$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft (raw, json) Hash identifier: Oa+ioKPfThnTP3eCVKoiqKT+ZGu1fY/LZKq2kwtrO44= Subject key identifier: A7:1E:F0:4B:AB:2E:C1:E2:6F:AF:F1:E9:D0:05:68:63:C2:57:B6:E1 Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Certificate issuer: /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Certificate serial: 331440857AE8896997759B824C951C6711E41029 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 07:38:14 +0000 Manifest this update: Sat 13 Jun 2026 07:33:14 +0000 Manifest next update: Sun 14 Jun 2026 07:51:14 +0000 Files and hashes: 1: 3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa (hash: 7wx8IAofLqMlKmXE45n8YAYtVPHwwQlQVJ0MMEECbVI=) 2: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: PMU/EM6l42dAHb1GMvcVAgdYpb2lZO1+JcKqZaQY9b0=) 3: FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl (hash: BRrPdylJ82t2JmY4sHfFkS9hrKbOLcwAS5ROod2lxQ4=) 4: 3130332e382e37382e302f32332d3233203d3e20313534343130.roa (hash: P9Eth7G1OL+Za2tm/8VNDDi8KOfqq86WA+iM3ZcUwvY=) 5: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: Srt0FvFf5bqImg/cX8u7McM7EIw1oGFbJhJQh8pZNYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:14:40:85:7a:e8:89:69:97:75:9b:82:4c:95:1c:67:11:e4:10:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Validity Not Before: Jun 13 07:33:14 2026 GMT Not After : Jun 14 07:51:14 2026 GMT Subject: CN=A71EF04BAB2EC1E26FAFF1E9D0056863C257B6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:53:df:98:25:0e:a8:d2:d1:d8:b0:b3:8f:4d: c3:eb:7e:0e:3b:06:d2:73:ee:1d:8e:73:02:13:43: c0:e2:a4:cd:e3:d3:da:45:25:16:2b:a0:71:d2:79: cf:d2:2a:6b:33:13:fb:f6:91:b0:c4:f9:ed:16:7f: 96:a6:48:e9:65:5e:24:71:89:77:14:f6:2d:70:e4: 3b:06:7f:68:e6:10:68:cc:18:16:10:da:80:2b:9d: c5:47:7d:e7:b1:65:b4:55:c3:73:59:75:ec:b8:8d: b0:45:d5:38:c3:34:8c:d5:5a:3c:f4:3e:31:22:e8: 0a:81:82:4d:bf:8d:f8:0b:cb:db:33:d0:ec:96:ac: d8:c1:f6:42:ce:f1:0c:e8:91:df:30:40:12:a7:53: 71:64:0d:15:c0:9f:08:06:b8:da:e3:bb:7e:ef:6d: 5b:39:91:0f:06:fe:ea:1f:1e:40:7f:d7:aa:c8:31: 50:3b:06:87:9a:1e:52:77:ce:bd:0e:dc:49:bc:1e: 7c:d6:02:bc:fe:94:50:97:22:38:48:70:f2:48:a0: 5a:96:0e:33:f0:65:2f:23:b8:91:54:a2:0f:bc:b6: 40:ae:44:18:90:58:c5:67:61:79:7e:e1:03:da:01: f8:cd:e1:86:69:80:2c:7d:63:c5:cb:2a:6f:7e:68: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1E:F0:4B:AB:2E:C1:E2:6F:AF:F1:E9:D0:05:68:63:C2:57:B6:E1 X509v3 Authority Key Identifier: keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2b:bc:fc:9d:0c:6a:8a:b7:f0:c8:94:f3:94:15:b0:96:34: 42:1b:27:62:df:c3:e6:d5:2b:68:bf:1a:cf:b5:92:ee:1a:e9: 74:3a:fc:99:98:51:a4:b4:d2:bf:a9:fc:03:c0:a4:2e:3c:f1: 07:b3:83:8a:4a:e6:56:45:61:9b:65:de:5c:29:c3:0b:7c:85: 4f:a9:bf:8e:ca:5d:5b:08:38:20:16:b9:72:03:79:fe:1c:3e: 11:27:b1:4e:d7:a8:49:dc:a6:72:f0:d4:9f:99:7e:b8:f7:cf: 4c:2b:8f:8f:4d:98:a3:d4:f3:07:60:a4:e1:cc:b1:93:16:2c: 3d:bb:aa:e9:f7:3b:c9:01:8b:c1:b6:33:f2:5c:5c:b9:44:40: b1:7d:7a:f7:41:b5:ca:7c:3d:a3:9c:11:da:95:a3:91:40:5a: 74:8a:55:2a:a3:12:0e:8b:44:ea:85:cc:16:69:6f:fb:5e:93: 31:52:89:24:cd:2b:db:60:b8:06:57:49:f2:79:81:21:1a:9f: c5:f7:82:a1:46:b0:d9:ea:d2:ac:e2:36:fe:f2:6e:60:09:d0: cf:68:13:58:5a:1b:89:68:ea:ec:bc:de:2b:1e:c0:00:46:a9: 2e:d9:42:89:e4:50:58:a6:25:15:be:ee:d3:3f:b7:8e:4b:7b: 4c:5d:0e:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxRAhXroiWmXdZuCTJUcZxHkECkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZG MEU0QjNFNDAeFw0yNjA2MTMwNzMzMTRaFw0yNjA2MTQwNzUxMTRaMDMxMTAvBgNV BAMTKEE3MUVGMDRCQUIyRUMxRTI2RkFGRjFFOUQwMDU2ODYzQzI1N0I2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXU9+YJQ6o0tHYsLOPTcPrfg47 BtJz7h2OcwITQ8DipM3j09pFJRYroHHSec/SKmszE/v2kbDE+e0Wf5amSOllXiRx iXcU9i1w5DsGf2jmEGjMGBYQ2oArncVHfeexZbRVw3NZdey4jbBF1TjDNIzVWjz0 PjEi6AqBgk2/jfgLy9sz0OyWrNjB9kLO8Qzokd8wQBKnU3FkDRXAnwgGuNrju37v bVs5kQ8G/uofHkB/16rIMVA7BoeaHlJ3zr0O3Em8HnzWArz+lFCXIjhIcPJIoFqW DjPwZS8juJFUog+8tkCuRBiQWMVnYXl+4QPaAfjN4YZpgCx9Y8XLKm9+aHmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpx7wS6suweJvr/Hp0AVoY8JXtuEwHwYDVR0j BBgwFoAU/HHUYjFvMDdRrg7gFylA7/Dks+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQwZTBkZWEtNWY5Yi00MjVjLTgyY2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIz MTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZGMEU0QjNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzcxRDQ2MjMxNkYzMDM3NTFBRTBFRTAxNzI5NDBFRkYwRTRC M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQw RUZGMEU0QjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0rvPydDGqKt/DIlPOUFbCWNEIbJ2Lfw+bV K2i/Gs+1ku4a6XQ6/JmYUaS00r+p/APApC488Qezg4pK5lZFYZtl3lwpwwt8hU+p v47KXVsIOCAWuXIDef4cPhEnsU7XqEncpnLw1J+Zfrj3z0wrj49NmKPU8wdgpOHM sZMWLD27qun3O8kBi8G2M/JcXLlEQLF9evdBtcp8PaOcEdqVo5FAWnSKVSqjEg6L ROqFzBZpb/tekzFSiSTNK9tguAZXSfJ5gSEan8X3gqFGsNnq0qziNv7ybmAJ0M9o E1haG4lo6uy83isewABGqS7ZQonkUFimJRW+7tM/t45Le0xdDno= -----END CERTIFICATE-----Generated at Sat Jun 13 17:15:52 2026 by rpki-client