$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft (raw, json) Hash identifier: DAfdd52WYBeteAkt66ZQ4Bh3pc6isKi4uavmsOS2vvU= Subject key identifier: 4D:BF:16:72:75:5E:5B:36:C4:E9:13:8E:77:0F:E1:3E:5A:DA:6C:8E Authority key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Certificate issuer: /CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Certificate serial: 6006DC5AB0AF90AD683ECA107B4855EB7801DBCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:03:29 +0000 Manifest this update: Tue 12 May 2026 23:58:29 +0000 Manifest next update: Thu 14 May 2026 03:07:29 +0000 Files and hashes: 1: 3130332e382e37382e302f32332d3233203d3e20313534343130.roa (hash: P9Eth7G1OL+Za2tm/8VNDDi8KOfqq86WA+iM3ZcUwvY=) 2: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: PMU/EM6l42dAHb1GMvcVAgdYpb2lZO1+JcKqZaQY9b0=) 3: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: Srt0FvFf5bqImg/cX8u7McM7EIw1oGFbJhJQh8pZNYo=) 4: 3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa (hash: 7wx8IAofLqMlKmXE45n8YAYtVPHwwQlQVJ0MMEECbVI=) 5: FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl (hash: KgcCN3oO/CQqXCOPd1KOpO7AdKpKT3hU0RZ75aedL9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:06:dc:5a:b0:af:90:ad:68:3e:ca:10:7b:48:55:eb:78:01:db:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Validity Not Before: May 12 23:58:29 2026 GMT Not After : May 14 03:07:29 2026 GMT Subject: CN=4DBF1672755E5B36C4E9138E770FE13E5ADA6C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:5e:bb:c0:1f:42:0d:c7:8c:33:2f:67:09: 4e:f0:fa:13:9c:d4:a4:25:08:93:63:82:70:53:63: 5e:68:c5:8a:32:b4:d0:d1:be:c7:95:de:9c:3b:6a: 7f:e0:52:45:ba:77:1c:73:f3:fc:b7:ae:20:55:9e: 8f:dc:81:93:98:58:a1:58:ff:3c:f3:ad:93:26:31: 4a:c5:29:58:6f:bd:5c:d6:d3:21:6b:4d:cb:3e:de: 81:dc:8c:03:2f:95:08:27:8c:01:7d:bb:3a:ec:36: fe:f1:9b:35:2e:1e:e9:1a:a9:33:db:a9:60:70:84: 75:66:73:58:30:d4:8e:bb:83:4f:ba:3b:22:dc:4a: c5:28:b3:25:68:31:55:c4:9f:5f:7b:22:b4:c3:aa: 4f:33:d6:c2:15:e7:26:ee:9f:ed:0b:2d:dc:d6:98: f8:5b:98:55:89:d9:34:5f:31:74:36:34:a9:5d:52: ae:89:0f:8d:bd:c1:34:70:c3:29:2e:17:58:ed:d2: 2a:55:49:f8:f7:9e:6d:5f:8b:d3:25:3f:d6:9e:db: 31:e5:f3:a8:02:3b:1a:b1:e0:ec:bf:7c:e2:b6:27: 2c:58:b5:9e:1d:97:8f:1c:b5:2a:8f:85:bf:99:ad: 54:dc:08:6d:21:d8:34:7b:b3:43:eb:6c:67:60:29: b8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BF:16:72:75:5E:5B:36:C4:E9:13:8E:77:0F:E1:3E:5A:DA:6C:8E X509v3 Authority Key Identifier: