$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft File: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft (raw, json) Hash identifier: tPc3b2siJal80mdD3f40MxGkPv8EZ74l++VpkSnxJqo= Subject key identifier: FA:FB:39:98:19:4C:F6:F8:97:E6:90:C4:B4:8F:53:5C:EC:73:20:CB Authority key identifier: FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 Certificate issuer: /CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Certificate serial: 69B9BBBAC73DF007CBC1CDCF76FFBCC39630C304 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft Manifest number: 0D Signing time: Tue 12 May 2026 08:40:11 +0000 Manifest this update: Tue 12 May 2026 08:35:11 +0000 Manifest next update: Wed 13 May 2026 09:39:11 +0000 Files and hashes: 1: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl (hash: zfTG2Yu2L7Q5B5iEmA5NEn6OOtshtNiH+P8ACv8/V94=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b9:bb:ba:c7:3d:f0:07:cb:c1:cd:cf:76:ff:bc:c3:96:30:c3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Validity Not Before: May 12 08:35:11 2026 GMT Not After : May 13 09:39:11 2026 GMT Subject: CN=FAFB3998194CF6F897E690C4B48F535CEC7320CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:ec:5b:b6:81:06:62:30:71:51:5e:8a:0c: 55:c4:5a:35:a3:41:fd:d8:89:08:32:16:a3:a4:1e: 69:6d:40:ff:3e:44:13:71:65:92:5f:09:2d:7d:c7: f6:3a:59:49:66:29:10:8c:fd:76:c9:91:f3:a7:bf: 7d:52:b1:ad:e8:a8:99:ce:0d:ae:22:57:ff:49:0b: 17:5e:44:6e:40:76:9c:85:01:a8:d6:89:82:e1:d8: 6e:f0:07:44:50:c0:1a:45:37:fb:f4:9d:3b:f5:7d: 08:7f:56:f9:54:e7:3b:61:fd:66:8a:a6:1d:b8:5b: 94:03:73:4f:4b:76:e9:ce:ef:18:46:b0:e7:ef:92: ed:a6:59:7d:e1:77:c8:89:8f:7b:2f:8f:5c:f7:d2: 6a:a2:60:2d:82:66:aa:6f:6f:b4:86:a7:2c:d8:d1: d9:dc:61:19:58:5f:ec:06:a4:73:f3:0f:6d:88:a8: 68:6b:25:c6:c1:59:10:6b:bb:25:45:bd:46:83:1e: 08:24:12:67:f2:1c:f9:d5:bd:2a:7b:a2:26:14:21: 5d:43:59:8e:dc:33:ff:12:c0:ec:be:2b:f0:1b:37: 12:31:66:01:c6:b0:82:18:21:89:df:31:a8:43:9a: ab:1d:82:5b:7b:21:02:bb:95:23:9a:76:0f:ba:2a: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FB:39:98:19:4C:F6:F8:97:E6:90:C4:B4:8F:53:5C:EC:73:20:CB X509v3 Authority Key Identifier: keyid:FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:90:ec:40:b4:da:15:33:fd:75:da:c7:63:61:e2:e2:6a:17: 78:e6:b2:5a:35:61:a5:5b:e7:0c:df:09:01:3c:1a:09:e3:d4: 33:ad:cc:d8:19:f8:85:b8:52:f6:bb:4d:1a:a4:69:f9:c5:51: 79:9f:1c:21:b8:a1:74:82:05:6d:6a:e5:c2:2e:5a:b2:74:a6: 02:dd:1a:3a:80:6c:64:0d:97:38:0a:75:96:f7:bb:6f:a2:11: 05:88:14:b5:a0:58:e7:a6:0d:41:c4:73:b9:60:f8:6e:e8:74: e7:3d:b3:27:3d:c2:0e:66:c1:93:0f:86:4c:c3:43:be:6b:37: bd:45:b9:10:4d:ab:a5:e8:33:c9:08:f8:82:d4:84:df:06:5c: 98:3c:a7:09:a3:2f:d0:ed:9b:b7:a5:e4:51:14:98:89:bf:95: 63:9a:4f:d4:61:17:0b:42:2d:7f:8e:a5:f7:90:9c:64:4a:36: 30:32:96:a0:f4:00:fb:c1:b2:b2:af:27:9b:d8:63:64:4c:93: be:2d:90:5e:91:68:32:fe:b6:24:59:3b:69:ff:cd:24:3b:37: c5:f1:e7:bb:d7:72:59:53:dc:5a:e8:36:c0:c9:b5:8b:39:0a: 15:03:e8:5a:2b:1c:56:b1:66:e4:52:cc:5c:eb:11:79:e3:7d: ae:a4:9a:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabm7usc98AfLwc3Pdv+8w5YwwwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1 OTU1MDVCOTAeFw0yNjA1MTIwODM1MTFaFw0yNjA1MTMwOTM5MTFaMDMxMTAvBgNV BAMTKEZBRkIzOTk4MTk0Q0Y2Rjg5N0U2OTBDNEI0OEY1MzVDRUM3MzIwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4uxbtoEGYjBxUV6KDFXEWjWj Qf3YiQgyFqOkHmltQP8+RBNxZZJfCS19x/Y6WUlmKRCM/XbJkfOnv31Ssa3oqJnO Da4iV/9JCxdeRG5AdpyFAajWiYLh2G7wB0RQwBpFN/v0nTv1fQh/VvlU5zth/WaK ph24W5QDc09LdunO7xhGsOfvku2mWX3hd8iJj3svj1z30mqiYC2CZqpvb7SGpyzY 0dncYRlYX+wGpHPzD22IqGhrJcbBWRBruyVFvUaDHggkEmfyHPnVvSp7oiYUIV1D WY7cM/8SwOy+K/AbNxIxZgHGsIIYIYnfMahDmqsdglt7IQK7lSOadg+6KiL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+vs5mBlM9viX5pDEtI9TXOxzIMswHwYDVR0j BBgwFoAU/MGvMiHcxiRRCjeufgtqy1lVBbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzViZjg5YzctNTA3MS00YzEyLThjM2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIy MURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1OTU1MDVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0MxQUYzMjIxRENDNjI0NTEwQTM3QUU3RTBCNkFDQjU5NTUw NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZB Q0I1OTU1MDVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+Q7EC02hUz/XXax2Nh4uJqF3jmslo1YaVb 5wzfCQE8Ggnj1DOtzNgZ+IW4Uva7TRqkafnFUXmfHCG4oXSCBW1q5cIuWrJ0pgLd GjqAbGQNlzgKdZb3u2+iEQWIFLWgWOemDUHEc7lg+G7odOc9syc9wg5mwZMPhkzD Q75rN71FuRBNq6XoM8kI+ILUhN8GXJg8pwmjL9Dtm7el5FEUmIm/lWOaT9RhFwtC LX+OpfeQnGRKNjAylqD0APvBsrKvJ5vYY2RMk74tkF6RaDL+tiRZO2n/zSQ7N8Xx 57vXcllT3FroNsDJtYs5ChUD6ForHFaxZuRSzFzrEXnjfa6kmrw= -----END CERTIFICATE-----Generated at Wed May 13 02:38:00 2026 by rpki-client