$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft File: FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft (raw, json) Hash identifier: Wxsp68ZMtJBz/j1qylhJA3D/e0mt9lmk9cQ5e5ai2CM= Subject key identifier: 02:CF:7C:20:B1:C6:22:A7:DD:26:F0:C2:FC:46:AD:D9:AD:ED:8E:98 Authority key identifier: FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 Certificate issuer: /CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Certificate serial: 331307BC0E7BAA87083D0ED97D7DBD87BFE66725 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft Manifest number: BD Signing time: Mon 21 Sep 2026 14:29:31 +0000 Manifest this update: Mon 21 Sep 2026 14:24:31 +0000 Manifest next update: Tue 22 Sep 2026 15:03:31 +0000 Files and hashes: 1: FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl (hash: jC/JXGZUtsiXF2XVKY7GPK/v+7w7VljefKCBWfX/nSI=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: oShpqamIlxg4kQTK/q8+//W/2I271Sb0pfvq3P0rPtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:13:07:bc:0e:7b:aa:87:08:3d:0e:d9:7d:7d:bd:87:bf:e6:67:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Validity Not Before: Sep 21 14:24:31 2026 GMT Not After : Sep 22 15:03:31 2026 GMT Subject: CN=02CF7C20B1C622A7DD26F0C2FC46ADD9ADED8E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ce:aa:9d:a3:66:a1:d5:1f:8c:8d:55:2c:80: 10:00:15:75:d0:46:74:84:b8:c5:ff:de:d5:46:98: 39:d4:df:04:87:be:7f:0c:f2:85:11:00:1e:17:0a: 88:e6:ac:e4:e6:87:09:48:c1:68:bc:48:22:56:69: d8:92:0d:ba:0f:5c:42:ec:0f:9a:c5:1c:b7:48:fd: 3c:20:2a:85:6b:f9:56:c2:a5:a8:e0:5b:45:61:b6: b3:39:49:fd:51:9d:a7:32:f1:84:d7:29:ec:12:ac: 0e:a8:97:57:9b:be:4a:c5:7f:00:09:dc:1b:e8:f2: 28:70:fc:de:de:9a:ac:a1:ac:a8:d1:bf:02:a4:12: d7:74:98:1f:6b:ec:5c:3f:2b:22:24:fa:07:79:c8: 9f:10:cd:1e:4e:bb:e0:98:23:39:51:68:3f:3b:ea: d5:08:48:4f:d9:af:74:91:2f:1e:6e:ae:c8:db:8d: 96:00:20:0e:ed:18:d9:70:a6:1f:b0:35:2b:06:1d: 95:1f:95:56:b9:d6:3a:be:c4:50:99:89:06:1e:7c: 1a:02:b2:92:e0:b5:ce:32:17:46:90:55:06:ef:d0: 98:6d:f9:c5:76:7d:55:be:1d:85:9f:90:6f:85:43: 99:ce:51:6f:00:28:dd:eb:b3:34:7d:24:d4:03:85: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CF:7C:20:B1:C6:22:A7:DD:26:F0:C2:FC:46:AD:D9:AD:ED:8E:98 X509v3 Authority Key Identifier: keyid:FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f6:dc:3a:8f:7e:ad:9d:55:2b:db:ec:6c:8d:6c:3c:09:c7: 08:c7:18:9e:22:83:3e:84:70:b8:c7:32:49:41:1c:f5:8e:02: 48:c7:2d:bd:f7:24:25:60:5f:ff:fe:71:93:a8:a1:fb:f8:43: 28:f5:5a:2b:8b:c6:ea:c8:59:ce:a7:67:07:eb:88:03:ad:e3: 89:ac:09:19:62:c1:5c:c0:53:c6:7d:da:53:24:cc:bb:c7:c3: f4:38:9d:75:93:25:c8:e6:39:54:6f:1d:dd:8e:cf:2d:b6:19: 80:55:bd:f7:42:0d:2e:09:9b:c2:76:1a:c2:99:b9:f4:e5:c2: c7:43:fb:c4:71:13:6b:db:a7:e2:c3:27:03:7a:f0:b4:2a:7c: 81:5f:c0:39:c8:5d:94:55:26:8f:30:35:aa:71:05:e0:76:58: ee:47:f8:b8:c5:b6:f7:89:64:7f:98:c5:a1:d7:e4:a3:9a:91: 28:bf:d9:a6:1e:6e:c2:95:1e:4b:2b:96:20:9b:df:39:79:60: 0e:b8:1c:ab:69:ec:bf:5a:e7:f5:c5:e5:ef:55:cc:c2:68:0a: 5f:b0:3e:bc:f2:d4:1c:be:51:5b:6f:85:7b:f4:b2:91:2b:b6: 44:1f:35:ef:7f:ed:b4:72:44:e2:2e:ee:c4:cb:d8:f8:c3:01: 20:3c:d8:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxMHvA57qocIPQ7ZfX29h7/mZyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdC MTRCMEVBOTAeFw0yNjA5MjExNDI0MzFaFw0yNjA5MjIxNTAzMzFaMDMxMTAvBgNV BAMTKDAyQ0Y3QzIwQjFDNjIyQTdERDI2RjBDMkZDNDZBREQ5QURFRDhFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPzqqdo2ah1R+MjVUsgBAAFXXQ RnSEuMX/3tVGmDnU3wSHvn8M8oURAB4XCojmrOTmhwlIwWi8SCJWadiSDboPXELs D5rFHLdI/TwgKoVr+VbCpajgW0VhtrM5Sf1Rnacy8YTXKewSrA6ol1ebvkrFfwAJ 3Bvo8ihw/N7emqyhrKjRvwKkEtd0mB9r7Fw/KyIk+gd5yJ8QzR5Ou+CYIzlRaD87 6tUISE/Zr3SRLx5ursjbjZYAIA7tGNlwph+wNSsGHZUflVa51jq+xFCZiQYefBoC spLgtc4yF0aQVQbv0Jht+cV2fVW+HYWfkG+FQ5nOUW8AKN3rszR9JNQDhUEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAs98ILHGIqfdJvDC/Eat2a3tjpgwHwYDVR0j BBgwFoAU/IcKJ2m4jxAQeBftqjtCN7FLDqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyZjY0Y2EtZmE1NC00OTllLWJjMzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2 OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdCMTRCMEVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzg3MEEyNzY5Qjg4RjEwMTA3ODE3RURBQTNCNDIzN0IxNEIw RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQy MzdCMTRCMEVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH23DqPfq2dVSvb7GyNbDwJxwjHGJ4igz6E cLjHMklBHPWOAkjHLb33JCVgX//+cZOoofv4Qyj1WiuLxurIWc6nZwfriAOt44ms CRliwVzAU8Z92lMkzLvHw/Q4nXWTJcjmOVRvHd2Ozy22GYBVvfdCDS4Jm8J2GsKZ ufTlwsdD+8RxE2vbp+LDJwN68LQqfIFfwDnIXZRVJo8wNapxBeB2WO5H+LjFtveJ ZH+YxaHX5KOakSi/2aYebsKVHksrliCb3zl5YA64HKtp7L9a5/XF5e9VzMJoCl+w Przy1By+UVtvhXv0spErtkQfNe9/7bRyROIu7sTL2PjDASA82E8= -----END CERTIFICATE-----Generated at Mon Sep 21 18:27:16 2026 by rpki-client