$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: mYj2GSbhH+I/orDj5QR0as8QHEV5ilMfeAYyWJeL8u8= Subject key identifier: 63:2B:FF:F0:C3:18:23:01:B5:E8:40:52:23:1F:04:21:BF:0C:EB:93 Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 13861FD02FB22C44747E3E1FE435A27CB915E442 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 11:02:55 +0000 Manifest this update: Sat 13 Jun 2026 10:57:55 +0000 Manifest next update: Sun 14 Jun 2026 14:00:55 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: UxFkSnFeBolBuIx5rX5fTjQL3jL2No+KQ9vZzRBDCpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:86:1f:d0:2f:b2:2c:44:74:7e:3e:1f:e4:35:a2:7c:b9:15:e4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: Jun 13 10:57:55 2026 GMT Not After : Jun 14 14:00:55 2026 GMT Subject: CN=632BFFF0C3182301B5E84052231F0421BF0CEB93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:3e:e5:59:4c:ef:9e:b3:2d:12:c3:07:9d: 25:c8:69:29:c6:c8:85:cc:ba:3b:8d:6e:3f:7b:d9: 6f:bf:ef:bb:0a:a9:c3:f4:18:79:57:d2:85:87:05: 0d:6d:4f:22:ca:44:25:c9:c1:2d:c7:61:fa:f0:04: 5b:90:94:78:83:49:99:38:a4:a9:01:98:e1:40:fb: 7d:be:47:6a:be:d8:36:51:5f:36:e6:d1:d0:ac:ea: 7f:c9:14:09:df:e8:88:99:06:8f:0d:56:f4:9f:5f: f0:56:1b:06:30:ec:c4:0f:8f:9b:7e:2c:81:50:8d: ef:37:02:d6:1d:69:95:63:64:48:cc:2e:34:b5:b1: fd:08:9d:8b:64:7f:e2:05:04:3c:8c:d4:b6:26:ba: 5a:82:f8:6b:18:c7:4d:3a:2d:0e:52:bc:02:ef:33: 66:b1:d6:ca:43:c9:76:a8:4f:0c:d9:47:78:24:bc: 54:fd:f1:87:7d:58:4b:b0:1a:c6:3d:f2:07:b1:9f: c6:29:23:5a:6f:91:32:79:68:a6:aa:c0:c0:ef:e0: d6:66:9c:06:0a:ac:d6:7f:8d:82:6c:0c:38:40:30: c7:f5:3c:5f:4b:03:fd:87:95:a8:77:78:51:65:f8: f9:cc:cb:1b:ff:d2:e5:94:5f:88:6e:23:b6:d1:15: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:FF:F0:C3:18:23:01:B5:E8:40:52:23:1F:04:21:BF:0C:EB:93 X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:0e:d8:60:2f:ca:e9:9f:2c:69:69:af:b0:c8:a0:b0:36:5a: 5d:74:de:a8:99:4d:26:10:22:f0:3b:44:8e:2f:ad:cc:d6:fb: c6:2c:db:b7:a9:ec:03:46:64:bb:2c:c3:d4:af:8f:e7:63:aa: a2:b5:42:33:55:65:82:94:18:db:44:73:e7:77:74:e8:87:81: 3b:eb:6e:c1:b5:85:10:d3:cd:53:be:f9:ac:92:37:e4:19:4f: 93:84:04:fe:1e:7c:06:bf:8d:17:b7:8e:0b:b3:15:e6:28:6a: f8:9d:30:6d:b2:ec:ff:3e:bb:6d:03:b0:55:f9:88:e6:ce:29: 84:d8:1a:13:e4:4a:e1:88:0d:cd:94:12:cf:30:42:1e:6b:30: 96:53:65:df:1e:78:5e:29:42:9b:c8:06:ae:0a:3e:b6:9d:e9: 22:d2:3d:c7:48:93:90:b3:61:42:6f:39:62:66:55:44:8c:5f: 1b:73:78:05:b4:5e:76:61:f9:e6:42:17:31:e4:f0:3a:4d:45: c9:98:0a:dc:bb:bd:2b:a5:e2:95:e0:a9:fe:6e:a8:78:5c:2a: 05:2a:9f:06:b6:af:ac:85:84:f0:24:46:db:ab:84:0e:68:d8: ed:70:b1:9a:83:68:18:92:01:d1:60:c9:f7:c4:a2:73:ab:0e: a6:5a:6f:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4Yf0C+yLER0fj4f5DWifLkV5EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjA2MTMxMDU3NTVaFw0yNjA2MTQxNDAwNTVaMDMxMTAvBgNV BAMTKDYzMkJGRkYwQzMxODIzMDFCNUU4NDA1MjIzMUYwNDIxQkYwQ0VCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCduT7lWUzvnrMtEsMHnSXIaSnG yIXMujuNbj972W+/77sKqcP0GHlX0oWHBQ1tTyLKRCXJwS3HYfrwBFuQlHiDSZk4 pKkBmOFA+32+R2q+2DZRXzbm0dCs6n/JFAnf6IiZBo8NVvSfX/BWGwYw7MQPj5t+ LIFQje83AtYdaZVjZEjMLjS1sf0InYtkf+IFBDyM1LYmulqC+GsYx006LQ5SvALv M2ax1spDyXaoTwzZR3gkvFT98Yd9WEuwGsY98gexn8YpI1pvkTJ5aKaqwMDv4NZm nAYKrNZ/jYJsDDhAMMf1PF9LA/2Hlah3eFFl+PnMyxv/0uWUX4huI7bRFfi3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyv/8MMYIwG16EBSIx8EIb8M65MwHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsO2GAvyumfLGlpr7DIoLA2Wl103qiZTSYQ IvA7RI4vrczW+8Ys27ep7ANGZLssw9Svj+djqqK1QjNVZYKUGNtEc+d3dOiHgTvr bsG1hRDTzVO++aySN+QZT5OEBP4efAa/jRe3jguzFeYoavidMG2y7P8+u20DsFX5 iObOKYTYGhPkSuGIDc2UEs8wQh5rMJZTZd8eeF4pQpvIBq4KPrad6SLSPcdIk5Cz YUJvOWJmVUSMXxtzeAW0XnZh+eZCFzHk8DpNRcmYCty7vSul4pXgqf5uqHhcKgUq nwa2r6yFhPAkRturhA5o2O1wsZqDaBiSAdFgyffEonOrDqZab8U= -----END CERTIFICATE-----Generated at Sat Jun 13 12:41:55 2026 by rpki-client