$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft File: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft (raw, json) Hash identifier: Vharfdy450XCIar69YNW6Uzypuy3p5pBl+x74KDMGJA= Subject key identifier: 28:42:AB:B4:BE:64:0B:B8:66:B8:7B:B6:85:00:55:94:75:83:49:C8 Authority key identifier: FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 Certificate issuer: /CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Certificate serial: 4A3AA97E1FABE33CB7A16A24DC7DF7697CF3E5B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft Manifest number: BF Signing time: Tue 22 Sep 2026 11:35:54 +0000 Manifest this update: Tue 22 Sep 2026 11:30:54 +0000 Manifest next update: Wed 23 Sep 2026 13:16:54 +0000 Files and hashes: 1: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl (hash: YvnyKa1eh/i9+vpfgapvyVqByDFN4IRjx0COZlge3yI=) 2: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: 70NFz1U2se9VZLmxfjrFbhrAeSmQtExL3XMvYrlX6c8=) 3: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: 9YwGnAS4Ytmen5f7Im+DSh9RfLLeSLFnhc1Jg9+yNBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3a:a9:7e:1f:ab:e3:3c:b7:a1:6a:24:dc:7d:f7:69:7c:f3:e5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Validity Not Before: Sep 22 11:30:54 2026 GMT Not After : Sep 23 13:16:54 2026 GMT Subject: CN=2842ABB4BE640BB866B87BB685005594758349C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:43:e4:0b:e5:a5:e1:59:ab:ae:85:6d:e2: 9b:34:7a:10:e1:de:94:5b:99:10:64:5e:73:7b:0e: a8:84:6a:0a:03:37:46:16:03:6f:37:51:b7:ec:97: 40:59:8c:08:83:05:18:eb:52:34:29:42:cd:4c:af: 61:75:c5:57:ae:0e:a9:8f:00:ce:99:34:8f:f9:9c: b6:7c:e6:39:eb:f6:4e:de:46:3a:a6:45:dd:92:d4: 34:d4:a0:21:59:b6:05:fc:50:a4:30:cf:e1:50:bc: f9:18:84:d0:a2:b7:61:cd:9e:73:ac:ac:dc:06:56: ab:33:61:05:c3:b4:68:e1:c3:2b:f0:f5:77:d5:70: 84:e6:2d:74:88:95:e7:47:01:11:57:4f:c9:8c:00: be:b9:cc:66:12:8c:8a:10:51:00:e8:b7:d9:50:4b: 45:1c:c4:3e:59:9a:de:42:b8:f4:25:d2:fb:40:05: 15:e1:de:c4:ca:7e:19:f6:de:8b:d7:58:c0:15:d1: 93:44:a8:0c:30:4e:30:f0:52:09:f8:dd:b7:43:d8: 25:59:07:d1:91:6d:c5:7f:e7:24:a0:45:1c:b8:d4: fe:60:a2:8a:b2:8d:d0:49:20:61:53:18:46:5b:6d: f1:fa:ae:fa:61:ca:fa:a0:9d:01:dc:4d:18:85:a9: 6a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:42:AB:B4:BE:64:0B:B8:66:B8:7B:B6:85:00:55:94:75:83:49:C8 X509v3 Authority Key Identifier: keyid:FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:58:21:7d:c9:d4:b7:4a:dc:5a:27:29:03:25:74:b8:55:5e: eb:19:fd:83:ee:ef:66:bb:11:5f:44:e3:64:d0:a6:3b:85:68: e0:e5:d3:a9:aa:d3:45:25:2f:62:f4:f8:0e:3e:cd:99:5c:f9: 3d:8d:af:11:e9:d9:41:27:34:bf:e4:ff:98:b2:98:d4:ed:01: 36:eb:2e:0b:ad:b9:dd:ee:93:a5:21:58:48:60:32:ab:a2:9c: 04:c8:b6:22:01:82:b6:bb:3d:28:a1:80:d1:91:e8:10:31:3e: 0b:6a:02:dd:d3:d3:80:9c:16:f6:d9:66:62:d8:53:d5:de:25: 57:23:ee:47:21:dd:d6:d3:bf:2c:f3:a3:cd:8c:d0:17:2b:18: fe:1a:cb:8f:a9:ba:23:3a:d1:78:68:32:04:67:ed:9f:6b:34: de:e4:5f:11:53:59:4b:31:43:e1:0f:a9:c2:4b:e9:ef:60:77: c7:f8:b8:fd:39:79:1c:37:64:71:7b:b9:e9:ca:79:15:77:f0: 21:4f:91:26:4c:9b:02:32:60:ae:9d:ca:95:6b:41:cf:7a:87: 17:bd:94:df:5e:3e:6e:fc:15:39:5e:b5:06:49:91:e7:c8:c0: 29:56:e5:58:8e:80:d8:aa:1f:74:26:dc:2a:1d:a6:73:87:e5: 01:81:93:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjqpfh+r4zy3oWok3H33aXzz5bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgxODRF RjU2RTJGODAeFw0yNjA5MjIxMTMwNTRaFw0yNjA5MjMxMzE2NTRaMDMxMTAvBgNV BAMTKDI4NDJBQkI0QkU2NDBCQjg2NkI4N0JCNjg1MDA1NTk0NzU4MzQ5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnUPkC+Wl4VmrroVt4ps0ehDh 3pRbmRBkXnN7DqiEagoDN0YWA283Ubfsl0BZjAiDBRjrUjQpQs1Mr2F1xVeuDqmP AM6ZNI/5nLZ85jnr9k7eRjqmRd2S1DTUoCFZtgX8UKQwz+FQvPkYhNCit2HNnnOs rNwGVqszYQXDtGjhwyvw9XfVcITmLXSIledHARFXT8mMAL65zGYSjIoQUQDot9lQ S0UcxD5Zmt5CuPQl0vtABRXh3sTKfhn23ovXWMAV0ZNEqAwwTjDwUgn43bdD2CVZ B9GRbcV/5ySgRRy41P5gooqyjdBJIGFTGEZbbfH6rvphyvqgnQHcTRiFqWpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKEKrtL5kC7hmuHu2hQBVlHWDScgwHwYDVR0j BBgwFoAU/ATBvM+qC7IdZ+bMscyBhO9W4vgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVkZWNhODItODlhYi00NTgyLThlODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkND RkFBMEJCMjFENjdFNkNDQjFDQzgxODRFRjU2RTJGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzA0QzFCQ0NGQUEwQkIyMUQ2N0U2Q0NCMUNDODE4NEVGNTZF MkY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgx ODRFRjU2RTJGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpYIX3J1LdK3FonKQMldLhVXusZ/YPu72a7 EV9E42TQpjuFaODl06mq00UlL2L0+A4+zZlc+T2NrxHp2UEnNL/k/5iymNTtATbr Lgutud3uk6UhWEhgMquinATItiIBgra7PSihgNGR6BAxPgtqAt3T04CcFvbZZmLY U9XeJVcj7kch3dbTvyzzo82M0BcrGP4ay4+puiM60XhoMgRn7Z9rNN7kXxFTWUsx Q+EPqcJL6e9gd8f4uP05eRw3ZHF7uenKeRV38CFPkSZMmwIyYK6dypVrQc96hxe9 lN9ePm78FTletQZJkefIwClW5ViOgNiqH3Qm3CodpnOH5QGBk80= -----END CERTIFICATE-----Generated at Wed Sep 23 04:29:23 2026 by rpki-client