$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft File: FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft (raw, json) Hash identifier: dBhbpo0yUWfipCN5Q3ljaLiPWa0xTffXPJluUv4T/fI= Subject key identifier: 04:2C:77:EB:8A:45:4F:0F:67:82:65:1C:96:EB:0D:37:95:B2:BD:A9 Authority key identifier: FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 Certificate issuer: /CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Certificate serial: 6024461BE73252D2B6E2D7D741D7F0A280F6BB71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft Manifest number: AE Signing time: Thu 10 Sep 2026 08:06:53 +0000 Manifest this update: Thu 10 Sep 2026 08:01:53 +0000 Manifest next update: Fri 11 Sep 2026 11:44:53 +0000 Files and hashes: 1: FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl (hash: goFUbpF0Sia1kUn86G5sWgtIkyKMqnKjYQrBGy2Qcl4=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: oShpqamIlxg4kQTK/q8+//W/2I271Sb0pfvq3P0rPtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:24:46:1b:e7:32:52:d2:b6:e2:d7:d7:41:d7:f0:a2:80:f6:bb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Validity Not Before: Sep 10 08:01:53 2026 GMT Not After : Sep 11 11:44:53 2026 GMT Subject: CN=042C77EB8A454F0F6782651C96EB0D3795B2BDA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:1b:f5:e0:ec:1b:7d:5e:38:b8:89:73:0a: 60:ac:ac:87:99:b9:28:ab:ec:7b:a8:1c:ec:3f:ba: 3d:0f:15:90:76:1e:de:a4:e2:e0:2b:00:6e:47:9f: c3:73:18:93:b1:f2:0c:21:e0:f2:6b:18:4b:34:fa: 6c:db:79:59:cb:ed:4d:4a:51:49:93:c3:b7:8b:21: 34:a0:f5:77:eb:72:89:e3:44:cb:e6:e2:d4:5c:76: 90:48:1f:a9:ce:4a:43:cd:1f:8f:e2:50:44:14:07: 0f:f3:93:fe:06:3c:78:9a:11:00:37:f1:98:ab:fc: 93:6f:51:64:3f:03:0f:9c:ae:f5:68:96:d1:cf:a4: ab:46:2f:1d:43:61:01:c1:d0:15:75:2d:ba:9e:62: 20:81:bb:82:b7:f9:43:57:31:92:8f:e0:86:0e:33: f0:ac:6f:70:fa:c7:20:18:65:6a:af:69:61:0f:4b: 0d:ae:84:5c:f5:80:88:2d:fa:94:21:ce:be:ae:ab: 88:fe:86:ac:bd:82:6a:b1:47:b9:32:8e:17:5d:07: 93:74:06:96:b2:8b:48:c0:11:9a:d8:e4:7f:09:d1: 46:93:78:d0:f8:57:33:ec:31:5f:58:33:31:70:ae: 08:77:79:9f:ce:f5:c9:c3:80:d8:72:d1:e9:44:2f: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2C:77:EB:8A:45:4F:0F:67:82:65:1C:96:EB:0D:37:95:B2:BD:A9 X509v3 Authority Key Identifier: keyid:FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:53:82:af:84:41:e0:75:f3:a6:f7:80:25:61:98:71:17:17: 0f:d1:b4:31:a4:42:a1:1c:6f:30:09:a7:ad:a1:52:36:2b:c5: a2:5f:d2:f5:c3:ca:b2:da:9e:c7:88:fc:9d:8b:99:68:c2:63: 9e:26:3e:68:1f:ea:1c:2f:70:a1:cc:ef:57:7f:37:dd:45:dc: 76:f5:89:02:08:99:d2:d9:57:7a:1b:d1:15:96:cf:6a:81:5a: 78:00:3c:e5:25:9f:70:a3:c9:a2:30:8f:51:e7:99:23:07:1b: 10:9f:0e:c2:ca:87:0e:f4:33:51:e4:e6:eb:a6:39:b9:d6:05: 57:f7:7e:83:b5:5c:38:d8:85:d7:e9:b6:dd:24:aa:2e:40:11: 5b:2f:d4:9c:04:3f:21:5c:23:9e:af:fe:53:52:75:06:0d:5b: b7:56:e5:7e:0f:f5:df:0c:f4:75:78:d8:7e:9e:e3:75:af:bd: 61:a6:98:00:66:8b:20:91:b5:2b:ef:1d:e2:54:0a:2e:13:30: 61:25:1a:f1:3e:9e:28:3b:8a:40:a5:44:3d:0c:65:1e:cc:90: 62:b6:23:05:90:78:07:d1:54:f8:19:9c:56:ad:c1:34:27:f1: 46:c3:36:db:2e:d8:ad:23:d2:aa:02:a3:1e:82:de:95:62:98: 3d:89:03:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCRGG+cyUtK24tfXQdfwooD2u3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdC MTRCMEVBOTAeFw0yNjA5MTAwODAxNTNaFw0yNjA5MTExMTQ0NTNaMDMxMTAvBgNV BAMTKDA0MkM3N0VCOEE0NTRGMEY2NzgyNjUxQzk2RUIwRDM3OTVCMkJEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXnRv14OwbfV44uIlzCmCsrIeZ uSir7HuoHOw/uj0PFZB2Ht6k4uArAG5Hn8NzGJOx8gwh4PJrGEs0+mzbeVnL7U1K UUmTw7eLITSg9XfrconjRMvm4tRcdpBIH6nOSkPNH4/iUEQUBw/zk/4GPHiaEQA3 8Zir/JNvUWQ/Aw+crvVoltHPpKtGLx1DYQHB0BV1LbqeYiCBu4K3+UNXMZKP4IYO M/Csb3D6xyAYZWqvaWEPSw2uhFz1gIgt+pQhzr6uq4j+hqy9gmqxR7kyjhddB5N0 Bpayi0jAEZrY5H8J0UaTeND4VzPsMV9YMzFwrgh3eZ/O9cnDgNhy0elEL0FZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBCx364pFTw9ngmUclusNN5WyvakwHwYDVR0j BBgwFoAU/IcKJ2m4jxAQeBftqjtCN7FLDqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyZjY0Y2EtZmE1NC00OTllLWJjMzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2 OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdCMTRCMEVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzg3MEEyNzY5Qjg4RjEwMTA3ODE3RURBQTNCNDIzN0IxNEIw RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQy MzdCMTRCMEVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENTgq+EQeB186b3gCVhmHEXFw/RtDGkQqEc bzAJp62hUjYrxaJf0vXDyrLanseI/J2LmWjCY54mPmgf6hwvcKHM71d/N91F3Hb1 iQIImdLZV3ob0RWWz2qBWngAPOUln3CjyaIwj1HnmSMHGxCfDsLKhw70M1Hk5uum ObnWBVf3foO1XDjYhdfptt0kqi5AEVsv1JwEPyFcI56v/lNSdQYNW7dW5X4P9d8M 9HV42H6e43WvvWGmmABmiyCRtSvvHeJUCi4TMGElGvE+nig7ikClRD0MZR7MkGK2 IwWQeAfRVPgZnFatwTQn8UbDNtsu2K0j0qoCox6C3pVimD2JA3o= -----END CERTIFICATE-----Generated at Thu Sep 10 23:36:45 2026 by rpki-client