$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft File: FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft (raw, json) Hash identifier: MjuXVMyPT9/8SoN/557wG+3O3kjIEj9k2lSRXCU+jfk= Subject key identifier: E4:E1:FF:A8:F5:DC:AD:25:59:6E:70:7F:1A:BE:5A:79:3F:C7:1C:B8 Authority key identifier: FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 Certificate issuer: /CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Certificate serial: 459F95AB968EF1E0240F3D6C179EDD2D8BED56DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft Manifest number: ED Signing time: Tue 27 Oct 2026 22:22:52 +0000 Manifest this update: Tue 27 Oct 2026 22:17:52 +0000 Manifest next update: Thu 29 Oct 2026 02:02:52 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: oShpqamIlxg4kQTK/q8+//W/2I271Sb0pfvq3P0rPtA=) 2: FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl (hash: v/WGJq3GCgC4u4WfySNPvSr8y+clep+V9Pg1XufmGuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 15:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9f:95:ab:96:8e:f1:e0:24:0f:3d:6c:17:9e:dd:2d:8b:ed:56:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Validity Not Before: Oct 27 22:17:52 2026 GMT Not After : Oct 29 02:02:52 2026 GMT Subject: CN=E4E1FFA8F5DCAD25596E707F1ABE5A793FC71CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:7a:9b:b6:ea:40:8d:53:06:1b:a8:d2:a7: 12:fe:36:59:10:bd:9f:07:b4:ee:d6:b0:d2:c2:69: 1c:b3:1b:fe:bd:7f:60:ed:d4:71:90:28:15:4a:5e: 96:43:c8:4d:f1:e1:da:1c:9a:3f:5f:6c:68:a9:8d: d6:3e:c3:b6:dd:e8:c1:fd:b4:c5:09:8b:af:e4:ee: d5:61:0f:c2:17:89:54:8d:c1:8d:28:f5:0c:c5:00: a9:62:23:03:c7:df:58:44:c4:3f:59:50:d4:da:f4: 62:08:ca:19:48:b7:bd:38:8e:84:85:f1:0a:d1:08: 66:0d:f2:1f:aa:63:83:f6:68:1d:28:c2:61:4b:fc: 7b:f8:be:55:7d:15:10:79:37:bf:b5:88:cd:f9:14: de:94:12:f9:28:76:49:6f:d3:52:ea:c0:a0:a7:47: 9c:8b:4f:c6:eb:c0:40:4a:e1:c5:4c:f5:58:d2:60: 56:6c:44:f5:b5:a2:a3:22:8f:ef:2c:6d:e6:63:a4: 78:40:63:ea:5a:cc:c6:90:b4:73:19:0d:9b:a5:d5: e5:23:51:8a:42:a6:c5:0a:1d:53:1a:0c:85:fa:6b: 3e:c1:bd:1a:6e:f2:77:c1:3a:08:87:aa:fb:77:00: bc:76:0d:2a:d7:2f:e9:57:f0:b9:1c:33:cd:ec:0b: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:FF:A8:F5:DC:AD:25:59:6E:70:7F:1A:BE:5A:79:3F:C7:1C:B8 X509v3 Authority Key Identifier: keyid:FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:46:01:14:19:ab:a3:86:f9:f7:44:d9:3d:18:c4:f9:d3:57: b3:de:e9:ea:e3:d6:d6:ca:38:a5:9f:50:f0:77:0f:19:09:c5: 80:8a:20:9d:09:59:3d:b9:1d:58:7a:a4:02:42:5a:ee:22:35: 1d:d5:38:f8:3e:f5:2b:2a:76:c0:c4:56:9d:4d:83:5c:58:63: 7b:d5:da:00:76:06:2f:56:1a:4c:6a:fa:11:a8:f7:62:11:5a: 9e:8e:ae:a0:51:ff:26:be:02:09:90:c9:cc:83:58:18:5c:2d: aa:38:99:f1:ae:a3:b1:ba:77:7e:ab:80:0c:a3:81:c0:98:ab: 99:d5:cc:cf:6a:55:d0:3d:b0:9e:22:47:fb:69:e1:2f:ad:a3: 76:56:c7:ae:b3:b2:a2:c8:b3:0f:15:53:54:a7:3e:6c:4a:44: 08:62:9c:ce:16:d1:13:b0:5e:2a:a7:d5:90:3b:ef:d4:db:39: 9d:dd:67:71:cc:cf:66:e9:b1:af:7c:bc:9f:00:01:15:c1:3a: 69:e4:cc:d9:99:9f:60:fc:96:27:df:ea:57:06:79:57:19:a4: 25:a0:ff:b3:23:22:75:aa:ca:8c:be:da:44:72:a1:70:2b:f5: 61:1b:92:06:c2:f1:04:7b:89:39:78:bf:5a:8a:42:cc:f9:36: f7:5b:74:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZ+Vq5aO8eAkDz1sF57dLYvtVt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdC MTRCMEVBOTAeFw0yNjEwMjcyMjE3NTJaFw0yNjEwMjkwMjAyNTJaMDMxMTAvBgNV BAMTKEU0RTFGRkE4RjVEQ0FEMjU1OTZFNzA3RjFBQkU1QTc5M0ZDNzFDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/nqbtupAjVMGG6jSpxL+NlkQ vZ8HtO7WsNLCaRyzG/69f2Dt1HGQKBVKXpZDyE3x4docmj9fbGipjdY+w7bd6MH9 tMUJi6/k7tVhD8IXiVSNwY0o9QzFAKliIwPH31hExD9ZUNTa9GIIyhlIt704joSF 8QrRCGYN8h+qY4P2aB0owmFL/Hv4vlV9FRB5N7+1iM35FN6UEvkodklv01LqwKCn R5yLT8brwEBK4cVM9VjSYFZsRPW1oqMij+8sbeZjpHhAY+pazMaQtHMZDZul1eUj UYpCpsUKHVMaDIX6az7BvRpu8nfBOgiHqvt3ALx2DSrXL+lX8LkcM83sC/KVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5OH/qPXcrSVZbnB/Gr5aeT/HHLgwHwYDVR0j BBgwFoAU/IcKJ2m4jxAQeBftqjtCN7FLDqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyZjY0Y2EtZmE1NC00OTllLWJjMzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2 OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdCMTRCMEVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzg3MEEyNzY5Qjg4RjEwMTA3ODE3RURBQTNCNDIzN0IxNEIw RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQy MzdCMTRCMEVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRGARQZq6OG+fdE2T0YxPnTV7Pe6erj1tbK OKWfUPB3DxkJxYCKIJ0JWT25HVh6pAJCWu4iNR3VOPg+9SsqdsDEVp1Ng1xYY3vV 2gB2Bi9WGkxq+hGo92IRWp6OrqBR/ya+AgmQycyDWBhcLao4mfGuo7G6d36rgAyj gcCYq5nVzM9qVdA9sJ4iR/tp4S+to3ZWx66zsqLIsw8VU1SnPmxKRAhinM4W0ROw Xiqn1ZA779TbOZ3dZ3HMz2bpsa98vJ8AARXBOmnkzNmZn2D8liff6lcGeVcZpCWg /7MjInWqyoy+2kRyoXAr9WEbkgbC8QR7iTl4v1qKQsz5NvdbdFk= -----END CERTIFICATE-----Generated at Wed Oct 28 05:26:32 2026 by rpki-client