$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: cSBnJHxX9LcTaIRN6syUDIWaXKmJoOGYtPdeXs5j7uE= Subject key identifier: 80:5D:FC:04:D8:C0:51:F4:CE:78:AC:95:2A:E0:1E:F8:F6:BB:E5:20 Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 7388414BAF401921B718885C05D6237282019F06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 12:19:47 +0000 Manifest this update: Sat 14 Nov 2026 12:14:47 +0000 Manifest next update: Sun 15 Nov 2026 13:51:47 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: EK37AhA0+lrZ+asGFugVjdaMWK/Klv3zw/nUufVOOdc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 13:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:88:41:4b:af:40:19:21:b7:18:88:5c:05:d6:23:72:82:01:9f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: Nov 14 12:14:47 2026 GMT Not After : Nov 15 13:51:47 2026 GMT Subject: CN=805DFC04D8C051F4CE78AC952AE01EF8F6BBE520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:ef:6d:13:f5:90:fa:3c:fc:11:1f:19:8e: 18:c9:af:36:52:64:d8:49:ab:f8:66:32:84:ab:17: 03:6d:25:e8:69:f2:1e:e0:01:19:4e:c1:b4:b6:f5: fd:0d:f0:01:9f:00:b5:37:46:86:0d:36:f6:75:a3: 93:db:20:d4:1f:46:7d:ee:fa:0f:88:81:dc:29:9f: b3:9f:78:89:08:4f:35:41:f2:88:ba:a6:1e:af:3e: 9d:e3:4b:ae:01:de:29:ef:eb:c1:a0:25:e7:17:87: 30:92:d3:f0:8c:98:0d:ca:da:cf:75:87:1b:46:a4: 7e:a2:1e:83:b8:92:16:59:b5:9b:a1:15:63:77:69: 53:f3:04:4e:c1:de:d6:e2:e5:d6:f3:fb:94:1f:79: 5f:db:73:db:11:bf:a5:45:94:12:72:d4:ee:0a:ca: dc:ee:09:cc:2b:ae:6c:c0:19:80:08:a7:4f:c8:40: bf:97:06:12:a0:eb:6b:57:1b:1c:97:16:f4:69:d7: c6:d2:95:44:ac:a0:4f:bb:ae:13:3d:f8:ce:ce:f9: 46:43:09:0f:37:52:de:6a:da:f2:8b:a7:05:87:54: 0b:bb:e1:3c:15:3c:e1:98:21:81:b0:4c:9b:aa:7d: d9:72:1b:f0:92:fe:21:7d:bb:21:ae:6d:48:a3:dd: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:FC:04:D8:C0:51:F4:CE:78:AC:95:2A:E0:1E:F8:F6:BB:E5:20 X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:28:f3:33:3f:d4:6a:90:9c:a2:ea:a9:92:c6:a6:08:66:59: 4e:f8:47:d7:c1:62:f4:17:4d:28:cb:1b:7a:6a:8c:18:fc:ef: 79:6e:39:19:7e:0e:9e:a3:8e:d8:33:18:91:a1:9d:6f:83:6c: e0:86:58:65:12:e0:64:d9:b4:13:73:60:ab:3d:c2:2e:19:7d: e5:eb:77:12:c6:9e:e7:f2:1b:e6:cd:b7:a9:fc:a5:14:26:87: d4:79:57:ec:df:78:67:7d:6e:6c:4b:59:18:8d:8a:34:67:e0: d6:96:3b:33:67:57:29:42:24:70:f4:6e:c1:5d:b8:8e:5a:56: b9:1d:ef:72:0d:90:8a:7d:4c:c4:b8:a1:d4:78:0a:d7:d2:cf: 88:d4:88:80:b9:70:a5:d2:8b:97:ac:b3:15:b2:b6:55:e2:22: 51:4e:8d:8e:b0:d4:6c:38:b9:bc:94:98:7f:a3:03:c9:3d:be: 14:da:15:22:f9:14:66:a8:db:4d:10:49:4d:08:e9:68:3b:40: 32:d7:3f:ea:30:fe:c2:1a:f6:fb:d9:5c:c0:2c:65:2d:34:90: f5:ea:50:03:21:b8:7a:be:2a:65:42:e5:30:cd:58:6b:b0:15: de:c7:e0:3c:b6:fc:b1:61:9a:57:4f:96:dc:bd:21:f8:90:7f: 0c:5f:ea:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4hBS69AGSG3GIhcBdYjcoIBnwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjExMTQxMjE0NDdaFw0yNjExMTUxMzUxNDdaMDMxMTAvBgNV BAMTKDgwNURGQzA0RDhDMDUxRjRDRTc4QUM5NTJBRTAxRUY4RjZCQkU1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0+9tE/WQ+jz8ER8ZjhjJrzZS ZNhJq/hmMoSrFwNtJehp8h7gARlOwbS29f0N8AGfALU3RoYNNvZ1o5PbINQfRn3u +g+Igdwpn7OfeIkITzVB8oi6ph6vPp3jS64B3inv68GgJecXhzCS0/CMmA3K2s91 hxtGpH6iHoO4khZZtZuhFWN3aVPzBE7B3tbi5dbz+5QfeV/bc9sRv6VFlBJy1O4K ytzuCcwrrmzAGYAIp0/IQL+XBhKg62tXGxyXFvRp18bSlUSsoE+7rhM9+M7O+UZD CQ83Ut5q2vKLpwWHVAu74TwVPOGYIYGwTJuqfdlyG/CS/iF9uyGubUij3bwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgF38BNjAUfTOeKyVKuAe+Pa75SAwHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoo8zM/1GqQnKLqqZLGpghmWU74R9fBYvQX TSjLG3pqjBj873luORl+Dp6jjtgzGJGhnW+DbOCGWGUS4GTZtBNzYKs9wi4ZfeXr dxLGnufyG+bNt6n8pRQmh9R5V+zfeGd9bmxLWRiNijRn4NaWOzNnVylCJHD0bsFd uI5aVrkd73INkIp9TMS4odR4CtfSz4jUiIC5cKXSi5essxWytlXiIlFOjY6w1Gw4 ubyUmH+jA8k9vhTaFSL5FGao200QSU0I6Wg7QDLXP+ow/sIa9vvZXMAsZS00kPXq UAMhuHq+KmVC5TDNWGuwFd7H4Dy2/LFhmldPlty9IfiQfwxf6tI= -----END CERTIFICATE-----Generated at Sat Nov 14 22:24:06 2026 by rpki-client