$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft File: FC1A394AF4972652D1A91AA14711525172E42585.mft (raw, json) Hash identifier: RWvMStlKWjEeNGlZ2WPjC7MxJAJrbkz4oA9U/RVAoqU= Subject key identifier: 89:6E:46:A1:79:52:4C:C5:15:D0:34:5A:82:3A:24:59:C9:75:62:56 Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 Certificate issuer: /CN=FC1A394AF4972652D1A91AA14711525172E42585 Certificate serial: 2022C186ECA39D9DFF238BE89E3353EA9FFC451A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:27:39 +0000 Manifest this update: Tue 16 Jun 2026 19:22:39 +0000 Manifest next update: Wed 17 Jun 2026 19:56:39 +0000 Files and hashes: 1: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: 92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=) 2: FC1A394AF4972652D1A91AA14711525172E42585.crl (hash: RUvyT94oZoIsByg4HtYaKMeM2nOJZIn3NV4MA0Q6K7Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:22:c1:86:ec:a3:9d:9d:ff:23:8b:e8:9e:33:53:ea:9f:fc:45:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585 Validity Not Before: Jun 16 19:22:39 2026 GMT Not After : Jun 17 19:56:39 2026 GMT Subject: CN=896E46A179524CC515D0345A823A2459C9756256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:cf:07:44:56:73:e0:66:29:d2:23:24:44: 47:9a:14:94:a2:46:e6:ed:74:5a:e2:37:2c:05:da: 93:50:bf:f1:56:6d:ee:00:3d:c0:97:97:84:ce:e2: e9:4b:72:2b:a0:53:e7:53:de:aa:b4:db:9d:b4:8e: 5c:d9:ac:b7:f4:b8:1a:40:84:f2:83:f8:9b:0d:8b: e1:0e:5b:2d:32:32:a5:fd:a9:08:8e:63:c9:8a:55: a9:c8:44:c1:c6:69:ad:40:fb:fe:6a:f5:4a:33:ee: 4f:a2:be:48:e9:9c:60:35:34:4e:e5:ea:88:c1:39: d7:c0:b0:bc:38:89:23:75:d9:33:d9:a2:66:bc:e5: 37:d4:e5:00:c6:5f:5d:c7:0d:08:52:d0:ef:40:5c: df:b3:42:f0:8e:00:b4:b1:86:43:94:7e:96:1a:9b: 41:a8:bf:e7:b4:73:c8:25:99:11:ce:55:97:97:16: 1f:81:47:a6:5e:a1:7d:b3:e1:40:82:d4:24:b6:d5: c9:17:07:f9:16:f0:7f:bc:96:70:29:bc:85:2f:a8: c7:05:18:5d:5d:d4:2e:33:32:84:28:9a:00:fe:f7: 3f:22:f2:31:88:81:04:d5:29:92:f6:1f:8a:af:cc: 28:ad:3c:f8:62:3b:14:a9:70:33:03:74:a5:b5:28: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6E:46:A1:79:52:4C:C5:15:D0:34:5A:82:3A:24:59:C9:75:62:56 X509v3 Authority Key Identifier: keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:aa:6d:31:b2:e4:ce:1a:52:29:57:b1:39:40:fe:c5:da:e0: 11:6a:e2:98:2e:63:68:a5:f5:c1:01:79:75:42:b8:cb:0a:58: 3f:36:53:34:f1:5f:07:f8:87:00:41:d7:ac:21:7a:a5:67:aa: 4a:86:5e:f2:6d:79:3a:06:95:b2:f4:e2:62:50:ca:65:e7:5e: 51:47:4b:c1:04:77:c7:d9:a2:2d:22:d4:d4:8f:9c:b6:33:69: df:c7:0e:b3:83:e0:ae:e1:fe:db:8a:db:85:c5:5c:89:e7:c7: 8f:5a:1c:b3:b9:c0:aa:99:e7:38:5b:99:42:6f:0c:f9:cd:b2: 43:e7:77:b2:f5:3c:5b:52:f8:94:63:7e:7f:69:38:c4:f7:4c: 94:2e:8e:bb:27:31:4d:8c:a2:aa:45:06:73:df:00:4f:d5:ce: 30:5c:39:7b:5a:34:0e:19:5e:50:c1:11:49:16:3a:d4:d1:a5: 44:15:ee:c6:53:05:94:a0:0c:36:ff:22:ff:b5:73:e9:d7:5b: 9f:d7:3c:50:83:b7:0d:59:68:ed:db:df:0e:72:59:eb:64:08: 99:9c:5a:be:e6:5a:fc:f4:cc:ec:0f:b8:8a:9f:91:12:9a:9e: b5:43:76:35:46:23:eb:88:68:63:00:c3:23:b3:4d:e9:0a:7e: 14:c6:5f:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICLBhuyjnZ3/I4vonjNT6p/8RRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3 MkU0MjU4NTAeFw0yNjA2MTYxOTIyMzlaFw0yNjA2MTcxOTU2MzlaMDMxMTAvBgNV BAMTKDg5NkU0NkExNzk1MjRDQzUxNUQwMzQ1QTgyM0EyNDU5Qzk3NTYyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCO88HRFZz4GYp0iMkREeaFJSi RubtdFriNywF2pNQv/FWbe4APcCXl4TO4ulLciugU+dT3qq02520jlzZrLf0uBpA hPKD+JsNi+EOWy0yMqX9qQiOY8mKVanIRMHGaa1A+/5q9Uoz7k+ivkjpnGA1NE7l 6ojBOdfAsLw4iSN12TPZoma85TfU5QDGX13HDQhS0O9AXN+zQvCOALSxhkOUfpYa m0Gov+e0c8glmRHOVZeXFh+BR6ZeoX2z4UCC1CS21ckXB/kW8H+8lnApvIUvqMcF GF1d1C4zMoQomgD+9z8i8jGIgQTVKZL2H4qvzCitPPhiOxSpcDMDdKW1KKFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiW5GoXlSTMUV0DRagjokWcl1YlYwHwYDVR0j BBgwFoAU/Bo5SvSXJlLRqRqhRxFSUXLkJYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiZWE4MWQtODVhYy00MGE1LWE3ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFG NDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3MkU0MjU4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzFBMzk0QUY0OTcyNjUyRDFBOTFBQTE0NzExNTI1MTcyRTQy NTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiZWE4MWQtODVhYy00MGE1LWE3 ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUy NTE3MkU0MjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGqbTGy5M4aUilXsTlA/sXa4BFq4pguY2il 9cEBeXVCuMsKWD82UzTxXwf4hwBB16wheqVnqkqGXvJteToGlbL04mJQymXnXlFH S8EEd8fZoi0i1NSPnLYzad/HDrOD4K7h/tuK24XFXInnx49aHLO5wKqZ5zhbmUJv DPnNskPnd7L1PFtS+JRjfn9pOMT3TJQujrsnMU2MoqpFBnPfAE/VzjBcOXtaNA4Z XlDBEUkWOtTRpUQV7sZTBZSgDDb/Iv+1c+nXW5/XPFCDtw1ZaO3b3w5yWetkCJmc Wr7mWvz0zOwPuIqfkRKanrVDdjVGI+uIaGMAwyOzTekKfhTGXxk= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:12 2026 by rpki-client