$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft (raw, json) Hash identifier: NGwyziW8r5Y34eZDV8BToA86pZBv4zZX0s0Bc1rDgMQ= Subject key identifier: C2:C1:43:4D:A1:76:BE:A0:B2:FD:01:4E:A1:F2:B7:9E:F9:21:E7:A4 Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Certificate issuer: /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Certificate serial: 626E01FE4AC1D957F1BB883274340B2DE1DA5967 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft Manifest number: C6 Signing time: Thu 24 Sep 2026 21:01:33 +0000 Manifest this update: Thu 24 Sep 2026 20:56:33 +0000 Manifest next update: Fri 25 Sep 2026 21:41:33 +0000 Files and hashes: 1: FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl (hash: joqss1BOERSvCA6LHTR//IGdWogcVivnvHnwntlAplQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6e:01:fe:4a:c1:d9:57:f1:bb:88:32:74:34:0b:2d:e1:da:59:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Validity Not Before: Sep 24 20:56:33 2026 GMT Not After : Sep 25 21:41:33 2026 GMT Subject: CN=C2C1434DA176BEA0B2FD014EA1F2B79EF921E7A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:ad:bb:30:6d:9c:2f:e7:83:a0:9b:87:aa: 39:20:5c:cf:39:eb:f9:07:35:0f:37:fa:07:9e:8a: b1:5c:f2:60:95:43:69:b4:82:a9:6a:79:60:37:4a: 7b:3a:9d:e5:3d:be:f2:f7:58:00:a9:d6:01:7a:a8: 5a:56:44:6c:fc:ca:59:d2:54:a0:e0:8b:49:b3:f5: 99:6d:be:e3:a6:17:75:2e:da:9a:e1:2e:fa:8a:59: 13:36:41:1a:ec:ca:33:64:e7:65:34:e6:95:65:de: 31:aa:34:04:9d:4f:48:06:e5:a6:54:a2:6c:fc:c4: 5b:d6:d4:d0:b4:4c:87:33:a0:37:69:b1:1b:2a:c9: 5d:c8:56:59:98:fc:6a:59:5d:09:64:b2:b2:78:48: 47:a5:c0:b4:97:15:bf:54:c5:b4:51:17:78:56:4a: fe:8b:2d:f7:cd:60:c0:11:9f:c9:b9:93:07:9b:0e: ba:9f:30:24:68:62:35:0a:62:03:7b:0e:9e:49:a8: 04:71:52:36:dd:40:c7:fd:05:20:41:83:d8:c2:6a: b0:03:92:0b:a6:15:bd:37:76:5b:88:83:5a:4b:ce: 53:86:07:90:63:8f:aa:9b:e5:f4:0a:30:61:6c:7b: 39:c7:da:e9:87:d1:0f:2f:ea:0c:56:80:76:6f:88: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C1:43:4D:A1:76:BE:A0:B2:FD:01:4E:A1:F2:B7:9E:F9:21:E7:A4 X509v3 Authority Key Identifier: keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:45:c6:97:7e:31:96:39:2b:8e:1f:28:0c:12:ec:6a:f5:9b: d0:24:84:ed:d0:be:12:7a:06:c7:ee:00:a4:4f:e1:28:8b:a7: d6:7d:f5:44:06:b6:12:32:0c:bd:3e:3c:39:36:87:de:56:ac: d9:55:1d:1b:08:0a:d5:35:44:ef:53:38:49:88:38:8f:b3:b5: 79:63:d9:bf:61:31:99:bf:23:50:fd:1f:a2:e5:0b:1f:fa:6c: 38:a1:f4:76:58:b7:a9:89:bc:5e:96:6b:7a:5e:98:3b:2d:f7: 38:6e:78:5f:e3:4b:47:ef:6f:7e:67:eb:d7:0b:94:ad:34:07: 55:60:ff:7d:cb:00:c9:b3:52:c3:f3:c2:64:52:87:b8:63:d2: 6b:54:44:79:bc:8f:f9:b6:df:43:fc:d0:4c:0f:09:df:0a:c1: 8b:98:b0:1c:6c:21:18:37:ca:b2:a4:7d:47:3c:aa:90:9f:b9: ac:10:21:aa:bd:3a:00:d6:19:02:4c:b2:5c:b4:d6:ee:69:3e: 4c:4b:c8:ec:e3:93:9f:c1:7b:8c:03:06:e1:cb:ad:23:b3:84: 0f:db:cd:c6:3a:07:b0:d1:9a:7b:69:12:6e:74:ab:d6:9a:27: 2d:28:62:55:e0:e6:61:74:4c:90:11:58:6b:a9:1f:17:e4:a4: b0:50:16:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYm4B/krB2Vfxu4gydDQLLeHaWWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZG MEU0QjNFNDAeFw0yNjA5MjQyMDU2MzNaFw0yNjA5MjUyMTQxMzNaMDMxMTAvBgNV BAMTKEMyQzE0MzREQTE3NkJFQTBCMkZEMDE0RUExRjJCNzlFRjkyMUU3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6q27MG2cL+eDoJuHqjkgXM85 6/kHNQ83+geeirFc8mCVQ2m0gqlqeWA3Sns6neU9vvL3WACp1gF6qFpWRGz8ylnS VKDgi0mz9ZltvuOmF3Uu2prhLvqKWRM2QRrsyjNk52U05pVl3jGqNASdT0gG5aZU omz8xFvW1NC0TIczoDdpsRsqyV3IVlmY/GpZXQlksrJ4SEelwLSXFb9UxbRRF3hW Sv6LLffNYMARn8m5kwebDrqfMCRoYjUKYgN7Dp5JqARxUjbdQMf9BSBBg9jCarAD kgumFb03dluIg1pLzlOGB5Bjj6qb5fQKMGFseznH2umH0Q8v6gxWgHZviFknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwsFDTaF2vqCy/QFOofK3nvkh56QwHwYDVR0j BBgwFoAU/HHUYjFvMDdRrg7gFylA7/Dks+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQwZTBkZWEtNWY5Yi00MjVjLTgyY2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIz MTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZGMEU0QjNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzcxRDQ2MjMxNkYzMDM3NTFBRTBFRTAxNzI5NDBFRkYwRTRC M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQw RUZGMEU0QjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5Fxpd+MZY5K44fKAwS7Gr1m9AkhO3QvhJ6 BsfuAKRP4SiLp9Z99UQGthIyDL0+PDk2h95WrNlVHRsICtU1RO9TOEmIOI+ztXlj 2b9hMZm/I1D9H6LlCx/6bDih9HZYt6mJvF6Wa3pemDst9zhueF/jS0fvb35n69cL lK00B1Vg/33LAMmzUsPzwmRSh7hj0mtURHm8j/m230P80EwPCd8KwYuYsBxsIRg3 yrKkfUc8qpCfuawQIaq9OgDWGQJMsly01u5pPkxLyOzjk5/Be4wDBuHLrSOzhA/b zcY6B7DRmntpEm50q9aaJy0oYlXg5mF0TJARWGupHxfkpLBQFvI= -----END CERTIFICATE-----Generated at Fri Sep 25 06:31:08 2026 by rpki-client