$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json) Hash identifier: kPmFD5qOVOzh4eoM4ZrkcW08t2UCtw4uNgTVsvXLMLk= Subject key identifier: 66:3E:7A:91:E2:A4:DE:9B:3C:5C:4B:85:6E:E0:BC:9E:6D:D6:29:89 Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 339E7C853732DEECF77A012FD720014000312DD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 22:17:07 +0000 Manifest this update: Sat 14 Nov 2026 22:12:07 +0000 Manifest next update: Sun 15 Nov 2026 23:42:07 +0000 Files and hashes: 1: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=) 2: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=) 3: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: C0V2dAH44rn3yMG1moagalVgIUncX+LORTDIiaW4G8s=) 4: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9e:7c:85:37:32:de:ec:f7:7a:01:2f:d7:20:01:40:00:31:2d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: Nov 14 22:12:07 2026 GMT Not After : Nov 15 23:42:07 2026 GMT Subject: CN=663E7A91E2A4DE9B3C5C4B856EE0BC9E6DD62989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:26:9b:12:32:03:f2:cc:15:78:ef:e9:5b: b0:11:e2:2d:5b:7f:c9:70:72:61:86:00:e6:81:65: 5e:ab:2b:21:eb:5e:e8:35:1d:d2:86:de:ad:da:f6: 92:c9:0a:e8:8b:3e:db:0b:ad:f7:b1:fc:be:92:68: 42:c6:60:1e:41:d7:13:29:d7:f1:f5:bc:ed:1b:7e: 87:03:85:3d:d4:66:e9:27:24:5c:e6:a8:19:0a:9e: 67:64:fc:69:d0:d3:24:ef:91:5e:de:3e:d8:c9:e5: 32:f6:31:3e:bf:ff:aa:24:34:83:5e:f1:e8:dc:3a: 99:88:d1:9b:74:66:5a:09:24:d1:6e:a3:7e:3a:42: 40:ed:7c:86:82:53:d8:a3:4c:3c:0a:3d:fd:07:fd: 22:7c:fd:0e:a6:3d:89:d1:4a:71:07:2f:33:cc:96: 39:70:e4:a8:49:a5:fb:74:69:fa:8e:12:5d:b8:a9: 33:41:90:f6:a3:3e:be:e6:a5:1d:1b:6e:4d:9a:bf: 41:4d:1a:63:8f:10:a9:99:4c:bb:e5:78:aa:c6:f6: f7:a7:7a:6b:23:0c:06:0b:50:2a:50:c6:57:a5:03: bf:73:19:d8:91:7a:bc:62:2c:96:ce:70:9f:d9:6b: 20:73:fa:46:d3:71:99:25:54:86:44:cf:67:67:0b: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3E:7A:91:E2:A4:DE:9B:3C:5C:4B:85:6E:E0:BC:9E:6D:D6:29:89 X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d8:47:f3:b7:f7:a2:4b:1b:8f:4d:85:7f:83:4a:4c:80:7a: 46:ab:12:9d:06:20:2b:53:e4:55:1a:10:c8:04:21:c1:0b:c6: 16:b6:29:ab:d6:8e:b4:71:2c:fe:bb:6c:5f:fc:b4:be:74:38: bc:b1:70:93:48:19:a4:af:f0:6d:0e:71:33:5c:58:42:5c:2d: 1b:00:a0:a1:12:f4:46:8b:6e:64:8e:15:13:e5:0f:2f:cc:fa: 18:14:20:89:b7:02:9a:b3:0e:8f:fc:27:c5:c0:d6:65:f6:2e: c8:1e:49:f7:16:92:15:af:9c:f6:72:76:17:df:1d:e4:3a:36: a9:38:0f:a1:74:04:82:df:eb:e3:a4:c1:1f:0f:b7:7d:9f:e1: c3:56:bc:01:62:6f:52:a3:23:9b:dc:11:ed:8d:f4:6f:c6:5d: d6:6a:2e:99:de:5a:27:0e:c1:5c:3d:61:b4:f3:8b:ea:1b:d4: 20:b4:5b:85:e0:bc:2d:86:fd:70:0e:f4:20:82:3a:ba:d6:85: 1f:d3:ba:1f:04:ba:7e:54:66:93:cd:a5:9c:fa:19:44:8c:a1: 3d:ee:5f:e8:a4:4e:0c:01:1c:3b:c4:b8:cd:4f:c0:87:22:ef: 7c:0a:18:1f:2e:1f:8f:4e:08:87:23:01:06:98:30:82:72:44: 25:0f:53:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM558hTcy3uz3egEv1yABQAAxLdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjExMTQyMjEyMDdaFw0yNjExMTUyMzQyMDdaMDMxMTAvBgNV BAMTKDY2M0U3QTkxRTJBNERFOUIzQzVDNEI4NTZFRTBCQzlFNkRENjI5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TiabEjID8swVeO/pW7AR4i1b f8lwcmGGAOaBZV6rKyHrXug1HdKG3q3a9pLJCuiLPtsLrfex/L6SaELGYB5B1xMp 1/H1vO0bfocDhT3UZuknJFzmqBkKnmdk/GnQ0yTvkV7ePtjJ5TL2MT6//6okNINe 8ejcOpmI0Zt0ZloJJNFuo346QkDtfIaCU9ijTDwKPf0H/SJ8/Q6mPYnRSnEHLzPM ljlw5KhJpft0afqOEl24qTNBkPajPr7mpR0bbk2av0FNGmOPEKmZTLvleKrG9ven emsjDAYLUCpQxlelA79zGdiRerxiLJbOcJ/ZayBz+kbTcZklVIZEz2dnC/RzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZj56keKk3ps8XEuFbuC8nm3WKYkwHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1 QzFBMjk0RUYxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3YR/O396JLG49NhX+DSkyAekarEp0GICtT 5FUaEMgEIcELxha2KavWjrRxLP67bF/8tL50OLyxcJNIGaSv8G0OcTNcWEJcLRsA oKES9EaLbmSOFRPlDy/M+hgUIIm3ApqzDo/8J8XA1mX2LsgeSfcWkhWvnPZydhff HeQ6Nqk4D6F0BILf6+OkwR8Pt32f4cNWvAFib1KjI5vcEe2N9G/GXdZqLpneWicO wVw9YbTzi+ob1CC0W4XgvC2G/XAO9CCCOrrWhR/Tuh8Eun5UZpPNpZz6GUSMoT3u X+ikTgwBHDvEuM1PwIci73wKGB8uH49OCIcjAQaYMIJyRCUPU/g= -----END CERTIFICATE-----Generated at Sun Nov 15 17:16:32 2026 by rpki-client