$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: v85gcd0iTQWkDMM5ulodGvwHUj3zodeKWvqu2B6Bmm4= Subject key identifier: F4:97:C9:75:B5:B1:3D:0A:54:FA:6B:BA:F4:51:33:68:63:E2:94:F6 Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 72FA1DB5C9DA387B56AE82B935B46D18D66F53C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 12:38:53 +0000 Manifest this update: Mon 02 Nov 2026 12:33:53 +0000 Manifest next update: Tue 03 Nov 2026 13:24:53 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: 3BX0gpU0eNshJ3qEG17pgwIcyiA+BEl5alNmdjjknXI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fa:1d:b5:c9:da:38:7b:56:ae:82:b9:35:b4:6d:18:d6:6f:53:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: Nov 2 12:33:53 2026 GMT Not After : Nov 3 13:24:53 2026 GMT Subject: CN=F497C975B5B13D0A54FA6BBAF451336863E294F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9e:99:a8:f4:ce:f4:f7:55:36:23:e9:15:fb: 8c:b5:48:bc:78:e3:56:3d:8c:6e:59:48:8d:ad:70: a9:e2:2b:b5:56:db:b7:08:77:53:f3:b1:6e:57:da: fe:31:ed:99:54:59:fd:b4:73:33:19:f4:4e:ff:62: 52:b6:b4:4e:48:dc:50:dd:7c:8c:6f:b6:39:00:e7: 89:22:d2:72:95:f7:b5:73:4c:79:bf:cb:ae:bf:b7: 6b:63:80:81:f9:e7:b4:27:6e:a6:9f:bd:b2:55:43: 99:e7:5a:77:ef:4f:d3:22:69:05:c5:e4:ae:6c:d1: 3a:2c:2b:d7:d8:6b:61:26:12:b5:1c:e7:95:42:96: 9e:ac:1c:de:55:26:3c:cd:74:59:1c:a8:9e:9f:7d: b4:80:06:14:d4:30:00:e5:32:22:38:df:3c:9a:c5: 35:bc:a0:17:5e:89:99:1d:65:2d:b4:97:cb:ef:a8: b5:f4:e8:1d:53:85:fb:fc:b0:c3:45:a6:8e:a8:c2: b6:f8:bc:9f:cd:e4:dd:89:7a:15:e4:66:1b:38:23: 74:58:e3:2d:f6:94:e9:e9:c8:76:d0:81:31:05:b1: c5:ac:26:f5:50:02:d9:05:c7:ae:5e:52:82:87:3f: 13:0e:9b:2c:e0:32:a6:46:12:b6:ce:50:ea:ca:b4: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:C9:75:B5:B1:3D:0A:54:FA:6B:BA:F4:51:33:68:63:E2:94:F6 X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8e:59:d3:4a:d3:fe:7c:2f:db:4a:56:3a:11:a5:2d:6f:00: 42:10:c0:eb:7b:e3:7f:55:01:d3:97:9f:8c:ff:1b:28:82:20: 95:73:10:5d:f5:7f:7b:5b:b2:32:3a:e2:7f:d2:c7:4a:17:5d: b4:ba:0a:2f:a3:26:e4:2d:83:b4:ee:29:e2:8d:94:7a:cd:80: 27:c3:cc:32:22:f3:d9:87:92:fe:84:20:65:0d:da:94:bf:e5: 3d:f0:64:3b:fd:06:41:32:e2:aa:8f:73:17:c4:7d:81:38:a4: 36:cb:45:3e:01:1d:82:89:ce:56:f2:c9:f4:25:10:9b:c7:80: de:f9:e3:75:26:17:d5:99:59:da:a1:87:53:bf:2a:91:5f:ae: 56:a4:06:3f:8a:4f:77:84:83:ca:ad:e4:1d:a4:48:de:b6:8c: 65:d5:c9:64:f6:08:92:2f:d2:a5:9e:de:c2:42:ef:7c:b9:24: 2d:1c:1a:c6:ca:cb:b5:c6:99:e7:3d:a7:7b:03:5c:52:33:fb: 19:21:63:73:77:7c:a4:b9:32:f8:5a:39:80:a3:7b:e2:54:e2: 0c:93:b1:e7:0b:9b:0e:82:2b:66:08:0a:37:4f:fb:e1:a8:24: a0:d6:16:a6:fc:21:29:4e:b2:b0:f5:66:3d:35:67:a8:f0:5d: 4d:bb:e1:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvodtcnaOHtWroK5NbRtGNZvU8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjExMDIxMjMzNTNaFw0yNjExMDMxMzI0NTNaMDMxMTAvBgNV BAMTKEY0OTdDOTc1QjVCMTNEMEE1NEZBNkJCQUY0NTEzMzY4NjNFMjk0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWnpmo9M7091U2I+kV+4y1SLx4 41Y9jG5ZSI2tcKniK7VW27cId1PzsW5X2v4x7ZlUWf20czMZ9E7/YlK2tE5I3FDd fIxvtjkA54ki0nKV97VzTHm/y66/t2tjgIH557QnbqafvbJVQ5nnWnfvT9MiaQXF 5K5s0TosK9fYa2EmErUc55VClp6sHN5VJjzNdFkcqJ6ffbSABhTUMADlMiI43zya xTW8oBdeiZkdZS20l8vvqLX06B1Thfv8sMNFpo6owrb4vJ/N5N2JehXkZhs4I3RY 4y32lOnpyHbQgTEFscWsJvVQAtkFx65eUoKHPxMOmyzgMqZGErbOUOrKtKqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9JfJdbWxPQpU+mu69FEzaGPilPYwHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWOWdNK0/58L9tKVjoRpS1vAEIQwOt7439V AdOXn4z/GyiCIJVzEF31f3tbsjI64n/Sx0oXXbS6Ci+jJuQtg7TuKeKNlHrNgCfD zDIi89mHkv6EIGUN2pS/5T3wZDv9BkEy4qqPcxfEfYE4pDbLRT4BHYKJzlbyyfQl EJvHgN7543UmF9WZWdqhh1O/KpFfrlakBj+KT3eEg8qt5B2kSN62jGXVyWT2CJIv 0qWe3sJC73y5JC0cGsbKy7XGmec9p3sDXFIz+xkhY3N3fKS5MvhaOYCje+JU4gyT secLmw6CK2YICjdP++GoJKDWFqb8ISlOsrD1Zj01Z6jwXU274WU= -----END CERTIFICATE-----Generated at Mon Nov 2 21:58:08 2026 by rpki-client