$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft File: FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft (raw, json) Hash identifier: Yrnu1CWA3ngUbHtL3KoSbkAmzAHYjGX/ULWeebR/QHM= Subject key identifier: 65:20:D4:D2:D7:BC:05:C4:86:5C:9D:E7:B5:16:95:70:60:07:1A:4E Authority key identifier: FD:61:E7:6E:14:05:9B:62:14:C0:D1:7E:9C:49:BE:A7:E1:AE:3A:15 Certificate issuer: /CN=FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15 Certificate serial: 2F456100F5BC7E5493ACD652889EA165EEDF1C8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft Manifest number: BF Signing time: Mon 21 Sep 2026 09:23:07 +0000 Manifest this update: Mon 21 Sep 2026 09:18:07 +0000 Manifest next update: Tue 22 Sep 2026 10:57:07 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: vIUoSFhkJP5hkDIwcTRzx7ooCpVifIbFa0ihUfETBXw=) 2: FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.crl (hash: JP7yEeNmWUNuDT8tUVh6REekT+eQeoAdHCxAScU/5C0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.crl rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:45:61:00:f5:bc:7e:54:93:ac:d6:52:88:9e:a1:65:ee:df:1c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15 Validity Not Before: Sep 21 09:18:07 2026 GMT Not After : Sep 22 10:57:07 2026 GMT Subject: CN=6520D4D2D7BC05C4865C9DE7B516957060071A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:12:17:3d:ce:41:f8:44:ad:a1:ce:51:40: e6:13:7b:5d:5a:bc:5b:68:5d:be:08:07:33:dd:0f: 36:f3:bb:30:dc:93:c8:16:8d:d0:99:e5:9b:bf:12: 48:1f:46:7c:0d:18:9b:ef:e4:5e:25:21:e1:8c:8b: b4:2b:1d:3a:ec:55:14:65:87:6f:d6:13:80:55:56: 7f:8b:87:23:72:39:70:7a:76:83:3f:e4:b2:47:5e: 25:db:e4:02:e3:97:01:01:4c:02:b7:65:32:ae:37: 4f:bd:e9:0f:b2:b5:d2:35:9f:4e:c4:52:39:a5:c8: da:38:7a:82:84:9f:1e:32:50:9a:c0:db:5a:48:db: 15:08:b3:e2:e8:6c:4d:df:68:ea:e1:ad:3a:0a:52: 78:d6:81:63:04:90:a6:17:57:80:74:90:a6:1c:cc: c0:6c:61:b5:a6:e7:7f:c4:45:f0:47:34:55:89:d9: af:dd:33:70:6f:97:f4:9f:c1:8c:ce:94:35:65:7e: fc:29:f0:93:25:13:26:9a:25:44:e3:fc:a5:3f:32: 48:63:bd:c9:65:10:7b:46:06:2a:8d:3e:a9:94:52: 9d:fa:27:65:93:be:3e:fe:69:bc:55:10:9b:2b:98: fe:82:90:d8:8c:8e:a6:5b:d6:12:e0:28:48:7f:12: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:20:D4:D2:D7:BC:05:C4:86:5C:9D:E7:B5:16:95:70:60:07:1A:4E X509v3 Authority Key Identifier: keyid:FD:61:E7:6E:14:05:9B:62:14:C0:D1:7E:9C:49:BE:A7:E1:AE:3A:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/FD61E76E14059B6214C0D17E9C49BEA7E1AE3A15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:39:a6:62:a4:e6:6e:64:47:b4:69:3a:c6:24:c6:cb:3c:85: c3:7f:4d:e8:0b:02:c0:a3:f2:00:4c:61:84:a9:cf:f9:00:fc: 5d:bd:ee:f9:ce:96:83:af:40:93:fc:b2:ac:f0:d2:a2:bd:06: cd:56:b8:68:5a:af:a5:70:c3:b6:d5:17:af:63:b4:7f:f3:65: 9c:1a:0a:1b:61:96:af:fd:cd:00:8c:1c:eb:ce:c1:00:fc:b5: fc:da:59:a7:76:67:e4:d6:42:cc:6a:b4:e5:22:df:ef:91:59: b5:3a:01:34:55:d1:77:9b:d7:ba:84:84:e6:93:a5:36:a4:9f: cf:46:8a:cb:f5:b3:36:5c:50:38:fb:11:cf:8c:cb:42:a4:2a: 04:09:7a:1c:d1:15:5e:56:d4:44:12:7e:f6:37:ca:a9:8e:88: 02:7b:e2:20:83:ce:9b:fb:2a:21:36:f6:f4:3d:86:18:27:66: c7:81:3e:4a:50:a0:8e:61:b0:f6:95:78:b1:8d:e1:f8:af:e8: fb:81:eb:f8:66:30:cb:40:59:9c:71:8c:3a:a5:db:e8:25:0a: cf:87:ab:1b:e5:34:5b:67:4f:9d:7a:d5:2b:8d:65:17:f5:84: 9a:41:7e:29:5b:7a:64:0f:b3:73:64:80:7b:21:96:9a:cf:47: 16:2a:fb:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0VhAPW8flSTrNZSiJ6hZe7fHIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ2MUU3NkUxNDA1OUI2MjE0QzBEMTdFOUM0OUJFQTdF MUFFM0ExNTAeFw0yNjA5MjEwOTE4MDdaFw0yNjA5MjIxMDU3MDdaMDMxMTAvBgNV BAMTKDY1MjBENEQyRDdCQzA1QzQ4NjVDOURFN0I1MTY5NTcwNjAwNzFBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUuhIXPc5B+EStoc5RQOYTe11a vFtoXb4IBzPdDzbzuzDck8gWjdCZ5Zu/EkgfRnwNGJvv5F4lIeGMi7QrHTrsVRRl h2/WE4BVVn+LhyNyOXB6doM/5LJHXiXb5ALjlwEBTAK3ZTKuN0+96Q+ytdI1n07E UjmlyNo4eoKEnx4yUJrA21pI2xUIs+LobE3faOrhrToKUnjWgWMEkKYXV4B0kKYc zMBsYbWm53/ERfBHNFWJ2a/dM3Bvl/SfwYzOlDVlfvwp8JMlEyaaJUTj/KU/Mkhj vcllEHtGBiqNPqmUUp36J2WTvj7+abxVEJsrmP6CkNiMjqZb1hLgKEh/EkE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZSDU0te8BcSGXJ3ntRaVcGAHGk4wHwYDVR0j BBgwFoAU/WHnbhQFm2IUwNF+nEm+p+GuOhUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EwMjEwYjMtY2NhMi00M2M1LTg5ZjktNWE5MDg2YTYwNzAzLzEvRkQ2MUU3NkUx NDA1OUI2MjE0QzBEMTdFOUM0OUJFQTdFMUFFM0ExNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDYxRTc2RTE0MDU5QjYyMTRDMEQxN0U5QzQ5QkVBN0UxQUUz QTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvRkQ2MUU3NkUxNDA1OUI2MjE0QzBEMTdFOUM0OUJF QTdFMUFFM0ExNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIk5pmKk5m5kR7RpOsYkxss8hcN/TegLAsCj 8gBMYYSpz/kA/F297vnOloOvQJP8sqzw0qK9Bs1WuGhar6Vww7bVF69jtH/zZZwa Chthlq/9zQCMHOvOwQD8tfzaWad2Z+TWQsxqtOUi3++RWbU6ATRV0Xeb17qEhOaT pTakn89Gisv1szZcUDj7Ec+My0KkKgQJehzRFV5W1EQSfvY3yqmOiAJ74iCDzpv7 KiE29vQ9hhgnZseBPkpQoI5hsPaVeLGN4fiv6PuB6/hmMMtAWZxxjDql2+glCs+H qxvlNFtnT5161SuNZRf1hJpBfilbemQPs3NkgHshlprPRxYq++Q= -----END CERTIFICATE-----Generated at Mon Sep 21 20:19:04 2026 by rpki-client