$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft File: FC2134DAE4378B90D9026728D4F693714082E391.mft (raw, json) Hash identifier: 3c6HeUx/r8F+/MfRt2y5b1Fps2DClc+koFs9xlG9kK4= Subject key identifier: 2D:AF:83:79:41:C4:5E:56:F5:74:4A:0D:86:14:9E:08:8D:B4:C5:78 Authority key identifier: FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91 Certificate issuer: /CN=FC2134DAE4378B90D9026728D4F693714082E391 Certificate serial: 46A9DCB0F0B0AC36C4027C1F1D087E3708A427C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft Manifest number: 0101 Signing time: Mon 09 Nov 2026 19:09:38 +0000 Manifest this update: Mon 09 Nov 2026 19:04:38 +0000 Manifest next update: Tue 10 Nov 2026 21:07:38 +0000 Files and hashes: 1: FC2134DAE4378B90D9026728D4F693714082E391.crl (hash: iI7/DSmQ9Rt4FpgkzgLyJi8iGdBGDh17MCy0Y9QdVJQ=) 2: 3130332e3132302e36372e302f32342d3234203d3e20323032373336.roa (hash: 5DeQZnO25GQBg084uvCvhKR3hbUDyeL+NhhXVoCIa64=) 3: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: d1ZK5CDzhtaNvYbuQR6mmsziLXG16ilK4xHvMUVhmNg=) 4: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: lQI4CztcEE79zTOOfPW2h41crEOkC4qTHc3EICinkHg=) 5: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: tpKpZ6LssVkLx3IYdUKkyDS0W8NfoVDk5SRsQs5iXeQ=) 6: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: MJmPqB3WcxdkyKoVqQyg0sJMdXBPPXnAnnnDkCU7VCY=) 7: 3130332e3132302e36372e302f32342d3234203d3e20313937353337.roa (hash: bW/SNUaHs3SGJKL0kepYGX+rWcqYBs85NKukY1VUBkM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 21:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a9:dc:b0:f0:b0:ac:36:c4:02:7c:1f:1d:08:7e:37:08:a4:27:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2134DAE4378B90D9026728D4F693714082E391 Validity Not Before: Nov 9 19:04:38 2026 GMT Not After : Nov 10 21:07:38 2026 GMT Subject: CN=2DAF837941C45E56F5744A0D86149E088DB4C578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:a6:b1:fb:97:7b:d2:f7:73:6b:bc:60:1a: e9:9f:88:19:16:24:d6:b6:ce:56:1a:0f:91:12:82: 3c:a3:83:e1:28:11:69:4d:18:92:d7:b4:44:1c:b3: 29:8b:86:5f:c3:c4:91:50:f6:aa:2a:4a:ca:fe:e0: 70:97:d6:ae:d6:c7:73:17:26:80:f8:61:5c:a7:78: a3:21:7a:8a:7a:2d:c5:dc:d0:e6:80:af:fe:15:07: e5:76:bd:91:c6:0f:70:09:02:3c:fb:f0:3f:eb:3a: ef:f3:95:fc:89:42:84:2c:78:2b:3a:4f:bd:96:fd: fb:bb:20:68:7d:12:6a:58:fa:eb:69:99:77:e3:5d: 98:a6:53:d6:18:b3:3f:78:23:b9:3e:e5:94:dd:97: 9d:fa:ff:29:a9:94:42:10:1c:19:d8:3e:54:c0:58: 8f:a0:c5:01:d0:eb:c5:c3:63:dc:a4:94:05:13:2e: 22:27:e6:1e:9f:58:b6:53:e4:ea:5c:a3:bd:03:d2: c1:74:73:cb:5c:88:6b:69:03:4c:56:b1:49:85:aa: 26:3e:11:d1:37:52:4a:df:a7:90:dd:f4:ba:23:1e: db:4a:dd:2c:72:40:80:99:96:db:ed:ba:86:1b:5e: 88:49:97:45:5d:01:1b:a6:16:8f:9b:81:06:1d:bf: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AF:83:79:41:C4:5E:56:F5:74:4A:0D:86:14:9E:08:8D:B4:C5:78 X509v3 Authority Key Identifier: keyid:FC:21:34:DA:E4:37:8B:90:D9:02:67:28:D4:F6:93:71:40:82:E3:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC2134DAE4378B90D9026728D4F693714082E391.