$ rpki-client -vvf rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft File: FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft (raw, json) Hash identifier: uVeM7NIa0N7Y98JTWTuJk4RXw9wwJslJo7KnOOe01bw= Subject key identifier: 2D:BD:F6:48:DF:FF:20:23:D9:66:B4:75:D6:E3:6B:CF:DE:51:27:2A Authority key identifier: FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 Certificate issuer: /CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Certificate serial: 890A34001C6568182ADA08BE7C2B73C0B9A405 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 07:56:45 +0000 Manifest this update: Tue 28 Jul 2026 07:51:45 +0000 Manifest next update: Wed 29 Jul 2026 10:13:45 +0000 Files and hashes: 1: FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl (hash: Pbn2om8E3kIbZ6d2dvD8/zIiuQuFZOs527C33Tign2I=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: oShpqamIlxg4kQTK/q8+//W/2I271Sb0pfvq3P0rPtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89:0a:34:00:1c:65:68:18:2a:da:08:be:7c:2b:73:c0:b9:a4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC870A2769B88F10107817EDAA3B4237B14B0EA9 Validity Not Before: Jul 28 07:51:45 2026 GMT Not After : Jul 29 10:13:45 2026 GMT Subject: CN=2DBDF648DFFF2023D966B475D6E36BCFDE51272A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:0c:25:b2:d0:f5:3d:66:e6:44:d0:54:e0: 52:1a:44:a5:f6:23:7e:35:69:53:41:bb:42:23:31: 83:4c:df:0f:7a:c6:0a:46:81:ac:33:f9:da:9e:5d: e1:91:0f:25:ba:ce:b3:30:f5:5e:32:b9:ba:9a:8a: 31:bb:4c:9a:82:be:14:2a:fb:e9:6a:ba:f0:23:f0: ac:ca:c5:a2:26:43:f0:27:ee:ea:0e:a1:a8:64:1c: 10:36:3b:7b:67:bb:1b:ab:8c:7c:81:0b:71:41:75: 48:eb:cc:2c:6e:ab:fb:1a:93:de:3b:66:18:fe:2d: 2a:db:c7:be:cd:ab:61:3b:c4:69:cf:bf:25:49:b3: c6:c4:c7:5f:bc:21:d1:0b:7b:dd:77:02:73:c0:40: 30:75:02:bd:61:7d:72:00:b9:8e:15:69:fa:f8:38: 50:16:38:a1:a6:3c:ff:22:d9:97:6a:4f:fa:be:23: 19:f4:5a:0d:36:5c:ff:05:77:28:ed:49:46:f5:fb: 52:ef:a2:dc:57:fe:4b:5a:ea:ae:ef:65:9f:57:6e: d0:36:c9:5b:bb:b3:d0:99:c0:97:70:01:3f:32:10: 4d:6d:5b:2a:21:a7:06:da:88:0c:97:ce:8e:69:e3: e3:39:93:56:69:b8:52:14:31:2a:04:be:ad:11:ea: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BD:F6:48:DF:FF:20:23:D9:66:B4:75:D6:E3:6B:CF:DE:51:27:2A X509v3 Authority Key Identifier: keyid:FC:87:0A:27:69:B8:8F:10:10:78:17:ED:AA:3B:42:37:B1:4B:0E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/FC870A2769B88F10107817EDAA3B4237B14B0EA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6b:d3:43:9e:c9:56:2e:ea:fc:b6:4f:45:93:23:06:73:33: 