$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft File: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft (raw, json) Hash identifier: BLvlFRQFiH2wZsLDUi9OtTyxA7ztgTp3W+LWSzk5Ze0= Subject key identifier: ED:CA:67:EA:1A:59:69:FB:C9:CA:F7:11:C1:70:67:B8:74:F2:44:5D Authority key identifier: FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 Certificate issuer: /CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Certificate serial: 5D990F2C7EC632022FB0B3E125767F3753D9851E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft Manifest number: BD Signing time: Mon 21 Sep 2026 19:51:03 +0000 Manifest this update: Mon 21 Sep 2026 19:46:03 +0000 Manifest next update: Tue 22 Sep 2026 21:00:03 +0000 Files and hashes: 1: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl (hash: +imICTpQ3PFnn8Xyn++HQ+lvoVKT/un6GFS5tveVs/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:99:0f:2c:7e:c6:32:02:2f:b0:b3:e1:25:76:7f:37:53:d9:85:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Validity Not Before: Sep 21 19:46:03 2026 GMT Not After : Sep 22 21:00:03 2026 GMT Subject: CN=EDCA67EA1A5969FBC9CAF711C17067B874F2445D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:dc:dd:d2:eb:1d:66:91:70:46:2a:7b:6e: 0a:19:6f:59:1b:da:d6:ca:a1:69:46:73:35:43:4c: 03:0e:12:f8:a2:78:b3:18:64:7c:f9:a9:17:c5:3c: d3:09:b1:12:07:ae:93:a8:32:da:67:8c:ad:c0:8c: d7:ee:ef:64:09:c4:8f:5e:8f:ef:3a:19:40:54:bc: e2:94:62:d4:74:78:ba:ab:d3:35:cb:21:24:28:9d: 75:6e:3a:86:bb:95:41:27:da:f9:b4:ac:8b:d5:a5: 34:3b:cd:8c:bb:f8:9e:1c:7c:10:cb:1b:07:00:fb: 6b:c4:b7:15:32:b0:c3:13:df:0e:dc:a0:71:49:9e: 7c:d0:3a:e4:6c:0a:b0:03:a9:d8:c1:1b:f9:aa:b0: 93:5c:4f:5d:18:be:20:71:9b:37:18:45:d4:d8:56: 18:c2:df:62:df:0d:d9:c7:71:a2:fd:16:09:d7:c7: 37:7f:ff:8a:05:46:e8:e6:ed:94:cb:62:26:d2:ee: eb:92:5c:f2:e3:f1:48:32:9f:13:59:b3:de:5c:c6: f4:f9:23:0e:b5:a8:41:9b:56:48:81:3e:41:69:96: 1c:5c:99:5f:c4:af:0b:1d:62:9f:90:4e:38:6d:07: e0:5f:97:90:30:10:8d:55:ed:7f:a6:de:93:28:e9: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CA:67:EA:1A:59:69:FB:C9:CA:F7:11:C1:70:67:B8:74:F2:44:5D X509v3 Authority Key Identifier: keyid:FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:55:c9:72:4c:d2:a0:7e:81:f7:47:ee:d9:b2:ce:f4:23:b1: 2c:ca:1c:df:38:42:90:8d:94:cd:b3:69:36:86:df:48:d7:db: a4:af:86:22:7e:0e:79:ed:24:5c:b4:27:60:8c:d6:e4:bd:b9: 6b:ea:ec:1e:bf:ad:73:14:65:6b:39:99:99:0a:36:61:e0:23: 72:1d:6d:25:db:9c:69:39:9f:b9:58:8d:86:02:b7:9a:32:95: 9c:4b:05:21:06:62:a9:74:8d:28:48:de:61:11:79:9f:25:74: d4:b8:42:df:47:0f:7f:60:a5:93:50:38:aa:41:f2:db:e9:d1: 35:ca:42:0b:95:19:c9:00:77:bf:ee:fd:c9:99:de:79:40:b0: 2b:7b:3e:e3:78:48:1d:a7:c1:99:dd:89:3a:dd:8c:c7:4d:7d: a7:88:ea:f7:9d:c4:a9:c4:d8:fa:69:d0:c1:7f:07:67:5a:a2: dd:c5:dc:5f:a0:6c:d7:f9:5d:aa:18:4d:1a:4d:39:53:b9:92: 43:26:73:2a:fd:cb:ac:04:57:ee:a1:0a:90:d5:17:92:3b:bf: ed:12:4d:e5:b3:88:44:ab:b4:34:14:33:f4:1b:4a:a4:79:0d: ec:c1:de:13:b9:a0:9d:f8:04:2a:0f:36:2a:30:95:50:b3:ab: 90:07:1f:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZkPLH7GMgIvsLPhJXZ/N1PZhR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1 OTU1MDVCOTAeFw0yNjA5MjExOTQ2MDNaFw0yNjA5MjIyMTAwMDNaMDMxMTAvBgNV BAMTKEVEQ0E2N0VBMUE1OTY5RkJDOUNBRjcxMUMxNzA2N0I4NzRGMjQ0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuB9zd0usdZpFwRip7bgoZb1kb 2tbKoWlGczVDTAMOEviieLMYZHz5qRfFPNMJsRIHrpOoMtpnjK3AjNfu72QJxI9e j+86GUBUvOKUYtR0eLqr0zXLISQonXVuOoa7lUEn2vm0rIvVpTQ7zYy7+J4cfBDL GwcA+2vEtxUysMMT3w7coHFJnnzQOuRsCrADqdjBG/mqsJNcT10YviBxmzcYRdTY VhjC32LfDdnHcaL9FgnXxzd//4oFRujm7ZTLYibS7uuSXPLj8UgynxNZs95cxvT5 Iw61qEGbVkiBPkFplhxcmV/ErwsdYp+QTjhtB+Bfl5AwEI1V7X+m3pMo6YArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7cpn6hpZafvJyvcRwXBnuHTyRF0wHwYDVR0j BBgwFoAU/MGvMiHcxiRRCjeufgtqy1lVBbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzViZjg5YzctNTA3MS00YzEyLThjM2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIy MURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1OTU1MDVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0MxQUYzMjIxRENDNjI0NTEwQTM3QUU3RTBCNkFDQjU5NTUw NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZB Q0I1OTU1MDVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtVyXJM0qB+gfdH7tmyzvQjsSzKHN84QpCN lM2zaTaG30jX26SvhiJ+DnntJFy0J2CM1uS9uWvq7B6/rXMUZWs5mZkKNmHgI3Id bSXbnGk5n7lYjYYCt5oylZxLBSEGYql0jShI3mEReZ8ldNS4Qt9HD39gpZNQOKpB 8tvp0TXKQguVGckAd7/u/cmZ3nlAsCt7PuN4SB2nwZndiTrdjMdNfaeI6vedxKnE 2Ppp0MF/B2daot3F3F+gbNf5XaoYTRpNOVO5kkMmcyr9y6wEV+6hCpDVF5I7v+0S TeWziESrtDQUM/QbSqR5DezB3hO5oJ34BCoPNiowlVCzq5AHHxc= -----END CERTIFICATE-----Generated at Tue Sep 22 16:14:50 2026 by rpki-client