$ rpki-client -vvf rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft File: FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft (raw, json) Hash identifier: FsxQdHVI7mDrN39DZ0ZgDM7jaRC2kjnU2UGo2rkUzPU= Subject key identifier: DD:2D:29:56:AB:ED:6E:4F:87:B0:59:C6:53:E6:CB:4B:EA:0C:04:5A Authority key identifier: FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 Certificate issuer: /CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Certificate serial: 50F669D939211D1DB2F88CF6EFD0EB3A4A2FC3A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:32:13 +0000 Manifest this update: Tue 12 May 2026 11:27:13 +0000 Manifest next update: Wed 13 May 2026 14:54:13 +0000 Files and hashes: 1: FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl (hash: L5Jq5DRuUpwOPN9gFpHBhbfUWZaVAp13FaN6eKN8OIk=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: oShpqamIlxg4kQTK/q8+//W/2I271Sb0pfvq3P0rPtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f6:69:d9:39:21:1d:1d:b2:f8:8c:f6:ef:d0:eb:3a:4a:2f:c3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Validity Not Before: May 12 11:27:13 2026 GMT Not After : May 13 14:54:13 2026 GMT Subject: CN=DD2D2956ABED6E4F87B059C653E6CB4BEA0C045A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:9e:30:55:45:5d:01:b2:56:65:72:f6:3d: 60:a7:5c:29:52:e6:92:f5:e6:39:06:46:8f:ec:59: da:05:75:82:55:9c:70:6d:d8:e7:41:4f:b9:06:6c: 21:13:94:d8:4e:04:3c:a0:61:6e:4e:68:b2:db:b8: 78:7a:81:4b:89:9c:da:eb:14:86:98:e9:8b:ed:6d: 51:2d:0a:c1:9d:14:e7:e6:3c:17:36:55:4c:7a:2c: df:f7:d0:57:ab:bd:a3:0e:51:d8:9b:6f:f2:67:a3: 90:2f:4f:64:e5:54:59:60:4a:c8:65:9e:c6:a7:59: a6:69:49:6c:c6:f3:e8:ba:93:89:32:f4:97:8b:fb: a1:6e:d4:2d:f0:35:c9:38:1f:6c:2b:96:50:c3:8e: 18:8d:70:34:57:b4:d2:90:c4:e1:35:cb:7c:62:39: ee:69:ea:02:94:74:dc:48:02:a9:9c:cb:f8:ac:94: 3c:24:fc:3c:71:63:ec:d2:90:c8:f4:fc:b9:ea:5e: 2e:af:34:a9:36:11:1d:2f:61:72:fc:90:12:40:46: 67:da:e2:48:3c:9d:9a:ed:27:73:75:6d:ff:8c:08: 22:ec:b6:56:d0:15:83:de:3f:0f:1e:46:4c:c4:6c: b9:70:0a:83:00:36:5e:81:5d:44:fb:9f:07:7f:2a: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2D:29:56:AB:ED:6E:4F:87:B0:59:C6:53:E6:CB:4B:EA:0C:04:5A X509v3 Authority Key Identifier: keyid:FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f2:b9:71:b1:28:8d:cd:8e:e5:26:41:7a:e9:07:46:f5:96: 8d:09:5c:fd:64:30:30:17:2c:2a:19:c2:a3:e8:e7:32:2d:5d: 5c:a4:c0:31:a7:43:0a:22:62:fd:7e:94:ae:fc:4f:bd:d2:7e: 0f:90:bb:1e:9f:23:a5:f0:e9:16:8f:0b:e7:03:c5:af:b0:2b: 7c:74:e0:8b:44:31:27:60:47:96:b6:b6:b7:5a:1e:65:24:3f: 01:d0:0f:fd:59:d9:2e:65:36:eb:70:70:1c:01:82:51:15:c9: 44:2e:9a:98:c9:6e:fb:40:8a:da:bb:59:71:30:8c:76:17:22: 9f:e3:47:b8:a8:4d:e9:34:f4:d1:13:41:97:77:42:b6:33:54: 63:45:56:ba:04:9e:c0:49:f0:cb:ed:ba:0b:ea:50:39:7b:8f: cf:40:63:4d:76:1f:99:34:76:f3:00:12:29:ca:e4:28:44:5a: 70:a0:ca:94:2e:61:1f:b1:77:ad:af:4a:c0:b0:00:ae:e6:be: c4:b0:01:2d:3d:ca:78:1b:dc:fb:29:fc:bb:ba:83:57:11:4f: 79:2c:f9:ee:14:73:a5:0b:fa:bd:a2:40:09:3f:58:cf:3e:c6: 2c:ca:21:31:c0:55:9a:58:25:57:35:5f:18:b9:c7:a0:f1:5e: dc:80:17:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPZp2TkhHR2y+Iz279DrOkovw6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdC MTRCMEVBOTAeFw0yNjA1MTIxMTI3MTNaFw0yNjA1MTMxNDU0MTNaMDMxMTAvBgNV BAMTKEREMkQyOTU2QUJFRDZFNEY4N0IwNTlDNjUzRTZDQjRCRUEwQzA0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9p4wVUVdAbJWZXL2PWCnXClS 5pL15jkGRo/sWdoFdYJVnHBt2OdBT7kGbCETlNhOBDygYW5OaLLbuHh6gUuJnNrr FIaY6YvtbVEtCsGdFOfmPBc2VUx6LN/30FervaMOUdibb/Jno5AvT2TlVFlgSshl nsanWaZpSWzG8+i6k4ky9JeL+6Fu1C3wNck4H2wrllDDjhiNcDRXtNKQxOE1y3xi Oe5p6gKUdNxIAqmcy/islDwk/DxxY+zSkMj0/LnqXi6vNKk2ER0vYXL8kBJARmfa 4kg8nZrtJ3N1bf+MCCLstlbQFYPePw8eRkzEbLlwCoMANl6BXUT7nwd/Km47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3S0pVqvtbk+HsFnGU+bLS+oMBFowHwYDVR0j BBgwFoAU/IcKJ2m4jxAQeBftqjtCN7FLDqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyZjY0Y2EtZmE1NC00OTllLWJjMzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2 OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdCMTRCMEVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzg3MEEyNzY5Qjg4RjEwMTA3ODE3RURBQTNCNDIzN0IxNEIw RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQy MzdCMTRCMEVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHyuXGxKI3NjuUmQXrpB0b1lo0JXP1kMDAX LCoZwqPo5zItXVykwDGnQwoiYv1+lK78T73Sfg+Qux6fI6Xw6RaPC+cDxa+wK3x0 4ItEMSdgR5a2trdaHmUkPwHQD/1Z2S5lNutwcBwBglEVyUQumpjJbvtAitq7WXEw jHYXIp/jR7ioTek09NETQZd3QrYzVGNFVroEnsBJ8MvtugvqUDl7j89AY012H5k0 dvMAEinK5ChEWnCgypQuYR+xd62vSsCwAK7mvsSwAS09yngb3Psp/Lu6g1cRT3ks +e4Uc6UL+r2iQAk/WM8+xizKITHAVZpYJVc1Xxi5x6DxXtyAF5c= -----END CERTIFICATE-----Generated at Wed May 13 01:41:38 2026 by rpki-client