$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json) Hash identifier: y7ysDrnWrBrlvvrZBWzhQTox42+f/9txvjQ2iyv3vrs= Subject key identifier: 5E:A6:3F:23:17:F2:EF:6A:CB:1B:CA:BB:7B:5F:2A:18:2F:8D:65:41 Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 2888E4AA76C9C1DEE5A9830586133DD9C84DA287 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 15:57:26 +0000 Manifest this update: Sun 01 Nov 2026 15:52:26 +0000 Manifest next update: Mon 02 Nov 2026 17:24:26 +0000 Files and hashes: 1: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: 25W04rk2y1mKiejvQzHQ7WuNti/XVB8dI3DIqJqZJhM=) 2: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=) 3: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=) 4: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:88:e4:aa:76:c9:c1:de:e5:a9:83:05:86:13:3d:d9:c8:4d:a2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: Nov 1 15:52:26 2026 GMT Not After : Nov 2 17:24:26 2026 GMT Subject: CN=5EA63F2317F2EF6ACB1BCABB7B5F2A182F8D6541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:36:1a:c7:8a:24:94:8b:51:12:59:19:be: f3:a6:c9:db:da:a9:eb:cc:81:72:a7:31:ee:7a:c4: 03:8b:cd:e9:08:d7:78:9a:00:39:9c:3b:a7:9a:c1: 14:75:02:66:f4:ef:f3:bc:25:04:13:e4:4b:1a:fd: bd:bf:c5:60:77:ea:33:8c:32:7f:76:73:f6:36:c9: 30:80:84:65:c4:4e:c9:1c:96:7a:60:fa:82:8f:e2: 73:d0:62:66:03:89:89:26:e8:57:95:66:4c:7e:ee: 29:5d:1d:33:df:53:4c:27:48:d0:a2:22:b9:78:0e: 9f:6a:a2:38:fa:96:a6:e4:31:29:60:9a:aa:c0:3d: 9f:34:0b:69:e9:54:8e:f8:88:ae:ee:25:47:26:16: 8f:dc:c5:69:80:b1:6e:ea:03:51:3d:4d:41:d8:5d: 83:de:e4:ba:64:ec:d3:fd:e4:8c:30:e4:ea:ca:c4: 87:54:b1:a3:1c:55:0e:b8:2c:b3:67:36:be:a0:58: 8d:b4:c8:06:73:2b:35:ee:ad:15:c6:70:5b:3d:30: f9:3c:e8:f9:15:3f:cf:14:e4:17:9b:f4:b3:82:9e: 5f:dd:5f:b3:f2:14:fe:74:e3:70:81:fa:87:49:54: e9:ca:c1:37:6b:c4:c7:c4:0d:4a:b2:13:8e:52:89: e2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A6:3F:23:17:F2:EF:6A:CB:1B:CA:BB:7B:5F:2A:18:2F:8D:65:41 X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c2:91:74:44:a1:3c:33:33:b2:9b:87:3d:b9:d0:42:33:0f: 81:46:c6:61:c3:d2:43:bc:41:7c:2f:fa:26:25:19:e8:99:27: 1f:74:dd:45:92:f6:7f:35:63:b3:ce:94:2d:ec:de:37:4b:15: d7:ad:af:fe:66:8c:ec:f2:26:c6:d4:53:4b:61:46:87:ea:14: fa:4a:04:0f:fc:4a:51:71:68:00:fb:a9:57:90:65:75:57:9f: 4e:59:6d:70:a5:11:9c:62:63:3d:1e:05:ba:25:42:ec:ce:b7: 0c:02:72:37:dd:c0:33:fb:b7:88:92:a6:d2:21:19:60:b3:4e: b5:d5:2e:df:eb:5e:89:3a:d8:8a:5c:65:88:42:00:e9:79:a4: b3:a6:1a:04:b6:fd:5b:27:79:4c:40:1d:38:d3:b8:c5:5c:3b: a8:f8:af:14:6c:b8:58:17:55:81:0a:2c:84:5f:99:da:a1:c2: 68:b0:84:7c:9b:5b:e8:79:cc:ce:80:ef:c2:59:b7:ef:03:5e: 98:6d:8d:13:e9:eb:27:44:ae:17:9e:23:91:26:01:4d:3e:b0: c5:2a:86:d8:2b:54:69:79:e3:d3:80:f9:28:77:06:e9:1b:5c: d2:00:78:1e:7b:b3:c9:9b:6a:66:ec:09:41:15:77:d0:bc:2e: 8c:fe:41:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIjkqnbJwd7lqYMFhhM92chNoocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjExMDExNTUyMjZaFw0yNjExMDIxNzI0MjZaMDMxMTAvBgNV BAMTKDVFQTYzRjIzMTdGMkVGNkFDQjFCQ0FCQjdCNUYyQTE4MkY4RDY1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWsTYax4oklItRElkZvvOmydva qevMgXKnMe56xAOLzekI13iaADmcO6eawRR1Amb07/O8JQQT5Esa/b2/xWB36jOM Mn92c/Y2yTCAhGXETskclnpg+oKP4nPQYmYDiYkm6FeVZkx+7ildHTPfU0wnSNCi Irl4Dp9qojj6lqbkMSlgmqrAPZ80C2npVI74iK7uJUcmFo/cxWmAsW7qA1E9TUHY XYPe5Lpk7NP95Iww5OrKxIdUsaMcVQ64LLNnNr6gWI20yAZzKzXurRXGcFs9MPk8 6PkVP88U5Beb9LOCnl/dX7PyFP5043CB+odJVOnKwTdrxMfEDUqyE45SieJdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqY/Ixfy72rLG8q7e18qGC+NZUEwHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1 QzFBMjk0RUYxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETCkXREoTwzM7Kbhz250EIzD4FGxmHD0kO8 QXwv+iYlGeiZJx903UWS9n81Y7POlC3s3jdLFdetr/5mjOzyJsbUU0thRofqFPpK BA/8SlFxaAD7qVeQZXVXn05ZbXClEZxiYz0eBbolQuzOtwwCcjfdwDP7t4iSptIh GWCzTrXVLt/rXok62IpcZYhCAOl5pLOmGgS2/VsneUxAHTjTuMVcO6j4rxRsuFgX VYEKLIRfmdqhwmiwhHybW+h5zM6A78JZt+8DXphtjRPp6ydErheeI5EmAU0+sMUq htgrVGl549OA+Sh3BukbXNIAeB57s8mbambsCUEVd9C8Loz+QbI= -----END CERTIFICATE-----Generated at Mon Nov 2 00:46:35 2026 by rpki-client