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/FC2134DAE4378B90D9026728D4F693714082E391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d9:54:1e:9e:ad:8d:f0:69:5d:34:fe:48:85:00:ba:82:52: 36:22:16:24:b2:74:0c:6f:ee:6d:3a:27:9d:c5:b9:50:8c:ae: bc:b2:87:a2:fb:c5:bb:06:94:a9:5c:93:76:f1:18:22:a4:0f: 85:40:a3:a0:a6:46:b7:63:f9:9e:4c:b5:f4:99:7c:7a:b2:ad: a1:f2:87:24:cf:3e:5b:54:b5:d1:ba:34:64:15:e6:e0:a1:ac: 36:2a:20:c5:e8:e0:32:1d:eb:d2:77:e2:dd:26:ff:93:42:fa: 7a:e5:be:f8:ee:07:3e:1b:0a:6c:4e:87:e8:7b:48:f0:45:53: 99:4f:fc:e7:b7:28:27:48:15:68:4f:31:47:c5:72:d5:0b:1d: c6:82:73:67:c3:00:f4:dd:4a:a7:18:a1:57:36:c6:c5:af:94: a6:9c:3a:7e:3b:b4:85:2d:eb:78:e2:0e:d0:19:d1:7f:17:43: a4:46:65:1e:68:1d:ec:24:13:61:07:4b:35:b2:88:18:24:a3: cb:52:d0:e4:de:8f:2d:27:be:fe:85:09:7a:81:15:39:9a:0d: 24:4c:f7:e1:93:bd:73:aa:b0:81:8d:4f:6a:b0:45:75:0d:34: 5a:cf:71:15:64:ce:7b:e1:c2:2a:a1:4b:a7:ea:1a:b5:ec:b2: d4:cf:a2:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqncsPCwrDbEAnwfHQh+NwikJ8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyMTM0REFFNDM3OEI5MEQ5MDI2NzI4RDRGNjkzNzE0 MDgyRTM5MTAeFw0yNjExMDkxOTA0MzhaFw0yNjExMTAyMTA3MzhaMDMxMTAvBgNV BAMTKDJEQUY4Mzc5NDFDNDVFNTZGNTc0NEEwRDg2MTQ5RTA4OERCNEM1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPmKax+5d70vdza7xgGumfiBkW JNa2zlYaD5ESgjyjg+EoEWlNGJLXtEQcsymLhl/DxJFQ9qoqSsr+4HCX1q7Wx3MX JoD4YVyneKMheop6LcXc0OaAr/4VB+V2vZHGD3AJAjz78D/rOu/zlfyJQoQseCs6 T72W/fu7IGh9EmpY+utpmXfjXZimU9YYsz94I7k+5ZTdl536/ymplEIQHBnYPlTA WI+gxQHQ68XDY9yklAUTLiIn5h6fWLZT5Opco70D0sF0c8tciGtpA0xWsUmFqiY+ EdE3Ukrfp5Dd9LojHttK3SxyQICZltvtuoYbXohJl0VdARumFo+bgQYdv0JlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULa+DeUHEXlb1dEoNhhSeCI20xXgwHwYDVR0j BBgwFoAU/CE02uQ3i5DZAmco1PaTcUCC45EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTg2ZTQ2ZWMtZGY1Yy00YjRkLWEzMGUtMTBiMmM2ODhjMmZjLzAvRkMyMTM0REFF NDM3OEI5MEQ5MDI2NzI4RDRGNjkzNzE0MDgyRTM5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzIxMzREQUU0Mzc4QjkwRDkwMjY3MjhENEY2OTM3MTQwODJF MzkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTg2ZTQ2ZWMtZGY1Yy00YjRkLWEz MGUtMTBiMmM2ODhjMmZjLzAvRkMyMTM0REFFNDM3OEI5MEQ5MDI2NzI4RDRGNjkz NzE0MDgyRTM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/ZVB6erY3waV00/kiFALqCUjYiFiSydAxv 7m06J53FuVCMrryyh6L7xbsGlKlck3bxGCKkD4VAo6CmRrdj+Z5MtfSZfHqyraHy hyTPPltUtdG6NGQV5uChrDYqIMXo4DId69J34t0m/5NC+nrlvvjuBz4bCmxOh+h7 SPBFU5lP/Oe3KCdIFWhPMUfFctULHcaCc2fDAPTdSqcYoVc2xsWvlKacOn47tIUt 63jiDtAZ0X8XQ6RGZR5oHewkE2EHSzWyiBgko8tS0OTejy0nvv6FCXqBFTmaDSRM 9+GTvXOqsIGNT2qwRXUNNFrPcRVkznvhwiqhS6fqGrXsstTPovI= -----END CERTIFICATE-----Generated at Tue Nov 10 06:30:52 2026 by rpki-client