$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft File: FB5CD1159991D5A0305975655EB49929B5029C8B.mft (raw, json) Hash identifier: uRkTN04TN80kPjM0D4SP9Sr2efFNCTlwWa4QnKgV+5o= Subject key identifier: 44:A0:2C:77:79:45:B2:F8:CE:71:EB:4A:39:C9:69:81:F6:37:70:CD Authority key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B Certificate issuer: /CN=FB5CD1159991D5A0305975655EB49929B5029C8B Certificate serial: 4864EB48C1E106D7519AE0250A2B704CCEF57B53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:49:51 +0000 Manifest this update: Wed 17 Jun 2026 05:44:51 +0000 Manifest next update: Thu 18 Jun 2026 07:10:51 +0000 Files and hashes: 1: FB5CD1159991D5A0305975655EB49929B5029C8B.crl (hash: wmVkPUOaASTJmklNzJRvjbn4DyeAzLMxRhcoVRPcmVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:64:eb:48:c1:e1:06:d7:51:9a:e0:25:0a:2b:70:4c:ce:f5:7b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB5CD1159991D5A0305975655EB49929B5029C8B Validity Not Before: Jun 17 05:44:51 2026 GMT Not After : Jun 18 07:10:51 2026 GMT Subject: CN=44A02C777945B2F8CE71EB4A39C96981F63770CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:01:9d:c7:bc:4e:76:24:ea:48:6e:84:07: 7b:fa:aa:17:af:91:b2:ec:51:f5:29:68:0c:46:ca: b7:c1:8d:85:36:c7:30:b1:69:40:18:d7:a4:8e:13: a5:6b:2f:ef:da:04:4d:d7:b2:21:50:af:62:72:e0: 0d:60:fc:60:6d:a7:21:09:8e:90:82:49:09:4b:60: 6a:72:32:87:f3:e3:07:c3:6b:28:b1:aa:7a:dd:96: 0c:7e:04:cf:b9:91:25:dc:a9:05:c5:5a:07:09:4d: fc:d9:bb:42:65:ef:c6:46:51:50:cc:16:7a:38:01: e6:b2:ac:80:95:6b:51:23:00:52:90:6a:83:86:47: da:a2:78:24:dd:b8:d7:cc:af:7b:8a:49:d0:09:7b: 49:45:8d:31:0c:d3:a2:d0:df:23:9d:5c:9e:45:49: 2d:65:b2:a1:9f:65:38:09:ee:7d:ce:ae:f3:76:9c: d3:8d:9d:a1:07:63:8e:99:fb:ea:d3:64:c3:7b:12: 05:eb:d4:a2:ac:7d:79:b3:72:b3:69:08:45:d3:91: 1a:d9:63:cb:e4:c4:2c:97:4c:7d:fe:5d:35:07:2b: 25:4e:9a:18:9f:45:60:e8:4d:fe:97:6a:cc:bd:7e: 54:df:63:ad:5a:96:ac:a0:33:af:25:f9:19:f1:da: 79:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A0:2C:77:79:45:B2:F8:CE:71:EB:4A:39:C9:69:81:F6:37:70:CD X509v3 Authority Key Identifier: keyid:FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:17:e6:3c:c3:8e:bb:73:50:fc:cc:9e:3c:cb:b2:39:70:ad: 13:df:04:f7:d1:51:29:89:f5:3e:b1:d9:e7:20:21:f4:6a:a9: 0c:9f:87:f4:72:07:91:5d:4e:c6:70:a8:79:5f:a2:93:4e:c0: d9:1b:32:27:bd:ea:96:03:50:7f:07:51:9e:7d:52:05:e1:14: 00:bc:58:f5:c6:04:b7:dc:82:7b:4f:94:1f:a7:03:7f:47:a9: e3:d3:d7:60:a4:5e:5d:72:4c:17:c8:c2:28:c8:e3:4a:1e:2e: 35:af:17:14:63:e4:d5:0a:ec:88:f0:65:d9:6f:4b:86:eb:69: 59:2f:57:e8:ec:6f:49:11:37:10:ae:9e:5a:3e:f9:33:36:55: 38:a7:34:1b:b3:3c:3a:4f:c2:0e:3e:e2:9e:85:4e:a5:02:7f: 14:be:5b:0b:c0:bf:9a:ed:45:b5:f0:a3:b3:8b:d1:33:1a:cf: e0:6e:85:72:39:cf:93:77:3c:6c:b8:8c:1e:a4:8c:58:b5:d8: 2a:71:d7:5a:ef:5a:9f:e5:ad:20:cf:ba:13:fd:59:f8:6e:b8: fe:c2:f5:f8:80:d2:d7:26:3f:48:9b:cf:b5:16:19:f8:22:93: 06:64:5d:a8:5f:c6:d7:87:72:40:76:cc:a2:16:56:8f:42:88: d8:67:d6:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGTrSMHhBtdRmuAlCitwTM71e1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlC NTAyOUM4QjAeFw0yNjA2MTcwNTQ0NTFaFw0yNjA2MTgwNzEwNTFaMDMxMTAvBgNV BAMTKDQ0QTAyQzc3Nzk0NUIyRjhDRTcxRUI0QTM5Qzk2OTgxRjYzNzcwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUnwGdx7xOdiTqSG6EB3v6qhev kbLsUfUpaAxGyrfBjYU2xzCxaUAY16SOE6VrL+/aBE3XsiFQr2Jy4A1g/GBtpyEJ jpCCSQlLYGpyMofz4wfDayixqnrdlgx+BM+5kSXcqQXFWgcJTfzZu0Jl78ZGUVDM Fno4AeayrICVa1EjAFKQaoOGR9qieCTduNfMr3uKSdAJe0lFjTEM06LQ3yOdXJ5F SS1lsqGfZTgJ7n3OrvN2nNONnaEHY46Z++rTZMN7EgXr1KKsfXmzcrNpCEXTkRrZ Y8vkxCyXTH3+XTUHKyVOmhifRWDoTf6Xasy9flTfY61alqygM68l+Rnx2nkZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKAsd3lFsvjOcetKOclpgfY3cM0wHwYDVR0j BBgwFoAU+1zRFZmR1aAwWXVlXrSZKbUCnIswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExZjNiMzctYmQ1NC00OTExLTkwNWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5 OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlCNTAyOUM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjVDRDExNTk5OTFENUEwMzA1OTc1NjU1RUI0OTkyOUI1MDI5 QzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5 MjlCNTAyOUM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4X5jzDjrtzUPzMnjzLsjlwrRPfBPfRUSmJ 9T6x2ecgIfRqqQyfh/RyB5FdTsZwqHlfopNOwNkbMie96pYDUH8HUZ59UgXhFAC8 WPXGBLfcgntPlB+nA39HqePT12CkXl1yTBfIwijI40oeLjWvFxRj5NUK7IjwZdlv S4braVkvV+jsb0kRNxCunlo++TM2VTinNBuzPDpPwg4+4p6FTqUCfxS+WwvAv5rt RbXwo7OL0TMaz+BuhXI5z5N3PGy4jB6kjFi12Cpx11rvWp/lrSDPuhP9WfhuuP7C 9fiA0tcmP0ibz7UWGfgikwZkXahfxteHckB2zKIWVo9CiNhn1kA= -----END CERTIFICATE-----Generated at Wed Jun 17 13:16:42 2026 by rpki-client