$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft (raw, json) Hash identifier: CS1AyY7Z/M4Se8kcb3i2d4wRndCt4AHjSGE6Ew1z3CA= Subject key identifier: 76:06:AF:FD:C9:A0:39:64:63:05:58:D5:33:97:67:85:6F:BB:AF:AB Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Certificate issuer: /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Certificate serial: 5D6221207958C01521871C99F9FF249EEDEF213F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:21:08 +0000 Manifest this update: Thu 23 Jul 2026 21:16:08 +0000 Manifest next update: Fri 24 Jul 2026 23:01:08 +0000 Files and hashes: 1: 3130332e382e37382e302f32332d3233203d3e20313534343130.roa (hash: P9Eth7G1OL+Za2tm/8VNDDi8KOfqq86WA+iM3ZcUwvY=) 2: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: Srt0FvFf5bqImg/cX8u7McM7EIw1oGFbJhJQh8pZNYo=) 3: 3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa (hash: 7wx8IAofLqMlKmXE45n8YAYtVPHwwQlQVJ0MMEECbVI=) 4: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: PMU/EM6l42dAHb1GMvcVAgdYpb2lZO1+JcKqZaQY9b0=) 5: FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl (hash: BdiI3V3rTj6GxLpT7pwclLEM612OpZm2LHHfEvddMX0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:62:21:20:79:58:c0:15:21:87:1c:99:f9:ff:24:9e:ed:ef:21:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Validity Not Before: Jul 23 21:16:08 2026 GMT Not After : Jul 24 23:01:08 2026 GMT Subject: CN=7606AFFDC9A03964630558D5339767856FBBAFAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:1c:61:7a:15:32:bf:53:88:8a:c7:68:14: cd:cc:d3:d4:3c:77:d5:56:7d:a6:b9:c4:2e:be:8a: 6b:97:ef:a3:31:7a:00:43:c5:b9:6e:02:49:21:e1: d4:af:37:4b:37:ba:3f:42:00:b7:bc:91:0e:24:2e: f3:9a:39:c2:85:38:55:77:42:55:e7:a0:a3:1a:08: 75:39:ce:e1:9c:68:6d:76:31:e7:6b:63:76:aa:9a: b1:58:bf:4a:9d:bf:6d:fc:07:61:d0:4e:8d:f7:fd: ff:10:46:b1:e2:ae:9e:78:dc:d4:99:3c:bb:a1:c6: 84:13:53:c8:74:bd:48:cc:a3:e8:18:64:d2:e2:23: 28:61:50:18:d4:5f:03:f0:49:25:b0:c5:44:a5:e8: 16:ee:75:08:79:2f:01:29:e0:07:cf:6e:56:f0:e9: c6:ba:cf:33:bc:85:a4:b1:3d:83:62:be:d2:40:55: cc:4f:d5:32:fb:f3:46:0f:13:34:84:06:99:93:12: 75:4f:7e:1b:47:88:47:5f:04:0b:43:16:eb:df:db: 03:80:f8:25:4e:37:05:f1:ba:8d:81:84:33:90:a4: 27:05:a4:5f:44:e0:9a:b9:c1:fc:75:87:f2:0d:b0: e7:13:28:4e:bf:e2:c4:3d:8d:29:c8:a0:c6:8d:a1: c7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:06:AF:FD:C9:A0:39:64:63:05:58:D5:33:97:67:85:6F:BB:AF:AB X509v3 Authority Key Identifier: keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:82:e8:be:6c:fa:d5:ed:27:cb:49:1e:c6:c5:be:2c:fe:09: 57:4b:45:27:a3:b9:2d:b2:44:ac:6c:be:23:d4:ee:e2:f5:d8: d7:2d:be:75:e4:8e:67:93:73:28:24:ee:f5:0d:b7:f1:55:21: e3:09:d2:36:54:61:d4:89:fd:1b:58:0d:f5:7a:c5:77:13:47: 69:4d:14:b8:16:91:de:9d:0d:b3:13:8c:5d:13:ce:56:75:da: a2:30:2a:cd:56:db:45:69:eb:4c:23:32:cf:d6:5f:f2:fd:ad: 0a:8b:65:38:ba:df:b3:16:3e:38:86:cf:e7:79:45:31:00:b4: 91:93:29:da:fc:2e:60:c6:46:16:14:0f:ef:57:55:40:93:17: 39:85:36:a2:56:67:90:63:c1:c8:1f:3b:22:e4:ae:ac:8d:57: c7:39:60:74:40:39:97:0b:4e:49:ed:77:5e:0e:f1:3f:c3:b4: 89:68:33:9b:47:af:69:6f:ab:40:fb:b1:be:6e:58:a8:d8:98: 21:42:fb:2e:57:46:e1:71:c8:e6:cf:e1:32:14:cc:f1:34:e8: 37:4c:f0:0f:bb:74:07:7f:f1:8c:a9:54:be:00:35:f8:1c:f3: 07:c8:0f:63:0b:5f:cd:8c:bb:36:72:fd:ff:cc:c8:f7:1c:72: ed:dd:58:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWIhIHlYwBUhhxyZ+f8knu3vIT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZG MEU0QjNFNDAeFw0yNjA3MjMyMTE2MDhaFw0yNjA3MjQyMzAxMDhaMDMxMTAvBgNV BAMTKDc2MDZBRkZEQzlBMDM5NjQ2MzA1NThENTMzOTc2Nzg1NkZCQkFGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPxxhehUyv1OIisdoFM3M09Q8 d9VWfaa5xC6+imuX76MxegBDxbluAkkh4dSvN0s3uj9CALe8kQ4kLvOaOcKFOFV3 QlXnoKMaCHU5zuGcaG12MedrY3aqmrFYv0qdv238B2HQTo33/f8QRrHirp543NSZ PLuhxoQTU8h0vUjMo+gYZNLiIyhhUBjUXwPwSSWwxUSl6BbudQh5LwEp4AfPblbw 6ca6zzO8haSxPYNivtJAVcxP1TL780YPEzSEBpmTEnVPfhtHiEdfBAtDFuvf2wOA +CVONwXxuo2BhDOQpCcFpF9E4Jq5wfx1h/INsOcTKE6/4sQ9jSnIoMaNocdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdgav/cmgOWRjBVjVM5dnhW+7r6swHwYDVR0j BBgwFoAU/HHUYjFvMDdRrg7gFylA7/Dks+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQwZTBkZWEtNWY5Yi00MjVjLTgyY2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIz MTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZGMEU0QjNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzcxRDQ2MjMxNkYzMDM3NTFBRTBFRTAxNzI5NDBFRkYwRTRC M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQw RUZGMEU0QjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiC6L5s+tXtJ8tJHsbFviz+CVdLRSejuS2y RKxsviPU7uL12NctvnXkjmeTcygk7vUNt/FVIeMJ0jZUYdSJ/RtYDfV6xXcTR2lN FLgWkd6dDbMTjF0TzlZ12qIwKs1W20Vp60wjMs/WX/L9rQqLZTi637MWPjiGz+d5 RTEAtJGTKdr8LmDGRhYUD+9XVUCTFzmFNqJWZ5BjwcgfOyLkrqyNV8c5YHRAOZcL Tkntd14O8T/DtIloM5tHr2lvq0D7sb5uWKjYmCFC+y5XRuFxyObP4TIUzPE06DdM 8A+7dAd/8YypVL4ANfgc8wfID2MLX82MuzZy/f/MyPcccu3dWB0= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:36 2026 by rpki-client