$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft (raw, json) Hash identifier: mJZPI52tQQXSfUPHcukcP9VLHxrumZ59xsqoCR6DQ0k= Subject key identifier: 7D:E7:15:BE:16:0E:1E:92:07:40:74:73:B2:41:45:56:90:98:FC:B1 Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Certificate issuer: /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Certificate serial: 5E9CCA2DC14ED70457B3523AF6C8A8B85EC5720A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 04:05:00 +0000 Manifest this update: Tue 02 Jun 2026 04:00:00 +0000 Manifest next update: Wed 03 Jun 2026 04:44:00 +0000 Files and hashes: 1: FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl (hash: v04rf2V8AdExunqVHVFlRConHIQOCFWwyzCkUgblG8E=) 2: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: PMU/EM6l42dAHb1GMvcVAgdYpb2lZO1+JcKqZaQY9b0=) 3: 3130332e382e37382e302f32332d3233203d3e20313534343130.roa (hash: P9Eth7G1OL+Za2tm/8VNDDi8KOfqq86WA+iM3ZcUwvY=) 4: 3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa (hash: 7wx8IAofLqMlKmXE45n8YAYtVPHwwQlQVJ0MMEECbVI=) 5: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: Srt0FvFf5bqImg/cX8u7McM7EIw1oGFbJhJQh8pZNYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9c:ca:2d:c1:4e:d7:04:57:b3:52:3a:f6:c8:a8:b8:5e:c5:72:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Validity Not Before: Jun 2 04:00:00 2026 GMT Not After : Jun 3 04:44:00 2026 GMT Subject: CN=7DE715BE160E1E9207407473B24145569098FCB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:49:02:7a:8d:43:20:b5:73:74:02:29:79: 9c:b1:83:a4:ef:2a:39:a6:6e:22:b9:3c:47:23:e5: 8b:f8:13:92:72:94:dc:8f:1d:b9:8c:61:3d:fb:82: f4:ee:30:5f:6d:a7:40:db:be:4c:2f:b4:18:68:76: c5:0a:d1:ff:83:92:13:55:a6:50:b4:5f:f9:dc:ef: 8f:0a:9b:c3:c5:80:f7:94:85:66:2a:19:1a:7d:55: 7a:e4:dc:cb:6e:a9:1e:c3:87:f0:56:2f:c0:3f:1c: 53:0d:76:51:09:d8:ac:a7:1e:63:25:f8:4d:cc:e0: fc:e8:ce:90:6d:ac:42:65:61:8a:1b:3e:97:4a:71: 46:ee:d7:60:ae:22:51:77:09:80:ac:e6:c6:84:a3: fd:2a:7b:3e:35:96:e2:bf:34:7a:e2:f9:dd:a9:89: 71:d9:58:82:1e:5e:c8:4e:a2:21:70:bf:17:28:ea: 53:19:34:af:78:54:82:bb:dd:1d:22:d4:1b:2e:51: da:2d:34:6b:c7:5b:c3:54:75:1b:77:42:f7:9e:03: 57:25:2a:a7:7d:6a:7f:30:2d:17:22:e3:bc:a9:82: 3d:ca:90:ac:eb:53:02:ff:92:ea:e6:de:46:3d:8d: 70:2e:b4:ac:69:a1:1d:f6:b5:3f:e6:2c:c3:2a:8b: f0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E7:15:BE:16:0E:1E:92:07:40:74:73:B2:41:45:56:90:98:FC:B1 X509v3 Authority Key Identifier: keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:45:e5:bb:28:36:6b:26:ea:a9:ed:5b:c6:29:46:6c:a9:eb: 05:3f:b1:c6:86:4d:29:b0:16:1f:0f:d5:30:b8:79:d1:93:90: d1:25:4a:ed:23:2f:cd:1d:d0:ad:99:51:0c:ac:e0:e9:5c:8b: 00:35:62:e5:94:08:52:33:bf:28:c9:cc:ff:c1:58:3c:47:25: 61:df:ba:00:bf:5b:b4:52:e1:44:96:ea:91:ed:20:1c:76:31: 11:1c:01:12:05:69:08:d8:2e:03:49:af:03:b2:5e:d8:8c:5c: 9d:5f:d2:61:3a:df:52:8d:ce:22:08:3c:9a:69:03:65:76:d7: ff:65:d9:dc:e9:52:27:77:b3:65:3b:fd:e8:d8:f0:c9:2b:e0: d0:f5:98:ad:51:0c:a7:4d:c0:34:37:f0:e7:d5:93:92:3f:06: b9:22:1a:92:bc:e2:3c:d3:2b:e8:7e:cf:bf:24:49:bc:47:7f: db:a6:c8:f4:c6:e9:0e:49:cc:41:06:47:d0:e2:74:4c:53:0c: 10:fa:de:10:9b:49:29:d6:bb:ed:50:44:53:43:5d:1b:db:42: ef:9e:09:c8:62:b4:a5:7e:05:63:ca:de:78:fa:89:69:cc:2e: a6:a5:11:43:df:3d:af:98:65:12:77:31:40:f9:78:5c:f9:99: c3:06:85:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpzKLcFO1wRXs1I69siouF7FcgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZG MEU0QjNFNDAeFw0yNjA2MDIwNDAwMDBaFw0yNjA2MDMwNDQ0MDBaMDMxMTAvBgNV BAMTKDdERTcxNUJFMTYwRTFFOTIwNzQwNzQ3M0IyNDE0NTU2OTA5OEZDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrkkCeo1DILVzdAIpeZyxg6Tv KjmmbiK5PEcj5Yv4E5JylNyPHbmMYT37gvTuMF9tp0DbvkwvtBhodsUK0f+DkhNV plC0X/nc748Km8PFgPeUhWYqGRp9VXrk3MtuqR7Dh/BWL8A/HFMNdlEJ2KynHmMl +E3M4PzozpBtrEJlYYobPpdKcUbu12CuIlF3CYCs5saEo/0qez41luK/NHri+d2p iXHZWIIeXshOoiFwvxco6lMZNK94VIK73R0i1BsuUdotNGvHW8NUdRt3QveeA1cl Kqd9an8wLRci47ypgj3KkKzrUwL/kurm3kY9jXAutKxpoR32tT/mLMMqi/CPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfecVvhYOHpIHQHRzskFFVpCY/LEwHwYDVR0j BBgwFoAU/HHUYjFvMDdRrg7gFylA7/Dks+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQwZTBkZWEtNWY5Yi00MjVjLTgyY2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIz MTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZGMEU0QjNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzcxRDQ2MjMxNkYzMDM3NTFBRTBFRTAxNzI5NDBFRkYwRTRC M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQw RUZGMEU0QjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZF5bsoNmsm6qntW8YpRmyp6wU/scaGTSmw Fh8P1TC4edGTkNElSu0jL80d0K2ZUQys4OlciwA1YuWUCFIzvyjJzP/BWDxHJWHf ugC/W7RS4USW6pHtIBx2MREcARIFaQjYLgNJrwOyXtiMXJ1f0mE631KNziIIPJpp A2V21/9l2dzpUid3s2U7/ejY8Mkr4ND1mK1RDKdNwDQ38OfVk5I/BrkiGpK84jzT K+h+z78kSbxHf9umyPTG6Q5JzEEGR9DidExTDBD63hCbSSnWu+1QRFNDXRvbQu+e CchitKV+BWPK3nj6iWnMLqalEUPfPa+YZRJ3MUD5eFz5mcMGhSI= -----END CERTIFICATE-----Generated at Tue Jun 2 21:43:21 2026 by rpki-client