$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json) Hash identifier: 1ek/yKDeYHycx1YiWuxHBXgV9eSzHjF7ZJ6f6HqitfA= Subject key identifier: 74:C9:05:91:51:F2:76:60:46:1E:B7:5E:2F:58:AE:29:A4:BA:E3:AD Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 05D67824B9F7209DD381AAFA9723E4796669BFF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:32:15 +0000 Manifest this update: Sun 20 Sep 2026 20:27:15 +0000 Manifest next update: Mon 21 Sep 2026 20:32:15 +0000 Files and hashes: 1: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: oEsmXv0T+17A8KD8VQq/QQ2X4KJ84d3H8FZMGjmTf2Q=) 2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=) 3: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=) 4: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d6:78:24:b9:f7:20:9d:d3:81:aa:fa:97:23:e4:79:66:69:bf:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: Sep 20 20:27:15 2026 GMT Not After : Sep 21 20:32:15 2026 GMT Subject: CN=74C9059151F27660461EB75E2F58AE29A4BAE3AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fb:80:de:a1:15:c4:f7:f9:f4:2a:4a:57:b6: dd:6a:14:6a:e2:3c:3a:97:ab:38:54:ea:02:9c:af: 61:69:c9:8d:f7:09:2e:a7:84:f2:f7:fb:87:f3:86: 59:0d:03:f7:ea:58:df:94:da:e3:b0:c6:25:b9:1b: 5a:c2:b3:9f:e5:ba:e3:54:23:28:0e:1e:2c:59:50: 19:bf:7e:89:15:70:d0:e0:b2:92:14:28:72:2f:4f: b7:23:f8:a0:ef:a3:6b:a5:15:06:ff:7b:0d:49:0f: e4:c6:f9:09:a1:83:e7:4c:bc:cb:61:f1:f4:9a:6e: b1:75:53:68:4d:db:dd:2b:ce:18:e2:a8:79:58:3b: ef:5f:8a:d7:cf:82:44:d7:11:40:7d:69:ff:f0:8c: d7:ed:7f:28:1f:c3:93:21:23:59:99:2c:c6:8f:b2: e6:56:3b:76:8e:8c:f7:43:73:e6:72:35:b6:ad:11: 36:5a:5f:79:f6:de:f3:c5:be:b7:a7:ac:b5:19:f8: 11:72:ad:87:9a:4a:f1:cd:e3:d6:ec:a0:61:73:74: 1e:74:15:b8:7f:7b:dc:e0:29:b7:8e:cc:11:96:c2: 3a:4e:45:95:33:ae:c0:1a:4e:a1:06:9a:de:ba:67: 05:6b:f5:72:ca:01:f1:00:01:6e:fa:9f:33:2e:fc: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C9:05:91:51:F2:76:60:46:1E:B7:5E:2F:58:AE:29:A4:BA:E3:AD X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d0:29:b9:a7:a6:4f:dd:9c:d7:52:e3:33:e4:bc:46:27:93: 5c:6f:78:41:03:7e:7e:86:ee:da:33:15:ef:02:6e:2e:9b:21: 22:23:41:7d:80:80:7d:90:f9:64:ca:f0:9e:d6:b8:6c:80:c9: 80:82:c2:47:e8:cc:a4:f1:4e:c5:48:72:d6:c3:67:1b:06:56: 7c:6d:7b:5c:56:b1:47:69:f2:2d:5e:55:48:2d:42:d1:5d:5f: 5b:6d:dc:98:63:ef:5b:cc:ae:df:41:3b:1d:a0:13:83:42:16: 46:64:eb:80:72:29:84:ea:6f:d5:39:38:03:92:26:7c:19:5b: a9:e5:bd:65:7e:1b:cf:68:a0:c5:28:b6:90:45:d4:4a:31:8c: 4f:ad:b7:fa:9c:48:56:f6:00:5b:e6:b9:97:ad:d9:f1:7f:f8: 6f:d8:cf:f2:e4:24:84:8f:dd:7f:af:81:34:99:cb:ab:2b:e8: 36:6d:11:68:31:66:c8:9d:e8:56:1a:1b:bf:11:8b:a1:fa:26: 9a:3f:78:21:88:bf:4f:cd:ce:80:4c:20:f8:5e:f4:23:77:ef: c8:7f:da:a0:ac:2b:28:5c:ba:0a:0d:25:9b:7b:c1:b3:06:d8: 45:4e:83:f0:08:07:00:d7:3b:6d:d8:06:8f:5d:67:82:6b:84: 08:74:3c:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdZ4JLn3IJ3Tgar6lyPkeWZpv/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjA5MjAyMDI3MTVaFw0yNjA5MjEyMDMyMTVaMDMxMTAvBgNV BAMTKDc0QzkwNTkxNTFGMjc2NjA0NjFFQjc1RTJGNThBRTI5QTRCQUUzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0+4DeoRXE9/n0KkpXtt1qFGri PDqXqzhU6gKcr2FpyY33CS6nhPL3+4fzhlkNA/fqWN+U2uOwxiW5G1rCs5/luuNU IygOHixZUBm/fokVcNDgspIUKHIvT7cj+KDvo2ulFQb/ew1JD+TG+Qmhg+dMvMth 8fSabrF1U2hN290rzhjiqHlYO+9fitfPgkTXEUB9af/wjNftfygfw5MhI1mZLMaP suZWO3aOjPdDc+ZyNbatETZaX3n23vPFvrenrLUZ+BFyrYeaSvHN49bsoGFzdB50 Fbh/e9zgKbeOzBGWwjpORZUzrsAaTqEGmt66ZwVr9XLKAfEAAW76nzMu/PRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdMkFkVHydmBGHrdeL1iuKaS6460wHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1 QzFBMjk0RUYxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHQKbmnpk/dnNdS4zPkvEYnk1xveEEDfn6G 7tozFe8Cbi6bISIjQX2AgH2Q+WTK8J7WuGyAyYCCwkfozKTxTsVIctbDZxsGVnxt e1xWsUdp8i1eVUgtQtFdX1tt3Jhj71vMrt9BOx2gE4NCFkZk64ByKYTqb9U5OAOS JnwZW6nlvWV+G89ooMUotpBF1EoxjE+tt/qcSFb2AFvmuZet2fF/+G/Yz/LkJISP 3X+vgTSZy6sr6DZtEWgxZsid6FYaG78Ri6H6Jpo/eCGIv0/NzoBMIPhe9CN378h/ 2qCsKyhcugoNJZt7wbMG2EVOg/AIBwDXO23YBo9dZ4JrhAh0PNE= -----END CERTIFICATE-----Generated at Mon Sep 21 13:56:08 2026 by rpki-client