$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft (raw, json) Hash identifier: /ggXBdZJd7YJu+kjFamDmEdmRqMuyNPmyCJOQpdGcbM= Subject key identifier: 05:2C:F8:53:CC:89:48:A1:20:2A:FA:98:25:BE:4D:03:79:60:B6:85 Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 6AB3B0B9214F570C5636B77D0A61F23C78600BB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 00:42:36 +0000 Manifest this update: Thu 18 Jun 2026 00:37:36 +0000 Manifest next update: Fri 19 Jun 2026 03:34:36 +0000 Files and hashes: 1: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl (hash: l00anZEYrh4zzJoxYWYxxXrVl15Djrb77TAUFASrA8g=) 2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: 1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=) 3: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc=) 4: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b3:b0:b9:21:4f:57:0c:56:36:b7:7d:0a:61:f2:3c:78:60:0b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: Jun 18 00:37:36 2026 GMT Not After : Jun 19 03:34:36 2026 GMT Subject: CN=052CF853CC8948A1202AFA9825BE4D037960B685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:e5:07:16:54:d2:12:bf:ad:4a:6b:57:a9: 9c:6e:c1:0c:35:68:ff:1b:35:39:09:63:80:04:63: 2d:5a:1a:42:7e:48:1b:5c:56:54:1a:f0:24:9a:9c: 0b:fc:ab:e1:f7:af:a1:c2:f8:c3:02:91:4c:9e:70: 12:aa:c6:9d:d4:85:70:0e:dc:95:d1:48:df:5e:ea: f3:ec:3b:aa:83:1a:21:2e:ea:c9:c8:f2:4a:9b:68: 08:39:ce:26:46:ce:19:d7:e4:da:40:8c:35:17:83: c0:14:95:6e:72:85:02:a3:25:4b:c2:e6:c9:0c:f9: d3:d0:57:72:97:77:64:4c:11:a1:86:3f:3b:9a:8e: 92:7d:28:a4:a8:54:ab:33:3a:c6:43:df:b2:1e:94: 36:f1:09:c4:a7:fe:fa:83:5e:9d:c1:ef:9b:f6:d7: e1:fe:b9:21:03:f1:8c:43:17:15:20:79:fc:55:34: d5:6d:77:14:0a:ea:4e:b3:82:ce:95:01:56:78:90: fe:5e:71:7f:3c:b2:56:f8:aa:35:0b:7b:e8:8b:5d: 5e:43:9d:fc:ab:e6:18:23:ac:fe:84:00:1c:36:7d: 9a:28:c3:67:6d:8b:eb:4e:45:a7:a8:9f:74:5e:57: 89:25:47:eb:7d:92:51:96:40:7b:5d:32:75:9c:d5: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2C:F8:53:CC:89:48:A1:20:2A:FA:98:25:BE:4D:03:79:60:B6:85 X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3b:c4:3f:ce:45:05:df:46:e1:65:bd:0f:16:a6:4e:e4:a0: 7a:45:31:27:6b:75:04:c7:c7:f1:02:1f:41:e3:46:a8:65:0a: e1:7d:d4:d6:04:e4:6a:c0:48:5a:a6:3f:6a:a3:f3:cf:1c:a1: c9:e3:2c:d7:ec:28:f1:7f:8a:af:bf:7a:58:39:70:32:ee:14: d5:f9:e8:a5:1a:f1:2d:42:bd:79:da:ad:09:e9:3c:52:f9:4e: 96:ae:26:f2:cb:0d:2f:8f:d2:50:1f:54:c2:16:07:6f:8a:e0: a2:67:fe:8d:ac:55:2e:f7:67:a6:37:e4:b7:c2:4e:b4:8a:01: cc:5a:1e:ae:e8:61:59:ae:53:1f:00:f7:db:65:82:f4:e6:5c: cd:c5:a0:8d:61:88:3c:1f:6b:b7:3d:11:33:24:b5:b7:d4:71: 94:5e:f1:c0:1c:08:c1:1f:ad:cc:df:53:bb:dc:ae:56:45:9b: 16:be:52:f5:61:50:d8:57:89:c8:97:cb:0d:3c:92:60:35:af: 7f:35:3d:03:fe:7c:40:01:51:b3:e6:fc:ca:24:d2:82:0e:75: 44:be:82:76:79:7b:70:24:61:d9:7c:36:f6:43:61:5f:dc:9c: f4:b2:89:3a:c4:69:58:08:c6:b9:a8:72:de:08:b2:e7:8e:61: ea:12:b7:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarOwuSFPVwxWNrd9CmHyPHhgC7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjA2MTgwMDM3MzZaFw0yNjA2MTkwMzM0MzZaMDMxMTAvBgNV BAMTKDA1MkNGODUzQ0M4OTQ4QTEyMDJBRkE5ODI1QkU0RDAzNzk2MEI2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmeUHFlTSEr+tSmtXqZxuwQw1 aP8bNTkJY4AEYy1aGkJ+SBtcVlQa8CSanAv8q+H3r6HC+MMCkUyecBKqxp3UhXAO 3JXRSN9e6vPsO6qDGiEu6snI8kqbaAg5ziZGzhnX5NpAjDUXg8AUlW5yhQKjJUvC 5skM+dPQV3KXd2RMEaGGPzuajpJ9KKSoVKszOsZD37IelDbxCcSn/vqDXp3B75v2 1+H+uSED8YxDFxUgefxVNNVtdxQK6k6zgs6VAVZ4kP5ecX88slb4qjULe+iLXV5D nfyr5hgjrP6EABw2fZoow2dti+tORaeon3ReV4klR+t9klGWQHtdMnWc1ZdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBSz4U8yJSKEgKvqYJb5NA3lgtoUwHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1 QzFBMjk0RUYxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY7xD/ORQXfRuFlvQ8Wpk7koHpFMSdrdQTH x/ECH0HjRqhlCuF91NYE5GrASFqmP2qj888cocnjLNfsKPF/iq+/elg5cDLuFNX5 6KUa8S1CvXnarQnpPFL5TpauJvLLDS+P0lAfVMIWB2+K4KJn/o2sVS73Z6Y35LfC TrSKAcxaHq7oYVmuUx8A99tlgvTmXM3FoI1hiDwfa7c9ETMktbfUcZRe8cAcCMEf rczfU7vcrlZFmxa+UvVhUNhXiciXyw08kmA1r381PQP+fEABUbPm/Mok0oIOdUS+ gnZ5e3AkYdl8NvZDYV/cnPSyiTrEaVgIxrmoct4IsueOYeoStwU= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:16 2026 by rpki-client