$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: jcv1XMUvoDa890+jrymi467aXVEzHX4BVZ7/Yp/HVn8= Subject key identifier: DA:FF:9E:2E:42:32:8A:3B:DD:6C:43:38:90:C9:60:67:36:6A:AF:8C Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 27E757F793E52560555E1A8693EE940D8E2A4672 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:17:37 +0000 Manifest this update: Thu 17 Sep 2026 03:12:37 +0000 Manifest next update: Fri 18 Sep 2026 06:16:37 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: 1GEsvS4vnRkM9QqaXTJKUTOb0n0G2+vowrRaRT/rfz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e7:57:f7:93:e5:25:60:55:5e:1a:86:93:ee:94:0d:8e:2a:46:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: Sep 17 03:12:37 2026 GMT Not After : Sep 18 06:16:37 2026 GMT Subject: CN=DAFF9E2E42328A3BDD6C433890C96067366AAF8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:88:e7:9d:fe:83:12:f5:fd:46:0c:dd:1b: 37:e1:78:04:6f:60:0e:73:59:ec:93:21:6a:31:2a: c5:29:c7:ff:74:78:d7:b4:bf:38:c6:0a:8b:1c:16: 88:d8:78:47:b7:2d:4d:23:21:51:92:69:ff:3b:8b: f9:f4:0c:e5:a7:66:ce:4b:b9:1e:92:d8:0f:ba:8e: 4c:b4:d0:4b:90:9e:6e:9a:57:7c:b5:51:4b:63:22: e7:05:d7:e2:13:1d:27:95:53:ad:3f:12:24:cb:09: 32:b3:e9:0c:46:1d:0e:dd:29:55:99:10:53:69:09: 6b:b7:3e:85:34:62:d8:ff:02:13:a6:f3:77:ac:1a: 2e:5c:a1:e1:4d:3d:cc:2d:27:2e:17:a0:f5:9a:e8: 34:53:e0:7e:5e:87:1c:f6:1b:27:00:a0:71:c0:79: 48:1d:8f:89:f5:f5:c5:9e:ec:9d:7f:0f:2f:2a:52: 3f:eb:2c:ab:c3:bf:53:ac:64:7f:f8:06:d7:3d:02: 29:1e:61:22:77:90:88:fe:e3:0f:70:f7:19:d5:a4: 4c:08:24:80:d2:d0:30:f5:9e:08:2d:ae:94:25:51: c5:ad:a4:78:40:4c:0a:1d:a9:bd:62:e5:c8:e3:54: 27:92:83:aa:95:f5:cf:7e:b9:95:aa:6b:6b:1d:c9: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FF:9E:2E:42:32:8A:3B:DD:6C:43:38:90:C9:60:67:36:6A:AF:8C X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a4:d1:35:ce:3e:e9:d1:b2:28:06:4d:3a:00:33:9c:ab:f1: a2:6f:e6:d8:83:15:a9:30:80:57:3c:a9:e8:63:b4:32:8a:98: d4:44:cb:46:27:2d:7e:e3:5d:cf:b9:71:e1:81:c9:aa:ef:86: 4a:84:eb:2d:60:40:11:a5:c7:7a:36:7c:19:2f:91:29:08:b1: 73:c3:fc:c1:a6:d5:56:15:b6:5f:6d:a2:9e:a8:7d:d5:2a:a6: e2:03:19:18:45:d3:42:76:4c:74:eb:73:45:9e:15:b3:e0:76: 9f:48:b0:b1:99:69:e9:92:09:d6:cb:ad:c9:95:c7:3e:c0:a5: 60:29:6b:f5:ae:79:dc:ee:be:9d:ca:4d:02:de:e2:e1:f9:0e: a5:1f:76:20:ce:be:aa:00:1b:95:cd:39:ed:9c:c2:d4:0a:02: 68:f7:67:8b:b3:63:7f:0b:fd:47:01:be:df:7a:b5:48:2d:7f: 23:8f:ad:f9:fb:7a:b9:48:bf:6b:0e:17:ef:4c:57:bb:cd:4d: 34:00:c2:51:86:a4:f0:16:6a:cd:e5:2d:cb:58:3e:4a:5c:00: 6c:2b:3c:cf:e2:21:7e:26:7d:3b:30:22:b2:b0:13:69:ce:2e: c6:fe:de:6b:cd:f8:85:18:14:e3:1e:dc:87:43:af:5f:0c:2b: 76:fe:33:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+dX95PlJWBVXhqGk+6UDY4qRnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjA5MTcwMzEyMzdaFw0yNjA5MTgwNjE2MzdaMDMxMTAvBgNV BAMTKERBRkY5RTJFNDIzMjhBM0JERDZDNDMzODkwQzk2MDY3MzY2QUFGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQqIjnnf6DEvX9RgzdGzfheARv YA5zWeyTIWoxKsUpx/90eNe0vzjGCoscFojYeEe3LU0jIVGSaf87i/n0DOWnZs5L uR6S2A+6jky00EuQnm6aV3y1UUtjIucF1+ITHSeVU60/EiTLCTKz6QxGHQ7dKVWZ EFNpCWu3PoU0Ytj/AhOm83esGi5coeFNPcwtJy4XoPWa6DRT4H5ehxz2GycAoHHA eUgdj4n19cWe7J1/Dy8qUj/rLKvDv1OsZH/4Btc9AikeYSJ3kIj+4w9w9xnVpEwI JIDS0DD1nggtrpQlUcWtpHhATAodqb1i5cjjVCeSg6qV9c9+uZWqa2sdyRotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2v+eLkIyijvdbEM4kMlgZzZqr4wwHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+k0TXOPunRsigGTToAM5yr8aJv5tiDFakw gFc8qehjtDKKmNREy0YnLX7jXc+5ceGByarvhkqE6y1gQBGlx3o2fBkvkSkIsXPD /MGm1VYVtl9top6ofdUqpuIDGRhF00J2THTrc0WeFbPgdp9IsLGZaemSCdbLrcmV xz7ApWApa/Wuedzuvp3KTQLe4uH5DqUfdiDOvqoAG5XNOe2cwtQKAmj3Z4uzY38L /UcBvt96tUgtfyOPrfn7erlIv2sOF+9MV7vNTTQAwlGGpPAWas3lLctYPkpcAGwr PM/iIX4mfTswIrKwE2nOLsb+3mvN+IUYFOMe3IdDr18MK3b+M74= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:32 2026 by rpki-client