$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft File: FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft (raw, json) Hash identifier: qSql4uHHt0sdmqapc4klaAp1YkgR7rk3zScja+kz778= Subject key identifier: 10:68:33:D4:B0:53:1C:5E:BE:01:2F:1B:81:72:A7:F0:9A:70:BA:35 Authority key identifier: FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B Certificate issuer: /CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B Certificate serial: 02150A8636FF8B9323E7F5F2D76EE09703042074 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 12:41:37 +0000 Manifest this update: Thu 24 Sep 2026 12:36:37 +0000 Manifest next update: Fri 25 Sep 2026 15:43:37 +0000 Files and hashes: 1: FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl (hash: XQiO9wVDtdftvP0PC+F6P85J2Jj0YBCdznr8/aNLQFc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:15:0a:86:36:ff:8b:93:23:e7:f5:f2:d7:6e:e0:97:03:04:20:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B Validity Not Before: Sep 24 12:36:37 2026 GMT Not After : Sep 25 15:43:37 2026 GMT Subject: CN=106833D4B0531C5EBE012F1B8172A7F09A70BA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:bd:0c:98:38:50:29:a1:a9:0d:81:db:9a: 62:f9:18:2c:ef:cd:13:f4:a5:f4:49:e5:43:c9:39: 93:ca:c4:3b:42:d3:b5:b3:d1:f3:35:48:c9:5b:5e: 8b:6e:28:e0:69:a4:b1:d5:95:fb:d9:9a:2f:a0:91: 46:20:bd:23:01:47:32:40:92:f8:5a:ff:13:78:9d: e1:1c:a7:0f:7b:4c:59:e2:21:27:9c:fe:4e:4a:70: 50:f1:ef:ef:7b:88:6c:8d:9b:9f:e2:5d:41:f7:22: c7:ca:f9:81:3c:82:15:68:b8:77:fe:ca:d8:80:bb: cb:f2:63:4d:c9:cd:42:a4:11:b4:0d:ce:23:08:12: ab:99:d3:a7:8b:b6:ba:13:35:cb:1e:ff:8a:2b:6b: 6b:b8:e4:80:43:e7:51:3b:f0:ab:82:31:b5:bd:9d: 39:fe:82:3e:33:2a:61:46:1a:c9:14:ef:d9:d8:a2: c9:56:df:af:f1:fa:93:16:3f:b2:78:bf:84:66:40: 9c:89:77:57:d7:93:24:69:86:04:2e:81:d1:1f:bb: 99:48:67:ad:74:91:ec:f3:28:a4:ad:d5:64:1a:53: 92:83:38:a3:3a:35:98:26:45:4d:bf:6e:94:40:70: 2f:60:d5:69:f5:f8:c9:a4:e5:50:8f:ab:ea:1a:f4: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:68:33:D4:B0:53:1C:5E:BE:01:2F:1B:81:72:A7:F0:9A:70:BA:35 X509v3 Authority Key Identifier: keyid:FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:72:0e:03:5a:3e:70:89:fb:87:8f:48:63:84:00:17:36:5c: e3:d2:f8:0a:58:cd:13:f8:c2:53:a9:1c:7b:0d:cc:e8:63:bf: d7:69:0f:3b:fc:c8:a7:6f:df:aa:f5:08:6f:2a:8e:9c:b2:c1: 86:78:6b:ba:cc:bd:75:aa:a0:2d:5d:85:84:74:1a:31:6f:93: 1b:f0:5a:6e:79:2a:44:f6:51:00:14:a7:61:fb:c5:19:53:6e: 16:2a:11:b0:f0:47:a4:f1:59:72:74:c9:8a:ea:02:5c:72:74: 5d:34:60:43:67:e1:c5:b9:5d:08:4d:86:90:f5:8f:dc:46:ad: 1b:35:c8:e0:19:1e:f6:a8:4d:a0:b3:1b:e6:33:d3:5d:f0:b0: 4f:0e:13:e2:60:74:7e:9b:01:93:9a:df:17:57:67:ef:6c:48: fc:7a:06:32:eb:f7:14:b8:a2:5c:84:c9:e4:c9:a3:5f:e4:87: da:2e:9d:72:24:19:97:63:25:11:f0:b2:8a:eb:af:f7:b0:b6: 23:a7:d8:84:f5:f3:ba:0c:47:d8:ce:f3:fc:e9:ed:2a:3f:56: c7:33:b5:91:03:64:fc:b5:c6:d7:cd:69:6d:38:61:39:b5:c8: f4:eb:a6:f5:6a:65:99:c9:3c:fe:a1:7f:25:39:e1:78:a7:68: 7f:8f:b9:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhUKhjb/i5Mj5/Xy127glwMEIHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBOEMzOEI1MDMwQTA2RkVBMjA1OTZCMDhGNzFFMTg5 REIyNzcwQjAeFw0yNjA5MjQxMjM2MzdaFw0yNjA5MjUxNTQzMzdaMDMxMTAvBgNV BAMTKDEwNjgzM0Q0QjA1MzFDNUVCRTAxMkYxQjgxNzJBN0YwOUE3MEJBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX/r0MmDhQKaGpDYHbmmL5GCzv zRP0pfRJ5UPJOZPKxDtC07Wz0fM1SMlbXotuKOBppLHVlfvZmi+gkUYgvSMBRzJA kvha/xN4neEcpw97TFniISec/k5KcFDx7+97iGyNm5/iXUH3IsfK+YE8ghVouHf+ ytiAu8vyY03JzUKkEbQNziMIEquZ06eLtroTNcse/4ora2u45IBD51E78KuCMbW9 nTn+gj4zKmFGGskU79nYoslW36/x+pMWP7J4v4RmQJyJd1fXkyRphgQugdEfu5lI Z610kezzKKSt1WQaU5KDOKM6NZgmRU2/bpRAcC9g1Wn1+Mmk5VCPq+oa9CGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGgz1LBTHF6+AS8bgXKn8JpwujUwHwYDVR0j BBgwFoAU+6jDi1AwoG/qIFlrCPceGJ2ydwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzZTljZDYtYjkwZC00YzhlLWIwZDYtMjFhNTUyOWY3MjkxLzAvRkJBOEMzOEI1 MDMwQTA2RkVBMjA1OTZCMDhGNzFFMTg5REIyNzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQkE4QzM4QjUwMzBBMDZGRUEyMDU5NkIwOEY3MUUxODlEQjI3 NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvRkJBOEMzOEI1MDMwQTA2RkVBMjA1OTZCMDhGNzFF MTg5REIyNzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdyDgNaPnCJ+4ePSGOEABc2XOPS+ApYzRP4 wlOpHHsNzOhjv9dpDzv8yKdv36r1CG8qjpyywYZ4a7rMvXWqoC1dhYR0GjFvkxvw Wm55KkT2UQAUp2H7xRlTbhYqEbDwR6TxWXJ0yYrqAlxydF00YENn4cW5XQhNhpD1 j9xGrRs1yOAZHvaoTaCzG+Yz013wsE8OE+JgdH6bAZOa3xdXZ+9sSPx6BjLr9xS4 olyEyeTJo1/kh9ounXIkGZdjJRHwsorrr/ewtiOn2IT187oMR9jO8/zp7So/Vscz tZEDZPy1xtfNaW04YTm1yPTrpvVqZZnJPP6hfyU54XinaH+PuZg= -----END CERTIFICATE-----Generated at Fri Sep 25 02:39:23 2026 by rpki-client