$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: s8pJd3PYHAXmNyMXy3km13zG5RYoJT4q0eNpVhJctGE= Subject key identifier: 05:A8:9A:18:12:C7:22:C1:D3:7B:A1:34:DF:69:79:0F:0E:33:94:43 Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 5ABA5E7C7EB0A9D26FD58639868826FC7B13C0F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:00:24 +0000 Manifest this update: Sun 20 Sep 2026 22:55:24 +0000 Manifest next update: Tue 22 Sep 2026 02:59:24 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: yEhv35ln+mqaOMhZGqcXXD/OclrmamAG1eF606qpeJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ba:5e:7c:7e:b0:a9:d2:6f:d5:86:39:86:88:26:fc:7b:13:c0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: Sep 20 22:55:24 2026 GMT Not After : Sep 22 02:59:24 2026 GMT Subject: CN=05A89A1812C722C1D37BA134DF69790F0E339443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:7e:eb:0e:6d:45:aa:23:73:88:23:c0:2a: 38:b8:d7:8d:db:20:a6:50:a3:2d:8d:2a:bd:e0:df: ba:06:d4:e6:82:f0:ed:ba:7d:bf:f5:e2:d8:fe:a1: 08:2d:ad:55:29:a3:14:3e:35:01:e4:45:26:0b:27: ea:82:66:a4:83:b4:b3:44:14:27:c3:e9:e7:2a:c6: dd:c0:c6:5d:d0:35:c9:c1:0b:ba:05:29:c7:a4:c6: 4a:a5:c4:41:96:81:ea:06:ab:05:5d:d2:43:07:be: e7:6e:25:c6:77:a1:3a:2d:8b:95:46:93:6a:bd:0b: ba:3b:8c:f5:22:9e:6d:7a:d1:52:9d:49:ef:91:07: e4:4a:c4:63:68:32:cc:0a:3c:b8:0f:43:d2:00:db: 20:19:e5:89:8b:49:6c:14:56:78:09:d8:3e:95:78: 9c:d2:1d:79:7b:16:25:86:10:3b:d4:80:b8:66:b6: 31:50:cb:8b:26:34:a6:82:23:00:c1:12:8b:b4:e3: 18:71:06:65:0f:3a:6e:63:ce:e0:c4:ab:12:b0:e7: 3e:45:ef:46:0f:38:55:ca:05:91:db:2a:95:2a:cf: 0e:60:38:28:60:da:55:2b:5d:4f:11:46:8a:c3:01: 57:ff:d8:ad:55:4f:2c:f2:31:e3:47:ac:59:91:3e: 95:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A8:9A:18:12:C7:22:C1:D3:7B:A1:34:DF:69:79:0F:0E:33:94:43 X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6f:4a:36:40:45:5c:04:b4:4f:98:ea:4b:85:76:c1:d1:da: b8:a9:a3:5f:65:82:c0:95:b3:6c:66:9c:bc:6c:d7:cf:60:b3: 31:26:1c:39:0e:37:6f:e2:80:ad:2a:4e:d0:d4:be:a8:5e:96: 79:72:61:1d:06:20:1a:ae:a2:7b:5c:54:7c:91:d4:8f:99:11: fc:33:ca:cc:61:7b:5a:1b:ab:fd:c6:e0:22:63:e9:04:d9:ba: 7e:f2:64:d6:d5:a7:cb:2f:0f:23:15:ea:3c:46:21:49:06:e0: 5a:1a:8e:c4:57:a6:6d:66:a3:15:95:0c:4c:5d:bf:96:5e:f7: f0:29:fa:b4:4b:41:47:bc:a1:21:02:aa:1f:db:e3:50:ab:56: bc:34:42:2f:be:dc:5b:3d:75:7a:7a:3e:59:c3:ef:5a:5e:ba: 52:80:7d:d1:99:0e:fa:f1:54:8a:f9:c0:6a:fb:05:8d:a8:6b: 59:c7:4a:1b:01:b2:75:6f:1e:2f:e9:00:72:53:29:2f:ca:12: 3b:d3:b7:3b:77:75:f2:94:41:04:cc:9b:ad:83:8c:2b:4d:69: e4:fd:fc:f8:dd:e4:8e:99:ad:74:46:72:a8:b0:12:fa:64:d6: da:e4:d1:94:d2:33:62:17:68:e8:90:25:e7:72:60:f2:23:8b: d2:eb:c3:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrpefH6wqdJv1YY5hogm/HsTwPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjA5MjAyMjU1MjRaFw0yNjA5MjIwMjU5MjRaMDMxMTAvBgNV BAMTKDA1QTg5QTE4MTJDNzIyQzFEMzdCQTEzNERGNjk3OTBGMEUzMzk0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPX7rDm1FqiNziCPAKji4143b IKZQoy2NKr3g37oG1OaC8O26fb/14tj+oQgtrVUpoxQ+NQHkRSYLJ+qCZqSDtLNE FCfD6ecqxt3Axl3QNcnBC7oFKcekxkqlxEGWgeoGqwVd0kMHvuduJcZ3oToti5VG k2q9C7o7jPUinm160VKdSe+RB+RKxGNoMswKPLgPQ9IA2yAZ5YmLSWwUVngJ2D6V eJzSHXl7FiWGEDvUgLhmtjFQy4smNKaCIwDBEou04xhxBmUPOm5jzuDEqxKw5z5F 70YPOFXKBZHbKpUqzw5gOChg2lUrXU8RRorDAVf/2K1VTyzyMeNHrFmRPpVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBaiaGBLHIsHTe6E032l5Dw4zlEMwHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtvSjZARVwEtE+Y6kuFdsHR2ripo19lgsCV s2xmnLxs189gszEmHDkON2/igK0qTtDUvqhelnlyYR0GIBquontcVHyR1I+ZEfwz ysxhe1obq/3G4CJj6QTZun7yZNbVp8svDyMV6jxGIUkG4FoajsRXpm1moxWVDExd v5Ze9/Ap+rRLQUe8oSECqh/b41CrVrw0Qi++3Fs9dXp6PlnD71peulKAfdGZDvrx VIr5wGr7BY2oa1nHShsBsnVvHi/pAHJTKS/KEjvTtzt3dfKUQQTMm62DjCtNaeT9 /Pjd5I6ZrXRGcqiwEvpk1trk0ZTSM2IXaOiQJedyYPIji9Lrwzo= -----END CERTIFICATE-----Generated at Mon Sep 21 10:41:43 2026 by rpki-client