$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft File: FC1A394AF4972652D1A91AA14711525172E42585.mft (raw, json) Hash identifier: xVGaWaz3j0sco8zJC2NRD00khcAnOpOb4VfAas78PUc= Subject key identifier: B5:3B:73:92:D7:55:AA:3A:72:26:15:24:B8:EA:FA:47:D9:60:42:E4 Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 Certificate issuer: /CN=FC1A394AF4972652D1A91AA14711525172E42585 Certificate serial: 2AC13847846F6363037DA13393A508AAB759B6E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:17:06 +0000 Manifest this update: Fri 24 Jul 2026 02:12:06 +0000 Manifest next update: Sat 25 Jul 2026 02:46:06 +0000 Files and hashes: 1: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: 92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=) 2: FC1A394AF4972652D1A91AA14711525172E42585.crl (hash: drCkNwNe0Ti6Hh9oPZr4LklEyeCu2LAX4C9b9AHMgrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c1:38:47:84:6f:63:63:03:7d:a1:33:93:a5:08:aa:b7:59:b6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585 Validity Not Before: Jul 24 02:12:06 2026 GMT Not After : Jul 25 02:46:06 2026 GMT Subject: CN=B53B7392D755AA3A72261524B8EAFA47D96042E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:c5:08:5d:12:b5:3a:ac:b0:ec:d5:39:0c: 75:c9:72:9f:87:70:a3:3a:b1:9d:cd:75:e4:2e:84: 03:19:cc:93:ce:a5:19:3a:a6:00:3c:d5:57:08:5d: 59:14:38:b7:e3:6d:ea:52:e4:f4:dd:bd:02:9b:cd: 34:38:88:69:11:c3:e5:7c:13:d9:70:de:2d:09:be: c6:4c:e2:16:80:b8:c6:5e:f6:2b:38:41:1c:1c:29: e0:e5:cd:fe:b7:40:9c:a5:17:99:0e:19:26:ca:2f: c8:6e:63:6f:d6:34:40:e8:44:e6:85:f3:37:68:1d: a3:e0:ef:f4:39:b3:1a:31:6c:67:fa:c7:98:e1:dc: dc:a5:53:bc:fd:b0:a2:00:eb:7d:81:26:07:8c:6e: 03:f9:f7:0e:e0:70:80:af:0e:df:c7:0d:ca:66:62: 9c:52:4f:9c:83:de:5d:26:f7:25:dc:16:e9:c5:fc: ee:cd:9d:c0:10:32:30:d9:a8:ce:9c:c7:5d:d2:77: f5:a4:6a:a2:bd:cc:6d:8b:c9:d5:67:0e:6f:c4:c8: 75:2e:42:04:fb:04:2f:1e:20:03:e8:e3:2c:9a:29: 70:80:e2:4d:64:06:5d:f4:ce:24:59:b7:25:ea:a4: b1:81:00:86:d3:72:a7:24:53:f2:d9:aa:0f:95:91: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3B:73:92:D7:55:AA:3A:72:26:15:24:B8:EA:FA:47:D9:60:42:E4 X509v3 Authority Key Identifier: keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e2:fd:f8:9f:ba:14:90:55:de:86:a2:87:71:c6:9d:cb:cb: 2b:ed:18:cf:3f:55:86:00:2b:d4:d1:b4:fd:e4:42:32:d7:be: 44:be:08:36:32:5a:cc:81:c5:46:d2:22:ee:57:65:45:f8:21: be:a4:1e:42:cc:a3:57:c1:d0:57:b8:ab:70:3f:91:28:2a:82: 5d:d0:f3:d9:e1:87:70:a1:2b:c3:51:d5:b1:b4:d7:ce:2b:60: f2:fa:fb:a4:b9:8a:4a:55:37:2a:d5:b4:c2:a5:37:4e:08:2e: 15:a3:48:39:3e:d8:82:39:b8:8e:db:78:f1:1f:5d:ef:3a:b1: a6:8a:8c:07:ef:67:a6:3b:f2:aa:8d:dd:da:59:6c:41:a3:c9: 81:fc:8a:0c:ae:9b:68:d8:da:ee:c9:d5:7a:d6:97:6e:cd:40: f5:83:cc:16:41:7e:32:57:52:de:bf:74:40:f1:4e:e7:17:f1: d1:02:df:f8:f7:82:8e:eb:e2:32:14:52:75:63:89:be:f3:20: b9:8a:19:69:53:6f:1f:3e:96:53:9c:5c:e9:ad:7e:a4:81:64: b6:ed:92:19:7b:d6:54:64:02:12:4b:8a:24:7c:4d:10:71:28: 42:1c:87:4d:88:37:b6:7e:9e:22:b5:82:d0:72:12:79:12:19: b9:a2:91:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsE4R4RvY2MDfaEzk6UIqrdZtuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3 MkU0MjU4NTAeFw0yNjA3MjQwMjEyMDZaFw0yNjA3MjUwMjQ2MDZaMDMxMTAvBgNV BAMTKEI1M0I3MzkyRDc1NUFBM0E3MjI2MTUyNEI4RUFGQTQ3RDk2MDQyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwP8UIXRK1Oqyw7NU5DHXJcp+H cKM6sZ3NdeQuhAMZzJPOpRk6pgA81VcIXVkUOLfjbepS5PTdvQKbzTQ4iGkRw+V8 E9lw3i0JvsZM4haAuMZe9is4QRwcKeDlzf63QJylF5kOGSbKL8huY2/WNEDoROaF 8zdoHaPg7/Q5sxoxbGf6x5jh3NylU7z9sKIA632BJgeMbgP59w7gcICvDt/HDcpm YpxST5yD3l0m9yXcFunF/O7NncAQMjDZqM6cx13Sd/WkaqK9zG2LydVnDm/EyHUu QgT7BC8eIAPo4yyaKXCA4k1kBl30ziRZtyXqpLGBAIbTcqckU/LZqg+VkRYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtTtzktdVqjpyJhUkuOr6R9lgQuQwHwYDVR0j BBgwFoAU/Bo5SvSXJlLRqRqhRxFSUXLkJYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmNiZWE4MWQtODVhYy00MGE1LWE3ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFG NDk3MjY1MkQxQTkxQUExNDcxMTUyNTE3MkU0MjU4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzFBMzk0QUY0OTcyNjUyRDFBOTFBQTE0NzExNTI1MTcyRTQy NTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmNiZWE4MWQtODVhYy00MGE1LWE3 ZjUtM2ZhMzYyYjE3YmNiLzAvRkMxQTM5NEFGNDk3MjY1MkQxQTkxQUExNDcxMTUy NTE3MkU0MjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDi/fifuhSQVd6Goodxxp3LyyvtGM8/VYYA K9TRtP3kQjLXvkS+CDYyWsyBxUbSIu5XZUX4Ib6kHkLMo1fB0Fe4q3A/kSgqgl3Q 89nhh3ChK8NR1bG0184rYPL6+6S5ikpVNyrVtMKlN04ILhWjSDk+2II5uI7bePEf Xe86saaKjAfvZ6Y78qqN3dpZbEGjyYH8igyum2jY2u7J1XrWl27NQPWDzBZBfjJX Ut6/dEDxTucX8dEC3/j3go7r4jIUUnVjib7zILmKGWlTbx8+llOcXOmtfqSBZLbt khl71lRkAhJLiiR8TRBxKEIch02IN7Z+niK1gtByEnkSGbmikcw= -----END CERTIFICATE-----Generated at Fri Jul 24 17:26:57 2026 by rpki-client