$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: LpeZx2C7gI9dvIeXusP3uLbL08Zn5PlP4zLVqjMEprQ= Subject key identifier: 34:79:C3:54:D3:DC:69:37:1C:5F:DE:3D:85:C3:92:3C:D6:82:53:D5 Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 0B51F094CEE4864AA03992A82219A63335DE0E9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:18:08 +0000 Manifest this update: Tue 28 Jul 2026 17:13:08 +0000 Manifest next update: Wed 29 Jul 2026 20:51:08 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: 50xweUXcNwTUSlbqhiefxgtOV1ImyZ4fvVOLWXciO0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:51:f0:94:ce:e4:86:4a:a0:39:92:a8:22:19:a6:33:35:de:0e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: Jul 28 17:13:08 2026 GMT Not After : Jul 29 20:51:08 2026 GMT Subject: CN=3479C354D3DC69371C5FDE3D85C3923CD68253D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:5c:fa:79:fd:24:55:34:12:cd:2f:d0:4f: b6:4a:b6:9a:66:90:9b:bf:7c:ef:86:08:ff:37:b5: 40:81:24:d5:06:06:5a:ab:20:e0:74:26:2b:57:92: 78:5b:e8:42:72:94:6c:b0:e7:96:80:be:90:da:0d: 1a:e0:6f:85:41:e2:bb:f7:12:c5:8c:90:a7:5b:7f: 17:ed:75:d0:38:fa:e2:31:36:10:c8:35:ea:00:20: ed:66:f9:cc:d8:2f:47:fd:60:64:4f:cd:bd:b1:52: 8f:70:9f:cc:4b:be:9e:64:e2:aa:e7:cc:0a:99:b8: 82:03:7f:10:f3:da:2f:d8:8b:a8:ff:4f:79:00:fe: 50:e2:1d:d4:40:9c:5b:c1:c0:e0:86:45:87:ed:b4: 95:22:8a:49:ec:47:46:f9:1f:6e:bf:45:f7:a7:5e: 32:85:36:5d:b0:c6:3d:03:b2:a2:ce:85:d0:31:f8: 30:06:68:02:09:4a:97:4c:73:02:73:11:e5:41:ad: 24:05:5a:e0:d9:cc:8f:39:0f:bc:ae:39:57:af:a3: a9:4d:fb:4b:d3:d5:06:dc:5c:5f:54:6a:14:eb:c8: d0:98:93:1d:b1:ad:d9:a0:12:d4:41:fd:cd:30:13: d8:71:48:96:e9:2d:5b:fd:c1:58:78:66:e4:69:dc: 78:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:79:C3:54:D3:DC:69:37:1C:5F:DE:3D:85:C3:92:3C:D6:82:53:D5 X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:32:ea:50:af:0e:81:bd:46:60:88:cd:07:ae:16:77:0c:91: fc:87:13:40:59:9e:95:6e:69:b6:b7:c9:3e:76:dc:31:73:11: 8e:f2:5c:23:39:2b:cf:e9:19:17:a2:34:1d:fe:1b:cd:e3:97: 47:48:03:e9:40:8f:0c:fd:d6:ac:29:41:fd:38:eb:7f:ee:3f: 9e:93:fa:93:38:5d:0e:44:cf:71:ea:fb:51:ef:cf:db:9d:55: 52:e8:5b:6a:9e:a3:a0:e7:8b:36:6a:59:99:c6:c2:22:0f:bb: 16:f9:ce:75:fd:94:31:82:35:cb:7d:2d:3b:2c:2d:16:93:b0: df:08:2e:69:1b:87:4b:e4:9a:8b:ac:73:2c:d3:1d:88:0a:c6: 38:7e:c7:bb:bf:a5:11:d6:03:c0:c8:7d:86:6f:eb:a5:a6:fa: 68:94:ff:ae:0b:af:7f:95:18:8a:bd:7f:4c:7c:5d:eb:fc:23: e8:99:28:19:fb:19:8f:47:c8:6a:e6:19:10:c1:f1:16:ae:fb: 3b:b3:c8:31:1b:e2:63:4f:e4:0b:86:d8:1f:fd:0c:89:94:fc: d7:a8:d5:b0:ba:b2:7c:67:47:96:20:c9:4b:b1:3d:80:06:9a: 99:65:b3:fb:69:ea:40:87:82:f1:6a:3c:6a:ec:76:72:4c:0f: 97:48:34:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1HwlM7khkqgOZKoIhmmMzXeDpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjA3MjgxNzEzMDhaFw0yNjA3MjkyMDUxMDhaMDMxMTAvBgNV BAMTKDM0NzlDMzU0RDNEQzY5MzcxQzVGREUzRDg1QzM5MjNDRDY4MjUzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHD1z6ef0kVTQSzS/QT7ZKtppm kJu/fO+GCP83tUCBJNUGBlqrIOB0JitXknhb6EJylGyw55aAvpDaDRrgb4VB4rv3 EsWMkKdbfxftddA4+uIxNhDINeoAIO1m+czYL0f9YGRPzb2xUo9wn8xLvp5k4qrn zAqZuIIDfxDz2i/Yi6j/T3kA/lDiHdRAnFvBwOCGRYfttJUiiknsR0b5H26/Rfen XjKFNl2wxj0DsqLOhdAx+DAGaAIJSpdMcwJzEeVBrSQFWuDZzI85D7yuOVevo6lN +0vT1QbcXF9UahTryNCYkx2xrdmgEtRB/c0wE9hxSJbpLVv9wVh4ZuRp3HgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNHnDVNPcaTccX949hcOSPNaCU9UwHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUy6lCvDoG9RmCIzQeuFncMkfyHE0BZnpVu aba3yT523DFzEY7yXCM5K8/pGReiNB3+G83jl0dIA+lAjwz91qwpQf0463/uP56T +pM4XQ5Ez3Hq+1Hvz9udVVLoW2qeo6DnizZqWZnGwiIPuxb5znX9lDGCNct9LTss LRaTsN8ILmkbh0vkmouscyzTHYgKxjh+x7u/pRHWA8DIfYZv66Wm+miU/64Lr3+V GIq9f0x8Xev8I+iZKBn7GY9HyGrmGRDB8Rau+zuzyDEb4mNP5AuG2B/9DImU/Neo 1bC6snxnR5YgyUuxPYAGmplls/tp6kCHgvFqPGrsdnJMD5dINJU= -----END CERTIFICATE-----Generated at Tue Jul 28 21:42:17 2026 by rpki-client