01:3b:cb:e6:6b:02:45:97:d8:54:96:b3: 63:6d:79:b9:4d:c7:0f:30:2e:87:4a:45:a4:10:3f:1a:63:a5: e8:a6:d8:15:a1:06:24:da:66:7b:ff:de:15:9c:1c:e7:df:c7: 31:9c:d5:80:ad:48:99:be:3f:30:eb:66:2e:c1:62:a5:06:ad: 85:02:5f:9c:0a:21:de:02:2c:28:39:b8:3c:cc:57:85:5e:67: 07:a5:4e:c2:be:55:d0:b5:8d:5e:2f:ee:ef:97:2d:82:29:a3: b6:aa:42:dc:c7:9a:e9:5f:c2:b5:90:88:3c:d1:48:78:25:2b: 95:cb:5f:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJQcfCtBOPpRxY5Y+G6C40fAwO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBOEMzOEI1MDMwQTA2RkVBMjA1OTZCMDhGNzFFMTg5 REIyNzcwQjAeFw0yNjA1MTIwODA0MzdaFw0yNjA1MTMxMDQ3MzdaMDMxMTAvBgNV BAMTKDIxRTJDQThGOUEwMUFDQUJGODIwNEM5MzVGRUQ2QzNFRjM5NUM1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQqSuZN4W7Vxg1TBzaNnkohas gP9O9wDmc+I24oMg8O8UYYmtaZ+pWP4fHtfyJUCr1gyOe0Lx4LcVhc2ATzi4dTx7 tyRvfIRyCaPQlFqRdHUnFdla1cOFjwrxVp8iwxI3fEU0JtKum7lJvPknF18T1hTW ZeGfvDrnUsINAAf1sDf4Bd+p2k+CDJDcv8aUqlAcGaImdHQ3+WbKeAVuXQowJ8BV I+vzid/laY/p/kcOUklDkMvGSGmd75YJ5RysSPhZeC4hhfgAFOPgQIZaPWiOZvCp g9afX+QscGQcxFICYcyaf9Knzz1isttnQKvyjREfcXROnnXRtai1Uz8EhqX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIeLKj5oBrKv4IEyTX+1sPvOVxaEwHwYDVR0j BBgwFoAU+6jDi1AwoG/qIFlrCPceGJ2ydwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzZTljZDYtYjkwZC00YzhlLWIwZDYtMjFhNTUyOWY3MjkxLzAvRkJBOEMzOEI1 MDMwQTA2RkVBMjA1OTZCMDhGNzFFMTg5REIyNzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQkE4QzM4QjUwMzBBMDZGRUEyMDU5NkIwOEY3MUUxODlEQjI3 NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvRkJBOEMzOEI1MDMwQTA2RkVBMjA1OTZCMDhGNzFF MTg5REIyNzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrXGiOCtd/o2I1U5Wo120FcnpCEEnNfJTvO k7LZsiWT0AXTB2XG3GNatrLAMvHlzDqleZRdiODA11WzfhrTKFCON4crSZrIZRoW NWJDhgkepLtaBWOLFFVOkBqfdgEc3iFY3tGUILlJCWRHJo8eeVBHxYJBT61vdLTC XR9hdizfkemNSQE7y+ZrAkWX2FSWs2NteblNxw8wLodKRaQQPxpjpeim2BWhBiTa Znv/3hWcHOffxzGc1YCtSJm+PzDrZi7BYqUGrYUCX5wKId4CLCg5uDzMV4VeZwel TsK+VdC1jV4v7u+XLYIpo7aqQtzHmulfwrWQiDzRSHglK5XLX5U= -----END CERTIFICATE-----Generated at Wed May 13 00:21:26 2026 by rpki-client