$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft File: FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft (raw, json) Hash identifier: CxYUKgWTr4/76kCd+f0yna6iPe0ULgZ5RRGkkTLGZe0= Subject key identifier: D8:4D:56:0A:FC:2C:33:74:21:EE:A7:9F:5F:62:A1:02:5E:12:5D:0B Authority key identifier: FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B Certificate issuer: /CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B Certificate serial: 4848E84B65DEB2D61AE7C4337821B3FAAF4191BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft Manifest number: BF Signing time: Wed 23 Sep 2026 04:21:27 +0000 Manifest this update: Wed 23 Sep 2026 04:16:27 +0000 Manifest next update: Thu 24 Sep 2026 04:36:27 +0000 Files and hashes: 1: FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl (hash: MHfjZB/U5K/YdziQU4YhAde7GeUVieagnrK5J1TObd4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:48:e8:4b:65:de:b2:d6:1a:e7:c4:33:78:21:b3:fa:af:41:91:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBA8C38B5030A06FEA20596B08F71E189DB2770B Validity Not Before: Sep 23 04:16:27 2026 GMT Not After : Sep 24 04:36:27 2026 GMT Subject: CN=D84D560AFC2C337421EEA79F5F62A1025E125D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:45:35:5b:2c:0d:79:eb:14:5a:de:c5:5f: 33:52:a3:d2:62:a0:c9:f2:ae:ad:cc:f9:64:18:ce: d9:cc:a2:4a:81:b5:04:e1:0d:10:9b:96:f7:dd:8e: ea:ed:d9:88:e5:a7:6a:7e:53:6a:a0:1f:63:33:56: 4f:08:4a:db:3f:f2:df:fb:bc:6e:7c:e0:18:57:bb: 52:9e:e4:21:58:9d:21:6c:80:92:d4:8a:d5:d7:76: c3:03:ed:72:f5:75:97:36:a3:9f:2b:39:a2:28:6d: 43:75:0a:e5:4c:7b:0a:ad:b8:43:2f:ba:aa:81:8f: 3f:2f:69:0f:11:e6:c6:0e:66:ac:18:4f:f9:54:51: 58:80:e5:2a:7b:27:1d:8b:da:b4:81:22:51:4f:bd: 79:b7:7a:fa:a1:71:6b:66:0b:03:43:44:95:f3:47: d2:e7:77:14:57:af:e0:4b:6d:5b:97:9b:e3:9a:15: d3:e9:76:e7:b8:54:43:cc:81:b7:85:e8:84:fb:55: 7b:45:d0:a4:80:54:48:2d:36:be:22:c3:d0:76:91: 74:ae:68:58:17:4f:62:38:d6:0c:6f:d0:cd:0c:cb: 2f:09:5b:fb:45:69:ee:db:58:bf:49:be:ed:b7:ee: 42:da:bb:85:fe:52:ed:6e:b0:43:a8:58:4b:cd:2b: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4D:56:0A:FC:2C:33:74:21:EE:A7:9F:5F:62:A1:02:5E:12:5D:0B X509v3 Authority Key Identifier: keyid:FB:A8:C3:8B:50:30:A0:6F:EA:20:59:6B:08:F7:1E:18:9D:B2:77:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FBA8C38B5030A06FEA20596B08F71E189DB2770B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/FBA8C38B5030A06FEA20596B08F71E189DB2770B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7a:9e:1a:78:72:7b:90:bd:c6:67:39:7a:ce:31:94:62:a8: