$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft File: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft (raw, json) Hash identifier: wE91WYVPS9JYPeS8NgkTZIZ5mwjGh/0BC22vtTeJRjo= Subject key identifier: 19:A9:CA:5D:8D:E8:B1:4B:E2:24:77:95:01:66:4F:29:26:B7:1D:88 Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC Certificate issuer: /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Certificate serial: 6B014B5243DA41BCDB07C4473B02139197F1F367 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft Manifest number: EC Signing time: Sun 25 Oct 2026 18:04:10 +0000 Manifest this update: Sun 25 Oct 2026 17:59:10 +0000 Manifest next update: Mon 26 Oct 2026 21:58:10 +0000 Files and hashes: 1: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl (hash: fMWdOgS7hWWJX6+MnUL5WvLAwHBXyM0HOjNCQbl05uc=) 2: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: YhKAzrow8fDAadjaSnduhgqC89vTvIB1S39dbE3C1og=) 3: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: b/v/p4XXRhwRyIRQmWyoUAD/7oSBMCFky65Xuz73r7o=) 4: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: NOyjBT0zFszgxATvStbBfl8IjAdIOfkN8ppEqeVA78E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 21:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:01:4b:52:43:da:41:bc:db:07:c4:47:3b:02:13:91:97:f1:f3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Validity Not Before: Oct 25 17:59:10 2026 GMT Not After : Oct 26 21:58:10 2026 GMT Subject: CN=19A9CA5D8DE8B14BE224779501664F2926B71D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:7d:da:51:28:d8:6f:6a:88:b1:5f:1c:47: f9:46:bc:de:12:b3:27:86:5f:b5:2d:27:a6:e9:ba: 90:c4:48:2b:53:1f:4c:05:73:d0:ee:8b:30:0a:b2: cd:82:b5:38:71:eb:5d:7d:f9:78:e0:46:e6:0f:5c: f9:a4:2f:a6:4a:42:39:8d:c9:9a:29:e9:0d:cd:99: b2:5f:d2:e2:fb:71:00:c6:79:83:14:67:f8:3f:df: 42:98:71:0c:a6:d6:1e:dd:05:26:65:7d:61:8c:2e: 5b:14:77:06:b2:54:20:73:8c:ce:61:b0:a4:46:4d: 8a:cb:61:b6:fa:c9:9c:57:8b:dc:1e:ac:08:e3:3c: 84:3f:54:21:63:76:39:6c:e6:a3:4c:41:ce:e3:97: 09:3a:33:e0:9c:83:8c:3b:e5:e1:00:5d:18:c6:f2: 5e:ec:19:34:1a:4b:d9:f3:c5:2b:31:26:5d:d2:a4: 86:8c:94:5d:a7:a2:95:12:ce:08:44:eb:e1:0f:1e: ad:fc:66:91:29:42:23:7d:42:5a:23:b8:bc:aa:d5: 12:8e:87:59:98:9b:58:a6:6e:86:b8:e7:ea:d5:35: 18:20:5b:02:4e:a5:a9:b4:d7:8b:53:06:3a:00:6e: 4d:ec:4d:c3:5e:67:b4:38:18:e0:34:f4:32:94:3c: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A9:CA:5D:8D:E8:B1:4B:E2:24:77:95:01:66:4F:29:26:B7:1D:88 X509v3 Authority Key Identifier: keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:37:ab:8a:31:df:37:3d:ad:5a:1a:74:37:64:0e:59:90:4a: d0:93:ed:30:4d:79:68:52:64:9d:89:a1:1a:ae:49:d9:61:ad: f6:81:e0:af:3c:69:e9:e4:69:0e:69:af:4c:51:07:0a:98:c9: 44:1f:66:0f:86:b8:51:0e:19:91:b2:15:c0:c3:bc:19:99:5a: e4:7d:3d:58:5b:f5:14:1f:fb:ee:39:ef:ed:62:00:9c:f7:19: 48:c3:d2:6a:f4:c5:75:95:c2:f2:ea:9e:74:b2:ad:bb:cb:d1: 02:9f:16:13:f5:2d:d3:a4:18:29:a3:c1:e8:c4:f3:65:8e:1c: 24:ad:9e:56:f3:9a:f7:50:a4:f1:e5:94:c3:bd:91:cb:7f:a5: b8:dc:12:b5:a0:19:77:38:d1:62:96:14:75:61:80:86:f7:8a: 9c:d8:c6:95:d6:1a:f9:f1:c4:ca:29:10:59:13:b2:db:39:c9: f5:35:d1:91:35:34:4a:43:35:82:05:25:6c:5d:41:0a:9b:ff: 31:f3:f6:81:13:3d:5e:e6:84:7a:5d:6d:b8:55:9d:17:ad:20: a3:fb:5d:9c:bc:08:e2:1b:5e:dd:64:20:4c:36:89:3c:11:be: 22:c8:6d:a3:e6:b8:d2:da:14:60:85:ff:5a:2d:d0:25:1b:0d: c4:60:39:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawFLUkPaQbzbB8RHOwITkZfx82cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIx RDk4MkZEQzAeFw0yNjEwMjUxNzU5MTBaFw0yNjEwMjYyMTU4MTBaMDMxMTAvBgNV BAMTKDE5QTlDQTVEOERFOEIxNEJFMjI0Nzc5NTAxNjY0RjI5MjZCNzFEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONX3aUSjYb2qIsV8cR/lGvN4S syeGX7UtJ6bpupDESCtTH0wFc9DuizAKss2CtThx6119+XjgRuYPXPmkL6ZKQjmN yZop6Q3NmbJf0uL7cQDGeYMUZ/g/30KYcQym1h7dBSZlfWGMLlsUdwayVCBzjM5h sKRGTYrLYbb6yZxXi9werAjjPIQ/VCFjdjls5qNMQc7jlwk6M+Ccg4w75eEAXRjG 8l7sGTQaS9nzxSsxJl3SpIaMlF2nopUSzghE6+EPHq38ZpEpQiN9QlojuLyq1RKO h1mYm1imboa45+rVNRggWwJOpam014tTBjoAbk3sTcNeZ7Q4GOA09DKUPMohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGanKXY3osUviJHeVAWZPKSa3HYgwHwYDVR0j BBgwFoAUH81vYIBopWsrpcrVWJUS0h2YL9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njc1MmIzYzItM2YzMC00MDQwLThiMDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4 MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIxRDk4MkZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkNENkY2MDgwNjhBNTZCMkJBNUNBRDU1ODk1MTJEMjFEOTgy RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEy RDIxRDk4MkZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY3q4ox3zc9rVoadDdkDlmQStCT7TBNeWhS ZJ2JoRquSdlhrfaB4K88aenkaQ5pr0xRBwqYyUQfZg+GuFEOGZGyFcDDvBmZWuR9 PVhb9RQf++457+1iAJz3GUjD0mr0xXWVwvLqnnSyrbvL0QKfFhP1LdOkGCmjwejE 82WOHCStnlbzmvdQpPHllMO9kct/pbjcErWgGXc40WKWFHVhgIb3ipzYxpXWGvnx xMopEFkTsts5yfU10ZE1NEpDNYIFJWxdQQqb/zHz9oETPV7mhHpdbbhVnRetIKP7 XZy8COIbXt1kIEw2iTwRviLIbaPmuNLaFGCF/1ot0CUbDcRgOZM= -----END CERTIFICATE-----Generated at Mon Oct 26 07:35:23 2026 by rpki-client