$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json) Hash identifier: TWksoMvUbGutlHZGewlrEqTSY8lkX444E+0wF5A0w7Y= Subject key identifier: 48:38:18:41:A7:57:97:5E:32:0E:06:BD:04:2F:3B:9E:83:2E:E3:98 Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 31EBF3A176132ABCEBDEDE0102F680F627BBA1E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:16:59 +0000 Manifest this update: Tue 12 May 2026 17:11:59 +0000 Manifest next update: Wed 13 May 2026 17:27:59 +0000 Files and hashes: 1: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: D69Hu+co5mpBH2eXk/FvwpdVXkoA/3za6zh8C1jhWnA=) 2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=) 3: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=) 4: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:eb:f3:a1:76:13:2a:bc:eb:de:de:01:02:f6:80:f6:27:bb:a1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: May 12 17:11:59 2026 GMT Not After : May 13 17:27:59 2026 GMT Subject: CN=48381841A757975E320E06BD042F3B9E832EE398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:79:1c:c1:ae:60:54:b4:99:46:db:a4:e5:13: ed:bb:1e:93:13:01:38:59:a8:48:5e:e0:3a:98:db: 59:3f:0f:e8:f2:00:a3:92:51:86:7f:c1:af:98:0a: 57:8b:13:d0:36:14:d3:bb:61:49:18:ae:a3:27:16: 51:33:97:c4:cb:a6:ee:de:f1:b2:d2:7a:4f:68:1c: 68:e5:d6:9a:38:f6:cd:4f:3c:76:10:e8:e0:1e:3a: 6d:d5:7a:a5:3f:4c:ee:c0:16:39:66:40:38:14:01: fc:ff:81:f3:6f:b0:34:ff:9e:4a:ca:87:87:17:31: d1:d3:6a:1c:80:2a:9f:12:e3:df:98:c8:a0:bc:9e: d7:73:2b:b2:44:10:e8:42:1e:b8:17:e1:2f:18:2b: b4:70:75:89:f9:1a:cf:5c:f1:e0:86:10:57:8e:93: da:e4:d4:b9:4b:18:7e:73:ea:7b:2b:93:87:21:28: 67:b1:01:3a:6a:0a:fb:37:a5:a7:95:29:b4:1c:79: 23:51:02:c7:71:a4:f8:d9:5e:6b:0e:86:11:cc:40: 26:30:ed:ae:fb:3e:d0:ac:20:c2:93:c3:63:ba:32: a8:b2:20:5b:3d:c9:f2:78:c7:e5:7b:fa:37:45:54: 64:02:26:06:eb:07:16:1f:3f:17:70:ff:9a:42:b7: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:38:18:41:A7:57:97:5E:32:0E:06:BD:04:2F:3B:9E:83:2E:E3:98 X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ef:b3:22:80:0e:4d:99:a1:63:9d:d4:46:87:9e:7a:60:eb: 8a:7f:97:0e:c1:6e:94:31:a7:39:70:4c:14:59:d7:5b:0b:92: dc:6b:04:49:90:01:8c:c1:0c:46:d3:84:ad:56:55:88:59:cc: 5f:00:94:23:13:be:1f:0e:c0:55:e1:be:e1:a8:df:f2:ec:7d: f9:7b:4f:a4:b4:24:22:20:2e:02:13:df:dd:15:2e:0a:29:ab: 20:b2:9b:89:ae:90:52:fe:07:a4:6d:cb:30:f3:72:95:ee:7f: c4:bf:76:85:a5:e9:d2:9a:32:b7:d6:46:16:21:7f:38:2c:b9: fd:dd:5e:0c:61:69:7a:fa:69:c7:47:ac:36:ef:cc:b5:52:3b: 4d:e5:31:cd:8d:c2:80:fe:1c:4c:41:7f:7d:3b:0e:5b:28:83: ee:e1:a0:49:87:03:fb:c5:9a:19:3a:98:0c:40:65:ea:86:63: 93:81:7b:25:5b:c1:a9:76:94:21:86:f0:33:47:8c:25:1b:57: c7:c8:3d:78:6b:7d:8c:77:49:fb:b2:c7:28:6a:82:6b:c8:ba: 69:65:ee:40:dd:13:f5:21:a6:b7:d9:a9:da:34:e6:31:d3:9d: e0:91:d1:74:3a:4e:7a:72:31:69:a0:34:05:d2:3c:98:a9:ee: 2b:bb:71:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMevzoXYTKrzr3t4BAvaA9ie7oeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjA1MTIxNzExNTlaFw0yNjA1MTMxNzI3NTlaMDMxMTAvBgNV BAMTKDQ4MzgxODQxQTc1Nzk3NUUzMjBFMDZCRDA0MkYzQjlFODMyRUUzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjeRzBrmBUtJlG26TlE+27HpMT AThZqEhe4DqY21k/D+jyAKOSUYZ/wa+YCleLE9A2FNO7YUkYrqMnFlEzl8TLpu7e 8bLSek9oHGjl1po49s1PPHYQ6OAeOm3VeqU/TO7AFjlmQDgUAfz/gfNvsDT/nkrK h4cXMdHTahyAKp8S49+YyKC8ntdzK7JEEOhCHrgX4S8YK7RwdYn5Gs9c8eCGEFeO k9rk1LlLGH5z6nsrk4chKGexATpqCvs3paeVKbQceSNRAsdxpPjZXmsOhhHMQCYw 7a77PtCsIMKTw2O6MqiyIFs9yfJ4x+V7+jdFVGQCJgbrBxYfPxdw/5pCt3rLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDgYQadXl14yDga9BC87noMu45gwHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1 QzFBMjk0RUYxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbvsyKADk2ZoWOd1EaHnnpg64p/lw7BbpQx pzlwTBRZ11sLktxrBEmQAYzBDEbThK1WVYhZzF8AlCMTvh8OwFXhvuGo3/Lsffl7 T6S0JCIgLgIT390VLgopqyCym4mukFL+B6RtyzDzcpXuf8S/doWl6dKaMrfWRhYh fzgsuf3dXgxhaXr6acdHrDbvzLVSO03lMc2NwoD+HExBf307Dlsog+7hoEmHA/vF mhk6mAxAZeqGY5OBeyVbwal2lCGG8DNHjCUbV8fIPXhrfYx3SfuyxyhqgmvIumll 7kDdE/UhprfZqdo05jHTneCR0XQ6TnpyMWmgNAXSPJip7iu7cbc= -----END CERTIFICATE-----Generated at Wed May 13 02:15:29 2026 by rpki-client