$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft File: FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft (raw, json) Hash identifier: Qlf0EowDBbHLDe6cBD/iDc3wEPlm85jCLBGk/zRKpGo= Subject key identifier: 66:31:FA:B2:20:85:70:B8:2B:8E:AD:89:EB:48:AA:DF:D9:87:97:7E Authority key identifier: FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31 Certificate issuer: /CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831 Certificate serial: 47ADB80FC7A8C938D059504409FB33F953228690 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:45:40 +0000 Manifest this update: Wed 23 Sep 2026 11:40:40 +0000 Manifest next update: Thu 24 Sep 2026 12:25:40 +0000 Files and hashes: 1: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: orsjKTV02O8TMgWpMnovRo4VVZwRW9a2U4tEzVvr014=) 2: FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl (hash: b/FYeZtRqAnfGZBmr0cZHsONx2wBpnNIHLmsregbSFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ad:b8:0f:c7:a8:c9:38:d0:59:50:44:09:fb:33:f9:53:22:86:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831 Validity Not Before: Sep 23 11:40:40 2026 GMT Not After : Sep 24 12:25:40 2026 GMT Subject: CN=6631FAB2208570B82B8EAD89EB48AADFD987977E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:e1:1f:dc:de:23:b7:33:eb:b1:a6:57:15: 80:b2:44:38:34:d6:83:d2:dc:9d:4c:e1:a4:af:c7: 16:03:11:f6:8b:1f:63:61:99:48:14:75:88:7f:72: 99:19:67:18:d3:e5:75:35:28:ac:7c:6e:94:c9:68: 57:94:ca:64:33:4e:3e:b4:28:67:4b:89:b1:12:c4: e5:8c:9b:53:12:a8:be:a2:cf:86:28:2d:26:23:2a: 16:a9:59:fc:15:1a:ae:5f:77:4e:ca:12:f8:df:0c: 4e:47:09:c1:c1:7a:dd:50:6d:14:1e:c6:ea:ec:a6: 7b:42:cb:ac:e9:0f:77:92:24:b2:26:9b:32:31:16: 19:f4:27:e7:81:1e:ae:37:08:45:bf:24:84:30:40: 06:57:48:ea:19:79:9e:ae:58:17:1b:f9:81:ff:51: 25:32:dd:d2:22:e7:a3:c6:fc:78:b6:7e:52:0d:fc: 34:1e:2d:17:83:28:0f:a3:58:7e:2c:ca:26:cd:c0: 5d:88:0b:ce:1f:e5:43:b7:6b:27:98:24:a7:2e:13: 5d:35:2e:25:03:66:f0:d1:04:05:0e:01:06:91:14: 79:3c:eb:06:77:df:0f:23:e5:55:6a:40:13:9f:b9: c0:3d:3d:50:92:4c:fb:27:39:af:13:cd:e5:17:74: e1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:31:FA:B2:20:85:70:B8:2B:8E:AD:89:EB:48:AA:DF:D9:87:97:7E X509v3 Authority Key Identifier: keyid:FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bc:a3:ef:bd:85:78:45:56:96:06:29:10:f3:9d:5e:3e:c0: 9c:ef:f6:c0:68:50:3d:bf:51:89:64:71:c8:55:7f:98:e7:53: 18:cc:db:76:e5:76:b7:d9:a5:7a:cd:61:b6:99:1d:f2:dc:63: 3d:ba:45:6a:9a:1c:5d:7e:7a:71:ef:9c:ea:3c:47:3b:8c:56: 12:fd:d8:79:a5:4c:c1:e6:e7:d4:32:b0:38:a9:49:7a:06:96: 36:45:68:c5:46:58:ea:da:6b:9b:2a:ca:d4:36:8a:b5:5d:05: af:39:dc:70:fd:72:46:56:ee:de:20:bf:95:e1:39:6d:78:5a: 8d:61:46:15:d9:37:a8:52:73:b7:ed:35:6d:3c:66:27:b9:53: 1e:46:8a:11:4b:c8:47:d3:74:23:a4:26:b5:fe:2c:25:82:8a: 0b:0f:44:46:1f:cf:be:de:e8:b7:21:ae:ab:c7:dd:f5:ca:8e: e1:38:7d:55:e9:37:cc:7a:5a:67:45:fb:27:2a:f0:e7:a2:b9: a2:8f:6a:b9:61:fa:6e:40:f1:a2:79:e2:4e:f1:f7:39:6f:93: 62:26:e8:c2:c3:0c:39:d4:1d:7e:76:39:07:ca:c1:6e:21:f0: 1e:a2:2c:e3:c9:e6:8a:cb:ff:9e:99:56:64:32:d2:6e:91:6b: f8:f0:0c:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR624D8eoyTjQWVBECfsz+VMihpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM1QjBFQTEzMUZGNjA2MDFGOUExNUUwM0FDQzI3OEND N0EyQjgzMTAeFw0yNjA5MjMxMTQwNDBaFw0yNjA5MjQxMjI1NDBaMDMxMTAvBgNV BAMTKDY2MzFGQUIyMjA4NTcwQjgyQjhFQUQ4OUVCNDhBQURGRDk4Nzk3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6OEf3N4jtzPrsaZXFYCyRDg0 1oPS3J1M4aSvxxYDEfaLH2NhmUgUdYh/cpkZZxjT5XU1KKx8bpTJaFeUymQzTj60 KGdLibESxOWMm1MSqL6iz4YoLSYjKhapWfwVGq5fd07KEvjfDE5HCcHBet1QbRQe xurspntCy6zpD3eSJLImmzIxFhn0J+eBHq43CEW/JIQwQAZXSOoZeZ6uWBcb+YH/ USUy3dIi56PG/Hi2flIN/DQeLReDKA+jWH4syibNwF2IC84f5UO3ayeYJKcuE101 LiUDZvDRBAUOAQaRFHk86wZ33w8j5VVqQBOfucA9PVCSTPsnOa8TzeUXdOF7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjH6siCFcLgrjq2J60iq39mHl34wHwYDVR0j BBgwFoAU/FsOoTH/YGAfmhXgOswnjMeiuDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ZjZDJhNDItOTJiOS00MGE0LWEwYmYtMDliNjVhMzE4YjVlLzAvRkM1QjBFQTEz MUZGNjA2MDFGOUExNUUwM0FDQzI3OENDN0EyQjgzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzVCMEVBMTMxRkY2MDYwMUY5QTE1RTAzQUNDMjc4Q0M3QTJC ODMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvRkM1QjBFQTEzMUZGNjA2MDFGOUExNUUwM0FDQzI3 OENDN0EyQjgzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEu8o++9hXhFVpYGKRDznV4+wJzv9sBoUD2/ UYlkcchVf5jnUxjM23bldrfZpXrNYbaZHfLcYz26RWqaHF1+enHvnOo8RzuMVhL9 2HmlTMHm59QysDipSXoGljZFaMVGWOraa5sqytQ2irVdBa853HD9ckZW7t4gv5Xh OW14Wo1hRhXZN6hSc7ftNW08Zie5Ux5GihFLyEfTdCOkJrX+LCWCigsPREYfz77e 6LchrqvH3fXKjuE4fVXpN8x6WmdF+ycq8OeiuaKParlh+m5A8aJ54k7x9zlvk2Im 6MLDDDnUHX52OQfKwW4h8B6iLOPJ5orL/56ZVmQy0m6Ra/jwDNM= -----END CERTIFICATE-----Generated at Thu Sep 24 03:48:18 2026 by rpki-client