$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft File: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft (raw, json) Hash identifier: 6ZL/onIhNXpdDux8Z52HyexoMuVNCB+b/buOuhRFKQs= Subject key identifier: 7B:04:5F:B1:CE:EC:14:58:67:C2:06:39:65:61:44:D5:E7:9A:3C:62 Authority key identifier: FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 Certificate issuer: /CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Certificate serial: 7A04B5B8521C204065503BC7F4FA9D90736B90AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:46:46 +0000 Manifest this update: Tue 16 Jun 2026 22:41:46 +0000 Manifest next update: Wed 17 Jun 2026 23:28:46 +0000 Files and hashes: 1: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl (hash: 6LSHpEifKp8+mJEMisUW9KnSEWVM/oHX9lplbQTpBSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:04:b5:b8:52:1c:20:40:65:50:3b:c7:f4:fa:9d:90:73:6b:90:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Validity Not Before: Jun 16 22:41:46 2026 GMT Not After : Jun 17 23:28:46 2026 GMT Subject: CN=7B045FB1CEEC145867C20639656144D5E79A3C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:fe:7e:40:4c:f0:4f:1e:b9:95:be:2c:4d: 0a:72:87:39:0b:0f:44:aa:e8:45:86:5f:ea:36:c9: 7e:13:69:f2:8b:9d:49:cd:83:89:a8:69:6f:35:d2: 61:cf:f7:1c:ab:9a:0c:24:19:37:1e:8d:7c:f2:33: 09:d8:83:09:84:e3:b1:65:1c:95:44:61:43:1e:b8: d8:b7:e4:fd:f0:66:2b:a3:ef:d3:50:79:89:e5:b3: 27:68:52:6e:2f:b8:75:83:07:c0:d0:99:83:f5:1b: f8:e2:6e:e3:3d:13:e0:69:ee:c4:cd:1c:c2:d3:7f: ec:2e:1e:73:a3:f3:3f:45:6d:ed:b5:02:a6:a9:6a: cf:d4:8b:ff:7f:51:74:4c:35:47:f5:80:28:c4:f7: 8d:da:44:1d:dd:c0:c6:3c:e8:1f:f5:45:86:7c:e7: dc:f9:3d:78:90:42:04:c3:9b:5b:dd:88:bf:d4:5a: e8:f6:3f:d0:d5:12:4f:66:a9:5b:90:ee:a7:23:48: 3e:20:a3:e6:f8:34:3e:03:46:81:bf:aa:e0:35:38: 6d:4f:92:49:25:91:f7:e0:11:18:38:1b:29:05:0f: 46:ca:e4:c9:5b:dc:9c:ab:13:da:e7:c4:7f:46:50: 65:33:49:62:e4:1f:62:86:a0:e0:40:3c:63:44:3f: 07:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:04:5F:B1:CE:EC:14:58:67:C2:06:39:65:61:44:D5:E7:9A:3C:62 X509v3 Authority Key Identifier: keyid:FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c1:36:f3:c4:2b:b7:37:fa:97:70:e2:24:61:32:fe:18:ee: 83:60:3f:0f:8c:3b:d3:20:34:0b:cc:37:d6:2f:90:fb:92:00: a7:bb:82:d5:28:fc:22:b4:de:c5:a8:78:05:be:0d:73:88:e2: 27:f2:a0:57:1d:d0:eb:ea:1e:69:27:8b:01:03:f8:db:aa:10: 60:79:8b:0f:47:a5:46:39:e7:4b:ff:94:c1:6f:3a:55:7d:d7: 50:e7:77:fd:5b:0e:b5:d4:22:2f:1c:f7:c5:9a:ba:e5:6e:ba: b8:92:02:27:21:75:e7:fb:87:a4:db:0d:33:6c:d7:40:86:a4: 0d:cf:77:42:85:52:09:b6:54:8e:a5:47:ec:d9:c2:c7:5d:20: 01:31:62:ee:f4:c3:91:a1:18:c5:b7:28:05:7b:70:e6:45:24: d5:5a:47:60:50:9e:c6:21:7b:b4:61:3e:ef:f0:8c:f1:0d:59: 1f:de:b3:00:1d:d7:da:e2:e0:15:d0:9c:de:4d:24:c6:cd:c5: 92:68:b4:2c:a9:4e:b8:3e:af:fd:c7:52:65:8f:ca:1e:4f:30: 69:2b:b4:5d:ef:5f:54:38:67:97:28:ce:7f:a9:d2:78:aa:cf: 3a:bc:f5:3a:1c:de:b2:c6:7f:c6:50:27:ff:27:1a:db:19:3e: 81:d5:c2:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegS1uFIcIEBlUDvH9PqdkHNrkK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1 OTU1MDVCOTAeFw0yNjA2MTYyMjQxNDZaFw0yNjA2MTcyMzI4NDZaMDMxMTAvBgNV BAMTKDdCMDQ1RkIxQ0VFQzE0NTg2N0MyMDYzOTY1NjE0NEQ1RTc5QTNDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgf5+QEzwTx65lb4sTQpyhzkL D0Sq6EWGX+o2yX4TafKLnUnNg4moaW810mHP9xyrmgwkGTcejXzyMwnYgwmE47Fl HJVEYUMeuNi35P3wZiuj79NQeYnlsydoUm4vuHWDB8DQmYP1G/jibuM9E+Bp7sTN HMLTf+wuHnOj8z9Fbe21Aqapas/Ui/9/UXRMNUf1gCjE943aRB3dwMY86B/1RYZ8 59z5PXiQQgTDm1vdiL/UWuj2P9DVEk9mqVuQ7qcjSD4go+b4ND4DRoG/quA1OG1P kkklkffgERg4GykFD0bK5Mlb3JyrE9rnxH9GUGUzSWLkH2KGoOBAPGNEPwfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUewRfsc7sFFhnwgY5ZWFE1eeaPGIwHwYDVR0j BBgwFoAU/MGvMiHcxiRRCjeufgtqy1lVBbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzViZjg5YzctNTA3MS00YzEyLThjM2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIy MURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1OTU1MDVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0MxQUYzMjIxRENDNjI0NTEwQTM3QUU3RTBCNkFDQjU5NTUw NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZB Q0I1OTU1MDVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7BNvPEK7c3+pdw4iRhMv4Y7oNgPw+MO9Mg NAvMN9YvkPuSAKe7gtUo/CK03sWoeAW+DXOI4ifyoFcd0OvqHmkniwED+NuqEGB5 iw9HpUY550v/lMFvOlV911Dnd/1bDrXUIi8c98WauuVuuriSAichdef7h6TbDTNs 10CGpA3Pd0KFUgm2VI6lR+zZwsddIAExYu70w5GhGMW3KAV7cOZFJNVaR2BQnsYh e7RhPu/wjPENWR/eswAd19ri4BXQnN5NJMbNxZJotCypTrg+r/3HUmWPyh5PMGkr tF3vX1Q4Z5cozn+p0niqzzq89Toc3rLGf8ZQJ/8nGtsZPoHVwkU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:02 2026 by rpki-client