$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft File: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft (raw, json) Hash identifier: tN4hNjeT7iEAhjqQncXKPfjQwpyQP1ZU+fX3jA4oKts= Subject key identifier: 1B:AF:18:38:C2:CD:17:C7:5B:87:47:DD:C8:6D:72:85:14:61:D2:05 Authority key identifier: FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 Certificate issuer: /CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Certificate serial: 775D98F63B5C2FB6E47E3979DBFC026DF516799F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 00:21:07 +0000 Manifest this update: Thu 24 Sep 2026 00:16:07 +0000 Manifest next update: Fri 25 Sep 2026 03:34:07 +0000 Files and hashes: 1: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl (hash: ZjdYkjBt49THjg6QV2jBpvptLl5WLMA5mkCpArTjxWM=) 2: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: 70NFz1U2se9VZLmxfjrFbhrAeSmQtExL3XMvYrlX6c8=) 3: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: 9YwGnAS4Ytmen5f7Im+DSh9RfLLeSLFnhc1Jg9+yNBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5d:98:f6:3b:5c:2f:b6:e4:7e:39:79:db:fc:02:6d:f5:16:79:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Validity Not Before: Sep 24 00:16:07 2026 GMT Not After : Sep 25 03:34:07 2026 GMT Subject: CN=1BAF1838C2CD17C75B8747DDC86D72851461D205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:e3:c9:f9:cc:5b:70:eb:8c:06:1c:20:d7: b6:e8:33:2b:79:0e:26:1b:9e:df:61:0a:2d:e0:49: d9:a7:85:40:a1:d8:56:2b:c8:4b:39:5f:d3:3d:a3: f2:52:09:2d:70:b9:a5:94:bc:6d:0b:4b:b9:5e:98: 48:97:70:f1:dd:df:7f:39:4a:65:20:c8:be:fa:da: 73:60:5d:8e:26:74:64:80:9a:15:1a:47:82:4a:75: ef:be:ac:6a:82:55:0e:60:67:5e:80:09:63:81:a1: 73:c5:aa:2e:e5:68:9b:4e:11:91:7d:25:6c:f0:c5: eb:8d:93:76:3c:a0:03:b5:9d:19:db:12:97:68:e5: a0:ad:f3:36:a8:cb:19:97:a6:44:14:78:be:ec:11: 95:a7:04:99:c0:3b:36:b6:34:33:e5:97:d8:d4:e1: 8e:3c:8e:63:5e:02:ce:2f:28:d9:b7:60:9b:eb:93: 89:bb:8e:b6:79:72:35:9c:99:aa:da:f2:63:5e:82: 2b:df:b6:91:b7:e4:c1:e8:a4:58:51:01:c9:45:80: 5f:5b:eb:9d:8a:b1:ae:89:50:77:8c:10:41:93:cd: b2:21:e4:02:16:3b:30:8f:cf:bc:a6:6c:63:9d:97: 6e:2a:28:65:ae:4e:d9:80:0e:13:37:46:10:f4:9b: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AF:18:38:C2:CD:17:C7:5B:87:47:DD:C8:6D:72:85:14:61:D2:05 X509v3 Authority Key Identifier: keyid:FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:91:ba:15:23:0c:03:1f:23:3a:6a:f2:a4:59:0a:f8:2d:09: 8c:6a:2a:2d:e5:a4:41:e4:0a:6f:54:07:65:bf:53:25:0e:20: f4:5e:f9:68:bc:46:89:ea:d9:09:e0:1f:34:01:24:1d:2d:36: d3:d7:00:7d:11:9b:68:ed:8f:c6:5c:b6:da:71:71:ed:f0:61: be:84:e2:22:aa:e2:54:1f:af:14:fe:0c:74:12:55:85:aa:1e: 0b:e0:75:4c:ae:11:f2:98:0d:cd:25:55:7e:af:54:9e:64:37: a8:a3:05:41:34:f7:91:42:1f:3c:b5:8d:f5:52:56:18:3a:57: 6a:5d:b1:8a:75:1a:a7:fd:80:b6:44:e6:02:8c:bc:31:a7:cb: 4e:07:a8:3b:6c:8c:cd:02:b4:f4:aa:5a:5c:f0:42:e9:38:21: d9:81:c0:3a:34:f1:e8:91:23:a0:34:e7:ff:af:42:df:21:07: 82:48:b0:11:9f:fb:40:bc:b0:06:74:52:ca:45:01:35:4a:f2: 7f:46:15:6b:f2:ca:f0:e0:b2:e2:e6:cb:5d:5e:e5:40:a7:07: 3d:d0:d7:76:37:10:27:61:d4:3f:e2:0a:db:c9:37:77:34:42: d4:35:88:cc:4e:78:8e:76:44:aa:52:8a:05:28:c2:a4:aa:50: dc:24:44:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd12Y9jtcL7bkfjl52/wCbfUWeZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgxODRF RjU2RTJGODAeFw0yNjA5MjQwMDE2MDdaFw0yNjA5MjUwMzM0MDdaMDMxMTAvBgNV BAMTKDFCQUYxODM4QzJDRDE3Qzc1Qjg3NDdEREM4NkQ3Mjg1MTQ2MUQyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNVePJ+cxbcOuMBhwg17boMyt5 DiYbnt9hCi3gSdmnhUCh2FYryEs5X9M9o/JSCS1wuaWUvG0LS7lemEiXcPHd3385 SmUgyL762nNgXY4mdGSAmhUaR4JKde++rGqCVQ5gZ16ACWOBoXPFqi7laJtOEZF9 JWzwxeuNk3Y8oAO1nRnbEpdo5aCt8zaoyxmXpkQUeL7sEZWnBJnAOza2NDPll9jU 4Y48jmNeAs4vKNm3YJvrk4m7jrZ5cjWcmara8mNegivftpG35MHopFhRAclFgF9b 652Ksa6JUHeMEEGTzbIh5AIWOzCPz7ymbGOdl24qKGWuTtmADhM3RhD0m6c7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG68YOMLNF8dbh0fdyG1yhRRh0gUwHwYDVR0j BBgwFoAU/ATBvM+qC7IdZ+bMscyBhO9W4vgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVkZWNhODItODlhYi00NTgyLThlODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkND RkFBMEJCMjFENjdFNkNDQjFDQzgxODRFRjU2RTJGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzA0QzFCQ0NGQUEwQkIyMUQ2N0U2Q0NCMUNDODE4NEVGNTZF MkY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgx ODRFRjU2RTJGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSRuhUjDAMfIzpq8qRZCvgtCYxqKi3lpEHk Cm9UB2W/UyUOIPRe+Wi8Ronq2QngHzQBJB0tNtPXAH0Rm2jtj8Zcttpxce3wYb6E 4iKq4lQfrxT+DHQSVYWqHgvgdUyuEfKYDc0lVX6vVJ5kN6ijBUE095FCHzy1jfVS Vhg6V2pdsYp1Gqf9gLZE5gKMvDGny04HqDtsjM0CtPSqWlzwQuk4IdmBwDo08eiR I6A05/+vQt8hB4JIsBGf+0C8sAZ0UspFATVK8n9GFWvyyvDgsuLmy11e5UCnBz3Q 13Y3ECdh1D/iCtvJN3c0QtQ1iMxOeI52RKpSigUowqSqUNwkRGM= -----END CERTIFICATE-----Generated at Thu Sep 24 17:33:54 2026 by rpki-client