$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft File: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft (raw, json) Hash identifier: mmXS/0QN/MuXQwZkbk/wjHFdQUah/3Zsb34eR9PR7aE= Subject key identifier: 68:9F:DA:9B:92:1A:72:A5:FA:61:EE:9C:7E:DB:27:97:12:EC:D4:C1 Authority key identifier: FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 Certificate issuer: /CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Certificate serial: 0A90703F1BB26B068D30E83629094C938C5A414A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 23:14:02 +0000 Manifest this update: Fri 19 Jun 2026 23:09:02 +0000 Manifest next update: Sun 21 Jun 2026 00:42:02 +0000 Files and hashes: 1: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl (hash: q2GpTgiU0xKLAF/rgAjD2nSC29fnoBvyTzu5MeUnElE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:90:70:3f:1b:b2:6b:06:8d:30:e8:36:29:09:4c:93:8c:5a:41:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Validity Not Before: Jun 19 23:09:02 2026 GMT Not After : Jun 21 00:42:02 2026 GMT Subject: CN=689FDA9B921A72A5FA61EE9C7EDB279712ECD4C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:25:81:9b:0e:fb:cf:ac:e9:a1:d0:59:f2: d2:f5:37:24:88:d7:ed:03:97:8b:0f:f8:04:0a:31: ec:f4:a4:ae:ba:11:a1:69:c2:30:6c:4d:a6:75:db: ca:37:5b:99:d4:b2:ad:47:86:ba:e8:31:ad:61:1a: a5:2c:24:ba:5b:4a:21:0b:84:36:50:14:60:0e:19: 35:88:0b:72:92:1e:32:48:b3:83:d3:9f:6a:bd:7a: 2e:38:af:cd:a0:50:8f:b1:f3:57:e7:ca:fd:42:69: 6d:31:cc:02:25:34:88:e2:1c:0c:32:2c:02:5f:ae: 1f:4f:86:30:a5:90:79:51:c2:7b:34:07:fc:59:80: 04:f2:be:f2:fb:e3:d4:9f:9d:16:89:14:d3:28:16: 45:54:3e:7c:16:0d:f3:aa:6e:56:e8:46:55:83:90: 16:a3:27:a1:42:f5:39:16:ea:e8:fe:0d:a7:49:67: 5a:a4:5e:d9:c1:17:0a:aa:49:94:35:48:d6:c6:ce: 21:49:72:d7:e6:f0:67:59:a4:26:14:cc:7e:7a:d5: ed:29:d2:5f:91:ce:fd:95:42:42:75:14:1d:47:00: cc:a6:90:2d:6b:98:77:e4:83:be:4c:d7:6b:b8:22: ee:74:c0:50:c7:e4:6f:d2:42:5b:3f:65:b3:3e:cd: 94:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9F:DA:9B:92:1A:72:A5:FA:61:EE:9C:7E:DB:27:97:12:EC:D4:C1 X509v3 Authority Key Identifier: keyid:FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:14:fe:f2:5a:25:76:ca:cc:28:fa:1b:80:d9:e7:8f:ec:d6: b5:2b:a6:f6:6d:89:66:9b:ea:16:1c:2f:6f:f3:6d:ec:c2:9a: b8:aa:37:63:b0:04:26:91:93:68:41:0f:65:d1:28:34:58:85: e6:ed:22:d9:ad:a8:da:35:3c:ca:b2:9e:08:29:97:23:ad:27: 1c:6a:5c:3a:85:f2:c1:44:48:64:11:28:ba:f3:f9:25:b5:54: 1a:88:9d:d4:86:8f:fc:24:67:1d:39:d1:8a:81:de:87:c0:93: 1f:ef:df:91:7f:5b:f2:f4:79:ef:56:82:de:ca:25:f5:bd:89: a5:d5:4f:03:a4:6a:a5:da:8e:e5:3e:98:97:4d:56:7d:67:19: 84:e5:ab:f5:2c:d9:ee:17:57:26:94:f7:ca:4f:29:55:60:2c: 92:3f:c5:ae:b2:9e:f6:02:4a:54:ed:7a:0e:ea:ae:56:5b:b7: fb:14:7a:28:53:4d:c5:87:de:3c:b4:d8:ba:45:82:a5:ba:16: 97:90:c2:90:24:95:61:fa:8c:55:2f:61:17:87:45:dd:d2:bc: db:2f:88:94:65:ed:63:b0:b7:c3:cd:9b:c5:09:14:2a:fa:3c: 2a:1f:0e:02:ed:32:ef:df:7c:04:1f:e4:6f:4a:c3:c1:3a:fa: bb:7a:e6:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpBwPxuyawaNMOg2KQlMk4xaQUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1 OTU1MDVCOTAeFw0yNjA2MTkyMzA5MDJaFw0yNjA2MjEwMDQyMDJaMDMxMTAvBgNV BAMTKDY4OUZEQTlCOTIxQTcyQTVGQTYxRUU5QzdFREIyNzk3MTJFQ0Q0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MSWBmw77z6zpodBZ8tL1NySI 1+0Dl4sP+AQKMez0pK66EaFpwjBsTaZ128o3W5nUsq1HhrroMa1hGqUsJLpbSiEL hDZQFGAOGTWIC3KSHjJIs4PTn2q9ei44r82gUI+x81fnyv1CaW0xzAIlNIjiHAwy LAJfrh9PhjClkHlRwns0B/xZgATyvvL749SfnRaJFNMoFkVUPnwWDfOqblboRlWD kBajJ6FC9TkW6uj+DadJZ1qkXtnBFwqqSZQ1SNbGziFJctfm8GdZpCYUzH561e0p 0l+Rzv2VQkJ1FB1HAMymkC1rmHfkg75M12u4Iu50wFDH5G/SQls/ZbM+zZSjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJ/am5IacqX6Ye6cftsnlxLs1MEwHwYDVR0j BBgwFoAU/MGvMiHcxiRRCjeufgtqy1lVBbkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzViZjg5YzctNTA3MS00YzEyLThjM2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIy MURDQzYyNDUxMEEzN0FFN0UwQjZBQ0I1OTU1MDVCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0MxQUYzMjIxRENDNjI0NTEwQTM3QUU3RTBCNkFDQjU5NTUw NUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvRkNDMUFGMzIyMURDQzYyNDUxMEEzN0FFN0UwQjZB Q0I1OTU1MDVCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8U/vJaJXbKzCj6G4DZ54/s1rUrpvZtiWab 6hYcL2/zbezCmriqN2OwBCaRk2hBD2XRKDRYhebtItmtqNo1PMqynggplyOtJxxq XDqF8sFESGQRKLrz+SW1VBqIndSGj/wkZx050YqB3ofAkx/v35F/W/L0ee9Wgt7K JfW9iaXVTwOkaqXajuU+mJdNVn1nGYTlq/Us2e4XVyaU98pPKVVgLJI/xa6ynvYC SlTteg7qrlZbt/sUeihTTcWH3jy02LpFgqW6FpeQwpAklWH6jFUvYReHRd3SvNsv iJRl7WOwt8PNm8UJFCr6PCofDgLtMu/ffAQf5G9Kw8E6+rt65o0= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:22 2026 by rpki-client