$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft (raw, json) Hash identifier: bgW9SlJ68K17FHz1UkNRjjR4p90EU5/97lipXEJKB9g= Subject key identifier: E5:4A:E0:CC:2B:A6:3B:11:77:30:25:9B:59:4D:1F:11:75:61:42:78 Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Certificate issuer: /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Certificate serial: 63162DDBD096C00BD22A2BA57C025C86DB07C56E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft Manifest number: EE Signing time: Sun 25 Oct 2026 04:31:51 +0000 Manifest this update: Sun 25 Oct 2026 04:26:51 +0000 Manifest next update: Mon 26 Oct 2026 05:11:51 +0000 Files and hashes: 1: FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl (hash: ibXUyMoh6qT4FS5brvC2PGcNQmkGiP9hhjnzEOdu2MI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:16:2d:db:d0:96:c0:0b:d2:2a:2b:a5:7c:02:5c:86:db:07:c5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Validity Not Before: Oct 25 04:26:51 2026 GMT Not After : Oct 26 05:11:51 2026 GMT Subject: CN=E54AE0CC2BA63B117730259B594D1F1175614278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:23:00:bf:4e:36:c6:f3:c9:28:72:a2:ef: 87:10:41:2e:8f:7a:14:98:ba:5a:e0:d2:fa:72:e7: 4c:a8:8d:58:df:ea:ad:41:ad:69:89:4e:76:19:e0: f3:44:0c:fe:29:64:93:b5:91:df:25:84:91:62:f5: aa:0d:79:38:54:db:01:50:ed:f6:4e:5c:b7:e4:df: 71:ef:24:8c:71:e2:3a:4e:be:10:45:6e:61:54:d3: 43:61:05:01:2f:4a:ad:de:3e:2d:4e:5a:10:64:36: 76:93:19:8e:7a:8b:ed:fa:ce:02:e2:20:36:0b:cc: d2:8b:9e:17:fd:7e:1c:17:41:33:27:92:e1:ab:fd: cf:ec:60:7b:ab:c7:8e:7b:de:eb:dc:d7:25:81:75: e6:fe:b0:d8:24:1f:dd:ff:c1:a5:f2:d6:d4:50:38: 4f:95:77:1a:d1:43:76:76:1f:bc:b4:23:53:c2:c7: 0d:67:0c:4c:8e:36:4f:03:63:12:55:2d:22:57:97: 1e:51:4a:61:05:7c:59:c5:12:fa:8f:46:be:b9:2a: 9e:cd:d4:0d:e1:8d:db:4c:44:2f:a5:23:55:3d:00: 54:cc:3d:9c:d4:8d:1d:d9:6a:e5:b0:d2:0e:cf:32: ae:69:fc:1f:d6:00:92:f7:98:94:4b:74:50:53:27: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4A:E0:CC:2B:A6:3B:11:77:30:25:9B:59:4D:1F:11:75:61:42:78 X509v3 Authority Key Identifier: keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:11:b2:75:e5:29:4f:64:6e:3a:00:c8:fb:92:23:dd:86:36: c2:c9:16:8d:5f:bb:df:d8:15:fd:3c:81:e2:f5:97:78:73:2d: 9a:e1:39:dc:93:11:e1:5b:ef:1b:a4:82:42:1e:ba:1e:0b:94: 1f:41:48:ef:15:8a:1c:f2:b6:ff:c3:01:7e:4d:f3:56:83:c3: a4:f6:61:91:31:9b:32:3e:6e:91:a2:fa:73:e2:f3:5e:2f:1f: 4c:75:23:cf:ef:95:64:5d:39:8f:9b:79:ac:60:b5:a2:e9:88: e4:69:24:d9:a5:07:71:af:d8:72:15:f2:ac:3c:78:54:aa:f5: 1c:98:de:92:c2:83:93:07:eb:2a:e0:22:c6:23:d1:58:de:16: 6e:fd:5a:5b:51:e4:de:30:1c:1b:3f:c7:b1:c5:d4:78:e6:35: 86:9d:03:77:85:71:8c:19:04:6a:9b:90:4d:15:0b:0f:20:14: a4:b7:b3:03:71:22:c8:6a:2b:15:3a:ee:31:65:c5:f1:37:40: 15:95:bf:ab:8d:12:62:f4:dc:0a:06:11:ee:fa:e6:fd:f3:6a: 3d:a1:7c:88:1d:cb:f5:e1:17:32:45:45:77:bb:e0:18:e0:76: 59:d0:b4:d8:55:6f:e3:f0:2e:80:15:ea:30:6e:b9:28:e8:07: 75:d3:b7:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxYt29CWwAvSKiulfAJchtsHxW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZG MEU0QjNFNDAeFw0yNjEwMjUwNDI2NTFaFw0yNjEwMjYwNTExNTFaMDMxMTAvBgNV BAMTKEU1NEFFMENDMkJBNjNCMTE3NzMwMjU5QjU5NEQxRjExNzU2MTQyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYSMAv042xvPJKHKi74cQQS6P ehSYulrg0vpy50yojVjf6q1BrWmJTnYZ4PNEDP4pZJO1kd8lhJFi9aoNeThU2wFQ 7fZOXLfk33HvJIxx4jpOvhBFbmFU00NhBQEvSq3ePi1OWhBkNnaTGY56i+36zgLi IDYLzNKLnhf9fhwXQTMnkuGr/c/sYHurx4573uvc1yWBdeb+sNgkH93/waXy1tRQ OE+VdxrRQ3Z2H7y0I1PCxw1nDEyONk8DYxJVLSJXlx5RSmEFfFnFEvqPRr65Kp7N 1A3hjdtMRC+lI1U9AFTMPZzUjR3ZauWw0g7PMq5p/B/WAJL3mJRLdFBTJ39JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5UrgzCumOxF3MCWbWU0fEXVhQngwHwYDVR0j BBgwFoAU/HHUYjFvMDdRrg7gFylA7/Dks+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQwZTBkZWEtNWY5Yi00MjVjLTgyY2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIz MTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZGMEU0QjNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzcxRDQ2MjMxNkYzMDM3NTFBRTBFRTAxNzI5NDBFRkYwRTRC M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQw RUZGMEU0QjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFURsnXlKU9kbjoAyPuSI92GNsLJFo1fu9/Y Ff08geL1l3hzLZrhOdyTEeFb7xukgkIeuh4LlB9BSO8Vihzytv/DAX5N81aDw6T2 YZExmzI+bpGi+nPi814vH0x1I8/vlWRdOY+beaxgtaLpiORpJNmlB3Gv2HIV8qw8 eFSq9RyY3pLCg5MH6yrgIsYj0VjeFm79WltR5N4wHBs/x7HF1HjmNYadA3eFcYwZ BGqbkE0VCw8gFKS3swNxIshqKxU67jFlxfE3QBWVv6uNEmL03AoGEe765v3zaj2h fIgdy/XhFzJFRXe74BjgdlnQtNhVb+PwLoAV6jBuuSjoB3XTt8g= -----END CERTIFICATE-----Generated at Sun Oct 25 07:08:58 2026 by rpki-client