$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft File: FC1A394AF4972652D1A91AA14711525172E42585.mft (raw, json) Hash identifier: fN+hYf85TupqWOqomZp58w+Hu9XBkY/hRvjYj3x6E28= Subject key identifier: BE:85:39:0B:C9:A9:5C:66:AC:F1:4C:48:D9:50:57:BD:EA:B1:35:D1 Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 Certificate issuer: /CN=FC1A394AF4972652D1A91AA14711525172E42585 Certificate serial: 1D2C3330702396DF7BD5660ED56D24AA093BC209 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:08:06 +0000 Manifest this update: Tue 02 Jun 2026 19:03:06 +0000 Manifest next update: Wed 03 Jun 2026 21:06:06 +0000 Files and hashes: 1: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: 92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=) 2: FC1A394AF4972652D1A91AA14711525172E42585.crl (hash: iiZihQvxv3umey5f82/ilfjdWJ4+K0Ph6ARIIHkXTM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2c:33:30:70:23:96:df:7b:d5:66:0e:d5:6d:24:aa:09:3b:c2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585 Validity Not Before: Jun 2 19:03:06 2026 GMT Not After : Jun 3 21:06:06 2026 GMT Subject: CN=BE85390BC9A95C66ACF14C48D95057BDEAB135D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:bb:2a:ef:64:ee:60:78:90:40:6a:6a:2a: 9c:ba:15:71:90:dc:22:05:0a:e6:a6:70:b8:b4:5b: aa:e7:ef:6d:49:e0:8c:54:8b:0a:d0:43:5b:03:88: e8:00:17:eb:06:57:2e:42:64:d4:11:9d:e4:8b:39: e6:15:d2:ff:f5:a9:f3:5c:5f:28:c6:26:91:f0:9c: df:87:8f:fc:78:0b:b0:4e:de:63:1e:72:91:94:a2: e5:0b:80:3d:08:20:14:9c:24:c5:97:b9:41:a5:aa: 44:9b:01:cd:ef:3b:6d:c1:43:21:43:b1:06:af:05: ac:2b:1e:b2:33:93:ae:6c:82:3e:af:50:11:7b:58: e6:59:ad:9e:fe:0d:61:aa:69:dc:06:fb:72:ae:9f: 08:7e:4d:e5:72:77:fc:3e:16:7d:a0:be:6e:bb:57: 7c:6b:04:a6:14:3c:2d:57:93:22:e3:d1:7c:10:db: ca:b7:59:c5:b6:35:6a:7f:f1:40:7b:64:49:3d:62: 76:38:24:b3:14:80:2c:e9:6d:24:85:fb:1e:40:f2: da:eb:e9:3f:54:67:3d:60:0b:bb:96:e0:41:95:55: e0:b5:c6:a2:54:5a:4d:ef:bd:5e:e8:03:fb:85:34: da:28:6b:d7:59:64:4c:e5:82:36:02:4b:d7:69:90: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:39:0B:C9:A9:5C:66:AC:F1:4C:48:D9:50:57:BD:EA:B1:35:D1 X509v3 Authority Key Identifier: keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:12:47:43:91:3e:27:d1:05:2a:5e:9c:eb:ce:9c:da:f0:13: f2:c1:e4:b7:fb:83:d9:ca:b1:c6:d3:cd:6d:e6:d2:33:92:30: b6:57:c5:cc:2c:60:3a:79:83:c5:26:ee:b1:bc:52:25:93:49: f6:3b:19:96:ee:9e:2b:fa:1a:e0:43:3e:f8:cd:42:d2:0f:f8: fe:a6:e4:e6:6e:b8:ee:22:d7:69:0b:22:42:2b:20:5c:65:76: 3b:14:b5:c2:8a:c3:f4:80:ef:ae:ec:95:86:8a:6b:a7:6a:cc: 13:ba:b8:d7:ce:11:ab:93:70:d4:2e:b9:3c:e6:3e:91:b1:ac: b6:0d:1b:8b:7c:ae:84:ad:4b:3f:3a:c2:81:f7:19:9f:54:f5: 5f:2f:0d:19:3f:ab:20:ac:c1:96:e4:46:42:d1:c1:b4:ce:88: 63:45:a9:ed:4f:93:50:3f:99:e7:b1:04:eb:03:ce:8d:f6:75: 5d:eb:84:ca:ce:a7:81:1e:cc:6e:5c:b6:d9:c0:e7:6f:27:be: 25:f6:c5:1d:45:93:a0:3b:a5:0b:00:20:22:c2:27:f8:9a:33: 12:44:38:bd:e4:56:e3:b6:30:80:c6:a0:6d:e7:ae:6f:e0:e3: 78:df:a3:73:54:1c:d6:77:f1:89:e4:a1:22:11:60:de:52:74: 4c:52:82:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSwzMHAjlt971WYO1W0kqgk7wgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3 MkU0MjU4NTAeFw0yNjA2MDIxOTAzMDZaFw0yNjA2MDMyMTA2MDZaMDMxMTAvBgNV BAMTKEJFODUzOTBCQzlBOTVDNjZBQ0YxNEM0OEQ5NTA1N0JERUFCMTM1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTLsq72TuYHiQQGpqKpy6FXGQ 3CIFCuamcLi0W6rn721J4IxUiwrQQ1sDiOgAF+sGVy5CZNQRneSLOeYV0v/1qfNc XyjGJpHwnN+Hj/x4C7BO3mMecpGUouULgD0IIBScJMWXuUGlqkSbAc3vO23BQyFD sQavBawrHrIzk65sgj6vUBF7WOZZrZ7+DWGqadwG+3Kunwh+TeVyd/w+Fn2gvm67 V3xrBKYUPC1XkyLj0XwQ28q3WcW2NWp/8UB7ZEk9YnY4JLMUgCzpbSSF+x5A8trr 6T9UZz1gC7uW4EGVVeC1xqJUWk3vvV7oA/uFNNooa9dZZEzlgjYCS9dpkEIbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvoU5C8mpXGas8UxI2VBXveqxNdEwHwYDVR0j BBgwFoAU/Bo5SvSXJlLRqRqhRxFSUXLkJYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiZWE4MWQtODVhYy00MGE1LWE3ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFG NDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3MkU0MjU4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzFBMzk0QUY0OTcyNjUyRDFBOTFBQTE0NzExNTI1MTcyRTQy NTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiZWE4MWQtODVhYy00MGE1LWE3 ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUy NTE3MkU0MjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYSR0ORPifRBSpenOvOnNrwE/LB5Lf7g9nK scbTzW3m0jOSMLZXxcwsYDp5g8Um7rG8UiWTSfY7GZbuniv6GuBDPvjNQtIP+P6m 5OZuuO4i12kLIkIrIFxldjsUtcKKw/SA767slYaKa6dqzBO6uNfOEauTcNQuuTzm PpGxrLYNG4t8roStSz86woH3GZ9U9V8vDRk/qyCswZbkRkLRwbTOiGNFqe1Pk1A/ meexBOsDzo32dV3rhMrOp4EezG5cttnA528nviX2xR1Fk6A7pQsAICLCJ/iaMxJE OL3kVuO2MIDGoG3nrm/g43jfo3NUHNZ38YnkoSIRYN5SdExSgs4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:48 2026 by rpki-client