keyid:FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:06:c2:ef:cc:90:81:a8:e4:3a:40:54:9f:be:f9:a9:88:9a: 16:8b:98:01:4f:37:96:1b:f4:44:db:52:da:f6:7f:6a:5f:c1: 4e:b7:f4:99:7e:75:19:88:e6:1f:25:cf:5c:48:cc:6a:fc:42: d9:e3:9a:2d:3a:39:5d:83:73:b0:33:9e:93:b2:ea:f7:05:75: 93:01:c4:28:7f:9d:40:7c:7c:31:5e:0e:dc:a3:77:88:1a:36: f3:06:2f:59:8d:0c:c8:98:8f:a1:f6:0f:c2:fd:ed:19:07:00: 51:b7:dd:5d:2d:a4:dd:d2:b7:45:fb:9f:1d:81:9d:e8:0b:75: 02:d2:70:e6:67:5c:b9:f0:aa:d7:26:04:c6:bc:d7:58:0e:2b: a0:2a:e2:fc:62:53:09:47:95:25:20:10:b6:8b:d5:12:50:2c: 46:c5:d7:ca:74:ed:e9:a0:5c:be:e8:71:d5:74:15:1e:3b:27: a5:ed:33:dd:52:45:7e:be:d1:df:0b:86:f1:63:5f:59:63:17: 7b:1d:aa:29:94:f9:37:80:70:c9:07:e2:b9:40:b0:5f:d1:5b: c6:5d:43:5a:cc:a1:5e:9b:5f:64:55:b8:d9:b2:35:d7:30:f1: 18:a8:3b:c5:e9:95:d3:4b:b1:6b:57:09:c3:b6:44:a8:d9:8d: dc:22:b4:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYAbcWrCvkK1oPsoQe0hV63gB280wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZG MEU0QjNFNDAeFw0yNjA1MTIyMzU4MjlaFw0yNjA1MTQwMzA3MjlaMDMxMTAvBgNV BAMTKDREQkYxNjcyNzU1RTVCMzZDNEU5MTM4RTc3MEZFMTNFNUFEQTZDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUt167wB9CDceMMy9nCU7w+hOc 1KQlCJNjgnBTY15oxYoytNDRvseV3pw7an/gUkW6dxxz8/y3riBVno/cgZOYWKFY /zzzrZMmMUrFKVhvvVzW0yFrTcs+3oHcjAMvlQgnjAF9uzrsNv7xmzUuHukaqTPb qWBwhHVmc1gw1I67g0+6OyLcSsUosyVoMVXEn197IrTDqk8z1sIV5ybun+0LLdzW mPhbmFWJ2TRfMXQ2NKldUq6JD429wTRwwykuF1jt0ipVSfj3nm1fi9MlP9ae2zHl 86gCOxqx4Oy/fOK2JyxYtZ4dl48ctSqPhb+ZrVTcCG0h2DR7s0PrbGdgKbijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTb8WcnVeWzbE6ROOdw/hPlrabI4wHwYDVR0j BBgwFoAU/HHUYjFvMDdRrg7gFylA7/Dks+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQwZTBkZWEtNWY5Yi00MjVjLTgyY2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIz MTZGMzAzNzUxQUUwRUUwMTcyOTQwRUZGMEU0QjNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQzcxRDQ2MjMxNkYzMDM3NTFBRTBFRTAxNzI5NDBFRkYwRTRC M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvRkM3MUQ0NjIzMTZGMzAzNzUxQUUwRUUwMTcyOTQw RUZGMEU0QjNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIGwu/MkIGo5DpAVJ+++amImhaLmAFPN5Yb 9ETbUtr2f2pfwU639Jl+dRmI5h8lz1xIzGr8Qtnjmi06OV2Dc7AznpOy6vcFdZMB xCh/nUB8fDFeDtyjd4gaNvMGL1mNDMiYj6H2D8L97RkHAFG33V0tpN3St0X7nx2B negLdQLScOZnXLnwqtcmBMa811gOK6Aq4vxiUwlHlSUgELaL1RJQLEbF18p07emg XL7ocdV0FR47J6XtM91SRX6+0d8LhvFjX1ljF3sdqimU+TeAcMkH4rlAsF/RW8Zd Q1rMoV6bX2RVuNmyNdcw8RioO8XpldNLsWtXCcO2RKjZjdwitOc= -----END CERTIFICATE-----Generated at Wed May 13 02:47:21 2026 by rpki-client