$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json) Hash identifier: tT14M72jR9EnwRu3oNVmE7dvTH/QY3zflz3xKVlC6pY= Subject key identifier: 32:FB:7E:9C:F5:0C:05:95:97:4C:B8:9A:8C:1A:CD:DE:40:AA:4F:52 Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 0D0C73777DC75B5DA3F9541651D2FABDB50810E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 18:55:19 +0000 Manifest this update: Sun 02 Aug 2026 18:50:19 +0000 Manifest next update: Mon 03 Aug 2026 21:34:19 +0000 Files and hashes: 1: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=) 2: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: LeNEGib4/mXbk25/UBtvaUDxEEE96QAM94NZvwXIbUg=) 3: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=) 4: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0c:73:77:7d:c7:5b:5d:a3:f9:54:16:51:d2:fa:bd:b5:08:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: Aug 2 18:50:19 2026 GMT Not After : Aug 3 21:34:19 2026 GMT Subject: CN=32FB7E9CF50C0595974CB89A8C1ACDDE40AA4F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:b1:39:3b:5e:fd:cc:7d:97:ad:7b:38:ef: 93:fb:78:e6:1f:54:ef:94:fc:ed:97:62:7e:06:58: 2e:08:97:83:0a:79:46:fa:cf:55:77:89:60:2d:71: f3:ae:e3:bf:3f:db:02:45:9c:da:b8:59:a0:58:16: 55:05:94:ac:48:49:8d:ca:05:9b:84:bd:14:4c:95: fd:81:23:21:09:ca:d2:f7:25:4b:b5:06:4c:14:24: 7d:d8:de:fe:af:a8:4f:44:d7:82:f3:1d:23:ec:f6: 3a:98:7d:00:fa:98:f3:04:47:77:48:89:72:9f:77: d1:af:2f:2e:98:fe:04:c4:5d:1b:ec:f8:d1:42:ab: 88:2d:9a:fb:5f:cc:eb:a8:91:89:1b:de:55:a3:a7: 29:be:71:02:e1:69:a1:65:58:88:e9:55:78:bc:90: 94:a1:0f:33:d5:ba:7f:91:82:bd:53:e3:ee:62:b6: dc:05:78:b1:ba:0d:4a:90:c9:27:d8:81:95:eb:b7: 1b:cb:00:3b:43:ad:52:5b:e6:53:cd:24:ea:19:e9: c7:3e:90:28:3c:d5:3a:bb:2d:91:1e:c4:0d:13:2e: 56:bf:42:4a:2e:1b:77:68:cf:41:47:23:2a:e4:28: 22:43:f7:f9:98:6d:08:15:fc:db:ba:00:38:52:b6: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FB:7E:9C:F5:0C:05:95:97:4C:B8:9A:8C:1A:CD:DE:40:AA:4F:52 X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b8:d5:39:9d:b8:ff:b4:57:ca:1f:f0:eb:75:95:56:79:72: 09:df:a6:fe:e1:a2:6f:83:0c:a1:c9:f6:0e:2a:5c:77:46:a2: 7c:b6:d0:56:99:74:61:54:5d:94:25:bf:27:09:87:57:eb:ab: cd:95:34:e7:63:7f:4b:2b:59:3d:16:66:24:66:ae:30:8a:e8: c3:eb:91:43:38:e9:65:e9:cc:35:56:41:31:63:ae:c6:6d:ee: 1b:98:94:de:c6:d5:fc:c4:46:65:78:10:66:45:8e:5c:1a:ef: 06:42:d9:a7:d0:72:38:91:c1:e5:80:78:5d:c4:c4:47:16:58: c1:a0:36:83:0e:13:98:7e:2f:d0:f2:f6:0e:25:6f:10:61:41: b3:93:bb:fd:da:57:c6:93:92:9b:8f:77:f4:8a:00:08:70:e9: 6d:0d:22:74:aa:c3:bc:63:6b:aa:24:db:66:d9:9c:15:f7:cd: 63:b6:bb:a4:54:3e:15:1f:fa:cf:b9:45:a6:bf:e5:eb:49:1b: c3:e4:8c:5a:71:e8:aa:5b:11:c9:88:f4:ca:03:07:c0:61:7a: f5:2e:79:6d:40:48:d1:c9:af:0d:02:75:85:97:9a:36:47:81: 6d:75:07:6c:62:9a:5d:3f:61:1d:91:cd:a0:5e:f6:ae:27:48: 04:fb:f4:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQxzd33HW12j+VQWUdL6vbUIEOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjA4MDIxODUwMTlaFw0yNjA4MDMyMTM0MTlaMDMxMTAvBgNV BAMTKDMyRkI3RTlDRjUwQzA1OTU5NzRDQjg5QThDMUFDRERFNDBBQTRGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3LE5O179zH2XrXs475P7eOYf VO+U/O2XYn4GWC4Il4MKeUb6z1V3iWAtcfOu478/2wJFnNq4WaBYFlUFlKxISY3K BZuEvRRMlf2BIyEJytL3JUu1BkwUJH3Y3v6vqE9E14LzHSPs9jqYfQD6mPMER3dI iXKfd9GvLy6Y/gTEXRvs+NFCq4gtmvtfzOuokYkb3lWjpym+cQLhaaFlWIjpVXi8 kJShDzPVun+Rgr1T4+5ittwFeLG6DUqQySfYgZXrtxvLADtDrVJb5lPNJOoZ6cc+ kCg81Tq7LZEexA0TLla/QkouG3doz0FHIyrkKCJD9/mYbQgV/Nu6ADhStk8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMvt+nPUMBZWXTLiajBrN3kCqT1IwHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1 QzFBMjk0RUYxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS41TmduP+0V8of8Ot1lVZ5cgnfpv7hom+D DKHJ9g4qXHdGony20FaZdGFUXZQlvycJh1frq82VNOdjf0srWT0WZiRmrjCK6MPr kUM46WXpzDVWQTFjrsZt7huYlN7G1fzERmV4EGZFjlwa7wZC2afQcjiRweWAeF3E xEcWWMGgNoMOE5h+L9Dy9g4lbxBhQbOTu/3aV8aTkpuPd/SKAAhw6W0NInSqw7xj a6ok22bZnBX3zWO2u6RUPhUf+s+5Raa/5etJG8PkjFpx6KpbEcmI9MoDB8BhevUu eW1ASNHJrw0CdYWXmjZHgW11B2ximl0/YR2RzaBe9q4nSAT79AE= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:36 2026 by rpki-client