$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json) Hash identifier: klkdg+yr0WaJG9msUeNKjR/3n/GBCFEUXbGvhsZtbNk= Subject key identifier: 89:98:A8:D2:A1:F1:2D:C0:A4:B6:3E:A6:D3:60:F4:E1:E2:7B:F6:27 Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 01DE43CCAE07558A3AFD6F0DA6941688327A8934 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 00:52:14 +0000 Manifest this update: Wed 23 Sep 2026 00:47:14 +0000 Manifest next update: Thu 24 Sep 2026 04:49:14 +0000 Files and hashes: 1: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=) 2: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=) 3: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: NNFsGNlGdkryU8wsccYKmoMjFT9xI5patwwJhmqQSFU=) 4: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:de:43:cc:ae:07:55:8a:3a:fd:6f:0d:a6:94:16:88:32:7a:89:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: Sep 23 00:47:14 2026 GMT Not After : Sep 24 04:49:14 2026 GMT Subject: CN=8998A8D2A1F12DC0A4B63EA6D360F4E1E27BF627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:1b:46:d6:c9:8e:de:80:43:c5:8e:3b:54: e8:2e:e1:2f:ae:11:53:0b:c9:91:4f:a1:a6:87:19: be:6e:8e:97:8f:5e:11:54:fb:ff:10:70:e7:1a:26: b2:1c:48:4a:79:1a:38:17:1d:b3:75:34:79:15:fa: 7c:09:f9:18:51:48:9b:f1:e0:0d:6c:7f:3e:76:fb: cc:63:06:ea:9f:5c:69:0b:bd:a6:f8:3b:44:d9:64: 24:76:ae:28:4a:ac:2f:04:91:ee:ef:a6:d5:df:9b: 7f:26:de:70:43:7f:97:18:26:cc:52:71:eb:d0:5e: eb:e8:64:fa:95:64:0f:3f:77:18:a0:34:79:c8:f0: 3d:5e:b0:09:29:f5:2f:37:70:02:9a:4e:1c:31:ff: d5:24:f7:4a:bc:e0:f8:02:ac:1d:cb:b7:08:15:d1: 91:9b:c5:b1:30:a3:7f:eb:c7:28:62:f1:b3:95:82: 29:d1:df:1d:51:48:43:2f:e1:c6:3d:93:f0:c0:ab: 52:28:96:df:aa:69:d4:5d:e1:e4:46:e8:f6:d3:9d: 21:46:a7:b6:a8:da:98:e8:cb:0d:8a:be:9d:cd:4d: ec:7c:72:f4:86:4f:28:a7:a9:98:1e:7a:82:23:f3: 36:fe:ad:d5:ec:33:b8:f4:0e:de:85:c0:98:a4:e6: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:98:A8:D2:A1:F1:2D:C0:A4:B6:3E:A6:D3:60:F4:E1:E2:7B:F6:27 X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:42:6b:73:ad:29:75:63:13:19:28:80:f5:39:5c:a8:3f:ea: cd:01:41:7b:85:50:60:29:dd:73:30:d9:b9:9c:26:94:24:d9: 66:7c:e7:3e:14:0c:c9:83:08:83:7c:b5:b9:02:61:7b:f7:88: 2e:48:0b:bf:a9:12:46:ed:06:61:9f:8f:3f:24:56:a2:48:31: 32:21:c4:d7:0b:f2:b7:9f:85:c9:2e:a7:d7:9c:ee:25:8d:e6: 36:15:e4:bb:76:e5:61:a3:8b:09:58:7d:44:92:bd:9b:66:a0: fb:b4:f5:63:e8:a2:8b:2e:85:f9:cc:de:0a:88:07:be:9b:e8: 9a:2d:89:3f:51:4c:11:52:1d:d0:65:dc:e0:6a:30:dd:28:63: 1f:02:ce:4b:3b:a5:2f:76:29:96:02:c6:72:f4:85:90:21:45: c2:c9:2f:64:6b:85:56:d9:90:a1:8c:b3:54:97:40:86:39:d1: 33:cc:29:6f:3d:a3:70:74:e2:39:d0:6b:1b:83:46:ca:fb:e6: 2c:0c:79:71:c1:56:39:e1:83:f0:7c:7a:f8:79:7f:0d:ce:7b: 5a:56:4e:9d:ff:15:4f:61:35:14:b4:75:4f:7c:33:e3:9e:1a: 1a:fd:d3:e7:9f:27:91:3f:ba:54:d4:c7:31:a8:a1:1f:31:73: 92:ce:ae:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAd5DzK4HVYo6/W8NppQWiDJ6iTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjA5MjMwMDQ3MTRaFw0yNjA5MjQwNDQ5MTRaMDMxMTAvBgNV BAMTKDg5OThBOEQyQTFGMTJEQzBBNEI2M0VBNkQzNjBGNEUxRTI3QkY2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmhtG1smO3oBDxY47VOgu4S+u EVMLyZFPoaaHGb5ujpePXhFU+/8QcOcaJrIcSEp5GjgXHbN1NHkV+nwJ+RhRSJvx 4A1sfz52+8xjBuqfXGkLvab4O0TZZCR2rihKrC8Eke7vptXfm38m3nBDf5cYJsxS cevQXuvoZPqVZA8/dxigNHnI8D1esAkp9S83cAKaThwx/9Uk90q84PgCrB3LtwgV 0ZGbxbEwo3/rxyhi8bOVginR3x1RSEMv4cY9k/DAq1Iolt+qadRd4eRG6PbTnSFG p7ao2pjoyw2Kvp3NTex8cvSGTyinqZgeeoIj8zb+rdXsM7j0Dt6FwJik5jYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiZio0qHxLcCktj6m02D04eJ79icwHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1 QzFBMjk0RUYxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpCa3OtKXVjExkogPU5XKg/6s0BQXuFUGAp 3XMw2bmcJpQk2WZ85z4UDMmDCIN8tbkCYXv3iC5IC7+pEkbtBmGfjz8kVqJIMTIh xNcL8refhckup9ec7iWN5jYV5Lt25WGjiwlYfUSSvZtmoPu09WPooosuhfnM3gqI B76b6JotiT9RTBFSHdBl3OBqMN0oYx8Czks7pS92KZYCxnL0hZAhRcLJL2RrhVbZ kKGMs1SXQIY50TPMKW89o3B04jnQaxuDRsr75iwMeXHBVjnhg/B8evh5fw3Oe1pW Tp3/FU9hNRS0dU98M+OeGhr90+efJ5E/ulTUxzGooR8xc5LOroc= -----END CERTIFICATE-----Generated at Wed Sep 23 11:37:41 2026 by rpki-client