$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft File: FB5CD1159991D5A0305975655EB49929B5029C8B.mft (raw, json) Hash identifier: t4OMLQk9iASJqtSLYH+jf84jW8ZwcZ3tWBTUq3Xl2g8= Subject key identifier: 7B:B9:A2:DF:E0:85:DE:3A:9C:77:BB:E1:44:E0:F8:F9:71:3A:1F:ED Authority key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B Certificate issuer: /CN=FB5CD1159991D5A0305975655EB49929B5029C8B Certificate serial: 3F25F92088F1312734476A50560CC081BF216DE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:31:09 +0000 Manifest this update: Thu 24 Sep 2026 04:26:09 +0000 Manifest next update: Fri 25 Sep 2026 05:41:09 +0000 Files and hashes: 1: FB5CD1159991D5A0305975655EB49929B5029C8B.crl (hash: AiOJwhr//0O7O5HRa3K8zimlyJoIJsDA5uzqYjtmLfU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:25:f9:20:88:f1:31:27:34:47:6a:50:56:0c:c0:81:bf:21:6d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB5CD1159991D5A0305975655EB49929B5029C8B Validity Not Before: Sep 24 04:26:09 2026 GMT Not After : Sep 25 05:41:09 2026 GMT Subject: CN=7BB9A2DFE085DE3A9C77BBE144E0F8F9713A1FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:c6:14:90:75:4a:ac:ed:4c:ba:2e:8a:fc: a2:a7:cf:0a:02:10:c7:cd:84:6d:92:7c:56:93:9b: 0f:ee:2e:b9:c1:4d:b6:76:5e:39:fd:b4:2a:7c:42: 93:44:39:87:22:3a:83:e6:87:c0:c2:16:d3:64:71: 41:f6:94:47:76:e4:ce:e1:ab:38:06:b2:2b:61:48: 96:98:17:d9:17:99:eb:75:33:94:ce:b2:cb:01:12: 16:d4:e7:7f:c8:a0:36:41:e4:0e:d5:fc:b2:2c:03: 1c:5e:bb:b7:2c:b0:02:9e:d8:31:cc:22:36:df:80: ca:13:63:9b:15:5b:bc:3e:0e:0f:68:b8:1a:5d:1e: 9c:96:08:f7:cb:fa:b4:cd:f8:2c:67:46:35:1c:a8: f6:c0:8a:a2:b4:84:88:d3:34:dd:48:eb:8d:c8:e8: b9:0f:7e:cb:21:31:64:f2:eb:45:2d:98:f2:5b:fd: 5e:57:84:59:3a:01:f4:94:16:6f:6b:f5:0a:21:7f: 6a:e5:7f:22:52:3a:92:67:70:49:5f:21:68:a7:dc: 30:02:28:6e:1f:9f:da:f2:57:40:6d:cf:5a:88:54: b8:e8:a8:9a:ea:a1:f0:d9:32:d2:60:88:97:80:8d: 27:73:a4:40:29:79:1b:97:dd:4f:cc:3f:29:38:07: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:A2:DF:E0:85:DE:3A:9C:77:BB:E1:44:E0:F8:F9:71:3A:1F:ED X509v3 Authority Key Identifier: keyid:FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b2:07:5c:1e:1f:b5:21:3e:9e:59:a3:eb:91:61:04:ab:9e: 64:8d:65:a1:60:0d:dc:4c:e3:ba:35:7c:94:ad:62:a5:c6:97: 14:95:00:9b:2c:19:18:fb:32:c0:8c:11:89:45:02:ba:76:18: 2d:19:55:73:10:83:28:8a:be:f4:da:39:e3:fb:d0:38:7a:c1: ff:4a:7f:8c:64:a9:9d:47:12:0e:4a:e0:ed:44:c3:a2:bb:bb: 46:a8:58:78:78:ac:fc:a6:cb:88:1a:2d:82:49:c1:6b:8c:37: 59:b1:02:0f:b3:f9:40:09:5f:ea:85:a1:02:87:20:0d:e4:79: a2:3c:42:a6:1c:41:b3:77:5f:8f:85:61:17:a7:ac:01:b4:d9: 7b:67:65:74:8b:0b:bd:43:4a:63:51:56:63:02:55:7d:de:49: c1:15:4a:57:3f:49:3a:d7:95:be:72:7a:eb:f3:d6:9c:d9:d3: cc:b7:6d:3e:cc:85:52:2f:9c:1e:fa:ae:36:e2:a9:76:24:7b: 1e:68:0c:db:9b:92:f9:5e:cf:19:01:5e:28:4e:b4:6f:bb:3f: f7:22:6e:e1:b4:f2:e8:a7:df:49:98:55:25:e9:0f:88:67:f2: fe:bd:f3:fc:2a:c6:07:b9:98:ec:55:e7:9b:7f:d4:9c:e9:6c: 08:dc:49:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPyX5IIjxMSc0R2pQVgzAgb8hbeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlC NTAyOUM4QjAeFw0yNjA5MjQwNDI2MDlaFw0yNjA5MjUwNTQxMDlaMDMxMTAvBgNV BAMTKDdCQjlBMkRGRTA4NURFM0E5Qzc3QkJFMTQ0RTBGOEY5NzEzQTFGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLMYUkHVKrO1Mui6K/KKnzwoC EMfNhG2SfFaTmw/uLrnBTbZ2Xjn9tCp8QpNEOYciOoPmh8DCFtNkcUH2lEd25M7h qzgGsithSJaYF9kXmet1M5TOsssBEhbU53/IoDZB5A7V/LIsAxxeu7cssAKe2DHM IjbfgMoTY5sVW7w+Dg9ouBpdHpyWCPfL+rTN+CxnRjUcqPbAiqK0hIjTNN1I643I 6LkPfsshMWTy60UtmPJb/V5XhFk6AfSUFm9r9Qohf2rlfyJSOpJncElfIWin3DAC KG4fn9ryV0Btz1qIVLjoqJrqofDZMtJgiJeAjSdzpEApeRuX3U/MPyk4B0rzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe7mi3+CF3jqcd7vhROD4+XE6H+0wHwYDVR0j BBgwFoAU+1zRFZmR1aAwWXVlXrSZKbUCnIswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExZjNiMzctYmQ1NC00OTExLTkwNWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5 OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlCNTAyOUM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjVDRDExNTk5OTFENUEwMzA1OTc1NjU1RUI0OTkyOUI1MDI5 QzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5 MjlCNTAyOUM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqyB1weH7UhPp5Zo+uRYQSrnmSNZaFgDdxM 47o1fJStYqXGlxSVAJssGRj7MsCMEYlFArp2GC0ZVXMQgyiKvvTaOeP70Dh6wf9K f4xkqZ1HEg5K4O1Ew6K7u0aoWHh4rPymy4gaLYJJwWuMN1mxAg+z+UAJX+qFoQKH IA3keaI8QqYcQbN3X4+FYRenrAG02XtnZXSLC71DSmNRVmMCVX3eScEVSlc/STrX lb5yeuvz1pzZ08y3bT7MhVIvnB76rjbiqXYkex5oDNubkvlezxkBXihOtG+7P/ci buG08uin30mYVSXpD4hn8v698/wqxge5mOxV55t/1JzpbAjcSYM= -----END CERTIFICATE-----Generated at Thu Sep 24 12:28:53 2026 by rpki-client