$ rpki-client -vvvf rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft File: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft (raw, json) Hash identifier: EoUGoUuaPbgZdlGnZHs40K00DPvmJDXEzajLmOqn+h4= Subject key identifier: 10:C5:7C:60:17:14:92:C3:D0:78:EE:9B:A5:85:5B:B6:9E:34:F3:66 Authority key identifier: FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 Certificate issuer: /CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Certificate serial: 6108B14A7E3DDDBE495DF44E09A8DC5E7891CC5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:01:29 +0000 Manifest this update: Mon 21 Sep 2026 03:56:29 +0000 Manifest next update: Tue 22 Sep 2026 07:46:29 +0000 Files and hashes: 1: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: /EYgr4bEX5yF2cD2wxIp6ztYlU72xJsVBSPBoR3u9Fw=) 2: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl (hash: hRSZR4bCm6iW6msQMLZiKlh3n77CKj9J10hgtel5zKA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:08:b1:4a:7e:3d:dd:be:49:5d:f4:4e:09:a8:dc:5e:78:91:cc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Validity Not Before: Sep 21 03:56:29 2026 GMT Not After : Sep 22 07:46:29 2026 GMT Subject: CN=10C57C60171492C3D078EE9BA5855BB69E34F366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:98:50:f9:f3:bc:aa:6f:0d:05:cb:33:0a: 52:48:a0:18:cb:37:dc:a9:51:26:80:7e:35:be:58: de:e8:3c:24:85:8e:d9:48:19:aa:e0:d3:b7:f1:57: cd:cc:f4:66:c8:39:6b:f4:7f:79:50:80:d9:d8:6f: f3:ff:be:83:99:e3:6a:4f:1d:74:8f:c4:ec:30:97: e3:15:a0:a6:e2:68:d5:a0:f4:99:32:55:80:90:4b: db:1f:7b:ad:47:45:d7:5c:37:52:84:35:cd:28:63: 33:57:56:d7:2a:15:be:8e:ad:0a:f7:fc:ad:3f:54: 62:57:58:ce:97:77:c7:35:7c:8d:62:a4:3a:47:8f: a7:fe:39:df:df:91:ee:fa:70:85:4e:52:3d:e0:cf: 5d:64:26:88:95:c7:57:f8:de:d6:24:da:5f:2e:fe: e7:ef:84:e0:ba:25:dc:04:e7:e7:a8:be:64:3c:3c: 0f:05:d0:30:c3:81:9b:25:db:69:e9:36:49:dd:82: f7:42:ce:95:7c:75:53:ac:0e:dc:c7:c8:06:f2:d1: 62:50:ef:dc:64:19:78:fc:a7:c5:c3:ce:f6:eb:b6: 2e:a2:3d:53:3b:81:13:74:ad:fe:12:dc:8d:c7:8b: 43:a6:12:7e:49:1c:06:f8:bf:86:24:6d:76:33:5c: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C5:7C:60:17:14:92:C3:D0:78:EE:9B:A5:85:5B:B6:9E:34:F3:66 X509v3 Authority Key Identifier: keyid:FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5e:bd:9d:b2:ad:4d:5b:17:3d:f5:61:31:8f:44:20:83:73: 35:7b:4f:15:f3:0a:b8:38:ad:71:b5:dd:37:49:3d:bd:3b:65: a9:95:93:61:02:7f:4d:fd:dc:2b:2d:29:21:58:79:6b:17:81: af:b4:40:e2:b9:68:fc:d8:b2:57:c7:d4:3a:13:15:53:ac:26: 31:6c:65:a8:8e:12:ca:92:d7:3d:97:53:29:ea:8b:84:87:fe: fd:cc:4f:cd:fd:17:c5:53:f3:d4:75:69:24:28:e5:35:99:a6: 3a:75:1c:40:1b:61:d3:65:af:1b:4c:d8:79:fa:53:db:10:15: cd:b0:92:88:f7:6c:6e:80:b8:72:2a:7d:bd:d7:20:39:2c:02: c2:08:7f:3d:23:30:86:32:4d:55:0c:f3:1e:ae:da:99:60:59: 44:ff:21:e8:04:25:a4:b5:33:95:c0:c3:b6:9b:7b:4c:88:cf: 53:b2:27:9f:5f:e5:f5:9e:78:ee:5b:91:12:dd:8f:76:90:8c: 2e:2b:56:a8:de:f4:fb:27:a2:a6:ac:97:ce:ce:39:62:42:26: 7a:44:bc:6a:cc:00:ee:b1:df:5c:86:05:88:96:c5:87:3a:1e: 67:b2:9d:2a:b7:d7:b0:25:81:08:36:14:16:8d:d2:e4:10:a7: 14:00:81:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQixSn493b5JXfROCajcXniRzFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgw QzgyOTVFNTAeFw0yNjA5MjEwMzU2MjlaFw0yNjA5MjIwNzQ2MjlaMDMxMTAvBgNV BAMTKDEwQzU3QzYwMTcxNDkyQzNEMDc4RUU5QkE1ODU1QkI2OUUzNEYzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXphQ+fO8qm8NBcszClJIoBjL N9ypUSaAfjW+WN7oPCSFjtlIGarg07fxV83M9GbIOWv0f3lQgNnYb/P/voOZ42pP HXSPxOwwl+MVoKbiaNWg9JkyVYCQS9sfe61HRddcN1KENc0oYzNXVtcqFb6OrQr3 /K0/VGJXWM6Xd8c1fI1ipDpHj6f+Od/fke76cIVOUj3gz11kJoiVx1f43tYk2l8u /ufvhOC6JdwE5+eovmQ8PA8F0DDDgZsl22npNkndgvdCzpV8dVOsDtzHyAby0WJQ 79xkGXj8p8XDzvbrti6iPVM7gRN0rf4S3I3Hi0OmEn5JHAb4v4YkbXYzXFJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEMV8YBcUksPQeO6bpYVbtp4082YwHwYDVR0j BBgwFoAU/KzNzw/etQ8smBbrxFUPeAyCleUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUwZDFhYTEtNGM3Zi00NDhiLWIyYmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0Yw RkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgwQzgyOTVFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0FDQ0RDRjBGREVCNTBGMkM5ODE2RUJDNDU1MEY3ODBDODI5 NUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBG NzgwQzgyOTVFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJevZ2yrU1bFz31YTGPRCCDczV7TxXzCrg4 rXG13TdJPb07ZamVk2ECf0393CstKSFYeWsXga+0QOK5aPzYslfH1DoTFVOsJjFs ZaiOEsqS1z2XUynqi4SH/v3MT839F8VT89R1aSQo5TWZpjp1HEAbYdNlrxtM2Hn6 U9sQFc2wkoj3bG6AuHIqfb3XIDksAsIIfz0jMIYyTVUM8x6u2plgWUT/IegEJaS1 M5XAw7abe0yIz1OyJ59f5fWeeO5bkRLdj3aQjC4rVqje9Psnoqasl87OOWJCJnpE vGrMAO6x31yGBYiWxYc6HmeynSq317AlgQg2FBaN0uQQpxQAgTY= -----END CERTIFICATE-----Generated at Mon Sep 21 21:54:18 2026 by rpki-client