$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft File: FB9B3B1791631B716B38A928B32D781C38B7E74C.mft (raw, json) Hash identifier: OWj+CNpLvG1sThcgyx3RLhR4FID04yXE9sv1oHXSazU= Subject key identifier: 47:98:BE:3B:DF:AA:8F:B4:BF:BF:E4:D1:50:AB:EB:18:47:E3:58:CA Authority key identifier: FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C Certificate issuer: /CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Certificate serial: 47F6C858A817177251EF45529E5CB3CEA6E3EB37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:01:01 +0000 Manifest this update: Thu 17 Sep 2026 09:56:01 +0000 Manifest next update: Fri 18 Sep 2026 11:51:01 +0000 Files and hashes: 1: FB9B3B1791631B716B38A928B32D781C38B7E74C.crl (hash: eTALS5ZFu2aXAw/ALAUwegWOTY41yP6N1XdbiLiEnYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f6:c8:58:a8:17:17:72:51:ef:45:52:9e:5c:b3:ce:a6:e3:eb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Validity Not Before: Sep 17 09:56:01 2026 GMT Not After : Sep 18 11:51:01 2026 GMT Subject: CN=4798BE3BDFAA8FB4BFBFE4D150ABEB1847E358CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:ee:00:31:bd:bf:10:98:08:c3:3c:63:87: 91:dd:9f:cf:5b:41:c7:ae:97:9f:31:b2:9f:b9:30: 41:f2:8f:dd:ea:f6:c7:47:94:21:75:9a:46:e1:f5: bd:c8:f1:ec:50:0b:78:18:80:53:77:2a:2f:11:f9: db:97:b0:cf:1b:75:47:18:8e:f5:51:01:36:f8:ab: 6b:d8:cb:66:03:d2:1b:f4:9c:4c:2d:41:c8:27:52: dc:4f:12:aa:dd:20:a0:46:88:9c:41:8b:de:d6:5e: b7:db:eb:a1:f9:ea:a8:4d:b9:9f:f8:29:ec:92:be: fb:ff:f6:75:82:c3:62:3d:e8:98:ff:12:1c:ca:d9: 1a:a3:38:0d:0a:5f:4a:07:0d:4e:2c:44:a0:01:10: 31:ff:e9:83:0b:36:fb:3a:5c:40:2f:21:f4:ff:06: e8:b1:60:34:91:0a:1a:0e:22:82:b9:b7:71:80:b8: f0:e8:72:0b:ec:77:11:1b:da:38:6e:bc:0f:0d:6f: 5c:53:db:78:df:48:88:b8:62:3a:dd:f6:bd:b6:41: 9a:bc:cc:2d:a6:0f:3e:c2:b5:74:7d:b4:f2:57:92: 35:ce:9d:08:25:98:45:f1:24:21:d3:65:63:b1:2d: 21:a7:ee:a2:3e:4e:70:f5:a7:1f:82:71:40:c8:6f: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:98:BE:3B:DF:AA:8F:B4:BF:BF:E4:D1:50:AB:EB:18:47:E3:58:CA X509v3 Authority Key Identifier: keyid:FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7d:6a:7a:88:c4:62:4b:36:a6:be:95:a2:7c:7d:45:c1:5b: 92:9b:53:74:64:b8:97:f7:9b:1b:7f:a4:80:c5:d9:5d:4a:cd: 48:76:65:65:1e:e0:c7:dc:9d:64:12:a1:9b:46:6b:ac:c1:26: 7a:f5:c0:57:bf:af:6f:b3:d4:b3:03:b9:3d:bf:6d:4e:d0:73: 6b:47:ee:55:2c:09:df:4a:71:68:51:c8:f0:b4:12:1b:cb:77: c3:d1:04:2e:61:cd:0a:dc:37:b7:b3:06:99:c3:23:aa:b7:e8: ce:d7:a9:8a:1f:4f:e5:f2:59:59:2a:ec:40:96:39:d8:6a:71: 2c:ea:8f:dd:ba:ae:2f:72:71:cf:1d:2c:07:42:b2:43:0e:c3: 14:c0:87:02:31:b0:97:7b:97:83:53:f7:67:1d:cc:ca:61:0f: 2e:4b:b2:11:f7:7c:93:a1:f9:d6:b5:ba:85:53:5f:fd:b7:5b: 6d:3f:41:04:91:06:cb:fb:2f:08:e7:b4:ea:8e:bc:30:47:a9: c4:34:a0:52:2a:1c:e8:14:0a:f7:58:07:63:aa:52:79:a6:e3: 09:d5:92:e4:ab:63:99:96:0d:c6:c7:85:79:30:2a:52:e5:d1: 0b:55:0f:98:db:f0:eb:e0:19:c8:19:eb:60:3d:4a:8a:6e:34: 62:db:af:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/bIWKgXF3JR70VSnlyzzqbj6zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMz OEI3RTc0QzAeFw0yNjA5MTcwOTU2MDFaFw0yNjA5MTgxMTUxMDFaMDMxMTAvBgNV BAMTKDQ3OThCRTNCREZBQThGQjRCRkJGRTREMTUwQUJFQjE4NDdFMzU4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAh+4AMb2/EJgIwzxjh5Hdn89b Qceul58xsp+5MEHyj93q9sdHlCF1mkbh9b3I8exQC3gYgFN3Ki8R+duXsM8bdUcY jvVRATb4q2vYy2YD0hv0nEwtQcgnUtxPEqrdIKBGiJxBi97WXrfb66H56qhNuZ/4 KeySvvv/9nWCw2I96Jj/EhzK2RqjOA0KX0oHDU4sRKABEDH/6YMLNvs6XEAvIfT/ BuixYDSRChoOIoK5t3GAuPDocgvsdxEb2jhuvA8Nb1xT23jfSIi4Yjrd9r22QZq8 zC2mDz7CtXR9tPJXkjXOnQglmEXxJCHTZWOxLSGn7qI+TnD1px+CcUDIb9Q3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR5i+O9+qj7S/v+TRUKvrGEfjWMowHwYDVR0j BBgwFoAU+5s7F5FjG3FrOKkosy14HDi350wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAyN2ZhMDItZTQ5Zi00MjE1LTg2MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5 MTYzMUI3MTZCMzhBOTI4QjMyRDc4MUMzOEI3RTc0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjlCM0IxNzkxNjMxQjcxNkIzOEE5MjhCMzJENzgxQzM4QjdF NzRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvRkI5QjNCMTc5MTYzMUI3MTZCMzhBOTI4QjMyRDc4 MUMzOEI3RTc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl9anqIxGJLNqa+laJ8fUXBW5KbU3RkuJf3 mxt/pIDF2V1KzUh2ZWUe4MfcnWQSoZtGa6zBJnr1wFe/r2+z1LMDuT2/bU7Qc2tH 7lUsCd9KcWhRyPC0EhvLd8PRBC5hzQrcN7ezBpnDI6q36M7XqYofT+XyWVkq7ECW OdhqcSzqj926ri9ycc8dLAdCskMOwxTAhwIxsJd7l4NT92cdzMphDy5LshH3fJOh +da1uoVTX/23W20/QQSRBsv7LwjntOqOvDBHqcQ0oFIqHOgUCvdYB2OqUnmm4wnV kuSrY5mWDcbHhXkwKlLl0QtVD5jb8OvgGcgZ62A9SopuNGLbr08= -----END CERTIFICATE-----Generated at Thu Sep 17 13:20:49 2026 by rpki-client