$ rpki-client -vvf rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft File: FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft (raw, json) Hash identifier: et+whvfBMeDPUoMj7HZcBjQDAnzveoiFU51XuUIt6GE= Subject key identifier: 7D:F7:18:0F:AF:C8:3D:5F:E8:28:4C:D9:EC:43:40:2B:A0:30:C2:4E Authority key identifier: FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 Certificate issuer: /CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Certificate serial: 2FC37672DCB4EF9EDD91FDAA466825574172B689 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft Manifest number: 73 Signing time: Mon 27 Jul 2026 13:09:07 +0000 Manifest this update: Mon 27 Jul 2026 13:04:07 +0000 Manifest next update: Tue 28 Jul 2026 15:53:07 +0000 Files and hashes: 1: FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl (hash: B2m5LZRgliGj73qjH8J/KgQTWClLH7+JuJ2uysp8eTk=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: oShpqamIlxg4kQTK/q8+//W/2I271Sb0pfvq3P0rPtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 05:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c3:76:72:dc:b4:ef:9e:dd:91:fd:aa:46:68:25:57:41:72:b6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Validity Not Before: Jul 27 13:04:07 2026 GMT Not After : Jul 28 15:53:07 2026 GMT Subject: CN=7DF7180FAFC83D5FE8284CD9EC43402BA030C24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f7:40:a5:ea:65:b6:d9:a2:9c:58:e3:5c:fb: 3c:12:32:c5:48:2e:af:b5:05:f6:8e:56:7c:ec:17: 9f:88:a8:ab:0f:d1:3e:33:27:f3:68:86:fc:fc:18: a1:a9:ac:95:3d:2c:fc:8c:f9:61:93:46:4d:ba:53: 17:86:d6:7a:69:fc:ea:ac:dc:19:bd:5e:7e:a2:02: d6:47:08:e2:71:0f:de:d9:14:f9:41:7d:d3:91:75: ae:e2:b2:97:4e:d5:7a:39:db:d5:47:6c:8a:23:35: 04:9a:2d:b3:24:15:6a:58:23:e0:a3:9b:39:e5:94: f1:8e:53:b4:81:cf:4b:10:28:bb:c0:81:f9:94:d0: c2:92:67:57:54:44:fe:0c:63:9a:7b:ce:63:cc:40: 8b:19:4d:da:4a:a2:b4:65:74:93:72:f6:75:e1:af: 9c:79:57:c5:ca:57:fd:d9:3b:06:df:7e:a7:87:3e: d0:c5:de:5f:ba:59:2d:a3:b4:08:d1:c3:9b:52:49: 5c:ff:c4:fb:4c:ae:4c:38:73:89:b3:10:27:b1:0b: da:9e:10:d9:0e:55:f4:da:73:13:51:4b:4a:40:c4: fa:14:40:36:c9:3f:ac:63:67:40:69:d8:25:10:08: df:ee:51:5c:13:12:70:f1:5c:90:2a:2a:06:8a:0a: 85:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F7:18:0F:AF:C8:3D:5F:E8:28:4C:D9:EC:43:40:2B:A0:30:C2:4E X509v3 Authority Key Identifier: keyid:FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:02:cb:61:9f:d8:db:70:ab:ea:32:6b:2b:3b:aa:ba:25:09: 32:fb:2d:12:24:32:49:a6:c2:f2:c0:be:b4:92:06:b0:d7:4e: a1:74:f6:f8:e7:e3:53:8c:ff:80:9a:2f:28:6f:30:d0:93:c3: 31:73:b6:61:43:72:1c:05:50:21:e3:25:d2:04:c1:7a:9d:8b: 63:90:e4:78:22:4d:ea:db:46:0f:db:8b:12:35:c9:e5:5c:7a: 99:09:6a:79:f3:66:fb:f2:7e:1c:aa:b3:cb:8e:31:74:b4:36: 56:74:cc:35:62:41:0a:d8:10:65:22:79:53:21:14:d3:d6:18: f0:2a:1c:78:fc:8a:0c:cb:25:9f:d2:b0:5d:3a:81:7b:24:07: 2c:3e:92:c6:10:23:f5:dc:d7:aa:0c:82:2b:eb:a4:d2:db:9f: 2f:77:cc:65:80:e9:2e:ea:0f:55:36:4d:ef:76:e5:93:2d:3a: 7e:e8:70:fb:4d:d5:b2:51:33:c7:98:58:05:4c:cd:95:a6:e5: 3e:e5:e6:cb:99:ab:96:aa:c6:b8:09:87:65:e4:ba:80:df:44: fc:cd:63:ba:11:25:d3:1c:aa:96:09:82:c7:1a:0f:00:b9:38: d5:9c:b2:33:97:97:df:45:1b:39:d1:06:d0:1d:5c:3a:72:a2: fa:c0:82:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8N2cty0757dkf2qRmglV0FytokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdC MTRCMEVBOTAeFw0yNjA3MjcxMzA0MDdaFw0yNjA3MjgxNTUzMDdaMDMxMTAvBgNV BAMTKDdERjcxODBGQUZDODNENUZFODI4NENEOUVDNDM0MDJCQTAzMEMyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp90Cl6mW22aKcWONc+zwSMsVI Lq+1BfaOVnzsF5+IqKsP0T4zJ/Nohvz8GKGprJU9LPyM+WGTRk26UxeG1npp/Oqs 3Bm9Xn6iAtZHCOJxD97ZFPlBfdORda7ispdO1Xo529VHbIojNQSaLbMkFWpYI+Cj mznllPGOU7SBz0sQKLvAgfmU0MKSZ1dURP4MY5p7zmPMQIsZTdpKorRldJNy9nXh r5x5V8XKV/3ZOwbffqeHPtDF3l+6WS2jtAjRw5tSSVz/xPtMrkw4c4mzECexC9qe ENkOVfTacxNRS0pAxPoUQDbJP6xjZ0Bp2CUQCN/uUVwTEnDxXJAqKgaKCoUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUffcYD6/IPV/oKEzZ7ENAK6Awwk4wHwYDVR0j BBgwFoAU/IcKJ2m4jxAQeBftqjtCN7FLDqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyZjY0Y2EtZmE1NC00OTllLWJjMzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2 OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdCMTRCMEVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzg3MEEyNzY5Qjg4RjEwMTA3ODE3RURBQTNCNDIzN0IxNEIw RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQy MzdCMTRCMEVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYCy2Gf2Ntwq+oyays7qrolCTL7LRIkMkmm wvLAvrSSBrDXTqF09vjn41OM/4CaLyhvMNCTwzFztmFDchwFUCHjJdIEwXqdi2OQ 5HgiTerbRg/bixI1yeVcepkJannzZvvyfhyqs8uOMXS0NlZ0zDViQQrYEGUieVMh FNPWGPAqHHj8igzLJZ/SsF06gXskByw+ksYQI/Xc16oMgivrpNLbny93zGWA6S7q D1U2Te925ZMtOn7ocPtN1bJRM8eYWAVMzZWm5T7l5suZq5aqxrgJh2XkuoDfRPzN Y7oRJdMcqpYJgscaDwC5ONWcsjOXl99FGznRBtAdXDpyovrAgsY= -----END CERTIFICATE-----Generated at Mon Jul 27 14:20:06 2026 by rpki-client