$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft File: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft (raw, json) Hash identifier: G96llajBl7OJGWD2hx9JIPwsTrk5/OAOwCkYnTQBCuc= Subject key identifier: D0:72:4B:EE:4D:A1:02:FB:3F:4F:24:A4:4E:73:B2:F7:D7:71:0D:64 Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC Certificate issuer: /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Certificate serial: 6E35DBCFDF855946811525D0C1B74A185B0BED2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 16:37:31 +0000 Manifest this update: Thu 03 Sep 2026 16:32:31 +0000 Manifest next update: Fri 04 Sep 2026 17:58:31 +0000 Files and hashes: 1: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: NOyjBT0zFszgxATvStbBfl8IjAdIOfkN8ppEqeVA78E=) 2: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: b/v/p4XXRhwRyIRQmWyoUAD/7oSBMCFky65Xuz73r7o=) 3: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl (hash: 9K49qDoHxH+wEl8bOdXykTS96h3LhJLkYyO2mxCXuC4=) 4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: YhKAzrow8fDAadjaSnduhgqC89vTvIB1S39dbE3C1og=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:35:db:cf:df:85:59:46:81:15:25:d0:c1:b7:4a:18:5b:0b:ed:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Validity Not Before: Sep 3 16:32:31 2026 GMT Not After : Sep 4 17:58:31 2026 GMT Subject: CN=D0724BEE4DA102FB3F4F24A44E73B2F7D7710D64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:ca:b4:c1:91:b7:32:e4:0c:48:34:c1:68: 4f:69:f7:9b:2f:08:51:32:28:23:db:e4:66:8e:5f: 10:aa:61:7f:6d:17:c6:2f:58:60:32:4b:fa:2a:23: 22:72:bb:83:e0:01:5d:ef:c9:4c:e3:1a:98:49:17: 7e:95:bd:cd:e8:45:ac:83:dc:30:2b:eb:9f:f4:62: ca:f8:27:e2:02:44:45:71:d2:54:c3:4c:3b:ab:7d: 5d:96:64:33:79:c4:8d:d4:6d:03:34:f1:d2:20:55: aa:13:8d:b8:9e:b3:54:36:de:f7:36:6b:24:47:87: 45:b7:c5:78:9b:7a:91:3b:09:36:ea:b7:0b:f4:cf: 12:c3:2f:94:4c:5c:c0:d3:48:e4:0f:e9:62:f0:d1: d2:0f:fd:2d:37:71:46:46:89:98:31:7e:ef:83:ae: b8:ce:b2:09:e7:65:25:ce:d6:e9:27:58:cd:18:17: d6:65:7a:bb:8a:ae:f5:71:b8:dd:81:9c:28:8a:61: 21:13:d5:6c:2d:87:dc:46:2b:ad:bb:22:83:ea:c3: 86:20:40:ca:d1:f7:81:29:a0:8a:bf:ff:aa:e6:85: 25:e9:56:59:7d:20:96:ed:96:be:99:41:62:7d:9e: f0:6d:80:3f:60:77:a6:cb:5f:3c:0a:58:c1:bd:15: 79:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:72:4B:EE:4D:A1:02:FB:3F:4F:24:A4:4E:73:B2:F7:D7:71:0D:64 X509v3 Authority Key Identifier: keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ed:03:a3:32:f2:0f:58:44:a7:92:6e:dc:c4:76:3e:e4:c0: db:7e:32:17:d8:aa:d7:fb:8e:84:13:e8:fb:a0:9c:41:6c:60: f2:e2:34:ab:b1:32:b0:a4:80:4d:64:3e:61:35:5b:3e:c5:23: 52:dc:35:13:d3:05:a4:ac:3e:f0:ec:a0:ab:4b:14:d0:1e:2c: f9:84:89:d1:66:e3:f6:c2:bf:47:1f:52:df:15:60:d8:04:50: cb:00:82:ae:ca:4c:82:13:54:d4:3e:03:97:71:78:96:e5:08: 59:a9:65:0b:77:dd:26:3b:f1:8f:5a:a0:60:fb:27:79:39:47: 61:6f:ab:af:91:2b:93:dc:05:45:7e:af:78:97:81:c6:99:f3: 55:1e:e6:39:e1:1d:1b:57:96:be:1d:52:ea:8b:29:ba:72:aa: 5c:9e:b7:67:c3:4e:b0:e5:08:bc:b5:47:50:90:fc:fb:fb:8c: 39:da:8d:91:d1:7f:6c:c6:c5:39:4b:7a:0a:fc:2f:71:0e:2d: 91:a0:1f:6d:ff:d3:50:36:6d:d0:d0:e9:c4:de:45:d3:71:df: cc:da:01:26:29:69:30:c5:5d:94:31:54:73:ed:5b:0e:c7:41: 28:da:25:55:00:83:26:2a:91:53:76:9d:e2:4c:29:fc:a8:3c: 35:f1:de:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjXbz9+FWUaBFSXQwbdKGFsL7SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIx RDk4MkZEQzAeFw0yNjA5MDMxNjMyMzFaFw0yNjA5MDQxNzU4MzFaMDMxMTAvBgNV BAMTKEQwNzI0QkVFNERBMTAyRkIzRjRGMjRBNDRFNzNCMkY3RDc3MTBENjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYMq0wZG3MuQMSDTBaE9p95sv CFEyKCPb5GaOXxCqYX9tF8YvWGAyS/oqIyJyu4PgAV3vyUzjGphJF36Vvc3oRayD 3DAr65/0Ysr4J+ICREVx0lTDTDurfV2WZDN5xI3UbQM08dIgVaoTjbies1Q23vc2 ayRHh0W3xXibepE7CTbqtwv0zxLDL5RMXMDTSOQP6WLw0dIP/S03cUZGiZgxfu+D rrjOsgnnZSXO1uknWM0YF9ZleruKrvVxuN2BnCiKYSET1Wwth9xGK627IoPqw4Yg QMrR94EpoIq//6rmhSXpVll9IJbtlr6ZQWJ9nvBtgD9gd6bLXzwKWMG9FXkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0HJL7k2hAvs/TySkTnOy99dxDWQwHwYDVR0j BBgwFoAUH81vYIBopWsrpcrVWJUS0h2YL9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njc1MmIzYzItM2YzMC00MDQwLThiMDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4 MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIxRDk4MkZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkNENkY2MDgwNjhBNTZCMkJBNUNBRDU1ODk1MTJEMjFEOTgy RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEy RDIxRDk4MkZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3tA6My8g9YRKeSbtzEdj7kwNt+MhfYqtf7 joQT6PugnEFsYPLiNKuxMrCkgE1kPmE1Wz7FI1LcNRPTBaSsPvDsoKtLFNAeLPmE idFm4/bCv0cfUt8VYNgEUMsAgq7KTIITVNQ+A5dxeJblCFmpZQt33SY78Y9aoGD7 J3k5R2Fvq6+RK5PcBUV+r3iXgcaZ81Ue5jnhHRtXlr4dUuqLKbpyqlyet2fDTrDl CLy1R1CQ/Pv7jDnajZHRf2zGxTlLegr8L3EOLZGgH23/01A2bdDQ6cTeRdNx38za ASYpaTDFXZQxVHPtWw7HQSjaJVUAgyYqkVN2neJMKfyoPDXx3nI= -----END CERTIFICATE-----Generated at Thu Sep 3 20:48:20 2026 by rpki-client