$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft File: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft (raw, json) Hash identifier: kCiLvVWmId7s1ZDd+qnyxT94UmXiiwbaT8f5gEGqk6k= Subject key identifier: 72:40:66:6B:E6:14:EC:F5:B6:CF:55:E5:F0:6C:58:C4:D1:82:36:50 Authority key identifier: FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 Certificate issuer: /CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Certificate serial: 7E975611FE5CF8B72997AC359B0E718D9BB98B26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 05:06:02 +0000 Manifest this update: Sat 20 Jun 2026 05:01:02 +0000 Manifest next update: Sun 21 Jun 2026 05:11:02 +0000 Files and hashes: 1: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl (hash: G/lqVxE93E2+KlvWFH/VBsUJy/Jqx6PhlYbtF+50evw=) 2: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: 70NFz1U2se9VZLmxfjrFbhrAeSmQtExL3XMvYrlX6c8=) 3: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: 9YwGnAS4Ytmen5f7Im+DSh9RfLLeSLFnhc1Jg9+yNBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:97:56:11:fe:5c:f8:b7:29:97:ac:35:9b:0e:71:8d:9b:b9:8b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Validity Not Before: Jun 20 05:01:02 2026 GMT Not After : Jun 21 05:11:02 2026 GMT Subject: CN=7240666BE614ECF5B6CF55E5F06C58C4D1823650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:f6:90:78:9e:8c:4a:28:dd:14:e0:26:bf: ed:c4:c3:ac:41:cf:dc:4d:5e:1b:b5:9e:2d:54:ff: 3d:9f:2b:10:16:c0:e0:16:e5:d5:95:7e:32:7f:b6: 07:86:cf:77:c1:10:3c:d3:05:e9:33:1e:21:2e:e3: 1e:49:53:82:24:56:ef:a0:8c:93:84:d4:92:8e:36: f8:cc:7d:f0:3c:09:26:4a:ad:3e:59:c1:bd:b3:3c: 32:30:3b:c2:f0:29:02:31:43:0c:13:a8:f5:28:9e: a4:b5:e1:57:81:56:68:d2:23:80:97:c9:d7:94:8f: e7:b6:11:56:17:a0:24:bb:8c:b7:8d:8c:19:65:4d: 4b:58:ca:3d:0b:5b:a6:06:d6:38:70:c8:e8:17:0f: f9:f8:ba:91:f1:18:f9:b2:ce:09:e5:c9:a9:c4:20: 22:5f:f1:b0:98:30:db:67:f6:aa:fb:e2:c0:02:70: b8:c0:01:8e:f5:dd:5e:f1:34:fa:27:9e:90:2a:7f: 38:56:b3:c8:8f:27:62:f3:3d:4b:0d:1b:b6:6c:b7: b1:2e:e6:10:80:62:bf:a7:62:c3:ad:b5:b1:6c:05: e9:4a:cf:3b:46:41:2c:44:79:c4:20:1d:d1:34:d5: c5:b0:ee:84:cb:cc:c8:f3:9d:17:57:12:78:cb:17: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:40:66:6B:E6:14:EC:F5:B6:CF:55:E5:F0:6C:58:C4:D1:82:36:50 X509v3 Authority Key Identifier: keyid:FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:72:65:cf:1d:2d:9d:1e:13:4b:73:0f:39:bc:35:df:14:5d: 70:c3:11:82:f1:b4:cf:b7:49:24:2f:6e:67:4b:34:ec:c2:2c: bd:48:38:48:8d:cb:8e:a1:0f:f5:ae:e6:84:77:ec:e5:94:e7: 70:42:19:99:f2:65:86:aa:b3:21:32:e7:90:66:7a:ae:60:a1: 2a:76:07:83:65:a9:e8:dd:11:1c:98:e0:5e:02:a3:86:06:bf: b7:4a:f6:92:07:9b:e7:60:86:f7:40:2c:24:b8:18:55:17:93: 37:b4:29:9f:3b:d7:81:17:00:b7:e4:d2:2a:76:2c:df:1b:c2: 08:df:12:81:eb:1d:d2:74:a3:c4:42:83:98:e5:48:70:fc:30: f0:c9:c8:60:eb:aa:d1:fe:5c:1b:05:84:ec:e8:ff:48:f2:51: 71:2a:3f:c4:37:b8:a2:0f:9c:af:c7:9e:c8:44:6f:3c:3f:79: bc:10:16:e0:74:ec:c3:5b:b7:dc:71:43:6d:ff:a1:92:c6:f5: e6:d1:13:88:bf:7c:2c:22:0c:27:cf:2f:a1:42:c3:ef:57:c8: ab:1e:5f:90:2c:cc:bd:f7:a3:5c:67:b7:3e:ef:87:06:f6:ef: 7e:4f:37:ef:f4:b9:c3:cb:86:2f:6f:91:3d:cd:72:7e:f5:47: 0a:94:c2:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpdWEf5c+Lcpl6w1mw5xjZu5iyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgxODRF RjU2RTJGODAeFw0yNjA2MjAwNTAxMDJaFw0yNjA2MjEwNTExMDJaMDMxMTAvBgNV BAMTKDcyNDA2NjZCRTYxNEVDRjVCNkNGNTVFNUYwNkM1OEM0RDE4MjM2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1PaQeJ6MSijdFOAmv+3Ew6xB z9xNXhu1ni1U/z2fKxAWwOAW5dWVfjJ/tgeGz3fBEDzTBekzHiEu4x5JU4IkVu+g jJOE1JKONvjMffA8CSZKrT5Zwb2zPDIwO8LwKQIxQwwTqPUonqS14VeBVmjSI4CX ydeUj+e2EVYXoCS7jLeNjBllTUtYyj0LW6YG1jhwyOgXD/n4upHxGPmyzgnlyanE ICJf8bCYMNtn9qr74sACcLjAAY713V7xNPonnpAqfzhWs8iPJ2LzPUsNG7Zst7Eu 5hCAYr+nYsOttbFsBelKzztGQSxEecQgHdE01cWw7oTLzMjznRdXEnjLF0cPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUckBma+YU7PW2z1Xl8GxYxNGCNlAwHwYDVR0j BBgwFoAU/ATBvM+qC7IdZ+bMscyBhO9W4vgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVkZWNhODItODlhYi00NTgyLThlODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkND RkFBMEJCMjFENjdFNkNDQjFDQzgxODRFRjU2RTJGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzA0QzFCQ0NGQUEwQkIyMUQ2N0U2Q0NCMUNDODE4NEVGNTZF MkY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgx ODRFRjU2RTJGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVyZc8dLZ0eE0tzDzm8Nd8UXXDDEYLxtM+3 SSQvbmdLNOzCLL1IOEiNy46hD/Wu5oR37OWU53BCGZnyZYaqsyEy55Bmeq5goSp2 B4NlqejdERyY4F4Co4YGv7dK9pIHm+dghvdALCS4GFUXkze0KZ8714EXALfk0ip2 LN8bwgjfEoHrHdJ0o8RCg5jlSHD8MPDJyGDrqtH+XBsFhOzo/0jyUXEqP8Q3uKIP nK/HnshEbzw/ebwQFuB07MNbt9xxQ23/oZLG9ebRE4i/fCwiDCfPL6FCw+9XyKse X5AszL33o1xntz7vhwb2735PN+/0ucPLhi9vkT3Ncn71RwqUwiY= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:17 2026 by rpki-client