$ rpki-client -vvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft File: FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft (raw, json) Hash identifier: 5MtMq6Sakds2N+scUMDQTFHZwYG1LPvyUEnC9MhvPeI= Subject key identifier: 33:F7:23:BD:6F:66:7E:64:0C:EC:E1:FF:60:97:F8:85:E8:AB:AF:B4 Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0 Certificate issuer: /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0 Certificate serial: 6CEE38F35539BC013B11E3767F7B9C5A05D4F299 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 14:48:05 +0000 Manifest this update: Tue 02 Jun 2026 14:43:05 +0000 Manifest next update: Wed 03 Jun 2026 15:28:05 +0000 Files and hashes: 1: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: yTgPRgQVzVx38fMyxtuZ61ES4EUBA+qjN64rJdc/fj0=) 2: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: OEfd+CS8IY4J+a4u9rVfClWlOVRIWkchPzHhfbtOYRo=) 3: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: vL84NHT9sBntLdBIflCRLCGX23FgkMfHfpfueFsiLrg=) 4: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 2buPsuKzxfp1+Z0b6pwCmXQGtunH/ULHNFjkRXke1WI=) 5: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: EAjmUlvem7M4oK9zM5l2C5sj8QgctjDf21f5Jtu6r6c=) 6: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: xrvvTuKeO8SacVcwiQahe3cKGxd7wl87Mxfi5VJfmZk=) 7: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: N6pzwLsiBlR6wqRJD6D9fkvMPk3uOH5gFPON6WGlnyk=) 8: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: scVRC0xmxqQdUfIKHLUXCSR/PlHSL7MJsFmhftXQ12o=) 9: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: NVWT14ucQ7dIq22SiHPSunVZu4zoTEVcOwCIXRvC+w4=) 10: FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl (hash: wfgdmbxVYpvCmpBCaplVrJPN/hZszZLzw+rMDpShhnI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ee:38:f3:55:39:bc:01:3b:11:e3:76:7f:7b:9c:5a:05:d4:f2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0 Validity Not Before: Jun 2 14:43:05 2026 GMT Not After : Jun 3 15:28:05 2026 GMT Subject: CN=33F723BD6F667E640CECE1FF6097F885E8ABAFB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:20:31:a2:21:04:66:72:03:19:a6:0c:0d: 88:fa:32:7d:fc:9c:17:b0:ef:41:d2:d7:2d:04:06: 8d:ab:f3:4c:80:78:6e:b1:c5:99:bd:93:80:97:9e: 38:29:ee:af:7c:8b:a8:0c:be:be:30:bf:b6:8a:bf: 43:6b:c2:25:41:94:da:04:e6:01:57:fc:63:b8:08: d6:fd:e5:82:c7:a0:c3:4c:ca:16:59:30:d0:db:29: 3a:b1:27:20:b6:fd:72:46:01:66:ba:3e:1b:70:f3: 84:76:2a:99:6d:72:5c:b2:cf:76:11:72:cc:92:47: cc:2b:cf:f6:44:65:d2:43:1b:de:d2:c2:6c:f6:79: db:d1:12:01:08:53:fa:14:62:a6:d3:66:4e:88:bd: e3:3a:8a:74:3c:9f:cf:8a:52:82:23:36:41:aa:2d: 1d:de:d5:0f:83:92:98:b0:03:dd:0e:fb:72:6a:7c: 78:96:20:34:c6:60:00:a4:8d:4a:bb:38:c9:23:11: c5:6e:b1:6f:92:67:1e:c3:da:54:57:30:55:4c:fd: d3:39:1a:82:1e:64:12:ae:8f:e6:cb:11:a6:83:74: