$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft File: FB9B3B1791631B716B38A928B32D781C38B7E74C.mft (raw, json) Hash identifier: NWBkm/Ev26gG4dFptEyy/7RHZ43oq/SSoHbzuiVi/uo= Subject key identifier: ED:C3:61:2F:D9:86:25:6A:41:4B:60:37:90:C5:FE:16:7A:F7:FC:52 Authority key identifier: FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C Certificate issuer: /CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Certificate serial: 76AD75DC68D285B27CDD4ACAE8DEE5A2A9F58FAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:31:56 +0000 Manifest this update: Mon 21 Sep 2026 20:26:56 +0000 Manifest next update: Tue 22 Sep 2026 22:24:56 +0000 Files and hashes: 1: FB9B3B1791631B716B38A928B32D781C38B7E74C.crl (hash: IehbsC4cX0fJ3Ib79hm61IUN2exgWdOvQP1YC2qLRLw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ad:75:dc:68:d2:85:b2:7c:dd:4a:ca:e8:de:e5:a2:a9:f5:8f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Validity Not Before: Sep 21 20:26:56 2026 GMT Not After : Sep 22 22:24:56 2026 GMT Subject: CN=EDC3612FD986256A414B603790C5FE167AF7FC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:05:f2:54:91:c6:05:05:eb:03:48:d4:9a:e7: 81:d0:a3:86:c2:07:33:1d:1b:fd:00:13:55:b0:68: 44:2e:56:94:08:d9:4f:06:7b:3d:ed:11:5e:db:b6: 72:00:34:2f:70:1a:fc:ee:ba:10:a3:fb:3f:f0:69: 21:bb:1b:24:08:3d:19:ac:05:32:d9:7b:a7:6b:38: 8a:a8:55:be:81:7f:92:c3:7d:0c:f9:ff:22:b2:4c: a5:17:95:9b:4e:2a:c2:b0:0b:3e:45:b1:8c:84:16: f4:00:6e:3a:3b:cc:f2:2a:7a:59:07:c7:99:48:25: c2:2a:99:85:7f:00:d2:da:87:6e:f7:fa:ea:43:6a: a8:8f:06:f3:89:76:e6:5d:76:ce:9d:8b:0f:90:5f: f0:38:27:9a:46:dd:f2:c0:4b:64:82:4c:57:78:1c: a5:70:05:9b:25:d3:5c:d7:6a:0e:52:93:eb:1c:15: b8:6e:79:ae:47:d1:01:99:0c:6b:27:74:4f:d6:ff: 57:00:64:36:1b:ba:7d:bc:9c:a3:35:52:89:1a:c5: a1:36:4b:2b:ea:80:2e:6a:f2:4f:bd:36:60:48:5d: 27:63:d3:63:61:29:19:0b:af:4f:30:89:1b:2c:d8: da:9a:09:5f:28:38:f1:81:09:67:1d:07:ac:c0:42: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C3:61:2F:D9:86:25:6A:41:4B:60:37:90:C5:FE:16:7A:F7:FC:52 X509v3 Authority Key Identifier: keyid:FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:a3:93:78:f1:ad:b9:64:ad:0f:53:4f:a3:94:0c:8e:aa:f8: cc:60:4a:6c:ac:4a:c7:ae:0e:03:2b:7a:3a:1d:63:fc:44:a4: 13:64:d3:b8:1a:2d:ae:3a:25:25:6c:35:76:2e:35:7f:c1:e8: db:d8:28:f8:a7:13:a0:95:fb:f9:48:17:1b:17:df:64:1d:fa: 4f:0f:2c:94:03:c0:1d:87:1b:1a:b4:1c:8b:9b:0e:2a:8f:b9: 53:cf:2e:f4:a8:66:bf:19:b5:42:27:6a:e5:c6:66:41:8c:f2: 70:cd:21:00:7e:94:d6:4f:48:a4:f4:02:21:ac:2b:9a:60:61: 2c:df:52:87:9c:01:2b:7a:e3:96:76:fe:4d:5f:f8:aa:8a:27: f0:28:a7:8c:88:9b:6c:1a:ec:cd:3e:43:d8:98:e2:20:e3:fd: 81:03:55:58:36:96:7e:f3:ed:38:56:60:32:67:ae:83:0a:8f: 56:4e:bf:ed:af:3d:05:4f:09:52:85:eb:b8:6b:4c:79:44:bb: e5:02:94:51:d1:75:d7:f0:ab:79:54:c4:77:3b:a7:5f:64:ec: cb:9d:d0:4d:07:07:dc:62:bb:b7:17:8e:2a:b6:76:ef:2d:66: f7:fb:de:e4:e0:db:05:13:d0:24:36:f1:e2:56:f8:a2:2e:2c: 38:23:6a:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdq113GjShbJ83UrK6N7loqn1j60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMz OEI3RTc0QzAeFw0yNjA5MjEyMDI2NTZaFw0yNjA5MjIyMjI0NTZaMDMxMTAvBgNV BAMTKEVEQzM2MTJGRDk4NjI1NkE0MTRCNjAzNzkwQzVGRTE2N0FGN0ZDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjBfJUkcYFBesDSNSa54HQo4bC BzMdG/0AE1WwaEQuVpQI2U8Gez3tEV7btnIANC9wGvzuuhCj+z/waSG7GyQIPRms BTLZe6drOIqoVb6Bf5LDfQz5/yKyTKUXlZtOKsKwCz5FsYyEFvQAbjo7zPIqelkH x5lIJcIqmYV/ANLah273+upDaqiPBvOJduZdds6diw+QX/A4J5pG3fLAS2SCTFd4 HKVwBZsl01zXag5Sk+scFbhuea5H0QGZDGsndE/W/1cAZDYbun28nKM1UokaxaE2 SyvqgC5q8k+9NmBIXSdj02NhKRkLr08wiRss2NqaCV8oOPGBCWcdB6zAQgvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7cNhL9mGJWpBS2A3kMX+Fnr3/FIwHwYDVR0j BBgwFoAU+5s7F5FjG3FrOKkosy14HDi350wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAyN2ZhMDItZTQ5Zi00MjE1LTg2MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5 MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMzOEI3RTc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjlCM0IxNzkxNjMxQjcxNkIzOEE5MjhCMzJENzgxQzM4QjdF NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4 MUMzOEI3RTc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6jk3jxrblkrQ9TT6OUDI6q+MxgSmysSseu DgMrejodY/xEpBNk07gaLa46JSVsNXYuNX/B6NvYKPinE6CV+/lIFxsX32Qd+k8P LJQDwB2HGxq0HIubDiqPuVPPLvSoZr8ZtUInauXGZkGM8nDNIQB+lNZPSKT0AiGs K5pgYSzfUoecASt645Z2/k1f+KqKJ/Aop4yIm2wa7M0+Q9iY4iDj/YEDVVg2ln7z 7ThWYDJnroMKj1ZOv+2vPQVPCVKF67hrTHlEu+UClFHRddfwq3lUxHc7p19k7Mud 0E0HB9xiu7cXjiq2du8tZvf73uTg2wUT0CQ28eJW+KIuLDgjan8= -----END CERTIFICATE-----Generated at Tue Sep 22 14:25:40 2026 by rpki-client