$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft File: FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft (raw, json) Hash identifier: lE25agxH2mQridyqPYXXX2cs2KHewdorVZ4GQUdHhBU= Subject key identifier: 24:1A:3E:FB:13:EF:16:74:55:99:85:0E:26:DC:32:E9:CA:D7:16:9B Authority key identifier: FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 Certificate issuer: /CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Certificate serial: 4EEBCEEE1C3CB5BDB0F40FF28AD45896D2DA4E68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 05:16:57 +0000 Manifest this update: Fri 25 Sep 2026 05:11:57 +0000 Manifest next update: Sat 26 Sep 2026 07:39:57 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: oShpqamIlxg4kQTK/q8+//W/2I271Sb0pfvq3P0rPtA=) 2: FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl (hash: oVN262OtItgmMD6Kva+TZ0YcgZpz9J0yKuKIgg4x9Zw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 07:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:eb:ce:ee:1c:3c:b5:bd:b0:f4:0f:f2:8a:d4:58:96:d2:da:4e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Validity Not Before: Sep 25 05:11:57 2026 GMT Not After : Sep 26 07:39:57 2026 GMT Subject: CN=241A3EFB13EF16745599850E26DC32E9CAD7169B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:e7:88:0f:2a:0b:86:cf:88:2c:d0:5a:13: bd:c1:3a:b9:54:50:e9:63:0b:b5:ab:6b:78:8e:79: 1b:92:91:56:29:84:33:9b:a1:c5:21:74:7a:3e:2d: 05:53:91:7e:45:de:8c:1e:be:d3:f7:66:f8:ae:69: 17:6a:6d:c5:a3:fe:40:33:2b:b5:9f:f2:f0:bb:2f: cf:19:19:51:55:ed:ea:62:68:25:52:06:f3:7a:aa: b4:4e:95:46:cb:35:3c:19:86:1a:d6:be:97:74:2c: e0:77:32:e5:fe:b3:63:16:a2:4c:e4:11:32:94:6b: 1d:aa:1b:fc:de:68:92:ef:fe:cd:6c:7c:88:e4:e8: 2f:2a:1d:75:7b:6f:fb:93:1e:96:71:47:55:ca:5f: 24:cb:fd:15:d8:52:95:45:23:f2:77:d2:90:ab:2d: c5:07:f5:7e:c5:3f:80:a9:5e:a8:0f:5b:f6:48:f9: 06:cf:08:12:1b:17:28:2c:e3:52:9f:3a:45:94:7a: bf:78:95:6e:aa:eb:23:1d:d9:da:4c:2b:da:d2:c1: fa:11:94:50:71:17:b0:da:e3:8a:14:95:3f:db:fe: b0:3d:e3:d0:60:7f:69:4c:f7:0e:22:6c:ea:07:25: e6:a4:25:06:ba:5f:10:d6:06:40:b7:35:b9:b6:11: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1A:3E:FB:13:EF:16:74:55:99:85:0E:26:DC:32:E9:CA:D7:16:9B X509v3 Authority Key Identifier: keyid:FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b0:49:6b:66:a6:64:82:4a:7b:6d:8f:e0:76:99:f7:9b:e1: 90:51:e4:d4:ab:6d:f1:1c:76:b0:78:5c:9d:f5:80:5c:31:31: 67:f7:c4:f7:66:c8:1a:96:3c:63:80:1d:bb:68:11:7c:cd:2a: d1:d4:37:fb:10:20:ec:8a:d8:2d:c0:b7:10:e8:a1:d2:76:b8: 4c:20:db:28:1d:b3:24:24:65:b6:12:98:03:f5:39:2f:7d:2b: 15:65:a5:86:fa:da:8c:33:fc:65:a4:36:c4:ed:22:dd:3b:c4: f0:fb:9c:99:c6:33:5d:9e:a6:6f:8e:08:35:1e:24:79:7d:94: ac:78:6a:24:e2:e1:95:44:f7:2c:15:9f:dc:17:ae:c5:a7:a5: 72:e9:90:46:61:db:89:b3:46:54:25:d0:c3:33:07:d9:2c:1e: c2:05:d6:01:32:54:3f:ef:e0:b1:fc:62:18:81:64:52:0c:9d: 0e:b9:4e:0a:91:bf:dc:13:12:3e:a9:e4:8b:c7:96:bf:90:6a: ea:a9:fb:d4:7a:c0:fc:31:e8:09:c0:5b:ba:93:ea:64:d5:39: 80:66:09:df:21:08:f7:16:46:c7:55:2a:a9:d5:1a:eb:23:cd: ac:1c:82:5f:21:04:18:cd:a2:2b:48:73:40:48:ff:e0:56:e5: 9c:1b:e9:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuvO7hw8tb2w9A/yitRYltLaTmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdC MTRCMEVBOTAeFw0yNjA5MjUwNTExNTdaFw0yNjA5MjYwNzM5NTdaMDMxMTAvBgNV BAMTKDI0MUEzRUZCMTNFRjE2NzQ1NTk5ODUwRTI2REMzMkU5Q0FENzE2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PueIDyoLhs+ILNBaE73BOrlU UOljC7Wra3iOeRuSkVYphDObocUhdHo+LQVTkX5F3owevtP3ZviuaRdqbcWj/kAz K7Wf8vC7L88ZGVFV7epiaCVSBvN6qrROlUbLNTwZhhrWvpd0LOB3MuX+s2MWokzk ETKUax2qG/zeaJLv/s1sfIjk6C8qHXV7b/uTHpZxR1XKXyTL/RXYUpVFI/J30pCr LcUH9X7FP4CpXqgPW/ZI+QbPCBIbFygs41KfOkWUer94lW6q6yMd2dpMK9rSwfoR lFBxF7Da44oUlT/b/rA949Bgf2lM9w4ibOoHJeakJQa6XxDWBkC3Nbm2EdQXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJBo++xPvFnRVmYUOJtwy6crXFpswHwYDVR0j BBgwFoAU/IcKJ2m4jxAQeBftqjtCN7FLDqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyZjY0Y2EtZmE1NC00OTllLWJjMzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2 OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdCMTRCMEVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzg3MEEyNzY5Qjg4RjEwMTA3ODE3RURBQTNCNDIzN0IxNEIw RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQy MzdCMTRCMEVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiwSWtmpmSCSnttj+B2mfeb4ZBR5NSrbfEc drB4XJ31gFwxMWf3xPdmyBqWPGOAHbtoEXzNKtHUN/sQIOyK2C3AtxDoodJ2uEwg 2ygdsyQkZbYSmAP1OS99KxVlpYb62owz/GWkNsTtIt07xPD7nJnGM12epm+OCDUe JHl9lKx4aiTi4ZVE9ywVn9wXrsWnpXLpkEZh24mzRlQl0MMzB9ksHsIF1gEyVD/v 4LH8YhiBZFIMnQ65TgqRv9wTEj6p5IvHlr+Qauqp+9R6wPwx6AnAW7qT6mTVOYBm Cd8hCPcWRsdVKqnVGusjzawcgl8hBBjNoitIc0BI/+BW5Zwb6Wc= -----END CERTIFICATE-----Generated at Fri Sep 25 07:02:40 2026 by rpki-client