fe:21:9c:c7:48:50:43:ee:49:00:b2:6f:10:52:d0: dc:40:eb:af:7d:4c:2e:81:ac:9c:f4:7b:2d:6c:43: 91:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F7:23:BD:6F:66:7E:64:0C:EC:E1:FF:60:97:F8:85:E8:AB:AF:B4 X509v3 Authority Key Identifier: keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6b:39:1a:54:5d:b4:7b:2e:66:0f:e5:17:e8:9c:df:1d:3d: fe:b5:c4:14:e3:26:7f:8a:b2:6f:66:9f:3b:71:83:2f:64:6d: 22:a3:25:a7:b3:c9:a1:da:0f:c6:ae:fb:ab:e1:55:2a:53:be: 25:bb:c6:84:d1:51:86:84:8d:92:8b:fa:ac:51:e9:19:55:9f: 27:be:3b:0d:23:ef:84:2d:b1:fd:36:86:15:20:78:98:e4:60: f7:a1:0c:dd:c2:66:af:49:6a:63:76:b6:06:53:85:c8:31:63: e4:9a:4d:b9:a9:c0:ef:6b:72:24:81:1e:0b:5e:a6:82:32:86: 03:5e:55:b2:06:0b:e4:df:6f:65:d0:88:e2:6b:37:48:d3:3f: c2:ba:c4:e3:1d:72:e6:bd:a8:09:4f:c1:bf:68:f6:ba:bc:e0: 59:18:5b:e8:d4:c1:a5:2a:3c:ef:83:f5:b2:d4:75:02:e3:76: 01:80:48:80:6d:00:9d:e6:59:83:24:d4:bb:e2:5c:12:8a:43: d7:f3:d5:63:6c:e5:b1:0a:78:6d:b5:7e:c5:99:72:57:8c:e2: d8:70:96:9c:eb:d5:a3:fb:a0:4a:90:fc:3f:0a:c1:06:db:58: f1:61:0c:43:5f:05:d6:f1:cf:78:8f:87:0e:9e:bb:b3:dd:f6: 99:20:6c:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbO4481U5vAE7EeN2f3ucWgXU8pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3QkMwNkFGRjY0MEQ0Q0JCMEY5NUEzNzcxRUM2MjM0 RkNGM0VEMDAeFw0yNjA2MDIxNDQzMDVaFw0yNjA2MDMxNTI4MDVaMDMxMTAvBgNV BAMTKDMzRjcyM0JENkY2NjdFNjQwQ0VDRTFGRjYwOTdGODg1RThBQkFGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsCAxoiEEZnIDGaYMDYj6Mn38 nBew70HS1y0EBo2r80yAeG6xxZm9k4CXnjgp7q98i6gMvr4wv7aKv0NrwiVBlNoE 5gFX/GO4CNb95YLHoMNMyhZZMNDbKTqxJyC2/XJGAWa6Phtw84R2Kpltclyyz3YR csySR8wrz/ZEZdJDG97Swmz2edvREgEIU/oUYqbTZk6IveM6inQ8n8+KUoIjNkGq LR3e1Q+DkpiwA90O+3JqfHiWIDTGYACkjUq7OMkjEcVusW+SZx7D2lRXMFVM/dM5 GoIeZBKuj+bLEaaDdP4hnMdIUEPuSQCybxBS0NxA6699TC6BrJz0ey1sQ5FlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/cjvW9mfmQM7OH/YJf4heirr7QwHwYDVR0j BBgwFoAU/HvAav9kDUy7D5Wjdx7GI0/PPtAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTYwN2Q5MjktNGNhOC00ZjUzLWEyOTgtNWUzM2JlMWY4NjA0LzAvRkM3QkMwNkFG RjY0MEQ0Q0JCMEY5NUEzNzcxRUM2MjM0RkNGM0VEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzdCQzA2QUZGNjQwRDRDQkIwRjk1QTM3NzFFQzYyMzRGQ0Yz RUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy OTgtNWUzM2JlMWY4NjA0LzAvRkM3QkMwNkFGRjY0MEQ0Q0JCMEY5NUEzNzcxRUM2 MjM0RkNGM0VEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNrORpUXbR7LmYP5RfonN8dPf61xBTjJn+K sm9mnztxgy9kbSKjJaezyaHaD8au+6vhVSpTviW7xoTRUYaEjZKL+qxR6RlVnye+ Ow0j74Qtsf02hhUgeJjkYPehDN3CZq9JamN2tgZThcgxY+SaTbmpwO9rciSBHgte poIyhgNeVbIGC+Tfb2XQiOJrN0jTP8K6xOMdcua9qAlPwb9o9rq84FkYW+jUwaUq PO+D9bLUdQLjdgGASIBtAJ3mWYMk1LviXBKKQ9fz1WNs5bEKeG21fsWZcleM4thw lpzr1aP7oEqQ/D8KwQbbWPFhDENfBdbxz3iPhw6eu7Pd9pkgbHE= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:09 2026 by rpki-client