$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft File: FB5CD1159991D5A0305975655EB49929B5029C8B.mft (raw, json) Hash identifier: ekfvp0fuFM3dBcPIyzEsgt25lEkjc2zi20FK0lQ0Xos= Subject key identifier: D5:ED:B9:F8:7C:C2:4F:E0:AD:A9:24:75:11:53:8B:8F:90:20:20:FC Authority key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B Certificate issuer: /CN=FB5CD1159991D5A0305975655EB49929B5029C8B Certificate serial: 6FAEF3A0AD63C42A948BA0CCB028DC4DDE64BFCC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:27:19 +0000 Manifest this update: Tue 12 May 2026 20:22:19 +0000 Manifest next update: Wed 13 May 2026 22:42:19 +0000 Files and hashes: 1: FB5CD1159991D5A0305975655EB49929B5029C8B.crl (hash: HVq8MoEBkwdvild8FMa+QpyJex3jkPOrhxguOFRzY+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ae:f3:a0:ad:63:c4:2a:94:8b:a0:cc:b0:28:dc:4d:de:64:bf:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB5CD1159991D5A0305975655EB49929B5029C8B Validity Not Before: May 12 20:22:19 2026 GMT Not After : May 13 22:42:19 2026 GMT Subject: CN=D5EDB9F87CC24FE0ADA9247511538B8F902020FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:65:59:11:2a:1d:39:03:46:7e:ce:83:b8:71: 52:d4:c1:9d:b6:e4:33:5c:ed:2a:ae:f3:33:ce:51: 97:25:71:5a:14:fd:30:81:c5:02:79:eb:54:95:d7: 98:b3:33:3d:22:d4:12:36:43:bf:a3:71:db:01:11: e7:0a:9b:66:94:65:a5:34:ce:bd:44:ca:25:d1:d8: ea:1a:ba:85:6d:48:04:77:35:f1:e0:a6:e7:af:d1: d6:f2:f5:2b:45:2d:a9:ca:6e:3c:47:9c:b9:90:a2: 14:67:9a:b1:39:96:38:77:cd:22:ea:7e:c3:57:0e: 0a:d0:e5:4e:b2:5b:b1:0d:5b:c2:d9:e6:a0:7e:57: bc:41:6d:9f:b3:36:86:d6:54:14:81:ff:38:72:7e: 24:6c:e4:d1:89:9d:e1:51:2a:02:c3:09:ac:ef:1d: 13:20:f4:99:e0:90:89:a6:1f:f0:54:e6:89:bb:22: 34:43:6e:c4:33:45:53:7d:45:a3:fa:bf:6a:a2:b9: 59:84:8e:f3:2a:4d:29:4d:36:5f:2e:ae:45:3a:b8: 42:ff:74:4b:a0:26:74:5e:a4:71:56:26:61:e3:3b: 63:27:d7:a4:fd:03:8b:32:9b:5a:7d:80:51:58:73: da:47:5f:b2:2a:a4:5c:94:6a:71:43:f0:bb:0e:d0: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:ED:B9:F8:7C:C2:4F:E0:AD:A9:24:75:11:53:8B:8F:90:20:20:FC X509v3 Authority Key Identifier: keyid:FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f6:0c:18:11:96:5e:4e:e8:fc:9b:03:02:a6:8c:a3:b9:b0: d0:e6:2c:2a:7d:06:0a:2b:ae:36:8a:30:29:06:07:f6:bb:2e: 6a:67:aa:78:aa:03:4d:db:a1:56:35:1a:d5:2c:0b:1e:6b:00: bb:8a:7d:74:28:64:ef:a9:fb:03:4f:cc:b7:84:ee:b7:f6:49: 8c:a7:98:a2:1c:e7:2f:5c:18:f7:a5:12:f7:53:b3:70:b4:bb: b8:28:99:8c:2f:fc:41:3b:d9:b2:f6:8e:bc:3a:ea:b4:dc:b5: df:d4:71:0c:6d:f3:ed:ba:5c:d4:73:3d:90:16:a7:38:9b:0f: f5:8d:0c:7d:3a:d0:4e:ea:9f:de:c8:f4:da:35:e1:ad:e6:e3: 4b:e1:33:63:44:9b:2c:2c:36:3d:63:95:b4:ba:f7:bf:55:78: 01:8b:0a:e3:85:67:f8:5a:84:25:51:b8:20:b9:fa:0f:99:a7: 71:ba:f2:41:c1:5e:96:7b:d9:d2:5c:4a:48:1a:ba:2f:a6:1c: 78:8d:2b:a4:67:03:ef:f7:64:c2:c2:86:96:95:93:0c:44:ca: bf:c9:07:1c:2f:13:98:69:94:b7:4d:85:0a:ae:35:d3:d1:c7: 8f:ef:37:d7:6b:4d:95:44:34:79:73:99:ff:4a:4a:f0:61:b8: 36:15:26:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb67zoK1jxCqUi6DMsCjcTd5kv8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlC NTAyOUM4QjAeFw0yNjA1MTIyMDIyMTlaFw0yNjA1MTMyMjQyMTlaMDMxMTAvBgNV BAMTKEQ1RURCOUY4N0NDMjRGRTBBREE5MjQ3NTExNTM4QjhGOTAyMDIwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZVkRKh05A0Z+zoO4cVLUwZ22 5DNc7Squ8zPOUZclcVoU/TCBxQJ561SV15izMz0i1BI2Q7+jcdsBEecKm2aUZaU0 zr1EyiXR2OoauoVtSAR3NfHgpuev0dby9StFLanKbjxHnLmQohRnmrE5ljh3zSLq fsNXDgrQ5U6yW7ENW8LZ5qB+V7xBbZ+zNobWVBSB/zhyfiRs5NGJneFRKgLDCazv HRMg9JngkImmH/BU5om7IjRDbsQzRVN9RaP6v2qiuVmEjvMqTSlNNl8urkU6uEL/ dEugJnRepHFWJmHjO2Mn16T9A4sym1p9gFFYc9pHX7IqpFyUanFD8LsO0GpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1e25+HzCT+CtqSR1EVOLj5AgIPwwHwYDVR0j BBgwFoAU+1zRFZmR1aAwWXVlXrSZKbUCnIswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExZjNiMzctYmQ1NC00OTExLTkwNWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5 OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlCNTAyOUM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjVDRDExNTk5OTFENUEwMzA1OTc1NjU1RUI0OTkyOUI1MDI5 QzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5 MjlCNTAyOUM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP2DBgRll5O6PybAwKmjKO5sNDmLCp9Bgor rjaKMCkGB/a7LmpnqniqA03boVY1GtUsCx5rALuKfXQoZO+p+wNPzLeE7rf2SYyn mKIc5y9cGPelEvdTs3C0u7gomYwv/EE72bL2jrw66rTctd/UcQxt8+26XNRzPZAW pzibD/WNDH060E7qn97I9No14a3m40vhM2NEmywsNj1jlbS6979VeAGLCuOFZ/ha hCVRuCC5+g+Zp3G68kHBXpZ72dJcSkgaui+mHHiNK6RnA+/3ZMLChpaVkwxEyr/J BxwvE5hplLdNhQquNdPRx4/vN9drTZVENHlzmf9KSvBhuDYVJhM= -----END CERTIFICATE-----Generated at Wed May 13 02:59:34 2026 by rpki-client