$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft (raw, json) Hash identifier: zZWtkQA3OYKF3SJn6Rlc60/KH4280/2NIPkyQ7CR1I4= Subject key identifier: 1C:C1:94:80:2C:C7:E8:5E:FF:97:4B:B7:33:C1:CC:D9:C0:E4:7A:E7 Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Certificate issuer: /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Certificate serial: 456A5CC3A897E203F8235FC9E10E4BD553958FDD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 20:43:26 +0000 Manifest this update: Fri 17 Jul 2026 20:38:26 +0000 Manifest next update: Sat 18 Jul 2026 21:17:26 +0000 Files and hashes: 1: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: Srt0FvFf5bqImg/cX8u7McM7EIw1oGFbJhJQh8pZNYo=) 2: 3130332e382e37382e302f32332d3233203d3e20313534343130.roa (hash: P9Eth7G1OL+Za2tm/8VNDDi8KOfqq86WA+iM3ZcUwvY=) 3: 3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa (hash: 7wx8IAofLqMlKmXE45n8YAYtVPHwwQlQVJ0MMEECbVI=) 4: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: PMU/EM6l42dAHb1GMvcVAgdYpb2lZO1+JcKqZaQY9b0=) 5: FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl (hash: /ifFVAum0y89o4iv2TOErUSMf0BpFPyeyo2S3vn68ms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6a:5c:c3:a8:97:e2:03:f8:23:5f:c9:e1:0e:4b:d5:53:95:8f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Validity Not Before: Jul 17 20:38:26 2026 GMT Not After : Jul 18 21:17:26 2026 GMT Subject: CN=1CC194802CC7E85EFF974BB733C1CCD9C0E47AE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:42:fb:f9:92:f0:86:56:ec:fb:a7:27:b1: eb:ed:2b:54:48:8e:c1:80:6d:45:ea:d3:74:92:01: 7a:d6:7d:62:7f:a2:85:75:0b:e7:47:a1:05:d7:3c: fa:cc:4a:bd:c8:66:7c:50:9f:1d:71:fe:5f:ec:43: 8d:09:94:18:a5:25:75:1d:6e:4a:f2:9d:5f:7c:f0: 53:47:24:38:06:e6:f7:30:3d:a5:a2:41:22:05:af: 76:e6:0c:fa:53:4e:2d:a3:8b:50:0d:07:4f:93:05: 9d:a1:d4:6f:23:a6:92:6a:4f:a7:ff:b8:42:f2:77: 21:cc:eb:e3:39:3e:62:fc:28:d1:e5:03:c4:2f:74: 90:69:2a:4e:1d:89:7b:51:db:d5:13:68:40:26:24: 96:ae:e9:9c:a5:bf:ba:ec:a4:7f:85:da:69:00:8b: a2:8a:c3:c2:7a:59:f1:bd:9b:d8:ec:6c:f6:95:aa: fd:f2:d5:f9:6c:d9:35:e1:90:67:ed:fd:96:e8:e4: 52:5c:9c:02:18:43:25:12:c3:0e:a4:d7:cd:09:ec: 0b:6e:a3:26:3b:b5:4c:88:30:32:93:a4:8d:b3:97: 02:10:0c:9e:d2:71:84:aa:71:07:28:ff:52:03:b5: b9:3a:7c:d2:0b:b5:58:9c:47:ca:ac:83:20:42:62: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C1:94:80:2C:C7:E8:5E:FF:97:4B:B7:33:C1:CC:D9:C0:E4:7A:E7 X509v3 Authority Key Identifier: keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c1:86:ed:df:2f:b0:db:70:b2:79:7f:e9:34:db:bb:42:a5: 94:4c:9f:c1:43:c2:60:ff:6c:53:9f:7d:cb:8b:48:ad:85:68: 01:52:ad:0a:5e:6e:ee:f6:ae:db:e3:26:75:d5:1f:74:1a:50: b8:ce:30:c5:b6:d4:3e:76:b2:8d:0e:2a:3d:cd:4b:08:cd:db: dd:cb:53:ba:e9:f9:5c:ca:38:51:0d:ef:07:aa:b5:fd:ed:2e: 8f:ac:7d:45:a8:15:35:98:a5:10:39:88:dc:e5:32:3a:df:56: 61:5c:75:0f:ef:fc:d9:2f:d3:ef:49:f9:51:11:67:7b:b2:ed: 9f:fb:57:a3:73:df:3b:c5:b1:89:04:17:9f:21:2f:38:b6:92: 4a:71:05:39:49:33:c9:6f:4c:f7:4f:10:78:a8:e6:2e:33:9c: ad:29:d5:0a:0d:fa:bd:8a:a3:b6:e8:bd:c0:94:7c:4b:5d:3c: b9:64:a9:10:a2:fa:d8:d3:93:87:f2:e1:f8:3b:df:c0:ed:f3: 69:da:75:03:c9:eb:94:c1:5f:36:88:6c:63:13:57:24:08:d1: 9b:94:10:4a:9f:3a:7a:d7:11:ad:43:37:f0:8b:db:dd:6b:fa: 4f:60:bc:67:4c:ad:b1:fb:82:67:f1:96:69:32:a2:d5:8d:95: 21:7d:1b:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWpcw6iX4gP4I1/J4Q5L1VOVj90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZG MEU0QjNFNDAeFw0yNjA3MTcyMDM4MjZaFw0yNjA3MTgyMTE3MjZaMDMxMTAvBgNV BAMTKDFDQzE5NDgwMkNDN0U4NUVGRjk3NEJCNzMzQzFDQ0Q5QzBFNDdBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16kL7+ZLwhlbs+6cnsevtK1RI jsGAbUXq03SSAXrWfWJ/ooV1C+dHoQXXPPrMSr3IZnxQnx1x/l/sQ40JlBilJXUd bkrynV988FNHJDgG5vcwPaWiQSIFr3bmDPpTTi2ji1ANB0+TBZ2h1G8jppJqT6f/ uELydyHM6+M5PmL8KNHlA8QvdJBpKk4diXtR29UTaEAmJJau6Zylv7rspH+F2mkA i6KKw8J6WfG9m9jsbPaVqv3y1fls2TXhkGft/Zbo5FJcnAIYQyUSww6k180J7Atu oyY7tUyIMDKTpI2zlwIQDJ7ScYSqcQco/1IDtbk6fNILtVicR8qsgyBCYqfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHMGUgCzH6F7/l0u3M8HM2cDkeucwHwYDVR0j BBgwFoAU/HHUYjFvMDdRrg7gFylA7/Dks+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQwZTBkZWEtNWY5Yi00MjVjLTgyY2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIz MTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZGMEU0QjNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzcxRDQ2MjMxNkYzMDM3NTFBRTBFRTAxNzI5NDBFRkYwRTRC M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQw RUZGMEU0QjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTBhu3fL7DbcLJ5f+k027tCpZRMn8FDwmD/ bFOffcuLSK2FaAFSrQpebu72rtvjJnXVH3QaULjOMMW21D52so0OKj3NSwjN293L U7rp+VzKOFEN7weqtf3tLo+sfUWoFTWYpRA5iNzlMjrfVmFcdQ/v/Nkv0+9J+VER Z3uy7Z/7V6Nz3zvFsYkEF58hLzi2kkpxBTlJM8lvTPdPEHio5i4znK0p1QoN+r2K o7bovcCUfEtdPLlkqRCi+tjTk4fy4fg738Dt82nadQPJ65TBXzaIbGMTVyQI0ZuU EEqfOnrXEa1DN/CL291r+k9gvGdMrbH7gmfxlmkyotWNlSF9G8I= -----END CERTIFICATE-----Generated at Sat Jul 18 02:23:35 2026 by rpki-client