$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft File: FB5CD1159991D5A0305975655EB49929B5029C8B.mft (raw, json) Hash identifier: /YjTlb07aUvXkteTt6Vox0oTNB5F6TUkNrKIVdoJKWs= Subject key identifier: 6F:B9:3B:13:65:7B:20:3E:EA:63:AF:42:E8:E1:E0:DF:1E:B5:78:A5 Authority key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B Certificate issuer: /CN=FB5CD1159991D5A0305975655EB49929B5029C8B Certificate serial: 5A59C91968C7A7A7DDA01FE9A647664E388B3885 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft Manifest number: F6 Signing time: Sun 01 Nov 2026 12:58:27 +0000 Manifest this update: Sun 01 Nov 2026 12:53:27 +0000 Manifest next update: Mon 02 Nov 2026 13:29:27 +0000 Files and hashes: 1: FB5CD1159991D5A0305975655EB49929B5029C8B.crl (hash: oF8qZzo/3eer18MDxxDK+Zn6vdjIwE0B9zpIngLIuW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 13:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:59:c9:19:68:c7:a7:a7:dd:a0:1f:e9:a6:47:66:4e:38:8b:38:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB5CD1159991D5A0305975655EB49929B5029C8B Validity Not Before: Nov 1 12:53:27 2026 GMT Not After : Nov 2 13:29:27 2026 GMT Subject: CN=6FB93B13657B203EEA63AF42E8E1E0DF1EB578A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:42:30:24:78:47:20:4d:dd:2f:9c:1e:f5: 89:ad:0f:b0:a0:0d:50:2b:10:d8:30:2c:46:23:1e: be:0d:39:58:b9:95:36:9e:fc:ce:52:b6:2e:8c:a0: 98:03:93:ff:68:3d:0d:3d:a6:68:af:28:94:f7:21: 3f:1d:e7:9b:19:14:bc:b8:cc:75:33:3a:91:df:89: 92:61:aa:da:cf:b3:34:83:67:64:17:13:63:02:90: ef:3c:21:83:a9:1b:ca:a2:c0:36:bb:70:7a:29:5f: 79:5c:ab:93:96:54:e5:5a:a6:c3:5c:a9:cb:84:9b: 12:d8:06:5a:66:22:84:28:03:13:2e:70:d5:fb:a6: e7:60:66:bf:61:11:f6:c8:05:9a:2e:a5:0f:74:b3: fc:09:05:ec:93:0f:4c:63:7d:85:3a:88:b1:5a:82: b4:b9:dd:0b:40:ac:5e:6e:af:b5:4b:41:69:b4:02: 4e:12:29:f8:32:14:58:42:9c:0f:de:eb:a2:60:ba: 2b:06:a7:0d:f1:90:76:df:7f:a5:27:fa:ef:3f:26: b7:bc:f4:dc:0f:e8:02:3f:63:b0:63:bf:9a:5f:be: 49:d5:a8:2c:8a:ee:83:8d:29:f5:4b:ac:df:f6:83: 73:d5:c6:b8:a1:0b:a0:d7:78:7c:cc:3f:32:1a:72: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B9:3B:13:65:7B:20:3E:EA:63:AF:42:E8:E1:E0:DF:1E:B5:78:A5 X509v3 Authority Key Identifier: keyid:FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:51:01:bf:49:8d:78:6c:45:59:c7:44:c7:ee:18:b2:92:af: 20:67:8b:ca:29:a6:bb:5f:fb:63:d5:e3:d5:26:63:c6:0b:f8: 3b:60:d4:78:87:fa:ac:7f:61:db:29:ac:f0:95:aa:7e:22:04: a7:68:90:18:5f:b7:f2:b9:52:6a:a6:4d:b3:ec:93:3e:41:d7: 56:c3:cc:b8:0b:df:10:1b:e3:db:f3:25:8b:86:ae:62:fc:1b: 4e:90:ce:ab:f5:f7:9e:c8:73:bd:82:40:4c:db:5d:eb:8f:14: cc:93:3b:9d:5f:82:10:e3:c4:3c:d8:03:6d:df:b2:56:03:f5: 17:d3:86:99:74:fe:e9:f9:51:c1:56:24:c4:2b:35:a8:7d:3b: 11:e4:21:ed:0c:f2:e4:43:1b:44:43:8d:f5:d3:78:47:5d:35: 37:a8:38:97:cb:b9:1c:d4:32:26:ed:c1:62:b4:7b:15:54:1c: e7:b9:50:81:11:b5:06:bc:46:4c:59:af:a9:fe:f6:6c:14:9d: a8:ad:40:8a:31:0f:27:a1:65:8e:8f:08:cd:cf:eb:f4:b3:22: c5:6c:9b:1b:e2:61:10:75:cf:e0:6e:7b:14:7e:0c:2b:05:34: 4a:79:55:37:36:d2:b0:1b:e0:ea:9d:49:17:c8:a8:38:23:79: f9:6e:3b:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlnJGWjHp6fdoB/ppkdmTjiLOIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlC NTAyOUM4QjAeFw0yNjExMDExMjUzMjdaFw0yNjExMDIxMzI5MjdaMDMxMTAvBgNV BAMTKDZGQjkzQjEzNjU3QjIwM0VFQTYzQUY0MkU4RTFFMERGMUVCNTc4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kkIwJHhHIE3dL5we9YmtD7Cg DVArENgwLEYjHr4NOVi5lTae/M5Sti6MoJgDk/9oPQ09pmivKJT3IT8d55sZFLy4 zHUzOpHfiZJhqtrPszSDZ2QXE2MCkO88IYOpG8qiwDa7cHopX3lcq5OWVOVapsNc qcuEmxLYBlpmIoQoAxMucNX7pudgZr9hEfbIBZoupQ90s/wJBeyTD0xjfYU6iLFa grS53QtArF5ur7VLQWm0Ak4SKfgyFFhCnA/e66JguisGpw3xkHbff6Un+u8/Jre8 9NwP6AI/Y7Bjv5pfvknVqCyK7oONKfVLrN/2g3PVxrihC6DXeHzMPzIaclnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7k7E2V7ID7qY69C6OHg3x61eKUwHwYDVR0j BBgwFoAU+1zRFZmR1aAwWXVlXrSZKbUCnIswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExZjNiMzctYmQ1NC00OTExLTkwNWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5 OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlCNTAyOUM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjVDRDExNTk5OTFENUEwMzA1OTc1NjU1RUI0OTkyOUI1MDI5 QzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5 MjlCNTAyOUM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFRAb9JjXhsRVnHRMfuGLKSryBni8opprtf +2PV49UmY8YL+Dtg1HiH+qx/YdsprPCVqn4iBKdokBhft/K5UmqmTbPskz5B11bD zLgL3xAb49vzJYuGrmL8G06Qzqv1957Ic72CQEzbXeuPFMyTO51fghDjxDzYA23f slYD9RfThpl0/un5UcFWJMQrNah9OxHkIe0M8uRDG0RDjfXTeEddNTeoOJfLuRzU MibtwWK0exVUHOe5UIERtQa8RkxZr6n+9mwUnaitQIoxDyehZY6PCM3P6/SzIsVs mxviYRB1z+BuexR+DCsFNEp5VTc20rAb4OqdSRfIqDgjefluO30= -----END CERTIFICATE-----Generated at Mon Nov 2 00:46:41 2026 by rpki-client