$ rpki-client -vvf rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft File: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft (raw, json) Hash identifier: rsfRZoxlpE+qM6a1+E7PvLoT5fMHJOLC+p0y9xJLi4E= Subject key identifier: ED:7B:68:F2:BE:7F:5E:99:2E:FE:8F:CF:CD:43:E2:C5:18:77:78:7B Authority key identifier: FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 Certificate issuer: /CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Certificate serial: 0DC36AE6164549C18BF68B371D1F11D3240B9068 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:41:17 +0000 Manifest this update: Tue 02 Jun 2026 21:36:17 +0000 Manifest next update: Wed 03 Jun 2026 22:05:17 +0000 Files and hashes: 1: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl (hash: e0RdBGnJPQYGWtLh79RojsvyuSGuQOQ0/p77NGcBR+o=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: /EYgr4bEX5yF2cD2wxIp6ztYlU72xJsVBSPBoR3u9Fw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c3:6a:e6:16:45:49:c1:8b:f6:8b:37:1d:1f:11:d3:24:0b:90:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Validity Not Before: Jun 2 21:36:17 2026 GMT Not After : Jun 3 22:05:17 2026 GMT Subject: CN=ED7B68F2BE7F5E992EFE8FCFCD43E2C51877787B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:8c:73:6b:29:fa:22:26:83:23:45:7f:d6: a0:3a:96:cc:4c:c2:7e:4b:80:6e:37:fa:08:84:8d: 4e:c2:2e:d8:59:12:b4:07:1e:1b:b7:a8:56:f5:81: 20:85:45:0f:15:2e:71:bf:98:dc:b7:0d:35:b8:c6: 56:32:07:a7:75:2c:90:cc:55:4e:76:b1:75:12:ba: 41:0f:43:20:d5:9a:f2:80:f0:1c:da:26:9f:4f:60: e8:ca:ab:f4:ea:2a:34:01:7e:5b:ae:30:9d:93:eb: 16:81:04:50:f0:06:f4:a4:d3:23:84:7a:8c:b5:54: ed:04:ec:82:b0:d7:ef:f0:34:d4:1d:6f:a7:5e:f1: 9b:1d:f5:81:f2:d0:d3:6d:d2:5b:c8:71:c1:55:50: 0a:0d:dd:55:10:36:cb:db:b1:b0:f9:c7:2a:2c:4a: 14:6d:f0:6e:ac:f4:ae:e4:58:ca:be:3d:ea:1e:24: a6:92:81:66:9c:08:48:cc:8c:9d:11:f6:0f:db:d6: 3b:2f:98:0d:28:0d:5d:f2:a3:80:4a:38:7c:ac:d3: 6b:9a:5b:cd:9c:6c:91:30:b3:2c:09:77:52:45:90: d0:2c:fd:c7:d4:83:b8:ac:97:19:2b:8a:7c:b4:7c: a3:f0:df:72:1e:7a:e9:ca:70:c5:48:dd:dd:4c:3d: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7B:68:F2:BE:7F:5E:99:2E:FE:8F:CF:CD:43:E2:C5:18:77:78:7B X509v3 Authority Key Identifier: keyid:FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:bc:84:7f:69:2d:a8:50:02:ba:6a:7c:a8:2d:00:23:da:a1: 69:6b:b9:83:f8:b8:d3:01:10:d2:23:4d:84:c1:45:d3:bd:08: 44:fb:4a:3b:2a:64:5d:17:fc:68:1e:97:74:20:c7:41:0e:57: 9a:4d:85:43:c9:30:94:8c:69:ae:43:dc:b3:b2:c9:98:ff:10: 01:54:c6:c0:1e:9c:00:93:8c:ce:00:c9:9b:7e:ba:a8:17:8f: 41:a1:11:81:61:d2:66:e7:7d:cf:4e:f1:6c:e5:a0:fb:a1:77: 4b:49:3c:e6:71:3d:2c:b3:da:62:ac:63:0c:1f:8e:51:66:f4: 2c:6d:fe:44:8a:c6:7f:86:2e:12:d0:90:e1:f0:8b:7a:3e:77: 0b:95:1d:a1:54:b5:38:7a:05:d1:5c:9d:75:1a:02:32:f8:83: bc:04:eb:9f:e7:1f:5e:73:de:a8:15:5c:d1:33:14:08:49:b1: ff:85:b2:a3:7d:e0:e7:ec:b9:35:c1:0c:ea:ef:0f:a3:3b:5d: 18:9a:b5:41:a6:69:6b:31:93:18:fb:41:6e:36:af:ad:14:6d: 67:9a:ab:01:f2:20:94:0c:6a:d5:9a:37:ba:1b:3d:f8:05:8f: bc:2b:2e:4c:bc:a8:de:f8:ed:9c:3c:19:52:30:bd:97:b2:79: b0:a4:56:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDcNq5hZFScGL9os3HR8R0yQLkGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgw QzgyOTVFNTAeFw0yNjA2MDIyMTM2MTdaFw0yNjA2MDMyMjA1MTdaMDMxMTAvBgNV BAMTKEVEN0I2OEYyQkU3RjVFOTkyRUZFOEZDRkNENDNFMkM1MTg3Nzc4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPYxzayn6IiaDI0V/1qA6lsxM wn5LgG43+giEjU7CLthZErQHHhu3qFb1gSCFRQ8VLnG/mNy3DTW4xlYyB6d1LJDM VU52sXUSukEPQyDVmvKA8BzaJp9PYOjKq/TqKjQBfluuMJ2T6xaBBFDwBvSk0yOE eoy1VO0E7IKw1+/wNNQdb6de8Zsd9YHy0NNt0lvIccFVUAoN3VUQNsvbsbD5xyos ShRt8G6s9K7kWMq+PeoeJKaSgWacCEjMjJ0R9g/b1jsvmA0oDV3yo4BKOHys02ua W82cbJEwsywJd1JFkNAs/cfUg7islxkriny0fKPw33IeeunKcMVI3d1MPTknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Xto8r5/Xpku/o/PzUPixRh3eHswHwYDVR0j BBgwFoAU/KzNzw/etQ8smBbrxFUPeAyCleUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUwZDFhYTEtNGM3Zi00NDhiLWIyYmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0Yw RkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgwQzgyOTVFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0FDQ0RDRjBGREVCNTBGMkM5ODE2RUJDNDU1MEY3ODBDODI5 NUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBG NzgwQzgyOTVFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe8hH9pLahQArpqfKgtACPaoWlruYP4uNMB ENIjTYTBRdO9CET7SjsqZF0X/Ggel3Qgx0EOV5pNhUPJMJSMaa5D3LOyyZj/EAFU xsAenACTjM4AyZt+uqgXj0GhEYFh0mbnfc9O8WzloPuhd0tJPOZxPSyz2mKsYwwf jlFm9Cxt/kSKxn+GLhLQkOHwi3o+dwuVHaFUtTh6BdFcnXUaAjL4g7wE65/nH15z 3qgVXNEzFAhJsf+FsqN94OfsuTXBDOrvD6M7XRiatUGmaWsxkxj7QW42r60UbWea qwHyIJQMatWaN7obPfgFj7wrLky8qN747Zw8GVIwvZeyebCkVvE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:26:04 2026 by rpki-client