$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft File: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft (raw, json) Hash identifier: P/XUCzo21zyD+0TSj0wxeOCfeT0h1+AlU8fiKkEpYqM= Subject key identifier: B7:77:F2:48:A7:6A:47:A2:32:8C:DA:8C:79:A0:88:22:A7:BC:75:B2 Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC Certificate issuer: /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Certificate serial: 178E95FAE233486EC297C2471BE8160AF9A60A2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:44:57 +0000 Manifest this update: Sun 20 Sep 2026 22:39:57 +0000 Manifest next update: Tue 22 Sep 2026 00:06:57 +0000 Files and hashes: 1: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl (hash: EfbwCYb5e4oO432GqZwRuaMY8q0RCk+cSEbANpKVecE=) 2: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: b/v/p4XXRhwRyIRQmWyoUAD/7oSBMCFky65Xuz73r7o=) 3: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: YhKAzrow8fDAadjaSnduhgqC89vTvIB1S39dbE3C1og=) 4: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: NOyjBT0zFszgxATvStbBfl8IjAdIOfkN8ppEqeVA78E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8e:95:fa:e2:33:48:6e:c2:97:c2:47:1b:e8:16:0a:f9:a6:0a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Validity Not Before: Sep 20 22:39:57 2026 GMT Not After : Sep 22 00:06:57 2026 GMT Subject: CN=B777F248A76A47A2328CDA8C79A08822A7BC75B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:90:b1:16:69:5d:d6:c3:8f:bb:9c:34:e1: 2f:35:8c:88:f5:82:f1:a3:db:ca:af:06:e0:fe:03: eb:4e:ba:25:37:a5:c9:8c:38:10:22:97:bf:c3:26: 71:27:c8:9c:7b:70:0b:f3:a9:bb:4c:1a:58:d9:dc: a0:18:24:28:e3:54:6e:63:14:a4:13:c6:4c:fc:c1: d9:6d:ea:ae:e2:43:17:d0:47:dd:1b:9a:c7:92:06: f7:10:00:ca:b1:7e:3e:fa:db:5b:59:16:9e:e9:14: 68:aa:e2:80:b9:3e:b2:91:33:7e:c5:e0:b5:64:ad: f6:75:5f:79:ae:41:de:66:40:b1:67:07:0f:ca:7c: ab:00:9b:88:11:1c:66:99:d4:72:f8:36:d2:2d:f1: b9:f4:96:5a:60:0b:3d:61:96:8d:6c:25:9a:3d:58: 71:5a:ad:aa:97:7b:55:d4:67:35:fa:0c:c8:a7:95: 5c:c3:ee:76:ba:cf:4a:3a:08:6e:22:23:0c:35:de: 19:8f:1e:87:2e:2a:ea:c5:06:57:be:42:02:55:f9: 52:e0:85:8b:32:6a:40:7b:24:1c:df:72:0b:4e:2c: df:ca:c0:19:18:23:4c:b7:09:eb:2b:83:2b:6c:fb: 8e:1e:d8:69:d9:5f:ff:1d:34:6d:4d:f2:82:8c:48: bf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:77:F2:48:A7:6A:47:A2:32:8C:DA:8C:79:A0:88:22:A7:BC:75:B2 X509v3 Authority Key Identifier: keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fd:d5:ec:c2:03:18:0a:33:1d:c3:8d:3b:18:9f:fc:e4:bd: 08:49:2d:93:d7:1b:d3:81:13:e6:b7:0f:e9:23:e9:99:df:d2: 74:ae:4f:d0:b2:86:e0:31:a5:e6:45:79:2d:03:17:35:ff:a8: d3:2b:28:85:8e:6d:8d:39:60:49:5a:fd:8a:86:41:42:a5:cb: df:a7:6f:55:f2:5b:9f:ec:48:34:f8:9f:ed:ff:b4:32:95:7a: 10:80:8f:52:c9:a9:b8:56:26:43:e7:ba:bb:c3:ef:88:65:c5: 2c:3e:51:79:d4:82:bc:80:05:7a:39:4a:04:33:b2:b5:62:41: 21:76:d8:8b:66:76:24:a7:e9:9b:38:3c:4b:e4:eb:4a:e3:cf: 3c:af:11:35:a5:2c:74:e8:dd:21:12:89:71:c1:04:c2:4b:0c: 4d:02:e7:0c:39:2f:f6:b9:7f:0d:a2:ed:5e:45:17:b4:64:58: 59:e5:b4:09:76:fe:97:6d:ea:6f:91:e0:78:87:fa:9d:5f:b0: 41:71:bd:b6:69:82:bf:8c:5c:8a:25:f7:cf:3a:5f:e5:7d:60: 66:6f:68:4f:72:1c:db:86:27:0a:2e:d0:47:54:c9:db:1c:4d: ab:0f:b4:4a:47:49:46:e2:79:7c:89:df:98:a7:88:b0:11:63: 28:bd:f1:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF46V+uIzSG7Cl8JHG+gWCvmmCiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIx RDk4MkZEQzAeFw0yNjA5MjAyMjM5NTdaFw0yNjA5MjIwMDA2NTdaMDMxMTAvBgNV BAMTKEI3NzdGMjQ4QTc2QTQ3QTIzMjhDREE4Qzc5QTA4ODIyQTdCQzc1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZZCxFmld1sOPu5w04S81jIj1 gvGj28qvBuD+A+tOuiU3pcmMOBAil7/DJnEnyJx7cAvzqbtMGljZ3KAYJCjjVG5j FKQTxkz8wdlt6q7iQxfQR90bmseSBvcQAMqxfj7621tZFp7pFGiq4oC5PrKRM37F 4LVkrfZ1X3muQd5mQLFnBw/KfKsAm4gRHGaZ1HL4NtIt8bn0llpgCz1hlo1sJZo9 WHFaraqXe1XUZzX6DMinlVzD7na6z0o6CG4iIww13hmPHocuKurFBle+QgJV+VLg hYsyakB7JBzfcgtOLN/KwBkYI0y3Cesrgyts+44e2GnZX/8dNG1N8oKMSL8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt3fySKdqR6IyjNqMeaCIIqe8dbIwHwYDVR0j BBgwFoAUH81vYIBopWsrpcrVWJUS0h2YL9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njc1MmIzYzItM2YzMC00MDQwLThiMDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4 MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIxRDk4MkZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkNENkY2MDgwNjhBNTZCMkJBNUNBRDU1ODk1MTJEMjFEOTgy RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEy RDIxRDk4MkZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX91ezCAxgKMx3DjTsYn/zkvQhJLZPXG9OB E+a3D+kj6Znf0nSuT9CyhuAxpeZFeS0DFzX/qNMrKIWObY05YEla/YqGQUKly9+n b1XyW5/sSDT4n+3/tDKVehCAj1LJqbhWJkPnurvD74hlxSw+UXnUgryABXo5SgQz srViQSF22ItmdiSn6Zs4PEvk60rjzzyvETWlLHTo3SESiXHBBMJLDE0C5ww5L/a5 fw2i7V5FF7RkWFnltAl2/pdt6m+R4HiH+p1fsEFxvbZpgr+MXIol9886X+V9YGZv aE9yHNuGJwou0EdUydscTasPtEpHSUbieXyJ35iniLARYyi98ZI= -----END CERTIFICATE-----Generated at Mon Sep 21 16:23:24 2026 by rpki-client