$ rpki-client -vvf rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft File: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft (raw, json) Hash identifier: MMv3vqNG5QRmWtLownajn/VSX/Kn1BSGNpEkbxmBMWA= Subject key identifier: F0:CB:E9:5D:D9:5F:59:3D:5E:17:52:69:0A:3C:14:57:52:E6:DA:86 Authority key identifier: FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 Certificate issuer: /CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Certificate serial: 31EED2F72AB2D6710E1FEC1071A97F4C0107CAE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:11:09 +0000 Manifest this update: Tue 16 Jun 2026 22:06:09 +0000 Manifest next update: Wed 17 Jun 2026 22:32:09 +0000 Files and hashes: 1: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl (hash: z0+nuNuNZUe0GG+mNQU9pbIptirH436rsjW/0i1aKAo=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: /EYgr4bEX5yF2cD2wxIp6ztYlU72xJsVBSPBoR3u9Fw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ee:d2:f7:2a:b2:d6:71:0e:1f:ec:10:71:a9:7f:4c:01:07:ca:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Validity Not Before: Jun 16 22:06:09 2026 GMT Not After : Jun 17 22:32:09 2026 GMT Subject: CN=F0CBE95DD95F593D5E1752690A3C145752E6DA86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:85:b9:05:0e:c4:d4:e0:96:c7:84:ad:0d:08: 03:d3:7d:94:f4:b1:72:07:cb:90:3d:a8:b3:7b:e0: 32:71:b4:b5:56:e3:6e:af:38:3a:37:5a:59:a2:ed: 96:e4:f6:f8:61:27:d0:93:b0:02:13:5c:64:5a:c8: 2c:c4:1e:a3:41:d3:c7:55:af:81:f5:7b:a5:35:6c: f3:4e:d6:d0:46:48:85:c0:73:ec:50:fe:09:6d:9d: a6:8e:84:e6:aa:cc:46:a8:e2:cb:7a:87:82:ad:f2: 79:61:6e:85:71:48:03:56:b1:0d:fa:09:55:41:35: 10:ae:13:33:44:e0:aa:aa:e6:f1:35:08:23:f3:8b: 1e:a3:7a:66:80:69:99:e5:22:89:48:5f:a8:65:27: 42:a7:1b:0c:83:7e:61:50:83:3a:ef:75:3e:b0:87: 3d:a7:1f:c4:fa:a1:07:09:70:3a:3f:3a:02:b9:08: f2:d7:2a:6d:68:a9:e7:20:bf:9e:42:a8:9f:ad:5b: 6c:5f:c0:fb:ec:39:7a:4e:bd:8f:00:9d:39:0a:72: a1:a6:4c:f8:d9:6d:7f:83:12:4b:8b:fb:9c:b0:60: e5:2d:81:be:59:06:5d:c2:6e:66:02:20:60:0e:b6: 2d:35:cc:b1:01:1f:0b:76:a8:77:8a:d0:e2:20:f7: 17:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CB:E9:5D:D9:5F:59:3D:5E:17:52:69:0A:3C:14:57:52:E6:DA:86 X509v3 Authority Key Identifier: keyid:FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:43:23:79:f4:3e:f2:07:0a:c8:74:36:b1:e1:07:ee:c1:1b: 1d:7d:42:83:65:a7:b3:13:4f:bf:8b:6c:ee:f3:84:01:0a:36: 54:bf:24:71:ec:36:fc:fc:fd:c5:14:fa:93:d0:1e:8a:2a:a0: 22:ca:7b:eb:41:90:9d:9a:6f:68:c5:09:93:43:dd:95:c1:73: 1a:4d:72:18:6e:35:e1:6f:03:b7:4f:c7:79:3d:6b:4c:02:74: e7:fd:c7:84:c1:72:42:a4:89:be:db:aa:40:d1:80:cb:31:f0: 8b:d0:6b:c5:b2:15:b7:ba:9e:07:dc:a1:7f:a1:7f:7e:f7:5f: b6:4c:a8:42:86:5c:98:6c:d5:8d:54:bc:52:ed:dd:48:f5:c8: cd:96:25:5e:d6:8c:f9:03:6a:c9:de:b7:9f:e4:37:24:b0:2f: 51:1a:54:59:86:0f:5b:a4:00:21:d1:24:f8:27:f2:5a:25:49: 16:82:d5:d5:4e:90:bc:79:a8:e6:ed:71:0d:84:45:0f:00:00: 54:58:ec:35:2b:1c:b2:e9:09:12:6c:8f:48:df:b9:97:18:d2: 08:25:62:a4:9e:3c:8b:4b:24:ed:47:7c:3a:4c:13:3d:a1:82: f5:ae:8e:3b:a7:46:4a:37:61:19:59:90:9d:f0:4a:ed:89:7a: aa:20:92:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMe7S9yqy1nEOH+wQcal/TAEHyugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgw QzgyOTVFNTAeFw0yNjA2MTYyMjA2MDlaFw0yNjA2MTcyMjMyMDlaMDMxMTAvBgNV BAMTKEYwQ0JFOTVERDk1RjU5M0Q1RTE3NTI2OTBBM0MxNDU3NTJFNkRBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrhbkFDsTU4JbHhK0NCAPTfZT0 sXIHy5A9qLN74DJxtLVW426vODo3Wlmi7Zbk9vhhJ9CTsAITXGRayCzEHqNB08dV r4H1e6U1bPNO1tBGSIXAc+xQ/gltnaaOhOaqzEao4st6h4Kt8nlhboVxSANWsQ36 CVVBNRCuEzNE4Kqq5vE1CCPzix6jemaAaZnlIolIX6hlJ0KnGwyDfmFQgzrvdT6w hz2nH8T6oQcJcDo/OgK5CPLXKm1oqecgv55CqJ+tW2xfwPvsOXpOvY8AnTkKcqGm TPjZbX+DEkuL+5ywYOUtgb5ZBl3CbmYCIGAOti01zLEBHwt2qHeK0OIg9xf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8MvpXdlfWT1eF1JpCjwUV1Lm2oYwHwYDVR0j BBgwFoAU/KzNzw/etQ8smBbrxFUPeAyCleUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUwZDFhYTEtNGM3Zi00NDhiLWIyYmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0Yw RkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgwQzgyOTVFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0FDQ0RDRjBGREVCNTBGMkM5ODE2RUJDNDU1MEY3ODBDODI5 NUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBG NzgwQzgyOTVFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1DI3n0PvIHCsh0NrHhB+7BGx19QoNlp7MT T7+LbO7zhAEKNlS/JHHsNvz8/cUU+pPQHooqoCLKe+tBkJ2ab2jFCZND3ZXBcxpN chhuNeFvA7dPx3k9a0wCdOf9x4TBckKkib7bqkDRgMsx8IvQa8WyFbe6ngfcoX+h f373X7ZMqEKGXJhs1Y1UvFLt3Uj1yM2WJV7WjPkDasnet5/kNySwL1EaVFmGD1uk ACHRJPgn8lolSRaC1dVOkLx5qObtcQ2ERQ8AAFRY7DUrHLLpCRJsj0jfuZcY0ggl YqSePItLJO1HfDpMEz2hgvWujjunRko3YRlZkJ3wSu2Jeqogkig= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:10 2026 by rpki-client