$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft File: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft (raw, json) Hash identifier: sKiJaw7HkpvaHOQe+c95r1/RAKfRx6frzn/8Gz8fMZQ= Subject key identifier: 5B:68:DF:2C:A6:3A:C0:1A:E1:75:30:83:0E:98:83:88:D7:8E:DE:F1 Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC Certificate issuer: /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Certificate serial: 6B9F3DF3DA1C15C41CA2AC6A00E067B5F7A80311 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 22:23:43 +0000 Manifest this update: Wed 23 Sep 2026 22:18:43 +0000 Manifest next update: Thu 24 Sep 2026 23:59:43 +0000 Files and hashes: 1: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: NOyjBT0zFszgxATvStbBfl8IjAdIOfkN8ppEqeVA78E=) 2: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl (hash: FiL0jA5/sINOBgAPZDyBtIUDJFenfUSqlQECC9THiU4=) 3: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: b/v/p4XXRhwRyIRQmWyoUAD/7oSBMCFky65Xuz73r7o=) 4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: YhKAzrow8fDAadjaSnduhgqC89vTvIB1S39dbE3C1og=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9f:3d:f3:da:1c:15:c4:1c:a2:ac:6a:00:e0:67:b5:f7:a8:03:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Validity Not Before: Sep 23 22:18:43 2026 GMT Not After : Sep 24 23:59:43 2026 GMT Subject: CN=5B68DF2CA63AC01AE17530830E988388D78EDEF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:d2:0f:dc:72:ed:c3:8d:25:8a:0d:7b:6d: 0f:13:3b:d5:92:85:15:9c:fd:f6:5c:18:c7:e5:a9: 2e:42:6a:ee:66:6e:49:8e:6e:f2:6a:7e:fb:74:1a: ca:84:4b:f4:55:d9:6c:ef:83:6e:46:13:64:39:3c: fb:c9:63:11:09:be:95:5b:be:78:e6:c9:b4:44:79: 2c:ab:3d:ba:dd:02:53:c0:02:7a:74:43:a2:26:53: 61:ef:55:a2:88:34:48:4e:82:dc:85:e5:40:46:ac: 59:13:a7:44:b1:01:d7:db:5b:7a:fc:af:6d:06:7e: d8:57:a5:83:14:45:45:ce:82:ce:48:83:e3:2d:24: e8:3c:d7:9f:38:0e:a4:91:db:fb:fa:ca:dc:d3:4d: 9a:82:a6:84:05:99:61:76:3f:dd:c4:5b:57:89:57: 44:8f:de:d0:32:5d:d7:6b:d6:3c:96:92:95:54:3d: 62:d9:4a:76:0f:27:21:a3:e8:1b:b9:29:9f:5a:12: 9d:d4:45:b0:91:1f:5e:ca:35:22:06:a7:6d:d9:ba: 83:42:ed:1a:b3:68:a5:a5:ab:91:94:cb:ff:ce:c9: 6e:59:3e:82:16:fe:1d:24:b6:48:5e:5f:f6:13:50: f5:4e:66:4a:e4:4a:02:db:7a:67:ad:ba:51:89:b7: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:DF:2C:A6:3A:C0:1A:E1:75:30:83:0E:98:83:88:D7:8E:DE:F1 X509v3 Authority Key Identifier: keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d9:18:1b:34:9e:16:00:84:b5:41:ab:b0:61:73:84:b3:74: 4a:a2:94:e8:de:8c:ce:12:32:7a:35:5f:93:93:e9:26:6c:32: d9:09:0c:35:18:ed:32:21:56:54:e3:e0:72:2e:bf:57:9f:78: f3:d6:e0:73:d8:43:58:cd:12:c8:d9:65:3d:1a:e5:c1:56:38: 01:de:bd:bd:ae:35:c9:5b:87:85:cc:31:7d:75:d3:d4:6f:16: de:ff:4c:d6:dc:ec:55:1c:f2:28:d2:a0:3f:8c:af:c5:1c:d8: 67:08:5f:06:ed:6a:a6:02:bc:32:ef:d9:8b:8b:f1:91:cf:b8: b3:2b:9a:07:96:92:54:e3:b7:4d:ed:32:99:21:2a:84:9d:46: e2:f7:59:39:af:9b:4d:f3:e5:d7:2e:94:33:87:0e:fc:db:79: 46:dc:9a:25:6b:2f:08:b9:1a:01:66:69:6a:ea:ab:9d:da:b8: 49:07:78:37:42:b9:0c:43:2d:3e:46:af:2e:8b:9a:2e:89:97: f1:e3:0f:a2:6c:34:02:c5:24:74:de:5e:0c:c7:6e:3c:86:53: 9f:5a:b0:a5:dc:3d:56:1b:7d:90:e3:3b:49:38:00:8f:2c:60: 31:42:a8:49:01:a0:67:6f:44:39:ef:e8:e4:0a:9d:b0:9c:90: 6b:c2:eb:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa58989ocFcQcoqxqAOBntfeoAxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIx RDk4MkZEQzAeFw0yNjA5MjMyMjE4NDNaFw0yNjA5MjQyMzU5NDNaMDMxMTAvBgNV BAMTKDVCNjhERjJDQTYzQUMwMUFFMTc1MzA4MzBFOTg4Mzg4RDc4RURFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZdIP3HLtw40lig17bQ8TO9WS hRWc/fZcGMflqS5Cau5mbkmObvJqfvt0GsqES/RV2Wzvg25GE2Q5PPvJYxEJvpVb vnjmybREeSyrPbrdAlPAAnp0Q6ImU2HvVaKINEhOgtyF5UBGrFkTp0SxAdfbW3r8 r20GfthXpYMURUXOgs5Ig+MtJOg81584DqSR2/v6ytzTTZqCpoQFmWF2P93EW1eJ V0SP3tAyXddr1jyWkpVUPWLZSnYPJyGj6Bu5KZ9aEp3URbCRH17KNSIGp23ZuoNC 7RqzaKWlq5GUy//OyW5ZPoIW/h0ktkheX/YTUPVOZkrkSgLbemetulGJtxGTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW2jfLKY6wBrhdTCDDpiDiNeO3vEwHwYDVR0j BBgwFoAUH81vYIBopWsrpcrVWJUS0h2YL9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njc1MmIzYzItM2YzMC00MDQwLThiMDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4 MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIxRDk4MkZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkNENkY2MDgwNjhBNTZCMkJBNUNBRDU1ODk1MTJEMjFEOTgy RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEy RDIxRDk4MkZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDZGBs0nhYAhLVBq7Bhc4SzdEqilOjejM4S Mno1X5OT6SZsMtkJDDUY7TIhVlTj4HIuv1efePPW4HPYQ1jNEsjZZT0a5cFWOAHe vb2uNclbh4XMMX1109RvFt7/TNbc7FUc8ijSoD+Mr8Uc2GcIXwbtaqYCvDLv2YuL 8ZHPuLMrmgeWklTjt03tMpkhKoSdRuL3WTmvm03z5dculDOHDvzbeUbcmiVrLwi5 GgFmaWrqq53auEkHeDdCuQxDLT5Gry6Lmi6Jl/HjD6JsNALFJHTeXgzHbjyGU59a sKXcPVYbfZDjO0k4AI8sYDFCqEkBoGdvRDnv6OQKnbCckGvC614= -----END CERTIFICATE-----Generated at Thu Sep 24 12:43:11 2026 by rpki-client