$ rpki-client -vvf rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft File: FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft (raw, json) Hash identifier: /HNsEeWd4nI+uJ93NttU6V8wmT7D1oTuj3hA5FGdiXY= Subject key identifier: A4:B5:9A:CC:1C:98:AA:B0:37:66:87:61:E4:B6:D4:61:8B:A6:4E:0A Authority key identifier: FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31 Certificate issuer: /CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831 Certificate serial: 24B2C4EA9E73D7D0388E5D84AACD2369A96AED08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:01:47 +0000 Manifest this update: Tue 12 May 2026 16:56:47 +0000 Manifest next update: Wed 13 May 2026 17:56:47 +0000 Files and hashes: 1: FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl (hash: TXUa+khsKI6imO6vv+DBTI/gIiJUlrQlKEj65M/2a6I=) 2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: orsjKTV02O8TMgWpMnovRo4VVZwRW9a2U4tEzVvr014=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b2:c4:ea:9e:73:d7:d0:38:8e:5d:84:aa:cd:23:69:a9:6a:ed:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831 Validity Not Before: May 12 16:56:47 2026 GMT Not After : May 13 17:56:47 2026 GMT Subject: CN=A4B59ACC1C98AAB037668761E4B6D4618BA64E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:81:cb:0a:8d:58:7d:52:3f:6d:3a:87:0a: b0:6d:b7:8a:e6:52:e3:b3:73:0f:07:a7:dc:df:ed: 72:0f:82:38:1f:74:77:af:5f:60:9e:3d:a5:5c:9d: 6a:42:60:0e:d7:16:69:d6:07:67:44:7b:5c:e3:c2: e8:89:4b:11:53:2e:9f:25:00:82:f1:da:83:05:63: 74:9a:84:d9:58:ab:db:95:da:77:31:e4:54:b4:21: 09:96:96:00:ce:69:d2:b8:4c:31:15:ce:a1:7f:c7: b1:f1:26:4a:4d:59:90:43:4e:7b:ea:87:f2:78:6f: 81:c8:2a:f8:35:b4:be:ec:1e:16:6b:7e:7f:04:61: ba:8b:1c:13:a5:d1:d2:1f:55:d0:ba:fa:52:f5:87: 87:4e:dc:c9:9a:2d:20:dc:c3:a9:55:fd:00:16:d1: 02:dd:6e:27:39:bd:fa:40:86:49:46:84:af:b8:d6: 3a:52:0a:54:69:73:59:41:e0:1c:bb:be:b6:e0:e3: 5c:07:e7:93:2d:23:9d:d0:67:ff:9e:82:48:4c:61: 97:9d:8a:ae:06:3d:f2:26:9f:f3:af:51:a8:47:b0: 43:60:ac:5a:73:6c:15:4c:da:72:15:33:ae:63:30: e0:84:ae:2f:8c:e3:b0:78:1e:04:0f:a5:6f:3d:e1: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B5:9A:CC:1C:98:AA:B0:37:66:87:61:E4:B6:D4:61:8B:A6:4E:0A X509v3 Authority Key Identifier: keyid:FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:49:6e:a6:29:f7:3a:32:35:cc:94:27:d7:9a:76:14:bf:74: 75:7b:53:8f:e2:1e:0a:d9:92:ec:1c:25:15:89:a7:18:d9:e5: 78:8b:65:0a:82:b8:7a:aa:b7:b2:b8:7d:24:1d:36:55:4e:9f: 2b:0a:cd:68:f5:d7:82:42:8d:f4:27:0e:0b:95:3a:41:a0:87: 3f:7e:9e:82:f5:cf:96:ab:d4:ae:36:eb:ee:12:fa:90:b1:f4: 47:06:f3:87:f2:bb:9c:64:17:66:49:32:55:15:94:d8:f2:5f: ec:9c:0c:5d:e5:c6:37:46:0f:0a:6e:4a:d2:60:9e:ee:32:28: 70:fe:51:a4:00:df:9e:08:73:e5:e3:cb:1b:12:4b:cf:67:ee: e8:cf:c9:d6:6c:a9:b2:20:a2:5f:98:6d:0a:c6:96:87:53:48: a9:51:bc:0a:3e:ca:a4:c0:82:41:59:3b:e7:a7:e7:b4:14:dd: 45:c4:73:70:3f:30:35:cd:71:e5:34:9a:d5:ef:8f:37:5c:d7: 8c:6b:93:dc:6f:76:0d:1b:09:f0:08:8b:09:aa:55:c3:e9:81: f1:c7:30:90:f7:43:58:99:4d:36:d6:67:72:b7:3d:52:6e:e0: b1:09:b8:5f:39:c0:9f:30:8d:d4:ba:d0:83:93:82:a5:c0:89: d6:78:b2:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLLE6p5z19A4jl2Eqs0jaalq7QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM1QjBFQTEzMUZGNjA2MDFGOUExNUUwM0FDQzI3OEND N0EyQjgzMTAeFw0yNjA1MTIxNjU2NDdaFw0yNjA1MTMxNzU2NDdaMDMxMTAvBgNV BAMTKEE0QjU5QUNDMUM5OEFBQjAzNzY2ODc2MUU0QjZENDYxOEJBNjRFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXoHLCo1YfVI/bTqHCrBtt4rm UuOzcw8Hp9zf7XIPgjgfdHevX2CePaVcnWpCYA7XFmnWB2dEe1zjwuiJSxFTLp8l AILx2oMFY3SahNlYq9uV2ncx5FS0IQmWlgDOadK4TDEVzqF/x7HxJkpNWZBDTnvq h/J4b4HIKvg1tL7sHhZrfn8EYbqLHBOl0dIfVdC6+lL1h4dO3MmaLSDcw6lV/QAW 0QLdbic5vfpAhklGhK+41jpSClRpc1lB4By7vrbg41wH55MtI53QZ/+egkhMYZed iq4GPfImn/OvUahHsENgrFpzbBVM2nIVM65jMOCEri+M47B4HgQPpW894VHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLWazByYqrA3Zodh5LbUYYumTgowHwYDVR0j BBgwFoAU/FsOoTH/YGAfmhXgOswnjMeiuDEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ZjZDJhNDItOTJiOS00MGE0LWEwYmYtMDliNjVhMzE4YjVlLzAvRkM1QjBFQTEz MUZGNjA2MDFGOUExNUUwM0FDQzI3OENDN0EyQjgzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzVCMEVBMTMxRkY2MDYwMUY5QTE1RTAzQUNDMjc4Q0M3QTJC ODMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvRkM1QjBFQTEzMUZGNjA2MDFGOUExNUUwM0FDQzI3 OENDN0EyQjgzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhJbqYp9zoyNcyUJ9eadhS/dHV7U4/iHgrZ kuwcJRWJpxjZ5XiLZQqCuHqqt7K4fSQdNlVOnysKzWj114JCjfQnDguVOkGghz9+ noL1z5ar1K426+4S+pCx9EcG84fyu5xkF2ZJMlUVlNjyX+ycDF3lxjdGDwpuStJg nu4yKHD+UaQA354Ic+XjyxsSS89n7ujPydZsqbIgol+YbQrGlodTSKlRvAo+yqTA gkFZO+en57QU3UXEc3A/MDXNceU0mtXvjzdc14xrk9xvdg0bCfAIiwmqVcPpgfHH MJD3Q1iZTTbWZ3K3PVJu4LEJuF85wJ8wjdS60IOTgqXAidZ4spc= -----END CERTIFICATE-----Generated at Wed May 13 02:41:02 2026 by rpki-client