$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft File: 00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft (raw, json) Hash identifier: C75F6hR6FUQF2Un8uzyR1oGLRS6PJn3so5YUh/Lj8VM= Subject key identifier: 19:4A:9C:08:A7:5B:53:33:94:52:2F:BE:7C:24:89:38:73:F8:08:ED Authority key identifier: 00:FC:B0:85:8F:55:5F:1D:9C:D4:26:A3:D5:26:EF:F1:AA:FC:C7:EC Certificate issuer: /CN=00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC Certificate serial: 23BB55F8CE46C5597016EC49C6C17B8A1EB8A2C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft Manifest number: EC Signing time: Sun 25 Oct 2026 05:53:32 +0000 Manifest this update: Sun 25 Oct 2026 05:48:32 +0000 Manifest next update: Mon 26 Oct 2026 05:55:32 +0000 Files and hashes: 1: 3130332e3230342e34372e302f32342d3234203d3e20313531353835.roa (hash: cLSIVr2PH/8S5xYZmn7AEsDIkyQz3OhGhtxG+VvBu+U=) 2: 00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.crl (hash: rHq3s4GboPrmW8O3OPCCgMR9wkKT1ET8RN9hmESwqaE=) 3: 3130332e3230342e34362e302f32342d3234203d3e20313531353835.roa (hash: JvicXysmy0GMGvvHDNw4SG+9E+mWtUmol0J6/hPKP3A=) 4: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: WcB0PgJyyinAEoffJz7GUrERTjEBi7z+T4dwRpZHAHk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.crl rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bb:55:f8:ce:46:c5:59:70:16:ec:49:c6:c1:7b:8a:1e:b8:a2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC Validity Not Before: Oct 25 05:48:32 2026 GMT Not After : Oct 26 05:55:32 2026 GMT Subject: CN=194A9C08A75B533394522FBE7C24893873F808ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:ad:aa:fe:af:01:85:6f:7a:5f:b9:c2:e4: 51:ed:30:7e:27:11:25:aa:75:3c:39:27:e5:55:ef: d0:1d:2b:ad:6e:32:d9:24:9d:6c:55:3f:24:6b:f9: 30:b4:08:73:6a:4d:79:87:07:71:3b:fa:4c:62:70: 3b:50:42:d1:bc:a0:ea:ef:6c:3d:a5:ed:27:2e:e0: c8:de:e0:dc:1d:02:a6:f8:48:4f:bd:3d:fc:30:e4: e1:c1:2b:d7:a1:f7:31:48:7e:d1:77:36:49:51:56: e4:52:f5:41:8e:2d:e8:6c:6d:0e:ef:e3:4c:7d:8a: 1b:ac:25:d1:38:1b:9e:ba:a0:89:b9:37:49:90:5a: 02:1d:6e:9f:63:d0:e1:14:4b:e5:b4:ef:42:7a:eb: 6e:1e:33:a1:c2:6a:0b:cf:30:ce:3f:0f:2e:b3:34: 11:5a:57:b5:e7:4b:fb:f1:e3:9f:ee:ee:c0:71:c3: b7:06:8e:06:38:cc:5f:3e:7c:8c:7a:11:04:e0:c5: b5:7b:8f:a3:dd:04:a9:4d:32:11:1f:66:9b:89:92: f2:2a:bf:e1:35:95:bb:4a:ee:4e:82:46:9c:8b:b9: cc:81:1b:26:03:05:cb:22:92:22:55:22:62:48:be: 27:3d:79:62:3f:c9:8c:25:e7:f8:b1:a4:d0:ed:e6: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4A:9C:08:A7:5B:53:33:94:52:2F:BE:7C:24:89:38:73:F8:08:ED X509v3 Authority Key Identifier: