$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft File: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft (raw, json) Hash identifier: BM9vOfRAAzp7Yv138P+7GMwvz4ujdrekrSmoAamtddw= Subject key identifier: 6F:09:C7:13:D0:A9:3F:FF:6A:C3:FC:4C:71:0A:EC:5A:81:E5:A7:37 Authority key identifier: FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 Certificate issuer: /CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Certificate serial: 216BA4953786BA9E99E04318F326A3649CE9C785 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 17:06:56 +0000 Manifest this update: Thu 24 Sep 2026 17:01:56 +0000 Manifest next update: Fri 25 Sep 2026 19:22:56 +0000 Files and hashes: 1: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl (hash: we4KYk+ODj6YheU+Pgs/mBoReFRBx0y9jjs2mqFYtEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6b:a4:95:37:86:ba:9e:99:e0:43:18:f3:26:a3:64:9c:e9:c7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Validity Not Before: Sep 24 17:01:56 2026 GMT Not After : Sep 25 19:22:56 2026 GMT Subject: CN=6F09C713D0A93FFF6AC3FC4C710AEC5A81E5A737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:d1:9d:1a:08:fc:7e:e6:7c:15:82:ee:89: 4e:36:d4:23:8b:d1:9f:ef:48:ba:12:7b:dc:6d:35: 1e:29:cb:45:a6:50:49:f1:28:2f:1f:85:29:0d:d3: 87:66:19:d7:78:95:ae:36:25:0b:c0:a8:96:0e:86: ab:01:07:30:83:30:4d:ff:ce:ab:73:a6:60:d2:f5: 85:94:8e:f7:c8:fd:89:9a:f2:62:ab:50:39:17:39: 42:22:a7:9c:5e:1e:72:a3:a0:88:47:af:b3:b6:e6: cd:6d:99:12:e0:6a:54:9b:cd:db:fd:6b:25:7c:f1: cb:6e:a5:c6:26:0d:c8:83:8b:9e:c0:6a:46:1b:67: 71:f2:da:a7:2d:83:50:56:a3:3f:e1:7b:e0:10:6e: 2a:f4:31:f1:84:71:c4:49:c1:18:52:b9:77:a2:3d: a0:8d:0b:ac:25:8f:e0:88:85:3d:aa:b2:ef:c1:38: 03:1a:a7:6f:b1:91:8c:7d:87:83:af:72:86:31:34: 0c:ee:92:ea:f8:7c:b3:f1:9c:73:ca:ca:29:0b:17: 4d:5e:f9:03:44:b5:1f:e2:76:2c:8f:fe:c2:91:6e: ce:1e:37:bb:43:0a:61:ba:78:eb:bb:71:6d:92:b0: 5b:cb:21:81:ed:28:ab:5b:8d:31:8e:b9:6c:c8:18: 88:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:09:C7:13:D0:A9:3F:FF:6A:C3:FC:4C:71:0A:EC:5A:81:E5:A7:37 X509v3 Authority Key Identifier: keyid:FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5e:44:e7:ca:f3:7f:8a:b6:6c:48:32:59:b5:1a:04:9d:4a: 19:77:ec:1a:d7:ad:2d:c9:51:9c:1a:82:74:41:b5:3b:a1:55: 73:24:65:3f:61:16:ae:74:6f:28:ed:c4:e3:01:44:4f:93:f3: f8:2b:b6:f6:02:63:d2:8c:4e:61:1b:88:52:84:a5:60:55:61: 95:ef:fd:0f:7b:ea:1c:5d:38:2d:8e:52:45:9a:6b:a1:ad:bb: c3:91:f0:71:fa:24:c4:93:45:3e:cf:de:d2:f6:b8:44:f0:ba: 57:82:b8:c3:5a:10:37:a6:2a:8a:1f:37:be:63:7f:a0:c0:bb: a4:f2:c4:c3:67:da:42:8a:98:7c:89:5e:fe:0a:d1:33:8b:28: bc:58:85:83:cc:76:b1:cd:ac:18:51:0a:a3:5f:32:31:db:b5: 0f:24:a6:aa:c6:34:ef:3b:cb:a0:03:d8:34:68:d3:e5:c3:2d: 59:c5:c0:08:36:d7:a9:70:22:b7:76:1a:89:4e:d5:b2:a7:02: 04:80:58:be:aa:27:c4:22:01:52:6a:65:43:81:f6:66:05:e0: ac:8f:c1:f6:4f:cd:dc:99:5e:03:64:9c:33:91:de:1a:9d:c3: 58:05:e3:d2:10:0b:43:a6:ac:19:63:fd:d5:4f:9c:6f:6f:66: 12:36:c1:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWuklTeGup6Z4EMY8yajZJzpx4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1 OTU1MDVCOTAeFw0yNjA5MjQxNzAxNTZaFw0yNjA5MjUxOTIyNTZaMDMxMTAvBgNV BAMTKDZGMDlDNzEzRDBBOTNGRkY2QUMzRkM0QzcxMEFFQzVBODFFNUE3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBNGdGgj8fuZ8FYLuiU421COL 0Z/vSLoSe9xtNR4py0WmUEnxKC8fhSkN04dmGdd4la42JQvAqJYOhqsBBzCDME3/ zqtzpmDS9YWUjvfI/Yma8mKrUDkXOUIip5xeHnKjoIhHr7O25s1tmRLgalSbzdv9 ayV88ctupcYmDciDi57AakYbZ3Hy2qctg1BWoz/he+AQbir0MfGEccRJwRhSuXei PaCNC6wlj+CIhT2qsu/BOAMap2+xkYx9h4OvcoYxNAzukur4fLPxnHPKyikLF01e +QNEtR/idiyP/sKRbs4eN7tDCmG6eOu7cW2SsFvLIYHtKKtbjTGOuWzIGIhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbwnHE9CpP/9qw/xMcQrsWoHlpzcwHwYDVR0j BBgwFoAU/MGvMiHcxiRRCjeufgtqy1lVBbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzViZjg5YzctNTA3MS00YzEyLThjM2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIy MURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1OTU1MDVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0MxQUYzMjIxRENDNjI0NTEwQTM3QUU3RTBCNkFDQjU5NTUw NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZB Q0I1OTU1MDVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5eROfK83+KtmxIMlm1GgSdShl37BrXrS3J UZwagnRBtTuhVXMkZT9hFq50byjtxOMBRE+T8/grtvYCY9KMTmEbiFKEpWBVYZXv /Q976hxdOC2OUkWaa6Gtu8OR8HH6JMSTRT7P3tL2uETwuleCuMNaEDemKoofN75j f6DAu6TyxMNn2kKKmHyJXv4K0TOLKLxYhYPMdrHNrBhRCqNfMjHbtQ8kpqrGNO87 y6AD2DRo0+XDLVnFwAg216lwIrd2GolO1bKnAgSAWL6qJ8QiAVJqZUOB9mYF4KyP wfZPzdyZXgNknDOR3hqdw1gF49IQC0OmrBlj/dVPnG9vZhI2wfc= -----END CERTIFICATE-----Generated at Thu Sep 24 21:21:21 2026 by rpki-client