$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft File: FC1A394AF4972652D1A91AA14711525172E42585.mft (raw, json) Hash identifier: ti/dwFD/org1txhUm8sIbJMGc9UIDRlLtdMkOqBK33s= Subject key identifier: D8:ED:C4:68:04:0B:25:57:78:77:8F:60:14:77:15:E1:F0:F9:E7:CB Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 Certificate issuer: /CN=FC1A394AF4972652D1A91AA14711525172E42585 Certificate serial: 777737A429E82332B3FB95A6669A318734BC392F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 18:43:36 +0000 Manifest this update: Fri 25 Sep 2026 18:38:36 +0000 Manifest next update: Sat 26 Sep 2026 21:35:36 +0000 Files and hashes: 1: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: 92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=) 2: FC1A394AF4972652D1A91AA14711525172E42585.crl (hash: S4/7LfV0EW7tRwwb2/dftrCSR7U1qJIKsYbilV6l+30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 21:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:77:37:a4:29:e8:23:32:b3:fb:95:a6:66:9a:31:87:34:bc:39:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585 Validity Not Before: Sep 25 18:38:36 2026 GMT Not After : Sep 26 21:35:36 2026 GMT Subject: CN=D8EDC468040B255778778F60147715E1F0F9E7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:01:49:73:60:5d:87:89:a9:1e:45:2b:1c: 21:e8:ab:ef:d9:58:de:38:d7:46:3d:06:1b:18:42: 63:4a:f4:46:00:55:4f:cc:3d:68:8b:89:95:11:00: b5:d1:96:dd:7f:ad:21:fe:31:a2:67:f2:65:0a:25: 95:ac:96:18:85:75:17:86:c5:1d:4d:c1:7e:d3:fa: 5b:15:1e:b7:8b:3c:62:f3:73:30:d8:f1:85:52:bf: ab:87:58:fb:b0:48:72:7f:2e:5e:34:c4:36:b7:85: 97:d7:bd:7a:f1:29:cd:c3:a2:81:a7:70:f5:02:1f: 00:d0:80:4e:be:63:84:2f:b9:78:fa:61:4b:c4:a2: 84:be:5b:ef:59:88:df:0d:d4:bd:b3:8a:da:01:b3: bf:8a:5c:23:ff:f6:b6:f7:5b:7a:9e:7b:f0:ae:da: a5:74:be:1b:34:ef:48:f6:7b:a9:97:13:09:2e:92: 33:b2:cb:ce:e9:bc:ba:95:ec:ea:30:e6:d4:8e:1a: 6f:aa:e3:19:63:5d:db:9c:2c:e2:b2:1b:0d:50:71: 5c:12:50:09:93:0a:16:fd:92:cd:c7:22:60:1d:e2: 67:79:0b:63:74:6d:03:67:47:4a:96:e6:5c:42:d2: a9:15:64:7b:c9:b0:1b:e8:bb:59:2b:b9:64:a4:36: c4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:ED:C4:68:04:0B:25:57:78:77:8F:60:14:77:15:E1:F0:F9:E7:CB X509v3 Authority Key Identifier: keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:01:65:38:01:f2:69:e6:f8:e2:00:6a:85:0e:28:54:6a:3d: 8c:be:57:09:b9:22:f2:10:20:bf:af:26:14:83:c4:83:82:20: c9:a1:c4:cd:ce:ab:3a:b9:5b:34:89:23:04:8f:a1:73:e4:fc: 44:ee:06:5c:e3:94:0a:bb:be:fe:5e:6c:46:6d:6b:06:a0:e3: 00:b0:4a:84:bb:d8:7e:dd:5b:47:04:c6:d8:0e:3d:cc:08:ce: 95:53:c6:cc:ec:19:40:ef:4f:48:79:8c:ce:e8:f0:53:aa:91: b3:da:ae:31:76:39:cd:3c:19:17:6d:1e:dc:c2:37:5c:1c:74: 64:57:86:34:f1:49:e1:b6:30:11:78:9a:95:c4:eb:42:bb:43: 1b:67:1e:44:c0:52:49:1b:06:96:38:f7:9b:14:26:65:cf:7a: 4f:36:83:89:59:2e:20:4a:2b:2d:cb:dd:65:e2:bc:36:7e:4f: 02:ad:ab:fd:15:89:62:b4:6a:ca:29:04:68:a7:10:17:09:d5: fd:d8:22:c9:cb:ba:d9:a1:99:cd:04:22:e8:ee:de:de:ae:42: c8:58:3f:ab:2f:3e:f0:61:8a:25:f9:74:cb:b0:1b:8d:40:46: 64:d3:44:e1:5e:7a:05:e1:12:78:73:8a:ac:56:7c:d7:5b:0b: cf:a8:7c:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3c3pCnoIzKz+5WmZpoxhzS8OS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3 MkU0MjU4NTAeFw0yNjA5MjUxODM4MzZaFw0yNjA5MjYyMTM1MzZaMDMxMTAvBgNV BAMTKEQ4RURDNDY4MDQwQjI1NTc3ODc3OEY2MDE0NzcxNUUxRjBGOUU3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT1gFJc2Bdh4mpHkUrHCHoq+/Z WN4410Y9BhsYQmNK9EYAVU/MPWiLiZURALXRlt1/rSH+MaJn8mUKJZWslhiFdReG xR1NwX7T+lsVHreLPGLzczDY8YVSv6uHWPuwSHJ/Ll40xDa3hZfXvXrxKc3DooGn cPUCHwDQgE6+Y4QvuXj6YUvEooS+W+9ZiN8N1L2zitoBs7+KXCP/9rb3W3qee/Cu 2qV0vhs070j2e6mXEwkukjOyy87pvLqV7Oow5tSOGm+q4xljXducLOKyGw1QcVwS UAmTChb9ks3HImAd4md5C2N0bQNnR0qW5lxC0qkVZHvJsBvou1kruWSkNsTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2O3EaAQLJVd4d49gFHcV4fD558swHwYDVR0j BBgwFoAU/Bo5SvSXJlLRqRqhRxFSUXLkJYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiZWE4MWQtODVhYy00MGE1LWE3ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFG NDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3MkU0MjU4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzFBMzk0QUY0OTcyNjUyRDFBOTFBQTE0NzExNTI1MTcyRTQy NTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiZWE4MWQtODVhYy00MGE1LWE3 ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUy NTE3MkU0MjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIBZTgB8mnm+OIAaoUOKFRqPYy+Vwm5IvIQ IL+vJhSDxIOCIMmhxM3Oqzq5WzSJIwSPoXPk/ETuBlzjlAq7vv5ebEZtawag4wCw SoS72H7dW0cExtgOPcwIzpVTxszsGUDvT0h5jM7o8FOqkbParjF2Oc08GRdtHtzC N1wcdGRXhjTxSeG2MBF4mpXE60K7QxtnHkTAUkkbBpY495sUJmXPek82g4lZLiBK Ky3L3WXivDZ+TwKtq/0ViWK0asopBGinEBcJ1f3YIsnLutmhmc0EIuju3t6uQshY P6svPvBhiiX5dMuwG41ARmTTROFeegXhEnhziqxWfNdbC8+ofCo= -----END CERTIFICATE-----Generated at Sat Sep 26 14:25:25 2026 by rpki-client