$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft File: FB5CD1159991D5A0305975655EB49929B5029C8B.mft (raw, json) Hash identifier: 3kns4nXg/u3Mm3LpnwcqvePKT9zvmYJ6QCGJ8w6oQu0= Subject key identifier: 9E:7C:79:EF:BC:23:B4:76:05:C0:88:14:F8:96:35:51:2E:47:6C:DA Authority key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B Certificate issuer: /CN=FB5CD1159991D5A0305975655EB49929B5029C8B Certificate serial: 13D7B2150C38743464948BF18DE0AA3DC71B1BBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:16:15 +0000 Manifest this update: Wed 03 Jun 2026 01:11:15 +0000 Manifest next update: Thu 04 Jun 2026 01:52:15 +0000 Files and hashes: 1: FB5CD1159991D5A0305975655EB49929B5029C8B.crl (hash: ibhXb7X8/glYat3LRubJNitz2cCQxgjKPiPLT/RSnRA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d7:b2:15:0c:38:74:34:64:94:8b:f1:8d:e0:aa:3d:c7:1b:1b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB5CD1159991D5A0305975655EB49929B5029C8B Validity Not Before: Jun 3 01:11:15 2026 GMT Not After : Jun 4 01:52:15 2026 GMT Subject: CN=9E7C79EFBC23B47605C08814F89635512E476CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:85:2a:7c:20:f9:de:10:f9:de:eb:bc:36: 12:7a:96:be:fa:10:dd:21:f3:59:41:f1:84:13:c1: 25:d8:90:8a:8e:69:12:ba:15:4e:91:dd:3e:b0:25: 11:70:65:c9:05:dd:ae:f9:99:b2:8f:9c:a0:13:27: f1:f0:0b:87:a5:a7:99:00:99:95:48:13:b8:61:a6: 0e:ff:50:ec:31:9f:62:09:44:2f:f2:e7:bd:57:50: a6:4b:a0:01:f2:09:d5:9f:07:6e:20:9d:4d:a0:f0: e5:d9:9e:91:54:6e:5d:d9:96:59:29:7b:73:17:be: cd:ec:33:d6:6d:f7:b6:b5:59:5f:a8:18:74:ec:c4: c5:7b:a8:b7:a5:3d:d8:bc:36:7a:53:44:61:87:9d: 3e:e4:8a:dd:e5:54:06:de:26:49:a7:ba:6a:f3:9d: 15:cf:f9:86:bd:18:3f:73:e7:67:12:bd:74:6c:c8: 09:4a:98:5d:58:2c:14:36:ba:8d:26:5b:95:c3:fd: 10:9b:5c:d0:bc:45:93:73:da:75:d5:6e:eb:e2:ab: b9:ad:94:ab:eb:61:55:1b:e8:58:71:dd:c2:59:64: 86:7b:9d:1b:80:97:95:81:49:56:52:54:6d:2f:07: 2a:20:c9:af:cc:c9:d3:da:23:81:cd:5f:bd:ad:86: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:79:EF:BC:23:B4:76:05:C0:88:14:F8:96:35:51:2E:47:6C:DA X509v3 Authority Key Identifier: keyid:FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:96:9e:d0:1e:55:90:7c:5e:ac:7d:b0:c9:11:11:43:71:0c: 1d:a0:3d:bc:f7:ef:2a:a7:3e:86:19:f8:cc:e8:fe:6d:6e:39: 0a:26:fc:a1:e1:b9:31:85:b9:16:b7:48:c1:34:c6:06:6c:a7: 4b:73:14:a1:cc:65:e3:81:23:57:23:f6:44:ed:91:0f:73:02: 43:de:b7:1d:f9:72:25:b2:59:ba:03:f1:b3:d3:4f:56:50:d3: 44:90:37:3c:ae:ab:5a:4a:29:d6:39:9f:23:8d:49:ab:b5:e9: f6:bf:44:ce:8c:97:c9:12:e9:3f:70:06:f1:17:8f:20:b6:8e: 4f:19:f9:28:f6:d2:d7:1f:30:3d:cb:78:8f:55:5a:83:50:75: 52:5f:42:55:5f:d4:a0:37:f2:4d:b1:6a:2b:f8:00:c4:24:86: eb:c8:7b:ff:bc:12:ef:19:fb:8f:79:97:f6:0c:f9:90:99:6f: 1c:21:48:af:ef:e2:c9:a7:16:da:c6:d5:39:86:6a:ce:1f:76: 08:92:02:b3:5a:62:6e:1e:4d:c3:e9:47:88:2c:79:01:e5:da: a6:bd:c8:16:1e:39:10:79:84:8a:62:6f:7c:b4:1c:b4:c3:e7: 6d:ea:88:16:54:f1:c4:3b:06:81:59:fa:b3:75:3e:2a:7d:48: ff:de:b5:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE9eyFQw4dDRklIvxjeCqPccbG7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlC NTAyOUM4QjAeFw0yNjA2MDMwMTExMTVaFw0yNjA2MDQwMTUyMTVaMDMxMTAvBgNV BAMTKDlFN0M3OUVGQkMyM0I0NzYwNUMwODgxNEY4OTYzNTUxMkU0NzZDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYoUqfCD53hD53uu8NhJ6lr76 EN0h81lB8YQTwSXYkIqOaRK6FU6R3T6wJRFwZckF3a75mbKPnKATJ/HwC4elp5kA mZVIE7hhpg7/UOwxn2IJRC/y571XUKZLoAHyCdWfB24gnU2g8OXZnpFUbl3Zllkp e3MXvs3sM9Zt97a1WV+oGHTsxMV7qLelPdi8NnpTRGGHnT7kit3lVAbeJkmnumrz nRXP+Ya9GD9z52cSvXRsyAlKmF1YLBQ2uo0mW5XD/RCbXNC8RZNz2nXVbuviq7mt lKvrYVUb6Fhx3cJZZIZ7nRuAl5WBSVZSVG0vByogya/MydPaI4HNX72thqZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnnx577wjtHYFwIgU+JY1US5HbNowHwYDVR0j BBgwFoAU+1zRFZmR1aAwWXVlXrSZKbUCnIswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExZjNiMzctYmQ1NC00OTExLTkwNWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5 OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlCNTAyOUM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjVDRDExNTk5OTFENUEwMzA1OTc1NjU1RUI0OTkyOUI1MDI5 QzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5 MjlCNTAyOUM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeWntAeVZB8Xqx9sMkREUNxDB2gPbz37yqn PoYZ+Mzo/m1uOQom/KHhuTGFuRa3SME0xgZsp0tzFKHMZeOBI1cj9kTtkQ9zAkPe tx35ciWyWboD8bPTT1ZQ00SQNzyuq1pKKdY5nyONSau16fa/RM6Ml8kS6T9wBvEX jyC2jk8Z+Sj20tcfMD3LeI9VWoNQdVJfQlVf1KA38k2xaiv4AMQkhuvIe/+8Eu8Z +495l/YM+ZCZbxwhSK/v4smnFtrG1TmGas4fdgiSArNaYm4eTcPpR4gseQHl2qa9 yBYeORB5hIpib3y0HLTD523qiBZU8cQ7BoFZ+rN1Pip9SP/etdM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:03 2026 by rpki-client