$ rpki-client -vvf rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft File: FB9B3B1791631B716B38A928B32D781C38B7E74C.mft (raw, json) Hash identifier: J/FbsI8kwrBVJ5EZh4Lti8+bUElrfsAwBof+xi88uAY= Subject key identifier: DE:61:E9:7E:C1:1B:18:C1:6E:58:03:3B:08:2C:BA:A3:AF:59:B0:0C Authority key identifier: FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C Certificate issuer: /CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Certificate serial: 74A649B1C3059F8595233163ECC87EDEF24DE179 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:53:41 +0000 Manifest this update: Fri 19 Jun 2026 18:48:41 +0000 Manifest next update: Sat 20 Jun 2026 19:21:41 +0000 Files and hashes: 1: FB9B3B1791631B716B38A928B32D781C38B7E74C.crl (hash: KEDKk1v724laubnRxiSAmRAa/Iu/UXgrtimK7nZwGT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a6:49:b1:c3:05:9f:85:95:23:31:63:ec:c8:7e:de:f2:4d:e1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Validity Not Before: Jun 19 18:48:41 2026 GMT Not After : Jun 20 19:21:41 2026 GMT Subject: CN=DE61E97EC11B18C16E58033B082CBAA3AF59B00C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ec:bf:f6:db:f0:6a:2e:89:c1:23:8f:11:dc: 6c:f8:c7:d9:8d:ba:bc:dc:8c:41:69:83:b0:65:86: 15:4f:2f:92:06:23:7d:3e:b8:14:d7:43:0b:c3:0f: ba:ef:0b:52:1d:5f:a9:a2:a9:5c:b2:44:93:46:3a: 8c:58:03:e8:de:de:65:a2:49:eb:48:56:86:7a:24: 2a:47:7b:11:d7:1b:3f:3e:3f:39:6b:b1:3a:30:a2: 45:40:3f:99:63:7e:44:e8:fe:87:7c:e7:29:09:2b: af:68:45:bc:83:51:4a:ca:85:63:27:c4:30:fa:80: dd:16:85:f3:7f:9a:95:f2:e6:06:78:62:4e:4d:50: 4a:ba:f5:eb:cb:b7:df:b8:fa:91:3b:90:63:f3:1e: cb:1d:c2:98:a7:3b:b5:2f:42:9c:14:f5:7b:3d:c0: 20:89:e8:73:ea:cd:f9:d2:23:7d:84:e7:6c:05:45: 65:56:ac:29:2a:7f:49:1a:df:c3:cd:ff:51:b2:c2: 1e:89:73:cf:56:2c:79:78:ce:8d:34:62:49:26:07: e3:62:9b:b5:40:c1:d9:77:02:ff:bc:e7:8a:78:3c: 2e:26:19:28:16:fb:77:ee:21:60:17:a3:9d:59:eb: af:44:da:07:7e:16:aa:b8:ff:26:64:2f:63:24:9e: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:61:E9:7E:C1:1B:18:C1:6E:58:03:3B:08:2C:BA:A3:AF:59:B0:0C X509v3 Authority Key Identifier: keyid:FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:40:41:27:80:27:ae:ce:16:0b:91:53:13:e1:ff:c5:33:41: 28:10:ab:be:a0:c2:1a:a2:ad:82:58:9a:24:94:94:09:9c:f2: 17:4f:91:bf:a4:96:35:ba:82:c1:1f:6f:33:f4:70:14:75:8b: f8:59:17:b2:32:e5:4d:ba:0c:bd:b5:eb:31:5b:35:0c:23:d2: 80:2e:59:67:05:09:3b:38:f1:78:3d:b8:f6:e7:d1:cf:94:6b: ea:ec:38:ad:71:ff:d4:cb:49:69:35:6e:97:2b:b8:e3:25:2b: 51:13:fc:58:40:04:b7:3c:60:7b:d4:df:34:25:99:03:1d:db: 60:d0:70:ff:38:fc:89:df:15:12:dc:ce:36:cd:51:b5:b6:d0: c5:31:2b:ba:c3:0f:83:10:71:65:c4:87:e0:a1:69:d8:a0:fd: ed:2f:9a:1b:a0:25:16:df:cf:68:e5:b6:d9:b2:0a:55:be:b6: 76:45:5d:59:37:fb:44:31:4a:ee:5d:ff:11:15:00:ba:e4:32: be:91:de:22:81:f5:a5:fe:a4:de:c8:41:09:c8:b9:c5:91:b6: bc:94:ad:7a:4b:aa:af:60:67:94:8b:ff:7e:1c:ca:90:9c:da: b4:c9:a3:45:33:3a:de:24:84:59:2d:bd:f0:8e:c9:ed:6b:57: 9b:ca:4a:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKZJscMFn4WVIzFj7Mh+3vJN4XkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMz OEI3RTc0QzAeFw0yNjA2MTkxODQ4NDFaFw0yNjA2MjAxOTIxNDFaMDMxMTAvBgNV BAMTKERFNjFFOTdFQzExQjE4QzE2RTU4MDMzQjA4MkNCQUEzQUY1OUIwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL7L/22/BqLonBI48R3Gz4x9mN urzcjEFpg7BlhhVPL5IGI30+uBTXQwvDD7rvC1IdX6miqVyyRJNGOoxYA+je3mWi SetIVoZ6JCpHexHXGz8+PzlrsTowokVAP5ljfkTo/od85ykJK69oRbyDUUrKhWMn xDD6gN0WhfN/mpXy5gZ4Yk5NUEq69evLt9+4+pE7kGPzHssdwpinO7UvQpwU9Xs9 wCCJ6HPqzfnSI32E52wFRWVWrCkqf0ka38PN/1Gywh6Jc89WLHl4zo00YkkmB+Ni m7VAwdl3Av+854p4PC4mGSgW+3fuIWAXo51Z669E2gd+Fqq4/yZkL2MknmNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3mHpfsEbGMFuWAM7CCy6o69ZsAwwHwYDVR0j BBgwFoAU+5s7F5FjG3FrOKkosy14HDi350wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAyN2ZhMDItZTQ5Zi00MjE1LTg2MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5 MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMzOEI3RTc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjlCM0IxNzkxNjMxQjcxNkIzOEE5MjhCMzJENzgxQzM4QjdF NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4 MUMzOEI3RTc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVAQSeAJ67OFguRUxPh/8UzQSgQq76gwhqi rYJYmiSUlAmc8hdPkb+kljW6gsEfbzP0cBR1i/hZF7Iy5U26DL216zFbNQwj0oAu WWcFCTs48Xg9uPbn0c+Ua+rsOK1x/9TLSWk1bpcruOMlK1ET/FhABLc8YHvU3zQl mQMd22DQcP84/InfFRLczjbNUbW20MUxK7rDD4MQcWXEh+Chadig/e0vmhugJRbf z2jlttmyClW+tnZFXVk3+0QxSu5d/xEVALrkMr6R3iKB9aX+pN7IQQnIucWRtryU rXpLqq9gZ5SL/34cypCc2rTJo0UzOt4khFktvfCOye1rV5vKSkI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:06 2026 by rpki-client