$ rpki-client -vvvf rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft File: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft (raw, json) Hash identifier: 4tVtWg6LNuHeLpXivWlipvkvhzl6eAy0FjY9Uel3YMo= Subject key identifier: 56:50:49:02:60:A6:7E:54:0B:A1:3D:38:E9:DA:D2:47:36:20:DD:19 Authority key identifier: FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 Certificate issuer: /CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Certificate serial: 626EC0B4B0F39E1ACB56EB5977B9844A692CEBC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 10:18:55 +0000 Manifest this update: Wed 23 Sep 2026 10:13:55 +0000 Manifest next update: Thu 24 Sep 2026 11:46:55 +0000 Files and hashes: 1: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl (hash: +yo+aoh9SChFElfCDfDvYmwoIwYq1uZtwYjUlB6GFms=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: /EYgr4bEX5yF2cD2wxIp6ztYlU72xJsVBSPBoR3u9Fw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6e:c0:b4:b0:f3:9e:1a:cb:56:eb:59:77:b9:84:4a:69:2c:eb:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Validity Not Before: Sep 23 10:13:55 2026 GMT Not After : Sep 24 11:46:55 2026 GMT Subject: CN=5650490260A67E540BA13D38E9DAD2473620DD19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:ff:3f:22:2d:9b:d3:55:37:01:e5:d6:f1: 0b:56:e1:d2:0a:1e:9a:03:56:92:8e:e3:91:69:53: 9d:43:23:6e:15:bf:a2:9e:3e:00:34:08:15:02:ed: bb:25:f7:7c:d1:1e:80:ed:c3:19:93:88:c1:70:77: df:d3:7e:4a:6e:a4:b3:57:49:42:12:14:8d:b8:9d: 60:ce:95:82:7d:96:a7:fa:d2:53:9d:f1:1e:a5:a4: 38:ae:00:4a:9a:62:b4:b6:38:0e:2a:65:55:92:e4: 90:64:60:7f:63:c4:23:d6:c8:aa:8e:20:fe:77:71: b5:13:54:2c:48:3d:48:23:ea:90:73:60:82:7a:c3: c6:6f:8c:34:e5:1f:6d:b4:65:fb:20:2d:1e:fb:ca: 5a:5a:49:ea:c8:e6:01:2f:9b:2d:63:e3:97:f1:93: 17:2e:1a:9e:29:b5:fa:fc:00:ef:97:5d:80:e0:2c: fe:a8:48:14:10:26:b6:e3:62:f4:a1:35:ef:82:0e: cf:e3:88:92:6c:6e:3a:f2:70:57:a9:bd:a0:b0:b6: 32:b4:3a:60:ef:cb:1a:f1:4d:1f:e8:d4:bd:e4:f1: 88:6c:d7:1e:11:60:33:7f:6b:e8:95:08:39:7b:79: d2:67:f7:54:f7:d2:f8:fe:e7:db:ff:14:3e:45:01: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:50:49:02:60:A6:7E:54:0B:A1:3D:38:E9:DA:D2:47:36:20:DD:19 X509v3 Authority Key Identifier: keyid:FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:23:22:77:78:5c:da:11:e1:6d:42:e1:b9:74:fd:c1:bd:66: ec:e8:08:be:4a:82:39:b6:f7:bb:9b:80:1f:6e:b5:fd:21:d0: 5d:60:17:9b:f2:c0:d7:85:eb:d7:6f:83:18:23:8c:f2:17:cf: c9:50:0c:52:d4:a0:6e:70:8f:01:86:d2:7d:98:06:0d:a2:16: a8:50:ce:02:86:8f:ce:8b:bf:91:27:85:53:fe:db:f1:e7:cf: 40:d8:77:68:3c:39:7e:90:5c:41:a6:b0:8c:de:83:80:31:2b: ff:ed:ac:5d:da:46:27:0b:96:83:93:7f:ed:60:92:7a:9e:12: 9b:95:1f:14:37:8e:89:4b:00:78:6b:27:04:51:2a:70:1a:e4: 2b:8b:0c:4c:6f:09:99:8b:1f:1a:ba:16:6a:de:b8:1d:12:ed: 01:28:c6:88:ce:27:74:7e:0c:2e:42:a2:b6:c3:c5:de:67:be: 1e:31:54:11:ad:84:90:0a:2b:04:c7:84:3b:b0:86:24:65:69: 69:d4:0e:64:59:c4:c7:e4:02:85:4d:61:c0:9a:7e:3e:8c:07: 2f:60:4c:6f:b8:e8:16:30:a0:25:87:2f:0d:f4:6d:5d:80:40: 8a:75:28:e4:1b:1f:40:46:24:b5:f8:13:17:ed:94:e1:54:79: 38:d7:1f:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYm7AtLDznhrLVutZd7mESmks68kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgw QzgyOTVFNTAeFw0yNjA5MjMxMDEzNTVaFw0yNjA5MjQxMTQ2NTVaMDMxMTAvBgNV BAMTKDU2NTA0OTAyNjBBNjdFNTQwQkExM0QzOEU5REFEMjQ3MzYyMEREMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkv8/Ii2b01U3AeXW8QtW4dIK HpoDVpKO45FpU51DI24Vv6KePgA0CBUC7bsl93zRHoDtwxmTiMFwd9/TfkpupLNX SUISFI24nWDOlYJ9lqf60lOd8R6lpDiuAEqaYrS2OA4qZVWS5JBkYH9jxCPWyKqO IP53cbUTVCxIPUgj6pBzYIJ6w8ZvjDTlH220ZfsgLR77ylpaSerI5gEvmy1j45fx kxcuGp4ptfr8AO+XXYDgLP6oSBQQJrbjYvShNe+CDs/jiJJsbjrycFepvaCwtjK0 OmDvyxrxTR/o1L3k8Yhs1x4RYDN/a+iVCDl7edJn91T30vj+59v/FD5FAT57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVlBJAmCmflQLoT046drSRzYg3RkwHwYDVR0j BBgwFoAU/KzNzw/etQ8smBbrxFUPeAyCleUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUwZDFhYTEtNGM3Zi00NDhiLWIyYmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0Yw RkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgwQzgyOTVFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0FDQ0RDRjBGREVCNTBGMkM5ODE2RUJDNDU1MEY3ODBDODI5 NUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBG NzgwQzgyOTVFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEjInd4XNoR4W1C4bl0/cG9ZuzoCL5Kgjm2 97ubgB9utf0h0F1gF5vywNeF69dvgxgjjPIXz8lQDFLUoG5wjwGG0n2YBg2iFqhQ zgKGj86Lv5EnhVP+2/Hnz0DYd2g8OX6QXEGmsIzeg4AxK//trF3aRicLloOTf+1g knqeEpuVHxQ3jolLAHhrJwRRKnAa5CuLDExvCZmLHxq6FmreuB0S7QEoxojOJ3R+ DC5CorbDxd5nvh4xVBGthJAKKwTHhDuwhiRlaWnUDmRZxMfkAoVNYcCafj6MBy9g TG+46BYwoCWHLw30bV2AQIp1KOQbH0BGJLX4ExftlOFUeTjXH3s= -----END CERTIFICATE-----Generated at Thu Sep 24 02:13:39 2026 by rpki-client