$ rpki-client -vvf rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft File: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft (raw, json) Hash identifier: blhhGCLtQy7SNXlOqwxP9FTh8OPU3nC9rLz5J6+FrsE= Subject key identifier: FC:85:AF:6B:6D:22:1A:60:48:7B:77:09:C9:76:63:5B:3E:5D:C5:F1 Authority key identifier: 1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC Certificate issuer: /CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Certificate serial: 13725D736EACB15CD2B9186EFB119E5291ADBB32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:10:40 +0000 Manifest this update: Tue 12 May 2026 16:05:40 +0000 Manifest next update: Wed 13 May 2026 17:37:40 +0000 Files and hashes: 1: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: YhKAzrow8fDAadjaSnduhgqC89vTvIB1S39dbE3C1og=) 2: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: b/v/p4XXRhwRyIRQmWyoUAD/7oSBMCFky65Xuz73r7o=) 3: 1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl (hash: v61HzHSUarXrTqr/Gtj6DQU//Er/qOKDrtxoWcXkqEM=) 4: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: NOyjBT0zFszgxATvStbBfl8IjAdIOfkN8ppEqeVA78E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:72:5d:73:6e:ac:b1:5c:d2:b9:18:6e:fb:11:9e:52:91:ad:bb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD6F608068A56B2BA5CAD5589512D21D982FDC Validity Not Before: May 12 16:05:40 2026 GMT Not After : May 13 17:37:40 2026 GMT Subject: CN=FC85AF6B6D221A60487B7709C976635B3E5DC5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:f6:e3:e4:e4:fa:2d:b9:cf:2d:95:17:3d: b3:5c:39:24:e3:9d:57:c7:a7:b9:b0:23:00:67:72: a0:8d:38:aa:16:c9:92:6a:56:3b:fc:60:cb:d6:18: 3c:6d:93:4a:01:65:9d:b2:9c:4c:14:f3:c9:6d:d7: 5c:b7:53:0b:55:74:ea:3b:98:da:bd:1a:4d:69:6e: 90:ca:2e:17:6c:03:76:fe:52:c6:4d:22:89:af:b0: 32:bf:b6:00:de:56:83:b3:ea:67:07:9b:e9:88:8d: 0d:ef:26:55:32:ed:bc:bf:94:f1:df:ec:f5:7b:50: ce:7f:87:5e:f1:71:47:c2:7f:13:98:ca:2c:63:9b: ff:b2:cf:5f:7a:bf:f9:17:8a:ba:c9:bb:a7:31:7d: c6:a2:e3:f3:f5:99:5e:6e:cc:8a:0e:7c:57:aa:23: cb:70:d4:b9:d6:6e:43:65:e8:35:b9:cc:7f:77:72: 6d:5e:4d:48:13:4b:cc:24:5c:08:b5:94:f7:45:53: 8c:e8:b2:ec:b5:96:5b:78:7a:17:b2:b1:b0:b3:0e: fb:e9:72:fe:26:b5:75:2e:ba:2a:c8:bd:bf:3c:c3: 90:6e:87:dd:8e:12:d2:2c:d4:e6:3a:d8:67:17:91: e1:8f:76:43:13:2d:1e:84:7a:4a:87:08:1f:78:b8: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:85:AF:6B:6D:22:1A:60:48:7B:77:09:C9:76:63:5B:3E:5D:C5:F1 X509v3 Authority Key Identifier: keyid:1F:CD:6F:60:80:68:A5:6B:2B:A5:CA:D5:58:95:12:D2:1D:98:2F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/1FCD6F608068A56B2BA5CAD5589512D21D982FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:65:04:08:c2:88:c6:86:17:e6:1b:cb:ab:99:63:d4:fe:c8: 95:75:b6:ac:df:2f:62:e2:b7:57:d4:cc:25:f5:48:9f:67:0e: d5:87:ec:b7:1b:d4:fe:fc:d0:35:a4:59:fb:8a:3d:bc:dc:3c: 83:b7:18:58:64:82:71:13:3d:e7:63:f5:f0:af:59:b7:c6:11: 90:d5:27:57:b6:d5:3c:26:85:3c:45:56:52:b3:01:dd:54:92: b5:8b:5a:d7:1e:e4:3f:20:16:f9:cd:f6:f5:eb:e8:ba:f5:71: cb:4c:b6:35:4a:f0:b5:0f:93:30:e4:33:9f:4b:05:f9:2a:1f: 41:71:b8:ea:be:d5:58:93:e5:8b:8e:ef:49:db:6f:68:b9:19: c2:54:39:7c:7d:c4:d0:42:a2:c1:26:eb:bd:18:ba:9e:48:88: c2:f6:fd:48:5c:f0:bc:ba:71:1b:97:df:99:61:a0:1b:7f:c5: 46:df:9f:8c:ca:e3:43:03:8d:0e:c9:0a:ce:c3:e2:3b:fd:19: 35:e9:6e:b7:62:f2:70:1d:57:b2:f9:6f:85:89:9f:5a:8a:8e: 8e:42:84:56:d0:27:04:d9:89:05:bd:53:b3:15:53:6c:aa:5f: 73:90:c5:22:77:15:b4:7c:d3:28:50:00:3a:49:08:34:c5:ef: e9:5a:b5:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3Jdc26ssVzSuRhu+xGeUpGtuzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIx RDk4MkZEQzAeFw0yNjA1MTIxNjA1NDBaFw0yNjA1MTMxNzM3NDBaMDMxMTAvBgNV BAMTKEZDODVBRjZCNkQyMjFBNjA0ODdCNzcwOUM5NzY2MzVCM0U1REM1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtl/bj5OT6LbnPLZUXPbNcOSTj nVfHp7mwIwBncqCNOKoWyZJqVjv8YMvWGDxtk0oBZZ2ynEwU88lt11y3UwtVdOo7 mNq9Gk1pbpDKLhdsA3b+UsZNIomvsDK/tgDeVoOz6mcHm+mIjQ3vJlUy7by/lPHf 7PV7UM5/h17xcUfCfxOYyixjm/+yz196v/kXirrJu6cxfcai4/P1mV5uzIoOfFeq I8tw1LnWbkNl6DW5zH93cm1eTUgTS8wkXAi1lPdFU4zosuy1llt4eheysbCzDvvp cv4mtXUuuirIvb88w5Buh92OEtIs1OY62GcXkeGPdkMTLR6EekqHCB94uCZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/IWva20iGmBIe3cJyXZjWz5dxfEwHwYDVR0j BBgwFoAUH81vYIBopWsrpcrVWJUS0h2YL9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njc1MmIzYzItM2YzMC00MDQwLThiMDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4 MDY4QTU2QjJCQTVDQUQ1NTg5NTEyRDIxRDk4MkZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRkNENkY2MDgwNjhBNTZCMkJBNUNBRDU1ODk1MTJEMjFEOTgy RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvMUZDRDZGNjA4MDY4QTU2QjJCQTVDQUQ1NTg5NTEy RDIxRDk4MkZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhlBAjCiMaGF+Yby6uZY9T+yJV1tqzfL2Li t1fUzCX1SJ9nDtWH7Lcb1P780DWkWfuKPbzcPIO3GFhkgnETPedj9fCvWbfGEZDV J1e21TwmhTxFVlKzAd1UkrWLWtce5D8gFvnN9vXr6Lr1cctMtjVK8LUPkzDkM59L BfkqH0FxuOq+1ViT5YuO70nbb2i5GcJUOXx9xNBCosEm670Yup5IiML2/Uhc8Ly6 cRuX35lhoBt/xUbfn4zK40MDjQ7JCs7D4jv9GTXpbrdi8nAdV7L5b4WJn1qKjo5C hFbQJwTZiQW9U7MVU2yqX3OQxSJ3FbR80yhQADpJCDTF7+latUs= -----END CERTIFICATE-----Generated at Tue May 12 22:19:27 2026 by rpki-client