keyid:00:FC:B0:85:8F:55:5F:1D:9C:D4:26:A3:D5:26:EF:F1:AA:FC:C7:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/00FCB0858F555F1D9CD426A3D526EFF1AAFCC7EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6c:ed:02:3d:29:16:4e:04:0e:b2:cf:c5:99:33:15:6c:cf: 19:fd:a5:f4:da:b1:63:25:8d:30:af:03:a6:d6:88:0f:60:8b: 89:82:5c:06:13:c6:51:74:26:4f:7f:e7:5c:d7:b2:f8:b6:ba: 98:08:aa:65:71:60:fc:08:12:e6:65:14:ef:0a:fd:c5:30:b0: 78:ce:a6:a2:bd:f0:44:66:2f:f0:6a:c2:9c:47:8d:37:ea:35: 7e:82:4c:4e:7e:ef:23:c1:e1:dc:b6:9a:c1:21:2d:33:c3:51: 1f:9d:c5:33:f3:99:76:b6:f6:a2:23:85:c1:11:74:5d:e4:6a: bb:c9:61:5e:a0:eb:ed:fc:b7:a7:62:b8:aa:6f:48:46:d1:0e: a9:ab:36:ec:90:cb:48:dd:a9:e5:61:76:2e:88:95:e2:35:c5: 84:f4:a1:2b:e2:8d:38:f3:37:1c:e2:a0:ab:78:d8:63:9d:f3: 19:b8:cb:af:8f:62:70:cc:77:71:3f:80:28:a3:7b:8e:d0:d3: 22:7a:88:4b:6e:56:a8:8b:05:35:6b:db:9d:92:9c:63:f1:95: c1:ca:f1:0f:92:d0:e8:64:de:38:a4:72:c0:97:29:a6:6e:89: 5d:96:ce:a1:15:95:fc:fe:8c:98:6c:f9:2a:2a:3c:3b:e0:52: c6:ba:c6:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7tV+M5GxVlwFuxJxsF7ih64oscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGQ0IwODU4RjU1NUYxRDlDRDQyNkEzRDUyNkVGRjFB QUZDQzdFQzAeFw0yNjEwMjUwNTQ4MzJaFw0yNjEwMjYwNTU1MzJaMDMxMTAvBgNV BAMTKDE5NEE5QzA4QTc1QjUzMzM5NDUyMkZCRTdDMjQ4OTM4NzNGODA4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvz62q/q8BhW96X7nC5FHtMH4n ESWqdTw5J+VV79AdK61uMtkknWxVPyRr+TC0CHNqTXmHB3E7+kxicDtQQtG8oOrv bD2l7Scu4Mje4NwdAqb4SE+9Pfww5OHBK9eh9zFIftF3NklRVuRS9UGOLehsbQ7v 40x9ihusJdE4G566oIm5N0mQWgIdbp9j0OEUS+W070J6624eM6HCagvPMM4/Dy6z NBFaV7XnS/vx45/u7sBxw7cGjgY4zF8+fIx6EQTgxbV7j6PdBKlNMhEfZpuJkvIq v+E1lbtK7k6CRpyLucyBGyYDBcsikiJVImJIvic9eWI/yYwl5/ixpNDt5tytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUqcCKdbUzOUUi++fCSJOHP4CO0wHwYDVR0j BBgwFoAUAPywhY9VXx2c1Caj1Sbv8ar8x+wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTY2MGU3NTgtZjY1Yi00NjlhLThhMWMtZmIwMTk4NDM0M2IxLzAvMDBGQ0IwODU4 RjU1NUYxRDlDRDQyNkEzRDUyNkVGRjFBQUZDQzdFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMEZDQjA4NThGNTU1RjFEOUNENDI2QTNENTI2RUZGMUFBRkND N0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvMDBGQ0IwODU4RjU1NUYxRDlDRDQyNkEzRDUyNkVG RjFBQUZDQzdFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAls7QI9KRZOBA6yz8WZMxVszxn9pfTasWMl jTCvA6bWiA9gi4mCXAYTxlF0Jk9/51zXsvi2upgIqmVxYPwIEuZlFO8K/cUwsHjO pqK98ERmL/BqwpxHjTfqNX6CTE5+7yPB4dy2msEhLTPDUR+dxTPzmXa29qIjhcER dF3karvJYV6g6+38t6diuKpvSEbRDqmrNuyQy0jdqeVhdi6IleI1xYT0oSvijTjz NxzioKt42GOd8xm4y6+PYnDMd3E/gCije47Q0yJ6iEtuVqiLBTVr252SnGPxlcHK 8Q+S0Ohk3jikcsCXKaZuiV2WzqEVlfz+jJhs+SoqPDvgUsa6xk0= -----END CERTIFICATE-----Generated at Sun Oct 25 10:42:34 2026 by rpki-client