$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: Q53kuYM/DRWGc+wB7iJMP3DECLWOTsXbyRdutDcm3CQ= Subject key identifier: 69:B6:1F:D9:B4:01:8C:5D:B2:8F:D8:30:29:0B:67:59:ED:76:D9:BA Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 7AFAF35C252CBA0727F0B70D359AE7D84798EC97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: 0E Signing time: Tue 12 May 2026 20:58:17 +0000 Manifest this update: Tue 12 May 2026 20:53:17 +0000 Manifest next update: Wed 13 May 2026 22:15:17 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: 8SB0lbT+ugzA5269wKob0R0LDXQMCzIE/qVbxWjkqAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fa:f3:5c:25:2c:ba:07:27:f0:b7:0d:35:9a:e7:d8:47:98:ec:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: May 12 20:53:17 2026 GMT Not After : May 13 22:15:17 2026 GMT Subject: CN=69B61FD9B4018C5DB28FD830290B6759ED76D9BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:c9:ef:f7:76:1a:3b:aa:e4:f3:47:d5:3d: aa:de:38:2a:f1:82:32:d0:bb:6e:83:56:0e:fa:fd: 42:a8:8b:2c:0f:7e:69:94:d5:f4:0e:6a:32:c6:02: 32:a6:69:91:df:6a:b4:fe:3c:ec:c5:f6:4f:b0:40: 60:26:28:56:68:ea:e9:62:db:d6:4c:f3:31:6a:3c: 0f:8f:8e:8e:ec:f8:7e:ab:dd:99:b0:4e:51:ac:00: 9e:6a:6f:55:fd:5d:dc:53:ba:e3:4b:26:ab:37:d4: 4f:d2:4b:82:ab:79:a4:c1:9b:b1:8d:aa:55:ba:0b: b9:b1:49:17:e8:60:be:a8:6e:c9:9f:6e:7a:56:86: 0d:aa:ae:ae:f4:74:c6:9a:eb:70:a6:ce:d0:38:0e: 0c:bf:97:59:f5:7a:a1:ed:ec:46:ab:3f:6f:f3:10: 23:be:1b:1c:fa:99:3d:f4:c3:5c:c8:3e:f0:07:8f: 86:f6:e4:e7:8c:43:23:80:42:00:63:4a:0f:2e:d0: 55:1c:fc:31:eb:4a:5f:33:7e:2e:c8:57:2d:88:e3: ec:5f:71:59:84:2e:3d:88:0a:8d:66:7f:d7:45:fc: 35:76:d4:1f:9f:a5:8e:35:a9:03:af:a2:64:e4:d0: 78:26:a6:8c:0f:42:c5:04:ac:63:3a:56:fd:0b:f2: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B6:1F:D9:B4:01:8C:5D:B2:8F:D8:30:29:0B:67:59:ED:76:D9:BA X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:75:48:e2:4f:5c:aa:20:23:f1:b5:17:0d:09:89:d8:de:24: 69:ea:82:ec:9c:6c:2c:93:f5:07:65:d5:8f:d4:16:fb:f2:eb: 53:52:61:b4:cf:11:c2:85:36:d9:c6:28:bd:47:03:45:d2:01: c8:f9:74:e3:1f:01:d3:c1:a3:4a:42:33:28:6d:19:03:52:84: 70:6a:8c:72:a0:08:3a:32:24:e7:aa:35:36:fa:0a:49:1a:1d: 70:44:19:cd:8d:15:74:50:8d:9f:73:c0:20:cc:51:77:d4:fa: 59:fc:9f:ad:94:28:07:19:b1:57:eb:43:59:88:52:55:01:d4: d1:64:73:ea:28:2e:56:52:e3:d0:4a:76:a2:d5:d6:2f:d6:9d: eb:6a:a7:09:bc:c1:fe:1e:72:70:df:96:16:86:43:bc:c2:00: ca:a5:01:72:df:c0:77:c5:ea:9e:20:ef:a4:39:c2:b9:dd:ea: 74:6a:26:cd:31:a0:f7:1f:61:1b:0f:b2:61:df:9c:74:d5:f3: d8:95:1b:47:9a:4e:bb:2c:32:e1:06:cc:3e:9c:ee:1e:66:67: 88:d5:4e:ac:04:5b:96:7b:f0:e9:92:4a:18:42:6c:43:8e:5c: 6c:3e:c6:51:81:04:d7:c7:df:99:a0:35:3e:a2:fe:fc:c6:80: e3:2e:a9:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevrzXCUsugcn8LcNNZrn2EeY7JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjA1MTIyMDUzMTdaFw0yNjA1MTMyMjE1MTdaMDMxMTAvBgNV BAMTKDY5QjYxRkQ5QjQwMThDNURCMjhGRDgzMDI5MEI2NzU5RUQ3NkQ5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVMnv93YaO6rk80fVPareOCrx gjLQu26DVg76/UKoiywPfmmU1fQOajLGAjKmaZHfarT+POzF9k+wQGAmKFZo6uli 29ZM8zFqPA+Pjo7s+H6r3ZmwTlGsAJ5qb1X9XdxTuuNLJqs31E/SS4KreaTBm7GN qlW6C7mxSRfoYL6obsmfbnpWhg2qrq70dMaa63CmztA4Dgy/l1n1eqHt7EarP2/z ECO+Gxz6mT30w1zIPvAHj4b25OeMQyOAQgBjSg8u0FUc/DHrSl8zfi7IVy2I4+xf cVmELj2ICo1mf9dF/DV21B+fpY41qQOvomTk0HgmpowPQsUErGM6Vv0L8u35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUabYf2bQBjF2yj9gwKQtnWe122bowHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJt1SOJPXKogI/G1Fw0JidjeJGnqguycbCyT 9Qdl1Y/UFvvy61NSYbTPEcKFNtnGKL1HA0XSAcj5dOMfAdPBo0pCMyhtGQNShHBq jHKgCDoyJOeqNTb6CkkaHXBEGc2NFXRQjZ9zwCDMUXfU+ln8n62UKAcZsVfrQ1mI UlUB1NFkc+ooLlZS49BKdqLV1i/Wnetqpwm8wf4ecnDflhaGQ7zCAMqlAXLfwHfF 6p4g76Q5wrnd6nRqJs0xoPcfYRsPsmHfnHTV89iVG0eaTrssMuEGzD6c7h5mZ4jV TqwEW5Z78OmSShhCbEOOXGw+xlGBBNfH35mgNT6i/vzGgOMuqeE= -----END CERTIFICATE-----Generated at Tue May 12 22:46:51 2026 by rpki-client