$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft File: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft (raw, json) Hash identifier: /wjDPUIZpdCXWAeC5XHOgTdd+Z83huuMjmxgnG48T0o= Subject key identifier: 41:EA:35:75:2B:5D:E1:5C:C4:AE:9C:58:18:D0:2B:8D:ED:4B:FC:B4 Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Certificate serial: 21047059E9EE044DD84F4615800C7CBD7BA59311 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 02:34:38 +0000 Manifest this update: Mon 21 Sep 2026 02:29:38 +0000 Manifest next update: Tue 22 Sep 2026 04:58:38 +0000 Files and hashes: 1: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl (hash: KocuoX+h5NevGernp8iilWT3r/eUyncBLcZUivGszcA=) 2: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: d1I2cfM8y0iXKHnaVDBSnW1smn5NlaaQccmGLXMsCLs=) 3: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: ZSthn7Cgu8F7ezrRvGxx4MN4tqZJy9/SKBqVKux9q54=) 4: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: QdzKQdoMzvUeRiXyCgHODUDOAjORN+LQ7bEkztl/lEQ=) 5: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: uPo1yAFRG167KzCEv0QB1XB7rNNCLMc7y8D/msKrVH0=) 6: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: 9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:04:70:59:e9:ee:04:4d:d8:4f:46:15:80:0c:7c:bd:7b:a5:93:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Validity Not Before: Sep 21 02:29:38 2026 GMT Not After : Sep 22 04:58:38 2026 GMT Subject: CN=41EA35752B5DE15CC4AE9C5818D02B8DED4BFCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:b0:01:4c:7b:25:10:0c:91:67:22:95:17: ef:bb:75:5c:f2:2a:fc:3a:e7:f1:09:34:05:05:4e: 33:84:30:fb:f8:d8:26:0e:01:98:2b:63:d5:c8:ec: ef:5e:81:1e:fa:5b:8c:6d:4d:af:dd:71:15:e2:a8: d6:ca:2a:8d:8e:62:ef:5c:4a:8f:a7:68:47:55:c2: c3:78:a0:d1:23:27:8e:73:d9:bd:a1:dc:9b:a8:51: d1:0e:22:06:6c:af:9b:cc:a0:c0:8b:ff:e0:af:48: 04:fa:50:c4:43:d0:a6:b6:3c:ac:f8:04:d4:96:50: e6:18:91:90:c3:82:76:04:d5:01:b2:db:11:99:6c: 2a:e7:7e:9c:f7:ba:76:a9:68:c6:cc:53:05:54:c0: ec:ad:9a:f1:4a:4a:3f:ec:a6:40:7f:23:22:b7:3a: b0:e9:12:ac:fa:07:f8:92:3e:61:a0:9e:92:5b:9d: 58:8a:25:47:d2:ce:87:1f:b2:f0:03:da:fa:42:a2: 17:4a:cc:2d:74:a0:fc:24:bf:3c:56:5c:73:10:d7: 04:24:52:be:cd:60:67:81:04:0c:46:78:fc:f1:9f: 60:62:ae:ca:4e:85:2d:11:9e:0a:84:63:33:cf:54: 87:16:40:c2:37:48:e1:f1:f8:be:09:96:f2:58:36: 95:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EA:35:75:2B:5D:E1:5C:C4:AE:9C:58:18:D0:2B:8D:ED:4B:FC:B4 X509v3 Authority Key Identifier: keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d8:3d:38:c0:c6:0f:d9:9a:94:03:d6:9b:3e:bb:74:ea:c2: 0f:d7:72:ca:da:7b:ca:29:ba:d6:27:b5:9c:19:48:6c:ee:67: 76:20:33:15:e1:28:5f:04:21:42:81:04:1e:97:1b:9d:cc:76: 9c:a5:51:9c:52:95:7a:37:e3:ee:5f:a7:a2:30:b1:a6:85:92: 35:c5:f5:dc:03:cc:80:4f:0f:c0:47:c7:1f:20:fb:7e:61:2d: 33:9d:60:b6:9e:5c:8c:fa:fe:2e:42:c1:08:bb:7b:e7:a5:b6: 0d:10:94:5f:63:cf:c1:03:31:b8:27:de:f3:7d:f0:f8:c9:09: 7e:c8:75:b0:05:ef:4d:56:22:16:14:7e:a0:3e:1e:67:f2:f8: 15:fb:00:d1:7f:4b:c7:ed:31:7f:3c:1c:a0:71:6c:4b:f5:4c: cb:f7:d0:a4:2b:9d:03:02:f3:6e:ae:4c:08:18:83:f1:12:a3: b1:ea:cb:08:63:67:73:d1:61:e2:5b:88:fd:46:86:d5:39:20: 60:cf:2d:50:21:ee:a4:0b:e2:3c:42:d9:c9:45:da:61:80:4a: 00:3f:7b:3e:da:1d:6a:8d:32:91:9d:89:4d:6e:1a:bb:bd:9e: bc:40:53:59:3c:01:4d:10:8f:e5:cc:b3:58:3d:6c:f1:21:53: 88:36:ad:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQRwWenuBE3YT0YVgAx8vXulkxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNEQTJE QkE4MTI1QzAeFw0yNjA5MjEwMjI5MzhaFw0yNjA5MjIwNDU4MzhaMDMxMTAvBgNV BAMTKDQxRUEzNTc1MkI1REUxNUNDNEFFOUM1ODE4RDAyQjhERUQ0QkZDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iLABTHslEAyRZyKVF++7dVzy Kvw65/EJNAUFTjOEMPv42CYOAZgrY9XI7O9egR76W4xtTa/dcRXiqNbKKo2OYu9c So+naEdVwsN4oNEjJ45z2b2h3JuoUdEOIgZsr5vMoMCL/+CvSAT6UMRD0Ka2PKz4 BNSWUOYYkZDDgnYE1QGy2xGZbCrnfpz3unapaMbMUwVUwOytmvFKSj/spkB/IyK3 OrDpEqz6B/iSPmGgnpJbnViKJUfSzocfsvAD2vpCohdKzC10oPwkvzxWXHMQ1wQk Ur7NYGeBBAxGePzxn2BirspOhS0RngqEYzPPVIcWQMI3SOHx+L4JlvJYNpUpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQeo1dStd4VzErpxYGNArje1L/LQwHwYDVR0j BBgwFoAU/uVwo/x48fGOhYrtqFM9otuoElwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJhZjgzNTItY2Q2NS00ZGI3LWIwY2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNG Qzc4RjFGMThFODU4QUVEQTg1MzNEQTJEQkE4MTI1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRUU1NzBBM0ZDNzhGMUYxOEU4NThBRURBODUzM0RBMkRCQTgx MjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNE QTJEQkE4MTI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrYPTjAxg/ZmpQD1ps+u3Tqwg/Xcsrae8op utYntZwZSGzuZ3YgMxXhKF8EIUKBBB6XG53MdpylUZxSlXo34+5fp6IwsaaFkjXF 9dwDzIBPD8BHxx8g+35hLTOdYLaeXIz6/i5CwQi7e+eltg0QlF9jz8EDMbgn3vN9 8PjJCX7IdbAF701WIhYUfqA+Hmfy+BX7ANF/S8ftMX88HKBxbEv1TMv30KQrnQMC 826uTAgYg/ESo7HqywhjZ3PRYeJbiP1GhtU5IGDPLVAh7qQL4jxC2clF2mGASgA/ ez7aHWqNMpGdiU1uGru9nrxAU1k8AU0Qj+XMs1g9bPEhU4g2raE= -----END CERTIFICATE-----Generated at Mon Sep 21 09:29:35 2026 by rpki-client