$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft File: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft (raw, json) Hash identifier: X62mgx7a54PQZiCiX85o0V+fhnm0P9AzKQDm1EsrTW4= Subject key identifier: 97:45:87:46:EB:D7:FE:0D:2A:64:D2:1C:44:02:1B:56:AE:2B:E3:69 Authority key identifier: FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 Certificate issuer: /CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Certificate serial: 68A11C0C1120850CF4C1F4B6A1E7ED42AC5503C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft Manifest number: EC Signing time: Mon 26 Oct 2026 14:47:02 +0000 Manifest this update: Mon 26 Oct 2026 14:42:02 +0000 Manifest next update: Tue 27 Oct 2026 16:43:02 +0000 Files and hashes: 1: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: 9YwGnAS4Ytmen5f7Im+DSh9RfLLeSLFnhc1Jg9+yNBw=) 2: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl (hash: +DUCKVnjpwb9Z0Os1euy/Al6962rgE8AXomkUMvpvs8=) 3: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: 70NFz1U2se9VZLmxfjrFbhrAeSmQtExL3XMvYrlX6c8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a1:1c:0c:11:20:85:0c:f4:c1:f4:b6:a1:e7:ed:42:ac:55:03:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Validity Not Before: Oct 26 14:42:02 2026 GMT Not After : Oct 27 16:43:02 2026 GMT Subject: CN=97458746EBD7FE0D2A64D21C44021B56AE2BE369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:2c:1e:4e:ef:70:24:fe:51:cd:76:12:04: a6:e0:c0:75:9d:12:f2:88:ae:89:d8:10:42:57:47: 92:19:9b:7e:65:68:98:1b:44:ec:fe:3c:6a:9d:60: b3:b7:33:34:9d:a1:f3:63:a1:7a:ea:58:23:53:2f: 21:26:19:e6:2c:e3:63:c5:14:e5:64:bd:79:da:de: f9:53:b5:74:28:0b:d1:c2:a7:aa:41:1a:4e:6d:c9: 3f:a6:7e:09:57:2f:42:25:c5:ac:a4:4b:ca:83:94: d7:43:1c:a6:79:ae:d0:c9:75:3c:ed:35:e4:f6:40: e3:f6:ef:04:df:02:13:24:86:e8:a4:30:28:d2:08: 58:3d:d5:ce:09:61:5d:b8:e5:a9:a3:ee:d6:2e:95: d2:62:cc:ac:96:5e:7d:bd:af:92:00:36:73:a8:54: 4b:e4:e3:2d:9f:ea:aa:2d:df:67:5c:c5:f7:ee:9f: 62:22:d0:0d:43:a7:36:9e:7c:eb:d4:f0:49:fa:17: 8c:64:09:f4:68:73:14:bc:e5:62:22:b7:f7:b4:04: 91:39:93:e1:a6:a5:ad:21:65:42:e3:d1:00:67:fb: 3c:bb:50:d4:27:20:c0:ac:44:e5:a3:33:fd:70:7a: 20:c9:0e:86:77:23:10:8a:0e:e8:d5:76:f3:a1:57: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:45:87:46:EB:D7:FE:0D:2A:64:D2:1C:44:02:1B:56:AE:2B:E3:69 X509v3 Authority Key Identifier: keyid:FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:70:80:cf:ee:9a:b8:37:9a:a6:84:39:e5:02:c6:4b:b6:52: 8b:2c:ee:c5:3c:dc:b5:53:b7:46:ce:91:0e:6e:09:a4:7d:ad: 06:1e:a1:49:b3:fb:8f:25:1f:ed:78:b6:60:6e:33:03:de:65: 23:96:08:92:d7:ff:16:ce:04:30:64:3a:68:7e:59:31:f4:1a: 44:d9:2d:cf:cd:b2:ff:10:36:6c:22:81:e0:c2:cb:0c:dc:a4: b6:24:1f:e3:82:f1:42:e7:be:40:5f:fc:91:69:81:2d:bb:49: b5:c3:3a:fe:ae:2e:29:2f:fa:6a:bd:1b:bb:99:7c:5c:9d:21: 14:5b:fe:01:48:28:06:c3:c5:f7:01:f9:cf:41:79:3c:10:c4: 71:e9:92:67:f6:53:da:82:63:ee:26:7a:80:01:75:10:62:97: ff:e7:65:58:d7:82:47:9b:8e:5c:7b:ac:ac:23:77:14:15:ec: 6f:31:e1:f0:04:78:2a:65:14:bf:a9:61:fc:3e:8c:fb:c7:cb: 56:f4:19:5c:dd:4f:f2:4c:9d:b4:09:a7:53:8d:8e:02:1c:f3: e0:65:5b:53:48:70:92:61:75:a7:60:1d:ba:3c:04:fc:67:d6: 4e:c4:91:8f:d4:ed:fc:a2:00:79:95:0e:1a:1b:80:9e:46:45: 60:e6:1a:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKEcDBEghQz0wfS2oeftQqxVA8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgxODRF RjU2RTJGODAeFw0yNjEwMjYxNDQyMDJaFw0yNjEwMjcxNjQzMDJaMDMxMTAvBgNV BAMTKDk3NDU4NzQ2RUJEN0ZFMEQyQTY0RDIxQzQ0MDIxQjU2QUUyQkUzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3CweTu9wJP5RzXYSBKbgwHWd EvKIronYEEJXR5IZm35laJgbROz+PGqdYLO3MzSdofNjoXrqWCNTLyEmGeYs42PF FOVkvXna3vlTtXQoC9HCp6pBGk5tyT+mfglXL0IlxaykS8qDlNdDHKZ5rtDJdTzt NeT2QOP27wTfAhMkhuikMCjSCFg91c4JYV245amj7tYuldJizKyWXn29r5IANnOo VEvk4y2f6qot32dcxffun2Ii0A1DpzaefOvU8En6F4xkCfRocxS85WIit/e0BJE5 k+Gmpa0hZULj0QBn+zy7UNQnIMCsROWjM/1weiDJDoZ3IxCKDujVdvOhV/jFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0WHRuvX/g0qZNIcRAIbVq4r42kwHwYDVR0j BBgwFoAU/ATBvM+qC7IdZ+bMscyBhO9W4vgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVkZWNhODItODlhYi00NTgyLThlODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkND RkFBMEJCMjFENjdFNkNDQjFDQzgxODRFRjU2RTJGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzA0QzFCQ0NGQUEwQkIyMUQ2N0U2Q0NCMUNDODE4NEVGNTZF MkY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgx ODRFRjU2RTJGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1wgM/umrg3mqaEOeUCxku2Uoss7sU83LVT t0bOkQ5uCaR9rQYeoUmz+48lH+14tmBuMwPeZSOWCJLX/xbOBDBkOmh+WTH0GkTZ Lc/Nsv8QNmwigeDCywzcpLYkH+OC8ULnvkBf/JFpgS27SbXDOv6uLikv+mq9G7uZ fFydIRRb/gFIKAbDxfcB+c9BeTwQxHHpkmf2U9qCY+4meoABdRBil//nZVjXgkeb jlx7rKwjdxQV7G8x4fAEeCplFL+pYfw+jPvHy1b0GVzdT/JMnbQJp1ONjgIc8+Bl W1NIcJJhdadgHbo8BPxn1k7EkY/U7fyiAHmVDhobgJ5GRWDmGpM= -----END CERTIFICATE-----Generated at Mon Oct 26 22:57:02 2026 by rpki-client