$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json) Hash identifier: N3bXJ71AiCBfMkDJj2D+gKkvjQSuiT76vguPtphsq7A= Subject key identifier: 3F:20:36:D3:18:43:A1:CC:3B:63:6A:87:8C:97:50:60:66:A9:6F:E7 Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 7C7AD1049A51F2D5B2D15B5D80536ECC1C771B8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:20:00 +0000 Manifest this update: Thu 17 Sep 2026 05:15:00 +0000 Manifest next update: Fri 18 Sep 2026 06:00:00 +0000 Files and hashes: 1: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: rsBul2jx7spMbZKH0TY9nmiUEVnV8hyK30nNp9J0wvU=) 2: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=) 3: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=) 4: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7a:d1:04:9a:51:f2:d5:b2:d1:5b:5d:80:53:6e:cc:1c:77:1b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: Sep 17 05:15:00 2026 GMT Not After : Sep 18 06:00:00 2026 GMT Subject: CN=3F2036D31843A1CC3B636A878C97506066A96FE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:aa:04:c7:6b:75:ea:f2:01:8f:a9:c3:84:c3: 31:40:bb:b3:b3:a2:47:19:31:b8:bc:71:ad:a7:34: d1:a8:46:89:d3:d9:be:b0:fa:e9:42:58:26:7f:38: ab:44:4e:d0:56:c0:6b:6f:16:cf:dd:96:6f:ba:d7: 61:63:b6:d4:18:a3:ce:2d:83:75:bd:ce:a6:8f:ac: 6b:af:6a:02:62:98:47:3f:55:ad:8b:9c:e4:50:6c: af:52:e5:17:cd:45:39:35:7f:31:80:be:82:42:40: 65:00:e9:ab:54:20:c1:00:8c:96:1a:10:bb:c7:a6: 00:24:b4:46:dd:80:11:82:e4:a5:b8:57:c9:58:80: 1b:7a:26:9c:ba:81:e8:72:ac:03:16:b1:d7:e8:3f: d4:57:48:c7:f3:e6:da:93:9f:d1:f7:79:79:8d:82: b3:e4:ca:df:3c:23:9c:63:e3:50:20:fa:a5:97:45: e2:7f:dc:6a:33:f8:6c:25:f4:5b:dc:58:0c:0b:5e: 2e:d0:cd:f7:ae:bd:73:1c:09:42:0e:31:06:9c:3f: 0a:2f:17:dd:4c:2d:c5:27:28:5e:b9:c0:89:29:f0: 75:2c:85:ed:7d:d0:1e:93:6d:56:b1:8d:53:1f:be: bc:a3:93:5b:6c:28:92:cf:e8:26:cf:ab:65:dd:99: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:20:36:D3:18:43:A1:CC:3B:63:6A:87:8C:97:50:60:66:A9:6F:E7 X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:62:e7:7d:87:b1:cf:f5:20:17:bd:54:a4:84:a7:86:7e:41: 19:1a:86:fd:b1:9f:a1:99:b8:68:63:1c:35:c0:6a:f2:d9:c2: 1f:4b:08:5b:29:c0:bb:a1:c8:6e:de:0a:4d:82:65:1d:24:6e: 20:b2:3e:a4:78:b5:5c:ad:40:fe:d2:2f:51:30:68:87:db:fd: 47:0d:05:3a:01:4d:2b:83:89:38:50:03:e3:c0:3a:ef:94:f4: 3b:72:b6:7f:a6:1a:3f:eb:63:34:39:6e:75:6c:34:a4:3a:c2: 29:5c:4e:11:21:f4:2c:bb:7b:ea:8b:1c:60:3a:2b:4f:25:b0: 10:41:55:89:e6:2c:97:3d:aa:dc:8f:ff:3e:3e:8a:38:5d:b9: 4b:f0:69:4a:ba:f2:84:b6:d3:e8:ae:62:55:f4:d9:2d:e2:25: 8e:dc:b4:c4:38:aa:7d:a1:3e:46:87:dc:1c:eb:11:cd:c0:c8: f4:22:bc:12:b0:d0:1f:b0:17:34:67:9b:8e:ce:91:17:fc:dd: 21:ea:7a:4d:92:fd:52:d7:60:56:90:26:3d:76:01:34:c8:f3: 6c:6c:36:4a:24:67:35:d7:f2:cf:bd:c5:49:3b:73:43:d2:d9: e9:45:09:23:5e:4e:ac:f9:fe:5b:d6:45:ef:a7:50:5c:9c:32: e9:92:d5:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfHrRBJpR8tWy0VtdgFNuzBx3G4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjA5MTcwNTE1MDBaFw0yNjA5MTgwNjAwMDBaMDMxMTAvBgNV BAMTKDNGMjAzNkQzMTg0M0ExQ0MzQjYzNkE4NzhDOTc1MDYwNjZBOTZGRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkqgTHa3Xq8gGPqcOEwzFAu7Oz okcZMbi8ca2nNNGoRonT2b6w+ulCWCZ/OKtETtBWwGtvFs/dlm+612FjttQYo84t g3W9zqaPrGuvagJimEc/Va2LnORQbK9S5RfNRTk1fzGAvoJCQGUA6atUIMEAjJYa ELvHpgAktEbdgBGC5KW4V8lYgBt6Jpy6gehyrAMWsdfoP9RXSMfz5tqTn9H3eXmN grPkyt88I5xj41Ag+qWXReJ/3Goz+Gwl9FvcWAwLXi7QzfeuvXMcCUIOMQacPwov F91MLcUnKF65wIkp8HUshe190B6TbVaxjVMfvryjk1tsKJLP6CbPq2Xdmf8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPyA20xhDocw7Y2qHjJdQYGapb+cwHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1 QzFBMjk0RUYxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9i532Hsc/1IBe9VKSEp4Z+QRkahv2xn6GZ uGhjHDXAavLZwh9LCFspwLuhyG7eCk2CZR0kbiCyPqR4tVytQP7SL1EwaIfb/UcN BToBTSuDiThQA+PAOu+U9Dtytn+mGj/rYzQ5bnVsNKQ6wilcThEh9Cy7e+qLHGA6 K08lsBBBVYnmLJc9qtyP/z4+ijhduUvwaUq68oS20+iuYlX02S3iJY7ctMQ4qn2h PkaH3BzrEc3AyPQivBKw0B+wFzRnm47OkRf83SHqek2S/VLXYFaQJj12ATTI82xs NkokZzXX8s+9xUk7c0PS2elFCSNeTqz5/lvWRe+nUFycMumS1bA= -----END CERTIFICATE-----Generated at Thu Sep 17 10:50:58 2026 by rpki-client