$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft File: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft (raw, json) Hash identifier: ZI/Rmg+vDkQOWSzEc80tHczMgT9NxuzOcmebxufaZ48= Subject key identifier: 17:13:08:5A:CA:A0:53:30:70:56:BA:2D:B1:C7:64:D9:78:C0:0E:05 Authority key identifier: FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 Certificate issuer: /CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Certificate serial: 171861CF80941E8436BDCC0E9EE85E40C576AEF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:43:37 +0000 Manifest this update: Wed 17 Jun 2026 04:38:37 +0000 Manifest next update: Thu 18 Jun 2026 07:33:37 +0000 Files and hashes: 1: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: 70NFz1U2se9VZLmxfjrFbhrAeSmQtExL3XMvYrlX6c8=) 2: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl (hash: c0MlcStOMQQTdkkuLnIYZoopYSWSKWcJq/+UPgw6Zag=) 3: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: 9YwGnAS4Ytmen5f7Im+DSh9RfLLeSLFnhc1Jg9+yNBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:18:61:cf:80:94:1e:84:36:bd:cc:0e:9e:e8:5e:40:c5:76:ae:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Validity Not Before: Jun 17 04:38:37 2026 GMT Not After : Jun 18 07:33:37 2026 GMT Subject: CN=1713085ACAA053307056BA2DB1C764D978C00E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:44:90:b8:f5:29:91:06:cc:5d:74:04:b2: a6:f1:6c:4a:93:8b:41:af:58:22:40:25:4a:3f:e3: 9b:e8:e8:6f:cd:3f:1a:fa:bf:63:ba:e6:b2:2d:25: e3:d2:3a:68:72:5c:6e:1e:f0:6d:a5:8b:68:6e:b2: 6d:1f:24:2d:90:04:bd:1d:d8:d8:f1:33:0d:14:57: 2c:2d:b2:32:13:b6:7a:76:a0:aa:c8:a1:a7:a0:55: 1f:2b:c8:19:1e:16:23:86:e3:27:51:9e:8d:99:c2: 99:bd:aa:67:7d:05:9f:b3:a6:62:ed:81:ff:40:c7: 98:67:b7:4f:b5:3a:cf:4c:fd:64:7c:81:c1:8c:b3: 75:ac:63:f0:71:70:31:17:bc:8f:0a:3d:f1:5f:ab: eb:95:47:49:13:c9:7a:57:7b:e5:c9:3e:19:b1:ed: dc:79:8d:8b:43:e8:fc:4c:02:08:49:4c:d3:06:15: c3:dc:cc:d2:62:82:14:c2:65:96:36:49:44:28:70: 0f:ed:d1:d2:a1:54:1a:a9:ca:cd:ce:06:6c:20:40: 20:24:46:61:1d:5f:f6:55:b7:b1:6f:79:82:2e:b1: 1e:56:bf:a7:27:4b:03:ab:20:52:b6:f4:37:cc:e7: b7:ee:83:22:a4:bd:fe:01:f9:c5:1d:45:3a:10:80: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:13:08:5A:CA:A0:53:30:70:56:BA:2D:B1:C7:64:D9:78:C0:0E:05 X509v3 Authority Key Identifier: keyid:FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7e:0a:01:85:20:c0:b4:8e:d9:57:9f:a1:01:10:c3:60:9d: 10:24:b2:48:a0:81:04:e1:a2:e2:1e:f3:d3:f8:26:56:26:bb: e9:be:5c:ce:f5:ce:ee:4f:ea:4f:04:b3:0e:53:f0:38:70:d6: 93:36:05:69:7b:0c:e5:e0:9f:b7:d2:48:ca:4c:14:58:ea:35: f6:3f:49:c4:a2:45:ce:b0:30:8d:f0:79:bb:cc:28:c3:07:57: 4f:96:5e:83:45:5b:24:32:33:d6:af:3c:51:1b:4f:88:40:31: 8f:a8:9b:7b:1d:2f:de:b9:c0:2f:e9:62:b5:ee:53:79:97:84: 25:db:97:ec:99:58:a3:31:45:3f:1c:33:1f:ea:94:04:0b:12: 73:95:79:cc:d3:83:8f:4e:ff:b1:21:d9:33:d3:63:5a:69:cf: 88:58:88:8f:5d:09:45:2f:83:fb:93:69:54:52:da:42:3d:da: 9f:11:de:e2:1b:86:14:ab:e5:b0:dd:fb:a4:dc:72:b0:02:1d: c1:7a:c1:d9:25:61:d0:b1:a0:0f:c1:e7:57:82:e1:dd:9c:93: c2:5a:22:90:f4:3f:8d:1c:8e:f4:78:ca:96:3c:40:eb:01:ea: 43:d4:81:fb:da:ba:3a:d1:3c:cd:81:b8:95:c5:21:32:1d:51: 73:5c:30:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFxhhz4CUHoQ2vcwOnuheQMV2rvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgxODRF RjU2RTJGODAeFw0yNjA2MTcwNDM4MzdaFw0yNjA2MTgwNzMzMzdaMDMxMTAvBgNV BAMTKDE3MTMwODVBQ0FBMDUzMzA3MDU2QkEyREIxQzc2NEQ5NzhDMDBFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKq0SQuPUpkQbMXXQEsqbxbEqT i0GvWCJAJUo/45vo6G/NPxr6v2O65rItJePSOmhyXG4e8G2li2husm0fJC2QBL0d 2NjxMw0UVywtsjITtnp2oKrIoaegVR8ryBkeFiOG4ydRno2Zwpm9qmd9BZ+zpmLt gf9Ax5hnt0+1Os9M/WR8gcGMs3WsY/BxcDEXvI8KPfFfq+uVR0kTyXpXe+XJPhmx 7dx5jYtD6PxMAghJTNMGFcPczNJighTCZZY2SUQocA/t0dKhVBqpys3OBmwgQCAk RmEdX/ZVt7FveYIusR5Wv6cnSwOrIFK29DfM57fugyKkvf4B+cUdRToQgJrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFxMIWsqgUzBwVrotscdk2XjADgUwHwYDVR0j BBgwFoAU/ATBvM+qC7IdZ+bMscyBhO9W4vgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVkZWNhODItODlhYi00NTgyLThlODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkND RkFBMEJCMjFENjdFNkNDQjFDQzgxODRFRjU2RTJGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzA0QzFCQ0NGQUEwQkIyMUQ2N0U2Q0NCMUNDODE4NEVGNTZF MkY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvRkMwNEMxQkNDRkFBMEJCMjFENjdFNkNDQjFDQzgx ODRFRjU2RTJGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJ+CgGFIMC0jtlXn6EBEMNgnRAkskiggQTh ouIe89P4JlYmu+m+XM71zu5P6k8Esw5T8Dhw1pM2BWl7DOXgn7fSSMpMFFjqNfY/ ScSiRc6wMI3webvMKMMHV0+WXoNFWyQyM9avPFEbT4hAMY+om3sdL965wC/pYrXu U3mXhCXbl+yZWKMxRT8cMx/qlAQLEnOVeczTg49O/7Eh2TPTY1ppz4hYiI9dCUUv g/uTaVRS2kI92p8R3uIbhhSr5bDd+6TccrACHcF6wdklYdCxoA/B51eC4d2ck8Ja IpD0P40cjvR4ypY8QOsB6kPUgfvaujrRPM2BuJXFITIdUXNcMLY= -----END CERTIFICATE-----Generated at Wed Jun 17 12:38:51 2026 by rpki-client