$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: hytSEVkWJ7g+cpB1j50cSw62ofZAM7LSbNAS0SjJQwM= Subject key identifier: 4F:97:3A:9F:75:4B:82:50:D1:B5:1C:F1:69:BB:F3:39:37:CC:BE:C9 Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 5F40900A97C8AE05A98A7B39E704FC263649031A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:03:36 +0000 Manifest this update: Thu 23 Jul 2026 10:58:36 +0000 Manifest next update: Fri 24 Jul 2026 12:28:36 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: yhyUqlZK9v5BjlWMFtfDomYoQmfzQikNa+j3VpeMrdc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:40:90:0a:97:c8:ae:05:a9:8a:7b:39:e7:04:fc:26:36:49:03:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: Jul 23 10:58:36 2026 GMT Not After : Jul 24 12:28:36 2026 GMT Subject: CN=4F973A9F754B8250D1B51CF169BBF33937CCBEC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:6d:a8:27:39:8b:f3:05:eb:0c:55:5e:0e: 31:03:2c:8e:e4:be:7c:6c:45:fe:35:0d:49:61:a3: 77:d4:8e:de:21:ff:ec:50:19:2e:b6:5e:f4:e1:ac: 56:0e:44:15:cb:bc:04:24:8e:27:42:b7:06:10:cc: 19:66:38:c1:b8:a2:40:01:35:24:04:85:ce:12:44: c1:c4:4c:d6:91:2b:9e:cf:23:a9:77:11:7d:0f:71: 30:53:67:8e:65:aa:ea:11:f5:3f:9e:9d:27:61:b7: e3:f0:0a:18:86:ae:9b:fc:90:84:d9:50:1a:27:50: f1:38:97:d0:7e:a2:cd:4e:24:9d:9d:45:a6:de:6e: c9:68:81:02:88:01:fd:52:ff:71:37:b4:a4:2c:14: 4f:05:5a:fe:15:dc:8d:03:0c:e1:7a:46:3e:ab:04: 9c:10:82:0d:c9:06:98:68:86:a3:14:f1:27:6d:b6: 47:58:0f:e7:d4:82:d5:20:0a:00:0a:e2:cf:58:ef: ba:89:a8:78:27:d3:7b:ab:3a:23:04:98:f1:d8:17: 63:8d:d3:b6:f7:f7:d0:d7:08:c4:05:63:df:d4:67: d4:c8:0b:6c:bb:31:c2:47:42:b9:d7:50:72:14:9d: ff:01:62:dc:4f:da:88:e1:01:08:a5:84:b2:51:86: 29:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:97:3A:9F:75:4B:82:50:D1:B5:1C:F1:69:BB:F3:39:37:CC:BE:C9 X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5c:56:71:d0:ca:d1:0f:dc:9e:e3:57:ed:7a:72:f2:f4:7f: c2:fb:90:fe:cd:c5:ba:98:9c:c4:17:1e:ce:a6:12:bf:86:b5: 88:93:9b:ee:3b:1b:d2:10:21:cd:59:d4:a7:da:7b:9e:9b:5f: 72:af:2f:fd:86:13:f5:01:5a:5e:64:2f:16:a7:b3:03:17:aa: 3f:9e:16:54:91:f4:dc:ca:56:c3:5f:00:13:09:5e:9b:71:23: 8a:e8:1d:ce:d7:56:14:15:90:c2:1a:5a:d9:92:25:de:1f:b8: 7d:68:53:ce:ba:ed:4a:92:2a:3c:47:08:ef:4b:b8:d0:86:88: 3f:a7:1f:7f:64:7b:01:a6:cf:33:0c:44:2a:8b:53:3a:18:9f: ca:78:b4:57:6e:11:e8:c4:b9:27:fe:83:3e:40:00:aa:cf:17: 1a:e8:cc:fc:dd:9a:17:16:3a:57:08:60:5b:51:45:01:08:0b: 47:e2:e1:96:b8:7e:75:51:bc:26:7d:a8:ee:14:32:4f:a7:7f: 40:86:e0:04:41:b9:17:9c:05:12:7c:76:c5:83:25:31:2b:41: 35:c1:51:c6:c3:4d:a7:f7:b8:a3:40:c3:74:8b:a5:de:bc:45: b6:05:f9:96:84:51:4e:45:a9:52:06:14:e8:15:a7:8d:59:c4: f6:71:7f:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0CQCpfIrgWpins55wT8JjZJAxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjA3MjMxMDU4MzZaFw0yNjA3MjQxMjI4MzZaMDMxMTAvBgNV BAMTKDRGOTczQTlGNzU0QjgyNTBEMUI1MUNGMTY5QkJGMzM5MzdDQ0JFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTG2oJzmL8wXrDFVeDjEDLI7k vnxsRf41DUlho3fUjt4h/+xQGS62XvThrFYORBXLvAQkjidCtwYQzBlmOMG4okAB NSQEhc4SRMHETNaRK57PI6l3EX0PcTBTZ45lquoR9T+enSdht+PwChiGrpv8kITZ UBonUPE4l9B+os1OJJ2dRabebslogQKIAf1S/3E3tKQsFE8FWv4V3I0DDOF6Rj6r BJwQgg3JBphohqMU8SdttkdYD+fUgtUgCgAK4s9Y77qJqHgn03urOiMEmPHYF2ON 07b399DXCMQFY9/UZ9TIC2y7McJHQrnXUHIUnf8BYtxP2ojhAQilhLJRhimdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT5c6n3VLglDRtRzxabvzOTfMvskwHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZcVnHQytEP3J7jV+16cvL0f8L7kP7NxbqY nMQXHs6mEr+GtYiTm+47G9IQIc1Z1Kfae56bX3KvL/2GE/UBWl5kLxanswMXqj+e FlSR9NzKVsNfABMJXptxI4roHc7XVhQVkMIaWtmSJd4fuH1oU8667UqSKjxHCO9L uNCGiD+nH39kewGmzzMMRCqLUzoYn8p4tFduEejEuSf+gz5AAKrPFxrozPzdmhcW OlcIYFtRRQEIC0fi4Za4fnVRvCZ9qO4UMk+nf0CG4ARBuRecBRJ8dsWDJTErQTXB UcbDTaf3uKNAw3SLpd68RbYF+ZaEUU5FqVIGFOgVp41ZxPZxf+M= -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:17 2026 by rpki-client