97:5f:ee:0d:11:a8:f6:b7:12:b9:ff:22:84:5b:9f:1b:b4:5b: 8f:45:01:5a:6e:34:27:00:18:26:7d:91:02:bb:82:12:8f:6f: d3:30:c9:1b:6e:2b:a7:8a:76:65:2f:47:83:5e:c8:0a:f5:36: 85:29:32:8b:db:25:ab:5f:2f:07:8e:1b:a3:58:9c:90:31:b2: 3f:27:38:94:15:a4:43:69:50:81:87:3f:bd:1a:aa:4d:cd:4d: fe:c4:5f:ad:cd:2e:18:5e:2b:d6:59:51:2c:5e:71:4c:f1:78: 76:cc:f4:e2:a6:c7:e5:d5:b2:57:a2:d1:70:26:e3:c4:38:15: 7a:6a:8a:dd:6d:e5:bf:99:21:e4:5a:00:3e:32:41:d2:b3:ac: 08:d7:ad:cf:6b:78:78:28:7f:64:35:cc:85:03:c1:d2:60:37: 71:03:50:a0:d5:c5:e4:50:25:a3:53:14:39:9f:93:58:26:d0: 41:59:04:ff:72:87:31:53:bf:52:35:fb:d2:88:9a:04:9f:fd: 69:71:d0:35:3e:f6:dd:f0:0f:5b:be:6f:cf:1c:1c:56:cf:ef: 62:59:f8:f5:d3:6d:9a:32:ea:bb:fd:45:f6:2b:a8:70:cf:87: 87:5c:c8:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIkKNAAcZWgYKtoIvnwrc8C5pAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdC MTRCMEVBOTAeFw0yNjA3MjgwNzUxNDVaFw0yNjA3MjkxMDEzNDVaMDMxMTAvBgNV BAMTKDJEQkRGNjQ4REZGRjIwMjNEOTY2QjQ3NUQ2RTM2QkNGREU1MTI3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6QwlstD1PWbmRNBU4FIaRKX2 I341aVNBu0IjMYNM3w96xgpGgawz+dqeXeGRDyW6zrMw9V4yubqaijG7TJqCvhQq ++lquvAj8KzKxaImQ/An7uoOoahkHBA2O3tnuxurjHyBC3FBdUjrzCxuq/sak947 Zhj+LSrbx77Nq2E7xGnPvyVJs8bEx1+8IdELe913AnPAQDB1Ar1hfXIAuY4Vafr4 OFAWOKGmPP8i2ZdqT/q+Ixn0Wg02XP8FdyjtSUb1+1LvotxX/kta6q7vZZ9XbtA2 yVu7s9CZwJdwAT8yEE1tWyohpwbaiAyXzo5p4+M5k1ZpuFIUMSoEvq0R6pbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULb32SN//ICPZZrR11uNrz95RJyowHwYDVR0j BBgwFoAU/IcKJ2m4jxAQeBftqjtCN7FLDqkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyZjY0Y2EtZmE1NC00OTllLWJjMzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2 OUI4OEYxMDEwNzgxN0VEQUEzQjQyMzdCMTRCMEVBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzg3MEEyNzY5Qjg4RjEwMTA3ODE3RURBQTNCNDIzN0IxNEIw RUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvRkM4NzBBMjc2OUI4OEYxMDEwNzgxN0VEQUEzQjQy MzdCMTRCMEVBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5r00OeyVYu6vy2T0WTIwZzM5df7g0RqPa3 Ern/IoRbnxu0W49FAVpuNCcAGCZ9kQK7ghKPb9MwyRtuK6eKdmUvR4NeyAr1NoUp MovbJatfLweOG6NYnJAxsj8nOJQVpENpUIGHP70aqk3NTf7EX63NLhheK9ZZUSxe cUzxeHbM9OKmx+XVslei0XAm48Q4FXpqit1t5b+ZIeRaAD4yQdKzrAjXrc9reHgo f2Q1zIUDwdJgN3EDUKDVxeRQJaNTFDmfk1gm0EFZBP9yhzFTv1I1+9KImgSf/Wlx 0DU+9t3wD1u+b88cHFbP72JZ+PXTbZoy6rv9RfYrqHDPh4dcyFY= -----END CERTIFICATE-----Generated at Tue Jul 28 23:17:59 2026 by rpki-client