$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft File: FB5CD1159991D5A0305975655EB49929B5029C8B.mft (raw, json) Hash identifier: WyVJQ8kF6BfRC+De2NURYSxeWMvPyrtEcx8n2IBRRNQ= Subject key identifier: 40:A2:37:C9:55:EA:4A:A8:D6:26:E9:34:C8:A3:BD:A8:65:42:86:24 Authority key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B Certificate issuer: /CN=FB5CD1159991D5A0305975655EB49929B5029C8B Certificate serial: 2FB90D98934592E6482C7C5BCB1997E85C645A42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:27:37 +0000 Manifest this update: Thu 17 Sep 2026 07:22:37 +0000 Manifest next update: Fri 18 Sep 2026 10:27:37 +0000 Files and hashes: 1: FB5CD1159991D5A0305975655EB49929B5029C8B.crl (hash: FibBc2Woi1CmXMf3CZH98hEGf1zUGkPGJeTf5pWBJmo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b9:0d:98:93:45:92:e6:48:2c:7c:5b:cb:19:97:e8:5c:64:5a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB5CD1159991D5A0305975655EB49929B5029C8B Validity Not Before: Sep 17 07:22:37 2026 GMT Not After : Sep 18 10:27:37 2026 GMT Subject: CN=40A237C955EA4AA8D626E934C8A3BDA865428624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:34:bc:24:00:ce:ed:10:80:3f:be:10:ea: c1:ed:f9:45:99:71:e1:eb:39:38:4f:d3:56:3f:06: 87:77:ac:e0:b7:7f:9d:11:30:48:9c:a5:1d:84:e6: ee:b7:3e:34:eb:74:ae:d5:ac:6b:58:ac:1b:97:9e: 00:66:cc:9b:55:61:84:94:de:1a:dc:1e:ac:71:97: ac:41:9c:e5:b6:de:32:8a:76:01:47:e9:7c:15:69: cf:a1:4d:92:14:ec:3e:4e:1d:ab:f5:d1:e2:80:15: 3a:45:6c:6c:c5:e3:11:a8:a8:a0:4f:dd:99:fd:e5: 1d:a7:87:c2:b8:5a:3b:e7:ae:b9:ff:8d:80:23:a0: e7:d9:59:dd:10:a3:4f:30:71:4a:62:26:e0:e7:54: ef:54:e7:a7:14:47:c2:01:7b:30:29:bf:ee:87:ab: b1:12:d8:1c:29:02:f1:c3:ba:f0:2d:d0:8f:d6:d8: 4b:19:4d:2d:08:96:c5:2a:26:a1:46:2f:6f:49:4c: 47:25:21:8c:a9:39:74:77:d4:ff:df:9f:74:7d:ba: 66:c0:df:87:b2:aa:09:0c:2a:19:06:e4:cd:3a:6c: c0:17:8f:29:52:cf:22:1e:97:91:fa:a4:7c:07:73: 47:2e:d0:ce:4d:f2:b4:8e:b8:14:e8:26:81:1c:01: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A2:37:C9:55:EA:4A:A8:D6:26:E9:34:C8:A3:BD:A8:65:42:86:24 X509v3 Authority Key Identifier: keyid:FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:84:94:b0:6e:13:e0:7d:07:ff:2d:f2:34:fb:9e:43:22:48: 78:d1:1c:4d:f7:fb:b1:2b:12:b0:c0:e2:a6:d8:2c:54:21:2d: 87:6a:53:ef:5a:e1:d6:8c:4f:89:e5:a3:a9:8d:84:82:b3:53: 23:56:98:64:1e:2e:68:ea:ee:f3:e5:a5:9c:56:d0:fb:89:0b: 16:e7:38:81:19:ca:f3:4e:17:5f:7e:0f:b4:7e:5a:9d:11:92: 4a:8f:37:08:34:62:d8:12:1b:57:ed:c8:1b:78:a1:dc:c0:a8: ff:f8:02:b5:1a:b4:3a:cc:ac:e0:1f:d9:cc:72:6f:47:38:0f: 0b:cc:f1:7d:f9:e8:f1:9d:2b:96:4d:eb:ee:45:0f:28:89:7a: 28:ae:62:c8:ce:77:4b:5e:b7:32:72:9b:09:08:66:bf:70:c9: 30:c0:1d:7f:55:52:a8:1c:99:eb:51:94:76:24:b6:24:10:4d: 84:89:33:fa:6a:c9:b5:88:e0:58:1b:99:e7:a7:1d:88:7c:cd: 2b:03:69:2a:e3:67:b6:7b:fc:c6:2d:fc:2b:fc:55:c3:04:7c: 23:bf:39:64:57:c4:7c:83:40:dc:7a:b1:ee:5e:fb:29:10:a1: 76:78:b4:c7:41:72:85:b2:17:6c:41:d6:0f:2b:0c:32:cd:3c: e2:a3:aa:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7kNmJNFkuZILHxbyxmX6FxkWkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlC NTAyOUM4QjAeFw0yNjA5MTcwNzIyMzdaFw0yNjA5MTgxMDI3MzdaMDMxMTAvBgNV BAMTKDQwQTIzN0M5NTVFQTRBQThENjI2RTkzNEM4QTNCREE4NjU0Mjg2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tjS8JADO7RCAP74Q6sHt+UWZ ceHrOThP01Y/Bod3rOC3f50RMEicpR2E5u63PjTrdK7VrGtYrBuXngBmzJtVYYSU 3hrcHqxxl6xBnOW23jKKdgFH6XwVac+hTZIU7D5OHav10eKAFTpFbGzF4xGoqKBP 3Zn95R2nh8K4Wjvnrrn/jYAjoOfZWd0Qo08wcUpiJuDnVO9U56cUR8IBezApv+6H q7ES2BwpAvHDuvAt0I/W2EsZTS0IlsUqJqFGL29JTEclIYypOXR31P/fn3R9umbA 34eyqgkMKhkG5M06bMAXjylSzyIel5H6pHwHc0cu0M5N8rSOuBToJoEcAU5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKI3yVXqSqjWJuk0yKO9qGVChiQwHwYDVR0j BBgwFoAU+1zRFZmR1aAwWXVlXrSZKbUCnIswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExZjNiMzctYmQ1NC00OTExLTkwNWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5 OTkxRDVBMDMwNTk3NTY1NUVCNDk5MjlCNTAyOUM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjVDRDExNTk5OTFENUEwMzA1OTc1NjU1RUI0OTkyOUI1MDI5 QzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRkI1Q0QxMTU5OTkxRDVBMDMwNTk3NTY1NUVCNDk5 MjlCNTAyOUM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeElLBuE+B9B/8t8jT7nkMiSHjRHE33+7Er ErDA4qbYLFQhLYdqU+9a4daMT4nlo6mNhIKzUyNWmGQeLmjq7vPlpZxW0PuJCxbn OIEZyvNOF19+D7R+Wp0RkkqPNwg0YtgSG1ftyBt4odzAqP/4ArUatDrMrOAf2cxy b0c4DwvM8X356PGdK5ZN6+5FDyiJeiiuYsjOd0tetzJymwkIZr9wyTDAHX9VUqgc metRlHYktiQQTYSJM/pqybWI4FgbmeenHYh8zSsDaSrjZ7Z7/MYt/Cv8VcMEfCO/ OWRXxHyDQNx6se5e+ykQoXZ4tMdBcoWyF2xB1g8rDDLNPOKjqvg= -----END CERTIFICATE-----Generated at Thu Sep 17 10:52:06 2026 by rpki-client