$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft File: FC1A394AF4972652D1A91AA14711525172E42585.mft (raw, json) Hash identifier: JNbzQrCvkpAs5gdRMEf68Rm+Csuxwdkg9RACtXNkQj4= Subject key identifier: 83:2B:81:BE:69:63:AF:62:18:F6:12:55:DE:97:E3:9D:D0:FB:EF:30 Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 Certificate issuer: /CN=FC1A394AF4972652D1A91AA14711525172E42585 Certificate serial: 171F96DF7503594BA876A83B4C6CBD292F0E55BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:59:23 +0000 Manifest this update: Mon 20 Jul 2026 22:54:23 +0000 Manifest next update: Wed 22 Jul 2026 01:48:23 +0000 Files and hashes: 1: FC1A394AF4972652D1A91AA14711525172E42585.crl (hash: HQfIo0TLkky0xKREb7T6Ts0V9CTfsTzd2bCctPspXAE=) 2: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: 92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1f:96:df:75:03:59:4b:a8:76:a8:3b:4c:6c:bd:29:2f:0e:55:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585 Validity Not Before: Jul 20 22:54:23 2026 GMT Not After : Jul 22 01:48:23 2026 GMT Subject: CN=832B81BE6963AF6218F61255DE97E39DD0FBEF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:9e:9d:55:ac:37:3d:76:a6:4b:cd:15:0e: 57:2a:52:f6:07:42:07:8e:5e:1b:89:ee:44:57:18: e4:b2:2d:fa:2d:08:ce:6d:51:7d:bd:60:01:86:d5: 86:e8:99:63:18:d8:ce:e9:0e:6a:24:12:b8:a8:de: b8:99:03:3c:a0:e0:a3:b9:74:68:57:fd:97:b5:80: f0:f4:a3:91:04:64:48:fe:de:27:a8:0c:25:12:d6: d8:25:77:6e:c2:a8:7d:3d:b3:0f:a3:ea:6d:9b:b6: 63:a2:f2:1c:f1:42:1d:88:7b:1a:d1:7e:d9:13:e6: c4:68:be:4e:d9:db:7b:10:70:31:86:e9:4a:07:eb: ed:96:14:5b:12:4e:2b:cd:31:fc:cc:be:7c:92:18: 08:c2:f9:f3:dc:a0:4c:47:22:13:ce:42:00:82:7a: 8b:b6:26:e1:c4:60:25:42:a2:ba:d3:a3:b7:81:3f: 84:7c:ce:72:6c:71:84:7a:72:d0:af:8c:9f:2a:44: 8b:d8:28:17:a1:94:7f:1c:1c:e0:d8:41:97:0b:c9: f0:41:56:d7:48:bb:9b:13:c0:e2:b5:c7:3e:44:82: b4:d7:c8:14:23:1a:d5:35:79:54:b5:f8:5a:45:71: 08:4e:4d:8c:58:55:96:28:9d:a5:a4:a9:51:80:54: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2B:81:BE:69:63:AF:62:18:F6:12:55:DE:97:E3:9D:D0:FB:EF:30 X509v3 Authority Key Identifier: keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:8f:a4:fa:fd:4b:bd:1f:51:35:21:7d:8c:d8:cd:32:3f:bf: 29:72:ba:49:ad:9f:92:ae:c0:a6:09:f0:c4:d9:26:e8:63:cd: 03:1e:6c:af:6c:ec:e7:6c:5f:8b:6b:0b:66:8a:f4:25:03:8b: 21:ca:bd:8b:7d:cb:0d:6a:25:fa:3c:50:9f:71:f8:5b:19:2f: af:2c:76:0f:80:96:84:85:1d:78:45:1e:9a:6e:9e:f5:8c:39: a5:ff:c9:9e:58:f3:b9:37:4a:f1:00:54:da:f3:b5:8a:8e:32: 14:33:ef:66:75:30:ac:03:1f:7d:e9:3a:ef:4d:8a:e9:78:77: 43:e9:76:66:0a:36:83:27:ae:39:cb:cb:e0:3c:43:7e:96:1b: 46:da:f7:9f:ab:df:fb:59:26:ec:d9:7c:20:d5:56:e0:da:b5: d9:06:3c:62:1e:c8:d1:59:38:4e:93:54:53:1c:09:22:23:c6: c1:cf:cf:f0:ad:86:f1:c0:94:fb:aa:2d:9a:a5:d1:59:9c:9c: a8:d0:c0:c5:ed:3c:a3:3b:dd:86:a9:b9:8c:94:d5:3f:ae:e9: 5a:e1:90:d5:cd:be:91:78:f7:33:fc:77:42:29:30:0f:1c:4d: 14:92:c9:3f:80:f8:66:13:8d:41:13:d4:ef:ed:e4:d8:e5:27: 94:8a:46:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFx+W33UDWUuodqg7TGy9KS8OVbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3 MkU0MjU4NTAeFw0yNjA3MjAyMjU0MjNaFw0yNjA3MjIwMTQ4MjNaMDMxMTAvBgNV BAMTKDgzMkI4MUJFNjk2M0FGNjIxOEY2MTI1NURFOTdFMzlERDBGQkVGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa4Z6dVaw3PXamS80VDlcqUvYH QgeOXhuJ7kRXGOSyLfotCM5tUX29YAGG1YbomWMY2M7pDmokErio3riZAzyg4KO5 dGhX/Ze1gPD0o5EEZEj+3ieoDCUS1tgld27CqH09sw+j6m2btmOi8hzxQh2IexrR ftkT5sRovk7Z23sQcDGG6UoH6+2WFFsSTivNMfzMvnySGAjC+fPcoExHIhPOQgCC eou2JuHEYCVCorrTo7eBP4R8znJscYR6ctCvjJ8qRIvYKBehlH8cHODYQZcLyfBB VtdIu5sTwOK1xz5EgrTXyBQjGtU1eVS1+FpFcQhOTYxYVZYonaWkqVGAVLlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgyuBvmljr2IY9hJV3pfjndD77zAwHwYDVR0j BBgwFoAU/Bo5SvSXJlLRqRqhRxFSUXLkJYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiZWE4MWQtODVhYy00MGE1LWE3ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFG NDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3MkU0MjU4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzFBMzk0QUY0OTcyNjUyRDFBOTFBQTE0NzExNTI1MTcyRTQy NTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiZWE4MWQtODVhYy00MGE1LWE3 ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUy NTE3MkU0MjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSPpPr9S70fUTUhfYzYzTI/vylyukmtn5Ku wKYJ8MTZJuhjzQMebK9s7OdsX4trC2aK9CUDiyHKvYt9yw1qJfo8UJ9x+FsZL68s dg+AloSFHXhFHppunvWMOaX/yZ5Y87k3SvEAVNrztYqOMhQz72Z1MKwDH33pOu9N iul4d0PpdmYKNoMnrjnLy+A8Q36WG0ba95+r3/tZJuzZfCDVVuDatdkGPGIeyNFZ OE6TVFMcCSIjxsHPz/CthvHAlPuqLZql0VmcnKjQwMXtPKM73YapuYyU1T+u6Vrh kNXNvpF49zP8d0IpMA8cTRSSyT+A+GYTjUET1O/t5NjlJ5SKRqk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:00 2026 by rpki-client