$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft (raw, json) Hash identifier: O12Fkn7EUFw6M7DZe1WQ3k3n3zhc9Y287n/Gnz7kOfg= Subject key identifier: 54:C4:B9:F1:F0:64:68:6F:CD:01:62:33:E9:F1:99:1F:33:3A:34:AF Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Certificate issuer: /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Certificate serial: 2B1A5918B978B1F8CD0D8E393BE926845810DE9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft Manifest number: AA Signing time: Fri 04 Sep 2026 00:12:07 +0000 Manifest this update: Fri 04 Sep 2026 00:07:07 +0000 Manifest next update: Sat 05 Sep 2026 01:46:07 +0000 Files and hashes: 1: FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl (hash: adolJEsG3vC289ramFeYkCt7vGO7qIsCT+fPFFFy4KM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 01:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1a:59:18:b9:78:b1:f8:cd:0d:8e:39:3b:e9:26:84:58:10:de:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Validity Not Before: Sep 4 00:07:07 2026 GMT Not After : Sep 5 01:46:07 2026 GMT Subject: CN=54C4B9F1F064686FCD016233E9F1991F333A34AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:f3:e0:e8:1e:18:d4:00:69:60:67:98:53: 61:ec:ed:46:73:57:e2:1e:6b:fd:9e:fb:0f:6d:ce: 9b:e7:69:99:c1:f9:45:71:68:8a:0c:ab:4d:8b:af: b8:dc:e0:44:bf:d6:78:d3:ff:89:29:13:2b:a4:5a: 32:2f:b0:5c:59:21:3e:aa:6e:11:f3:e5:be:51:ce: 29:28:a2:a3:72:e1:84:37:66:5e:1f:15:32:e7:63: bf:b9:5c:84:32:5c:8d:2d:15:c8:8c:7f:84:3e:db: 95:0b:1c:19:0b:ac:e1:74:69:98:a5:e7:04:dc:3e: d8:25:ab:11:68:21:b3:5a:36:21:67:84:30:e0:1b: 10:0a:06:1e:ef:18:d6:4b:01:a6:36:30:f7:d4:6f: f0:83:11:a1:21:70:fa:15:a0:42:ec:7c:99:c2:51: 80:5a:86:81:50:18:f9:a6:59:a6:4f:31:82:19:ce: 19:16:42:8e:a5:90:6f:4d:af:22:f8:3c:ad:c8:50: 0d:a4:d2:e0:2f:0e:19:e9:f5:7e:8b:47:2c:54:7c: cf:b0:9f:1f:c1:9b:c5:de:ff:49:10:36:d2:fe:94: 10:5a:8e:a3:65:e8:c1:8c:67:d4:e1:86:6f:26:66: 21:ce:34:09:1b:cf:e5:e9:88:35:60:15:93:db:b1: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C4:B9:F1:F0:64:68:6F:CD:01:62:33:E9:F1:99:1F:33:3A:34:AF X509v3 Authority Key Identifier: keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c9:ab:62:5c:59:7f:b3:12:76:f9:ea:bb:62:ff:9b:25:f4: 15:68:66:16:9d:53:6f:95:39:52:2d:c7:86:e5:71:75:75:4c: 93:01:8a:80:74:37:6b:89:8f:0a:8b:06:6a:dc:c5:1e:96:16: dd:c5:ad:f9:a1:4f:13:b2:82:f2:20:7d:05:6e:c0:1e:6e:ae: 75:a7:e6:32:9e:ab:7f:60:a3:7e:15:f1:20:42:ac:e4:3d:d2: bf:92:45:be:97:a2:04:5a:f7:b6:24:4b:9e:60:72:85:d3:02: 3e:c2:b1:c8:af:72:e2:2b:4b:2b:f7:aa:1a:43:b1:f7:3b:f3: 15:3e:46:f9:34:e7:78:5d:26:31:c9:87:3e:23:cd:cf:06:23: bd:ef:8c:04:28:64:00:99:e3:b7:36:15:b0:46:63:72:21:2a: 49:84:cb:df:1d:03:fe:d5:69:06:75:fd:8e:ed:3b:5a:34:bd: a6:d7:b4:db:ed:71:9c:c3:0e:7d:44:38:6b:fd:76:47:96:e2: 89:de:d1:c3:30:85:84:ae:12:a7:31:1e:b6:3d:43:b0:5b:41: 00:38:13:19:90:74:00:29:0b:4b:72:b6:87:7a:3c:5c:ab:ed: 99:20:8d:d1:93:fb:5d:ec:3d:14:58:c0:c6:56:42:35:1c:d0: e4:65:5d:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxpZGLl4sfjNDY45O+kmhFgQ3p4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZG MEU0QjNFNDAeFw0yNjA5MDQwMDA3MDdaFw0yNjA5MDUwMTQ2MDdaMDMxMTAvBgNV BAMTKDU0QzRCOUYxRjA2NDY4NkZDRDAxNjIzM0U5RjE5OTFGMzMzQTM0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RfPg6B4Y1ABpYGeYU2Hs7UZz V+Iea/2e+w9tzpvnaZnB+UVxaIoMq02Lr7jc4ES/1njT/4kpEyukWjIvsFxZIT6q bhHz5b5RzikooqNy4YQ3Zl4fFTLnY7+5XIQyXI0tFciMf4Q+25ULHBkLrOF0aZil 5wTcPtglqxFoIbNaNiFnhDDgGxAKBh7vGNZLAaY2MPfUb/CDEaEhcPoVoELsfJnC UYBahoFQGPmmWaZPMYIZzhkWQo6lkG9NryL4PK3IUA2k0uAvDhnp9X6LRyxUfM+w nx/Bm8Xe/0kQNtL+lBBajqNl6MGMZ9Thhm8mZiHONAkbz+XpiDVgFZPbsapXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVMS58fBkaG/NAWIz6fGZHzM6NK8wHwYDVR0j BBgwFoAU/HHUYjFvMDdRrg7gFylA7/Dks+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQwZTBkZWEtNWY5Yi00MjVjLTgyY2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIz MTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZGMEU0QjNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzcxRDQ2MjMxNkYzMDM3NTFBRTBFRTAxNzI5NDBFRkYwRTRC M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQw RUZGMEU0QjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvJq2JcWX+zEnb56rti/5sl9BVoZhadU2+V OVItx4blcXV1TJMBioB0N2uJjwqLBmrcxR6WFt3FrfmhTxOygvIgfQVuwB5urnWn 5jKeq39go34V8SBCrOQ90r+SRb6XogRa97YkS55gcoXTAj7CscivcuIrSyv3qhpD sfc78xU+Rvk053hdJjHJhz4jzc8GI73vjAQoZACZ47c2FbBGY3IhKkmEy98dA/7V aQZ1/Y7tO1o0vabXtNvtcZzDDn1EOGv9dkeW4one0cMwhYSuEqcxHrY9Q7BbQQA4 ExmQdAApC0tytod6PFyr7ZkgjdGT+13sPRRYwMZWQjUc0ORlXXY= -----END CERTIFICATE-----Generated at Fri Sep 4 15:25:38 2026 by rpki-client