$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: 24FjVHGns8OQVxIzeiYekHUychGKln6fosMDTRmMJ9U= Subject key identifier: 8E:FC:E7:51:3B:6F:45:33:31:C3:4A:46:53:63:4A:CD:A9:85:DC:E0 Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 232386C986CD2A28BAD93F9E2E7F7D7C6EB2D78F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:51:54 +0000 Manifest this update: Wed 23 Sep 2026 20:46:54 +0000 Manifest next update: Thu 24 Sep 2026 23:44:54 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: 8jJaNhjYmwIaB/j3ScKNeBzBN7cU8qzCkY9NajsLm+s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:23:86:c9:86:cd:2a:28:ba:d9:3f:9e:2e:7f:7d:7c:6e:b2:d7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: Sep 23 20:46:54 2026 GMT Not After : Sep 24 23:44:54 2026 GMT Subject: CN=8EFCE7513B6F453331C34A4653634ACDA985DCE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:ae:49:da:ef:f4:11:83:df:8e:84:29:ab: b6:2f:39:39:5d:4d:cb:3b:2b:48:9d:2d:4a:29:b0: 6c:b2:37:b8:23:52:b6:2d:5e:b6:45:33:5f:f6:70: f1:9e:10:80:5b:7a:58:34:9f:5c:14:13:76:a6:73: 8b:fd:07:af:f6:71:f8:ae:60:e2:85:50:45:8e:e2: 45:85:8f:6c:71:e0:a4:ae:a5:7e:0d:97:ec:76:14: 09:9f:6e:85:82:02:ce:f3:25:87:49:a3:d2:88:9f: a1:1f:02:e5:b9:c7:51:df:15:4f:0a:56:ae:c7:56: e7:ec:94:78:1c:41:88:2e:7d:5e:16:4e:35:a3:35: f4:28:4c:3f:a7:8e:d7:c7:0f:f5:af:10:ac:c0:90: 65:b4:74:1b:1c:a9:cf:81:19:3c:92:ac:d0:91:e5: 05:1e:82:27:90:87:66:84:bd:d0:31:d1:c1:2b:94: 38:da:f6:61:0b:10:27:52:ca:7c:73:af:7a:0c:c5: 23:03:7c:a2:23:2d:8e:ea:e3:72:6c:37:1f:54:a4: 22:d8:07:c7:ea:9a:18:15:9d:40:3f:c9:a1:b4:db: a3:ef:67:28:e5:89:15:40:18:15:a9:c3:1c:a9:42: 3a:8f:a0:96:b9:1f:d0:43:2f:2e:f0:8e:a0:3c:9a: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FC:E7:51:3B:6F:45:33:31:C3:4A:46:53:63:4A:CD:A9:85:DC:E0 X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:56:6c:e5:bd:72:76:d4:4d:88:da:f3:98:c6:0f:7b:cd:a2: 20:87:cc:6d:63:4c:19:11:ee:0c:e6:ce:37:14:d4:c5:bd:c5: 8e:42:02:88:c1:6a:cb:d9:ec:b6:71:cd:c9:c8:a8:5f:a1:5a: dd:aa:1d:bf:06:2f:a2:eb:f0:1f:35:af:4e:46:01:fa:ae:ef: 78:3d:9c:7f:6c:07:69:3d:26:36:f9:61:d9:f2:31:b9:a8:eb: 40:46:97:af:1e:b1:b8:33:f5:f4:45:c2:89:4b:78:3e:6d:29: be:03:47:e0:d8:94:ea:da:a2:a7:6e:98:1d:65:9a:21:cc:e5: e4:0d:6a:3e:6f:66:65:50:dd:26:ac:87:10:50:f6:75:7a:b4: ba:8a:11:62:28:a8:cd:6c:04:86:31:f7:f9:c9:e7:02:a0:ef: a1:9f:fe:9d:b8:f0:9c:aa:86:c2:85:d1:e8:35:74:ff:df:c1: 20:35:75:43:f3:67:5b:dd:a3:83:89:53:90:79:8b:27:73:fa: de:4f:3f:b4:66:e3:b9:b9:c1:73:bd:8d:de:f7:f0:a4:0c:aa: 19:8e:21:e4:58:da:a6:10:12:b5:71:7c:3b:b5:36:a6:8d:1d: 81:ac:45:e3:d8:48:c4:84:a4:b1:c6:92:40:95:44:fb:63:39: 24:6d:6d:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyOGyYbNKii62T+eLn99fG6y148wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjA5MjMyMDQ2NTRaFw0yNjA5MjQyMzQ0NTRaMDMxMTAvBgNV BAMTKDhFRkNFNzUxM0I2RjQ1MzMzMUMzNEE0NjUzNjM0QUNEQTk4NURDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8a5J2u/0EYPfjoQpq7YvOTld Tcs7K0idLUopsGyyN7gjUrYtXrZFM1/2cPGeEIBbelg0n1wUE3amc4v9B6/2cfiu YOKFUEWO4kWFj2xx4KSupX4Nl+x2FAmfboWCAs7zJYdJo9KIn6EfAuW5x1HfFU8K Vq7HVufslHgcQYgufV4WTjWjNfQoTD+njtfHD/WvEKzAkGW0dBscqc+BGTySrNCR 5QUegieQh2aEvdAx0cErlDja9mELECdSynxzr3oMxSMDfKIjLY7q43JsNx9UpCLY B8fqmhgVnUA/yaG026PvZyjliRVAGBWpwxypQjqPoJa5H9BDLy7wjqA8mkvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjvznUTtvRTMxw0pGU2NKzamF3OAwHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5WbOW9cnbUTYja85jGD3vNoiCHzG1jTBkR 7gzmzjcU1MW9xY5CAojBasvZ7LZxzcnIqF+hWt2qHb8GL6Lr8B81r05GAfqu73g9 nH9sB2k9Jjb5YdnyMbmo60BGl68esbgz9fRFwolLeD5tKb4DR+DYlOraoqdumB1l miHM5eQNaj5vZmVQ3SashxBQ9nV6tLqKEWIoqM1sBIYx9/nJ5wKg76Gf/p248Jyq hsKF0eg1dP/fwSA1dUPzZ1vdo4OJU5B5iydz+t5PP7Rm47m5wXO9jd738KQMqhmO IeRY2qYQErVxfDu1NqaNHYGsRePYSMSEpLHGkkCVRPtjOSRtbcY= -----END CERTIFICATE-----Generated at Wed Sep 23 23:12:24 2026 by rpki-client