$ rpki-client -vvf rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft File: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft (raw, json) Hash identifier: cDd2lGwpPsP0CfKnA4rQUM7La3NxUTwDIEjEBCPzH2M= Subject key identifier: B5:DA:58:3F:40:E3:AE:1C:E3:E4:BC:F5:3D:83:AA:41:F2:09:6A:80 Authority key identifier: FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 Certificate issuer: /CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Certificate serial: 044E6F6DD052375328A027FFEAD1869A5CA8F5C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:09:31 +0000 Manifest this update: Fri 24 Jul 2026 04:04:31 +0000 Manifest next update: Sat 25 Jul 2026 06:23:31 +0000 Files and hashes: 1: FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl (hash: h0aqpwMFQ81CMCYb8SylaPqujwN1ZOWseIC+VVHdMXE=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: /EYgr4bEX5yF2cD2wxIp6ztYlU72xJsVBSPBoR3u9Fw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:4e:6f:6d:d0:52:37:53:28:a0:27:ff:ea:d1:86:9a:5c:a8:f5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5 Validity Not Before: Jul 24 04:04:31 2026 GMT Not After : Jul 25 06:23:31 2026 GMT Subject: CN=B5DA583F40E3AE1CE3E4BCF53D83AA41F2096A80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6d:d5:28:8f:93:d5:c8:34:f2:1a:ab:35:f2: cd:95:8c:42:03:e1:cc:b5:6b:2f:92:5b:5b:aa:2a: 14:5e:f8:99:0a:77:d9:67:f9:8f:3e:03:0c:f4:24: 60:66:59:38:15:85:af:14:2d:35:2a:54:b1:8e:5b: 33:aa:f7:d6:47:e5:76:bb:48:04:4a:c6:2d:f0:4b: c6:be:4d:1f:41:93:cc:95:b0:2c:46:18:09:c3:1e: 07:07:e1:2f:25:ff:23:ac:6f:be:31:50:32:39:11: e2:67:d9:75:1e:69:b6:01:17:81:47:3f:f8:5e:02: 67:87:f3:45:39:c3:1c:c2:c7:91:fc:b4:74:24:b0: b1:79:66:5a:9c:c3:a0:1e:3c:31:cf:14:c1:15:84: 8d:cf:ad:a2:03:98:d2:f1:77:27:53:1d:c1:c2:9a: fc:5f:b3:b9:5c:12:7f:04:de:08:a9:01:0e:a7:17: ad:96:59:71:0c:b9:66:cf:76:34:fc:83:16:d4:b7: 72:80:75:f3:14:44:6f:a1:81:1b:d6:b8:3f:97:c6: 6f:a2:66:4b:b4:bf:43:62:06:54:4c:a8:d3:27:32: 3a:c2:06:4d:0a:d1:92:5c:26:19:17:6c:8d:02:ff: e8:90:73:a7:a9:6a:38:5c:6f:ca:0c:ad:84:dd:40: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DA:58:3F:40:E3:AE:1C:E3:E4:BC:F5:3D:83:AA:41:F2:09:6A:80 X509v3 Authority Key Identifier: keyid:FC:AC:CD:CF:0F:DE:B5:0F:2C:98:16:EB:C4:55:0F:78:0C:82:95:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/FCACCDCF0FDEB50F2C9816EBC4550F780C8295E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:70:ef:c3:51:58:66:e6:f8:60:2a:b6:ce:ad:ab:c0:d6:ad: 29:99:3e:91:f7:cf:c5:bb:d6:74:7c:5c:16:8f:74:15:95:2b: 08:01:3b:78:34:c2:d3:87:82:3e:e6:75:b9:b8:d1:c7:40:d4: af:6b:ac:3c:c8:7a:ba:a5:30:4d:a8:33:a1:9b:33:c7:1d:fc: 53:ae:41:65:d4:55:aa:58:1d:e8:06:e7:6f:63:b0:a1:44:4c: 1c:0a:9d:e3:11:39:7d:00:ca:e3:21:23:e9:74:83:27:bd:bd: 41:bc:50:8e:d4:b1:98:b6:ba:64:db:c2:f9:d2:9e:e8:32:33: 59:b5:ac:64:56:29:13:1a:a0:20:e7:e8:8d:ea:77:f1:9c:22: 05:e4:36:22:f5:b9:9f:2a:1f:f0:6c:d8:e4:ab:35:80:60:79: 59:53:ed:b0:f5:30:95:58:08:38:1b:b7:8a:4c:4b:a6:84:f8: 4e:06:b1:74:88:7d:f6:bb:97:b7:fd:c6:4a:28:21:f8:ec:b2: 81:cf:94:0a:f7:b9:13:55:50:9e:b2:f6:2b:d5:38:bd:0e:e8: 32:c5:a1:1d:91:ba:3a:ce:1d:2f:f7:0a:59:33:a0:57:77:cb: eb:5f:db:c9:97:74:ce:f3:b1:34:3f:c6:02:94:57:19:8e:e2: 9d:55:7e:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBE5vbdBSN1MooCf/6tGGmlyo9cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgw QzgyOTVFNTAeFw0yNjA3MjQwNDA0MzFaFw0yNjA3MjUwNjIzMzFaMDMxMTAvBgNV BAMTKEI1REE1ODNGNDBFM0FFMUNFM0U0QkNGNTNEODNBQTQxRjIwOTZBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxbdUoj5PVyDTyGqs18s2VjEID 4cy1ay+SW1uqKhRe+JkKd9ln+Y8+Awz0JGBmWTgVha8ULTUqVLGOWzOq99ZH5Xa7 SARKxi3wS8a+TR9Bk8yVsCxGGAnDHgcH4S8l/yOsb74xUDI5EeJn2XUeabYBF4FH P/heAmeH80U5wxzCx5H8tHQksLF5Zlqcw6AePDHPFMEVhI3PraIDmNLxdydTHcHC mvxfs7lcEn8E3gipAQ6nF62WWXEMuWbPdjT8gxbUt3KAdfMURG+hgRvWuD+Xxm+i Zku0v0NiBlRMqNMnMjrCBk0K0ZJcJhkXbI0C/+iQc6epajhcb8oMrYTdQPaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtdpYP0Djrhzj5Lz1PYOqQfIJaoAwHwYDVR0j BBgwFoAU/KzNzw/etQ8smBbrxFUPeAyCleUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUwZDFhYTEtNGM3Zi00NDhiLWIyYmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0Yw RkRFQjUwRjJDOTgxNkVCQzQ1NTBGNzgwQzgyOTVFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQ0FDQ0RDRjBGREVCNTBGMkM5ODE2RUJDNDU1MEY3ODBDODI5 NUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvRkNBQ0NEQ0YwRkRFQjUwRjJDOTgxNkVCQzQ1NTBG NzgwQzgyOTVFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJw78NRWGbm+GAqts6tq8DWrSmZPpH3z8W7 1nR8XBaPdBWVKwgBO3g0wtOHgj7mdbm40cdA1K9rrDzIerqlME2oM6GbM8cd/FOu QWXUVapYHegG529jsKFETBwKneMROX0AyuMhI+l0gye9vUG8UI7UsZi2umTbwvnS nugyM1m1rGRWKRMaoCDn6I3qd/GcIgXkNiL1uZ8qH/Bs2OSrNYBgeVlT7bD1MJVY CDgbt4pMS6aE+E4GsXSIffa7l7f9xkooIfjssoHPlAr3uRNVUJ6y9ivVOL0O6DLF oR2RujrOHS/3ClkzoFd3y+tf28mXdM7zsTQ/xgKUVxmO4p1VfrU= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:12 2026 by rpki-client