$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft File: 00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft (raw, json) Hash identifier: aRSHnXhZOxuIaswy3C6mQiEMPqT8ozRUBE6a2JWs5HI= Subject key identifier: 04:91:F8:28:EF:BB:EA:7A:E5:58:4E:ED:2F:B3:B4:B3:5F:38:8F:8D Authority key identifier: 00:FC:B0:85:8F:55:5F:1D:9C:D4:26:A3:D5:26:EF:F1:AA:FC:C7:EC Certificate issuer: /CN=00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC Certificate serial: 0996DF1B125FA185130369185842AFB71879530E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 09:23:47 +0000 Manifest this update: Thu 03 Sep 2026 09:18:47 +0000 Manifest next update: Fri 04 Sep 2026 12:30:47 +0000 Files and hashes: 1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: WcB0PgJyyinAEoffJz7GUrERTjEBi7z+T4dwRpZHAHk=) 2: 3130332e3230342e34362e302f32342d3234203d3e20313531353835.roa (hash: JvicXysmy0GMGvvHDNw4SG+9E+mWtUmol0J6/hPKP3A=) 3: 00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.crl (hash: /yWPU6fb2rk8yKZ3C4ktIriQ3BYbJJLsxqBkcU3LoFs=) 4: 3130332e3230342e34372e302f32342d3234203d3e20313531353835.roa (hash: cLSIVr2PH/8S5xYZmn7AEsDIkyQz3OhGhtxG+VvBu+U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.crl rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:96:df:1b:12:5f:a1:85:13:03:69:18:58:42:af:b7:18:79:53:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC Validity Not Before: Sep 3 09:18:47 2026 GMT Not After : Sep 4 12:30:47 2026 GMT Subject: CN=0491F828EFBBEA7AE5584EED2FB3B4B35F388F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:f6:3d:5e:72:06:2d:97:82:16:81:20:bb: e4:4e:ec:17:ca:89:2b:fa:c4:27:e1:8a:cb:ad:31: 49:cb:96:14:b6:d6:11:4d:1d:24:d1:68:ec:e1:16: 80:22:dd:f0:7d:aa:c5:f7:33:80:96:d7:f7:07:e4: 99:aa:72:b4:bf:a5:74:53:c6:ab:c7:15:16:2d:3a: 56:1e:39:6b:eb:15:f8:7b:1e:f1:93:17:a3:2a:50: 9f:da:62:e3:8b:46:d6:41:63:36:79:e7:ce:44:10: cc:71:c1:9a:a7:7d:07:ce:62:e0:74:10:a0:09:84: 88:83:fe:2b:a8:55:9c:a4:87:74:78:58:ed:b1:b9: 5f:89:a7:40:8b:ea:0b:6e:ca:cc:44:65:70:63:e0: c0:30:4c:7a:9d:e4:9b:e8:42:8c:eb:de:07:a5:bb: 70:e3:7a:3f:7c:3c:53:74:20:84:99:a9:7d:74:e7: b4:f9:c3:a7:c7:6f:03:be:5f:ed:fd:68:29:68:ce: c1:96:cc:d0:5d:d5:68:36:42:47:0f:7b:71:f9:af: 19:10:d1:36:dd:1a:99:2f:66:6c:46:91:6f:6a:41: 81:36:8b:aa:48:8e:57:b6:d6:f1:23:e4:4f:f6:50: 4b:5e:cc:f8:0a:0b:d6:36:7b:18:c3:55:17:25:c3: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:91:F8:28:EF:BB:EA:7A:E5:58:4E:ED:2F:B3:B4:B3:5F:38:8F:8D X509v3 Authority Key Identifier: keyid:00:FC:B0:85:8F:55:5F:1D:9C:D4:26:A3:D5:26:EF:F1:AA:FC:C7:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:16:a6:dd:df:f2:b0:b8:26:ed:08:b0:78:b3:0e:2e:30:4a: ea:c4:cf:7d:f3:ff:b5:90:e1:25:54:44:8f:f7:c5:e4:3a:51: 73:77:55:a2:e4:1a:00:3f:fa:ef:3f:2f:51:c3:3e:64:9e:3f: 1c:00:7f:4b:71:56:9d:ad:75:66:1b:6c:f4:42:b7:62:71:ba: 42:08:ab:d1:a8:73:53:07:01:7d:e3:2d:46:20:71:48:2c:55: c0:6e:1a:5e:fd:01:cf:0c:05:25:03:9b:39:b7:8e:cc:fb:d2: 96:f1:72:23:9c:e6:e8:5b:87:21:1b:9a:3b:8c:95:a9:27:82: 76:a3:d7:f1:57:64:55:52:a1:5e:d8:7a:e9:13:89:c4:08:fc: 9d:36:84:e2:79:31:8c:84:92:aa:86:30:97:be:28:ba:5c:df: bc:49:32:89:e9:8a:45:55:b1:d7:3f:fb:ab:da:6c:4b:3a:c9: e1:9f:e1:8d:88:5a:97:69:6b:73:37:c6:c1:8d:f9:03:53:b6: c4:91:b8:e6:b4:2f:bb:5b:5b:2f:9d:95:14:af:91:fd:c4:11: b5:47:3f:62:af:46:8b:89:26:10:6f:dc:02:b2:27:4d:a7:07: 06:e8:dc:59:87:f9:99:02:c8:4f:8f:ce:68:e4:43:17:b2:ce: 93:d8:5a:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCZbfGxJfoYUTA2kYWEKvtxh5Uw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGQ0IwODU4RjU1NUYxRDlDRDQyNkEzRDUyNkVGRjFB QUZDQzdFQzAeFw0yNjA5MDMwOTE4NDdaFw0yNjA5MDQxMjMwNDdaMDMxMTAvBgNV BAMTKDA0OTFGODI4RUZCQkVBN0FFNTU4NEVFRDJGQjNCNEIzNUYzODhGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCvY9XnIGLZeCFoEgu+RO7BfK iSv6xCfhisutMUnLlhS21hFNHSTRaOzhFoAi3fB9qsX3M4CW1/cH5JmqcrS/pXRT xqvHFRYtOlYeOWvrFfh7HvGTF6MqUJ/aYuOLRtZBYzZ5585EEMxxwZqnfQfOYuB0 EKAJhIiD/iuoVZykh3R4WO2xuV+Jp0CL6gtuysxEZXBj4MAwTHqd5JvoQozr3gel u3Djej98PFN0IISZqX1057T5w6fHbwO+X+39aClozsGWzNBd1Wg2QkcPe3H5rxkQ 0TbdGpkvZmxGkW9qQYE2i6pIjle21vEj5E/2UEtezPgKC9Y2exjDVRclw553AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJH4KO+76nrlWE7tL7O0s184j40wHwYDVR0j BBgwFoAUAPywhY9VXx2c1Caj1Sbv8ar8x+wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY2MGU3NTgtZjY1Yi00NjlhLThhMWMtZmIwMTk4NDM0M2IxLzAvMDBGQ0IwODU4 RjU1NUYxRDlDRDQyNkEzRDUyNkVGRjFBQUZDQzdFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMEZDQjA4NThGNTU1RjFEOUNENDI2QTNENTI2RUZGMUFBRkND N0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvMDBGQ0IwODU4RjU1NUYxRDlDRDQyNkEzRDUyNkVG RjFBQUZDQzdFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgWpt3f8rC4Ju0IsHizDi4wSurEz33z/7WQ 4SVURI/3xeQ6UXN3VaLkGgA/+u8/L1HDPmSePxwAf0txVp2tdWYbbPRCt2JxukII q9Goc1MHAX3jLUYgcUgsVcBuGl79Ac8MBSUDmzm3jsz70pbxciOc5uhbhyEbmjuM lakngnaj1/FXZFVSoV7YeukTicQI/J02hOJ5MYyEkqqGMJe+KLpc37xJMonpikVV sdc/+6vabEs6yeGf4Y2IWpdpa3M3xsGN+QNTtsSRuOa0L7tbWy+dlRSvkf3EEbVH P2KvRouJJhBv3AKyJ02nBwbo3FmH+ZkCyE+PzmjkQxeyzpPYWsg= -----END CERTIFICATE-----Generated at Thu Sep 3 19:23:46 2026 by rpki-client