$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft File: FB5CD1159991D5A0305975655EB49929B5029C8B.mft (raw, json) Hash identifier: 2KthqxQDmZGRyoDT1jCcTuRx4Nq4yd4tmgoJSFByqxY= Subject key identifier: B9:DF:9F:62:49:BD:F4:E0:3A:95:DD:83:63:06:99:58:7F:EE:AF:19 Authority key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B Certificate issuer: /CN=FB5CD1159991D5A0305975655EB49929B5029C8B Certificate serial: 12EB9F30D0E4968E0A71B8369C659E3023F3E75A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 17:02:29 +0000 Manifest this update: Tue 22 Sep 2026 16:57:29 +0000 Manifest next update: Wed 23 Sep 2026 19:13:29 +0000 Files and hashes: 1: FB5CD1159991D5A0305975655EB49929B5029C8B.crl (hash: bupLdOetOWF0nuLoutk9Xin3KtrGIXdp9LA/16QDBvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:eb:9f:30:d0:e4:96:8e:0a:71:b8:36:9c:65:9e:30:23:f3:e7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB5CD1159991D5A0305975655EB49929B5029C8B Validity Not Before: Sep 22 16:57:29 2026 GMT Not After : Sep 23 19:13:29 2026 GMT Subject: CN=B9DF9F6249BDF4E03A95DD83630699587FEEAF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:93:66:d9:19:f6:c6:cb:9a:90:33:0b:32: 2d:55:50:a7:95:c9:e8:42:07:6f:8c:98:4c:2f:9a: 58:b5:a5:9a:cf:ec:65:65:52:64:61:06:3a:b4:65: a7:58:ce:e6:97:05:27:de:b0:95:52:4c:1f:2a:0c: a1:02:c5:ed:27:a3:1f:f3:69:b1:97:f5:7c:c0:54: db:3b:07:2c:ee:5e:81:88:50:a8:c0:fd:c1:1a:5e: 7c:e0:20:6a:15:69:db:c1:5b:b9:bb:83:17:dc:67: b2:82:fd:0b:89:57:e6:4e:20:88:14:7d:2c:d4:60: d5:eb:8a:12:fd:f6:20:92:0c:c1:5d:dc:c3:aa:e7: bf:15:de:be:1f:38:79:fb:f8:81:33:3b:3e:bc:58: 5b:a7:21:d5:73:8d:77:38:4b:18:04:81:36:87:9a: 55:4d:fa:87:b1:80:bf:75:01:9e:c7:89:f9:ba:51: 2a:68:aa:53:f7:9c:a5:3d:58:da:73:c8:2a:71:9a: 71:55:a4:a0:f7:92:14:33:1f:30:d4:94:d0:26:b8: 61:89:63:da:0a:65:05:e1:36:dd:c7:8d:76:3a:dd: 27:c3:f5:4a:cd:35:19:27:17:10:89:ee:10:26:fd: 79:ca:d7:8b:d4:17:6c:03:40:93:e2:40:1d:d5:07: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DF:9F:62:49:BD:F4:E0:3A:95:DD:83:63:06:99:58:7F:EE:AF:19 X509v3 Authority Key Identifier: keyid:FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f9:85:52:61:34:70:ed:8c:46:7a:80:2d:87:3e:34:97:6b: 78:13:89:d1:2e:ef:49:88:eb:87:b9:a7:ca:ae:b3:9c:98:89: 55:00:d4:5f:db:87:c5:54:28:43:d8:f5:c5:48:c7:b5:ab:15: f3:a1:8d:40:74:63:f4:cc:e3:5b:89:58:9e:26:45:c0:68:7a: 20:f0:82:60:cc:1a:0c:2c:42:76:c9:98:2e:4a:f1:67:84:23: b6:f2:23:f2:8b:e7:3a:15:52:6b:9a:38:2c:90:33:ef:63:25: d7:6e:b8:6b:17:c6:0b:03:ac:0d:5a:96:79:74:f8:25:f8:9f: 63:97:11:fb:e1:29:61:45:7a:f4:73:24:fd:26:a0:81:17:9a: d6:a5:25:f8:27:d5:56:6e:54:ef:a5:bf:ee:24:3a:49:8d:ff: 3f:a2:fd:79:29:3f:55:c0:ee:99:03:da:4f:e5:33:d3:25:42: 14:d5:d7:f1:2f:3e:a7:0d:80:d5:a9:2a:59:67:dc:56:e6:9f: 10:50:ba:72:22:68:8a:62:0e:49:e1:f7:8b:48:a7:0a:29:bd: 98:48:08:61:7a:82:a8:ac:29:78:d2:cd:15:e6:85:43:8b:5d: 08:c5:69:51:dc:c7:a3:80:2c:ce:4c:38:7a:9b:ff:f7:1b:5d: d7:de:94:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuufMNDklo4Kcbg2nGWeMCPz51owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlC NTAyOUM4QjAeFw0yNjA5MjIxNjU3MjlaFw0yNjA5MjMxOTEzMjlaMDMxMTAvBgNV BAMTKEI5REY5RjYyNDlCREY0RTAzQTk1REQ4MzYzMDY5OTU4N0ZFRUFGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcZNm2Rn2xsuakDMLMi1VUKeV yehCB2+MmEwvmli1pZrP7GVlUmRhBjq0ZadYzuaXBSfesJVSTB8qDKECxe0nox/z abGX9XzAVNs7ByzuXoGIUKjA/cEaXnzgIGoVadvBW7m7gxfcZ7KC/QuJV+ZOIIgU fSzUYNXrihL99iCSDMFd3MOq578V3r4fOHn7+IEzOz68WFunIdVzjXc4SxgEgTaH mlVN+oexgL91AZ7Hifm6USpoqlP3nKU9WNpzyCpxmnFVpKD3khQzHzDUlNAmuGGJ Y9oKZQXhNt3HjXY63SfD9UrNNRknFxCJ7hAm/XnK14vUF2wDQJPiQB3VB4e1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUud+fYkm99OA6ld2DYwaZWH/urxkwHwYDVR0j BBgwFoAU+1zRFZmR1aAwWXVlXrSZKbUCnIswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExZjNiMzctYmQ1NC00OTExLTkwNWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5 OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlCNTAyOUM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjVDRDExNTk5OTFENUEwMzA1OTc1NjU1RUI0OTkyOUI1MDI5 QzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5 MjlCNTAyOUM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACz5hVJhNHDtjEZ6gC2HPjSXa3gTidEu70mI 64e5p8qus5yYiVUA1F/bh8VUKEPY9cVIx7WrFfOhjUB0Y/TM41uJWJ4mRcBoeiDw gmDMGgwsQnbJmC5K8WeEI7byI/KL5zoVUmuaOCyQM+9jJdduuGsXxgsDrA1alnl0 +CX4n2OXEfvhKWFFevRzJP0moIEXmtalJfgn1VZuVO+lv+4kOkmN/z+i/XkpP1XA 7pkD2k/lM9MlQhTV1/EvPqcNgNWpKlln3FbmnxBQunIiaIpiDknh94tIpwopvZhI CGF6gqisKXjSzRXmhUOLXQjFaVHcx6OALM5MOHqb//cbXdfelJ8= -----END CERTIFICATE-----Generated at Tue Sep 22 20:22:19 2026 by rpki-client