$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft File: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft (raw, json) Hash identifier: vSUl0Yfs+H7++tzXJiQZvNNxeBOiThNDvnI3UKnGKAw= Subject key identifier: 4E:F5:D8:51:12:D7:2C:79:34:23:8B:6A:6A:1B:4F:0E:0A:60:66:D4 Authority key identifier: FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A Certificate issuer: /CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Certificate serial: 41BF0B2C5BA040968D7F977D08C4F1939A6C33D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 00:32:29 +0000 Manifest this update: Thu 18 Jun 2026 00:27:29 +0000 Manifest next update: Fri 19 Jun 2026 01:38:29 +0000 Files and hashes: 1: FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl (hash: AZ+X1+zxAIlhDPyZYkA1Xx1RtHrtFnQJiYk+gALsy2A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 01:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bf:0b:2c:5b:a0:40:96:8d:7f:97:7d:08:c4:f1:93:9a:6c:33:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4067F782ED39F1B624F6064D0B4AD69AF5C10A Validity Not Before: Jun 18 00:27:29 2026 GMT Not After : Jun 19 01:38:29 2026 GMT Subject: CN=4EF5D85112D72C7934238B6A6A1B4F0E0A6066D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:25:c3:1a:91:73:b4:4b:15:82:d9:f1:e6: 87:58:4f:9d:44:44:4e:1a:78:53:f1:c6:1a:e1:0d: e2:8a:e7:6e:f3:d2:fb:d6:87:d3:80:af:73:4f:72: 0f:e5:6c:a8:57:c2:29:a3:88:ad:9c:64:f1:14:20: 7a:5b:7c:8d:4a:14:d1:a2:95:bb:0c:08:02:a9:c1: dd:e9:6d:12:a2:3a:22:8c:cc:f9:bd:93:d8:b7:36: f4:db:56:82:f2:04:67:aa:04:66:d5:5c:3c:92:e6: a7:df:79:6d:a9:ca:4f:4e:bb:91:fc:cc:9a:8f:56: a0:79:45:14:2c:16:65:6f:71:98:e8:a4:0b:fb:79: 54:c2:70:34:aa:4a:f1:3d:45:7c:7f:4d:cb:87:b7: be:74:ea:21:96:5e:bc:05:fe:f8:58:ff:96:18:d3: 82:17:1e:11:f2:cd:36:d7:b3:b4:95:4e:20:fb:66: 58:be:b8:07:06:41:49:64:65:f9:6a:49:b7:fd:dd: 26:0a:09:08:bb:47:e7:98:35:83:9e:23:a6:c6:f6: 06:26:a1:4e:71:60:0e:0c:fd:52:ca:61:2b:80:2f: c6:8a:61:17:71:e0:eb:26:75:5b:e0:81:57:47:a4: a5:dd:b5:b7:44:96:e5:1a:99:97:4c:71:2a:7c:f6: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F5:D8:51:12:D7:2C:79:34:23:8B:6A:6A:1B:4F:0E:0A:60:66:D4 X509v3 Authority Key Identifier: keyid:FC:40:67:F7:82:ED:39:F1:B6:24:F6:06:4D:0B:4A:D6:9A:F5:C1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/FC4067F782ED39F1B624F6064D0B4AD69AF5C10A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0f:d8:11:9b:cf:af:c9:9c:08:71:73:4f:d8:8a:1d:bd:1b: 46:d6:0c:29:9d:fc:d3:b0:70:d0:c5:43:03:c7:3c:5e:cd:3a: e2:0c:01:f0:83:b5:d5:3a:d1:56:02:43:b8:80:cd:d7:64:53: 63:76:42:be:a5:e4:4c:e4:61:e0:28:af:3b:87:2c:e2:fb:3c: 17:ec:b7:b8:58:71:bd:7b:a7:d1:8b:59:18:0a:25:e2:e9:65: 02:40:c3:e8:89:23:c5:d2:84:0b:a1:ae:5e:42:a3:45:43:fa: c0:96:01:23:4f:ff:12:42:2a:54:ed:bd:ed:3c:fe:d6:c6:5b: d1:f1:3d:2e:a5:ad:fd:11:08:54:b0:c3:15:68:b9:bd:c9:1d: 8b:48:7d:a7:b8:49:f5:b5:ee:68:41:84:57:07:7b:33:91:01: 91:80:2c:88:5d:45:58:99:cd:ae:80:cc:c5:9a:50:62:c7:67: d0:21:da:dd:82:ae:e0:14:95:c7:c5:8d:b7:f1:7e:20:d6:72: f4:db:95:b0:06:ea:68:0e:4e:e4:61:51:a5:20:6c:7c:93:c9: 14:58:b4:b4:ab:19:c0:9f:e4:33:a8:0e:6e:a1:0d:f1:31:24: 16:f5:b4:c3:ea:5e:dd:e7:21:42:cc:47:0f:8a:d1:2e:be:cb: 92:2a:6b:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQb8LLFugQJaNf5d9CMTxk5psM9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5 QUY1QzEwQTAeFw0yNjA2MTgwMDI3MjlaFw0yNjA2MTkwMTM4MjlaMDMxMTAvBgNV BAMTKDRFRjVEODUxMTJENzJDNzkzNDIzOEI2QTZBMUI0RjBFMEE2MDY2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NyXDGpFztEsVgtnx5odYT51E RE4aeFPxxhrhDeKK527z0vvWh9OAr3NPcg/lbKhXwimjiK2cZPEUIHpbfI1KFNGi lbsMCAKpwd3pbRKiOiKMzPm9k9i3NvTbVoLyBGeqBGbVXDyS5qffeW2pyk9Ou5H8 zJqPVqB5RRQsFmVvcZjopAv7eVTCcDSqSvE9RXx/TcuHt7506iGWXrwF/vhY/5YY 04IXHhHyzTbXs7SVTiD7Zli+uAcGQUlkZflqSbf93SYKCQi7R+eYNYOeI6bG9gYm oU5xYA4M/VLKYSuAL8aKYRdx4OsmdVvggVdHpKXdtbdEluUamZdMcSp89s5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTvXYURLXLHk0I4tqahtPDgpgZtQwHwYDVR0j BBgwFoAU/EBn94LtOfG2JPYGTQtK1pr1wQowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4 MkVEMzlGMUI2MjRGNjA2NEQwQjRBRDY5QUY1QzEwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzQwNjdGNzgyRUQzOUYxQjYyNEY2MDY0RDBCNEFENjlBRjVD MTBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvRkM0MDY3Rjc4MkVEMzlGMUI2MjRGNjA2NEQwQjRB RDY5QUY1QzEwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgP2BGbz6/JnAhxc0/Yih29G0bWDCmd/NOw cNDFQwPHPF7NOuIMAfCDtdU60VYCQ7iAzddkU2N2Qr6l5EzkYeAorzuHLOL7PBfs t7hYcb17p9GLWRgKJeLpZQJAw+iJI8XShAuhrl5Co0VD+sCWASNP/xJCKlTtve08 /tbGW9HxPS6lrf0RCFSwwxVoub3JHYtIfae4SfW17mhBhFcHezORAZGALIhdRViZ za6AzMWaUGLHZ9Ah2t2CruAUlcfFjbfxfiDWcvTblbAG6mgOTuRhUaUgbHyTyRRY tLSrGcCf5DOoDm6hDfExJBb1tMPqXt3nIULMRw+K0S6+y5Iqa4w= -----END CERTIFICATE-----Generated at Thu Jun 18 17:09:06 2026 by rpki-client