$ rpki-client -vvf rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft File: FB9B3B1791631B716B38A928B32D781C38B7E74C.mft (raw, json) Hash identifier: ZHN2pI9/OYoOSCf41nOdvAVXLYTw89XGdjY9Kood+oU= Subject key identifier: 85:E9:9E:11:5B:F7:14:E4:23:82:4E:47:7A:43:DB:96:9E:F4:F7:00 Authority key identifier: FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C Certificate issuer: /CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Certificate serial: 6F81DCFF866B65E228E92FE92E0DED4E9E6245F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 05:13:31 +0000 Manifest this update: Tue 28 Jul 2026 05:08:31 +0000 Manifest next update: Wed 29 Jul 2026 08:13:31 +0000 Files and hashes: 1: FB9B3B1791631B716B38A928B32D781C38B7E74C.crl (hash: LZYkSnJA/NWfTIFthGCrNSVgkeR1AKFsriX/QciSyF8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 08:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:81:dc:ff:86:6b:65:e2:28:e9:2f:e9:2e:0d:ed:4e:9e:62:45:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Validity Not Before: Jul 28 05:08:31 2026 GMT Not After : Jul 29 08:13:31 2026 GMT Subject: CN=85E99E115BF714E423824E477A43DB969EF4F700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:78:93:4d:6d:cd:0d:50:16:02:45:1b:18: 3e:2e:88:2a:00:00:6e:44:83:f6:cb:2f:53:f7:c8: d1:b7:6c:be:ea:9b:03:46:7d:40:29:67:09:3d:a1: 87:d1:d8:bd:64:e1:73:46:19:92:53:99:e5:a0:a4: b6:4e:9f:49:29:3c:4d:8d:b1:ec:52:62:7c:d4:08: 3d:ff:db:46:af:30:81:00:d8:a4:a9:36:35:88:3e: f1:ed:fe:a4:be:09:f5:35:45:0d:a4:be:af:0f:b7: 8c:fb:bd:39:20:bf:81:77:15:91:d2:27:e8:43:1e: 0d:56:86:ac:86:13:9b:9b:f1:19:f5:f2:79:5f:bc: c8:24:e0:be:6b:05:ab:ff:b2:41:0f:29:5c:ce:ca: 2f:ff:fe:70:0d:62:a3:d1:42:e7:f7:8c:c3:44:2e: 11:0c:53:10:7e:95:f8:f0:aa:af:1f:a3:c9:54:48: 26:2b:2d:64:ca:5c:2e:20:4f:4a:0e:08:55:d0:32: 8b:94:32:5b:23:b8:50:2a:f1:22:ad:5d:d6:ec:a2: 43:df:3b:1c:6a:0f:f9:f4:bc:2a:a2:da:7c:d0:65: 55:69:3b:0c:22:9c:47:f4:32:60:e2:14:97:90:43: cc:2b:20:95:1c:d9:0c:af:45:f6:85:7b:3c:ad:19: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E9:9E:11:5B:F7:14:E4:23:82:4E:47:7A:43:DB:96:9E:F4:F7:00 X509v3 Authority Key Identifier: keyid:FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:bb:ed:42:ce:6c:9c:d7:b1:a7:33:05:e2:fd:4c:09:a2:ec: 49:5e:cb:88:af:5e:33:9c:6c:91:f3:b8:f6:26:31:56:d7:f5: 1d:10:8b:0d:e7:14:49:f2:12:d7:58:fd:3e:8c:96:7a:56:20: 46:39:28:01:30:04:ee:c7:d1:0e:38:df:da:1a:53:ce:fb:70: 36:89:ac:39:15:1c:b8:fa:34:8a:20:2c:93:82:82:da:8f:f7: 43:96:d7:b3:12:d3:af:fc:6a:0a:90:dd:03:5a:14:b7:af:d1: 16:6b:5b:d9:81:ea:9f:a7:c8:54:cf:d8:ca:1c:cf:cf:da:2b: fb:56:74:70:0c:f2:f8:69:ad:79:a5:2b:a4:b2:5b:66:18:50: c7:bf:45:00:6b:74:76:c6:24:97:58:e1:42:77:af:af:94:2c: 8a:08:f8:f4:b5:9e:e1:9c:92:18:7e:6b:6c:f0:cc:94:78:31: 1a:61:cd:53:ce:ca:65:58:0e:fc:62:65:37:07:ce:8b:c6:10: d5:02:10:8b:57:09:0b:6d:ce:27:98:e7:15:7f:16:2f:5d:10: 27:14:fa:66:1a:cf:56:a3:dd:bc:a5:11:68:f7:fd:f8:b2:36: 36:24:a3:46:fe:f6:07:b5:19:4f:10:f9:5e:c8:95:c6:bc:78: b3:2d:c3:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4Hc/4ZrZeIo6S/pLg3tTp5iRfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMz OEI3RTc0QzAeFw0yNjA3MjgwNTA4MzFaFw0yNjA3MjkwODEzMzFaMDMxMTAvBgNV BAMTKDg1RTk5RTExNUJGNzE0RTQyMzgyNEU0NzdBNDNEQjk2OUVGNEY3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocniTTW3NDVAWAkUbGD4uiCoA AG5Eg/bLL1P3yNG3bL7qmwNGfUApZwk9oYfR2L1k4XNGGZJTmeWgpLZOn0kpPE2N sexSYnzUCD3/20avMIEA2KSpNjWIPvHt/qS+CfU1RQ2kvq8Pt4z7vTkgv4F3FZHS J+hDHg1WhqyGE5ub8Rn18nlfvMgk4L5rBav/skEPKVzOyi///nANYqPRQuf3jMNE LhEMUxB+lfjwqq8fo8lUSCYrLWTKXC4gT0oOCFXQMouUMlsjuFAq8SKtXdbsokPf OxxqD/n0vCqi2nzQZVVpOwwinEf0MmDiFJeQQ8wrIJUc2QyvRfaFezytGecrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhemeEVv3FOQjgk5HekPblp709wAwHwYDVR0j BBgwFoAU+5s7F5FjG3FrOKkosy14HDi350wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAyN2ZhMDItZTQ5Zi00MjE1LTg2MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5 MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMzOEI3RTc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjlCM0IxNzkxNjMxQjcxNkIzOEE5MjhCMzJENzgxQzM4QjdF NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4 MUMzOEI3RTc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJW77ULObJzXsaczBeL9TAmi7Eley4ivXjOc bJHzuPYmMVbX9R0Qiw3nFEnyEtdY/T6MlnpWIEY5KAEwBO7H0Q4439oaU877cDaJ rDkVHLj6NIogLJOCgtqP90OW17MS06/8agqQ3QNaFLev0RZrW9mB6p+nyFTP2Moc z8/aK/tWdHAM8vhprXmlK6SyW2YYUMe/RQBrdHbGJJdY4UJ3r6+ULIoI+PS1nuGc khh+a2zwzJR4MRphzVPOymVYDvxiZTcHzovGENUCEItXCQttzieY5xV/Fi9dECcU +mYaz1aj3bylEWj3/fiyNjYko0b+9ge1GU8Q+V7Ilca8eLMtw4s= -----END CERTIFICATE-----Generated at Tue Jul 28 23:19:24 2026 by rpki-client