$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft (raw, json) Hash identifier: AVu00j29LmVfK8SCDcOuGLIh2+BC5E6sk8FIPTB2Wmc= Subject key identifier: 45:07:32:3B:05:0C:AA:E3:54:9C:54:1E:A2:8C:54:5C:D0:11:2B:92 Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Certificate issuer: /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Certificate serial: 79346ED3F5D3E7587D521E0AC20ECF2875F95636 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft Manifest number: C1 Signing time: Mon 21 Sep 2026 01:53:51 +0000 Manifest this update: Mon 21 Sep 2026 01:48:51 +0000 Manifest next update: Tue 22 Sep 2026 05:41:51 +0000 Files and hashes: 1: FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl (hash: PLG0cXL8UdLoIkIAEM+YbSJzFL5y9yBRL00M5j/tt0k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:34:6e:d3:f5:d3:e7:58:7d:52:1e:0a:c2:0e:cf:28:75:f9:56:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Validity Not Before: Sep 21 01:48:51 2026 GMT Not After : Sep 22 05:41:51 2026 GMT Subject: CN=4507323B050CAAE3549C541EA28C545CD0112B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:c4:cf:27:6d:bc:43:a8:06:1d:9d:12:b6: f2:dd:ea:d5:78:00:db:11:45:43:b5:7e:52:45:cf: 8f:bb:47:7b:64:a8:b9:45:85:b8:eb:a2:2f:16:c7: cf:57:bf:21:b6:64:17:cd:48:a2:66:66:30:8f:07: 80:8b:f8:48:38:ae:0d:12:64:e6:39:42:c9:8d:57: fd:8d:c9:45:85:8b:c6:b6:c8:ea:45:30:54:3e:06: d2:62:31:db:c3:2c:66:e6:e2:a9:03:3c:e3:96:83: cd:b5:15:7d:93:9f:ef:cd:bf:4f:fb:f6:d5:1f:88: 2f:64:8b:02:be:5b:1c:79:6d:5d:48:d7:ba:31:15: a9:d2:d2:f6:81:36:8a:32:31:3a:21:e2:b1:02:19: 4c:28:0f:6f:0c:42:f5:f0:8b:4d:eb:32:21:00:dd: f4:8a:24:69:11:19:89:d7:d4:9f:47:13:ec:e1:b2: 21:d7:4b:7b:67:e1:82:fd:14:ff:17:67:c0:d8:cf: 0b:ff:bd:3d:16:dd:25:4e:97:5c:e0:62:c7:db:71: ab:fe:16:d7:33:16:9f:bb:ea:44:4b:0c:75:41:f9: 2a:bc:c2:96:c2:3a:7d:a6:a9:38:4f:44:7d:52:13: e5:40:bb:d3:79:ea:c1:ac:49:cb:ad:94:4c:b7:52: 4e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:07:32:3B:05:0C:AA:E3:54:9C:54:1E:A2:8C:54:5C:D0:11:2B:92 X509v3 Authority Key Identifier: keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4a:5b:bc:c8:31:cc:ff:80:c1:b5:e8:b8:e0:c0:f7:37:1d: 15:5f:ed:5d:66:cd:4e:9a:cd:60:41:11:3a:02:da:2c:13:75: a3:2d:d0:36:6f:40:b3:11:eb:ef:f3:f9:25:a8:be:84:35:f6: 5d:2a:8d:05:db:81:2d:f1:a3:29:4b:79:c5:e6:16:13:4f:e9: c5:5b:c7:79:61:d6:18:10:4a:e1:2d:85:17:6b:c1:9b:62:3a: fa:48:39:a5:9b:59:8e:24:c4:c9:b3:3c:e6:39:da:c3:fc:61: 12:bd:3f:c3:c0:1d:01:16:5b:47:80:b2:4b:5d:79:78:cc:28: 4b:7c:c4:5d:9c:3d:04:8d:f9:d1:01:63:0c:fd:83:cf:64:f5: 30:2d:c5:28:16:b2:67:fd:2e:f4:7b:7e:4e:02:ba:79:e7:5d: c9:91:47:fa:42:65:56:94:19:08:b5:69:c9:2e:f1:a9:d2:32: 67:01:5b:77:ca:24:b2:c5:71:df:e3:18:46:97:8b:3d:58:82: 4d:00:99:33:a6:00:5d:8f:6c:e3:59:19:06:83:43:d2:8d:a1: f9:dd:99:d3:eb:7d:d7:50:5c:0c:c4:a9:e0:f5:0a:32:f7:f1: 71:b3:be:47:35:81:88:b7:f3:fe:b8:19:14:99:d4:2d:9e:aa: 21:65:fb:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTRu0/XT51h9Uh4Kwg7PKHX5VjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZG MEU0QjNFNDAeFw0yNjA5MjEwMTQ4NTFaFw0yNjA5MjIwNTQxNTFaMDMxMTAvBgNV BAMTKDQ1MDczMjNCMDUwQ0FBRTM1NDlDNTQxRUEyOEM1NDVDRDAxMTJCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGocTPJ228Q6gGHZ0StvLd6tV4 ANsRRUO1flJFz4+7R3tkqLlFhbjroi8Wx89XvyG2ZBfNSKJmZjCPB4CL+Eg4rg0S ZOY5QsmNV/2NyUWFi8a2yOpFMFQ+BtJiMdvDLGbm4qkDPOOWg821FX2Tn+/Nv0/7 9tUfiC9kiwK+Wxx5bV1I17oxFanS0vaBNooyMToh4rECGUwoD28MQvXwi03rMiEA 3fSKJGkRGYnX1J9HE+zhsiHXS3tn4YL9FP8XZ8DYzwv/vT0W3SVOl1zgYsfbcav+ FtczFp+76kRLDHVB+Sq8wpbCOn2mqThPRH1SE+VAu9N56sGsScutlEy3Uk5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURQcyOwUMquNUnFQeooxUXNARK5IwHwYDVR0j BBgwFoAU/HHUYjFvMDdRrg7gFylA7/Dks+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQwZTBkZWEtNWY5Yi00MjVjLTgyY2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIz MTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZGMEU0QjNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzcxRDQ2MjMxNkYzMDM3NTFBRTBFRTAxNzI5NDBFRkYwRTRC M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQw RUZGMEU0QjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpKW7zIMcz/gMG16LjgwPc3HRVf7V1mzU6a zWBBEToC2iwTdaMt0DZvQLMR6+/z+SWovoQ19l0qjQXbgS3xoylLecXmFhNP6cVb x3lh1hgQSuEthRdrwZtiOvpIOaWbWY4kxMmzPOY52sP8YRK9P8PAHQEWW0eAsktd eXjMKEt8xF2cPQSN+dEBYwz9g89k9TAtxSgWsmf9LvR7fk4CunnnXcmRR/pCZVaU GQi1acku8anSMmcBW3fKJLLFcd/jGEaXiz1Ygk0AmTOmAF2PbONZGQaDQ9KNofnd mdPrfddQXAzEqeD1CjL38XGzvkc1gYi38/64GRSZ1C2eqiFl+1o= -----END CERTIFICATE-----Generated at Mon Sep 21 13:55:03 2026 by rpki-client