cd:12:0f:f8:da:32:a2:8e:8d:6a:76:02:8f:34:77:1c:2c:9a: b1:eb:cb:f0:23:5e:b8:66:0b:59:6c:da:c7:c5:b8:d0:74:11: b9:df:7a:da:08:52:ed:dc:ed:dd:14:cf:cb:3e:6d:0c:31:9d: fe:2e:9f:ce:dc:83:2c:dd:93:6d:c0:63:38:20:f3:09:8f:ba: cf:26:85:3f:10:8f:8e:cd:ec:a2:6d:6a:53:ca:09:13:30:0f: 28:c8:17:14:9c:df:f6:d4:2e:36:7e:24:9f:25:cf:69:3d:a1: 76:9a:0f:d7:dc:55:a8:32:dd:85:a4:83:45:e7:9a:67:70:05: 10:54:a0:8b:17:e9:bb:f5:17:f8:24:22:59:00:2c:70:5a:8e: 74:77:ca:01:9f:49:cd:cf:a8:ad:a7:ac:a0:cf:10:28:73:4c: 56:8c:59:b2:d5:96:8d:26:08:a5:12:98:a6:39:93:84:8a:12: 2a:27:55:f1:fe:2c:26:78:b1:c4:72:e1:ae:3f:67:e7:be:5d: 9c:50:c2:3c:f6:00:b2:d3:df:77:69:f9:e9:d6:b3:6b:e2:19: 44:e7:48:db:9c:5d:75:6d:f2:f8:26:00:27:db:bf:37:fc:6b: 85:87:b7:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEjoS2XestYa58QzeCGz+q9BkbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBOEMzOEI1MDMwQTA2RkVBMjA1OTZCMDhGNzFFMTg5 REIyNzcwQjAeFw0yNjA5MjMwNDE2MjdaFw0yNjA5MjQwNDM2MjdaMDMxMTAvBgNV BAMTKEQ4NEQ1NjBBRkMyQzMzNzQyMUVFQTc5RjVGNjJBMTAyNUUxMjVEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZUU1WywNeesUWt7FXzNSo9Ji oMnyrq3M+WQYztnMokqBtQThDRCblvfdjurt2Yjlp2p+U2qgH2MzVk8ISts/8t/7 vG584BhXu1Ke5CFYnSFsgJLUitXXdsMD7XL1dZc2o58rOaIobUN1CuVMewqtuEMv uqqBjz8vaQ8R5sYOZqwYT/lUUViA5Sp7Jx2L2rSBIlFPvXm3evqhcWtmCwNDRJXz R9LndxRXr+BLbVuXm+OaFdPpdue4VEPMgbeF6IT7VXtF0KSAVEgtNr4iw9B2kXSu aFgXT2I41gxv0M0Myy8JW/tFae7bWL9Jvu237kLau4X+Uu1usEOoWEvNK8zLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2E1WCvwsM3Qh7qefX2KhAl4SXQswHwYDVR0j BBgwFoAU+6jDi1AwoG/qIFlrCPceGJ2ydwswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzZTljZDYtYjkwZC00YzhlLWIwZDYtMjFhNTUyOWY3MjkxLzAvRkJBOEMzOEI1 MDMwQTA2RkVBMjA1OTZCMDhGNzFFMTg5REIyNzcwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQkE4QzM4QjUwMzBBMDZGRUEyMDU5NkIwOEY3MUUxODlEQjI3 NzBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvRkJBOEMzOEI1MDMwQTA2RkVBMjA1OTZCMDhGNzFF MTg5REIyNzcwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZ6nhp4cnuQvcZnOXrOMZRiqM0SD/jaMqKO jWp2Ao80dxwsmrHry/AjXrhmC1ls2sfFuNB0EbnfetoIUu3c7d0Uz8s+bQwxnf4u n87cgyzdk23AYzgg8wmPus8mhT8Qj47N7KJtalPKCRMwDyjIFxSc3/bULjZ+JJ8l z2k9oXaaD9fcVagy3YWkg0XnmmdwBRBUoIsX6bv1F/gkIlkALHBajnR3ygGfSc3P qK2nrKDPEChzTFaMWbLVlo0mCKUSmKY5k4SKEionVfH+LCZ4scRy4a4/Z+e+XZxQ wjz2ALLT33dp+enWs2viGUTnSNucXXVt8vgmACfbvzf8a4WHt3U= -----END CERTIFICATE-----Generated at Wed Sep 23 07:29:49 2026 by rpki-client