$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft File: FAF852347432F9918D1450C78A1EC83C3599937A.mft (raw, json) Hash identifier: /Huv76xXF6AR5a4tN97VIjeWFqUI4WFsWz3PEpmWSS8= Subject key identifier: A2:EC:FF:F9:C4:E0:D1:A9:4B:CF:D7:FC:EB:13:28:BD:EB:59:1E:DE Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 5DE14888D5F2A553FB267C1B2F74ED8D1B1D6FCB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 13:02:16 +0000 Manifest this update: Wed 23 Sep 2026 12:57:16 +0000 Manifest next update: Thu 24 Sep 2026 15:18:16 +0000 Files and hashes: 1: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: yw71sEyG6SYVV0OrPV1gsKYKQVEpFjzFii37SAAB9FU=) 2: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc=) 3: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: cODmeerLR567ao+7Fcrm0HEn3E2rcMUDte7vapcxFDQ=) 4: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: UzvqFPsUw2UDPZr/Tb1I0DK7ahyAgNpcOMHRIjrwBD4=) 5: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: YIhkZGCrEo7q6dhmARTKbRHKotzBRbwB1hBqlD6N5YU=) 6: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=) 7: FAF852347432F9918D1450C78A1EC83C3599937A.crl (hash: fNruzHVo0TOxsv2dPlqqQz/8C1+sT35K4nHfAW0LsnQ=) 8: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=) 9: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e1:48:88:d5:f2:a5:53:fb:26:7c:1b:2f:74:ed:8d:1b:1d:6f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: Sep 23 12:57:16 2026 GMT Not After : Sep 24 15:18:16 2026 GMT Subject: CN=A2ECFFF9C4E0D1A94BCFD7FCEB1328BDEB591EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:ca:eb:6f:11:22:67:58:83:6d:c6:9d:5f: a0:de:ea:b3:d8:0c:cc:fd:a2:fa:d4:a0:2b:ed:37: 14:77:32:60:96:b1:f7:0e:97:49:f3:72:03:b6:8c: e8:a4:a9:a3:19:ff:09:8e:e9:24:89:d8:7b:f0:b4: 96:f0:d9:cc:54:00:f4:9d:ca:0c:3a:e6:ed:b4:ac: bb:d7:55:eb:88:9f:22:18:e4:2f:cb:7c:50:42:91: 13:13:9e:21:ea:ba:b9:06:47:3c:89:cb:95:61:ca: 7b:be:ec:ce:68:08:b0:c9:c9:6d:ef:8d:62:24:f6: da:f5:4d:d9:6e:ae:72:35:6e:23:61:81:72:8a:98: 95:d7:07:13:88:5a:93:36:bd:b7:e4:0a:7a:a2:fd: 52:a5:ea:98:94:98:14:d5:da:97:e2:9f:ab:95:8f: 13:e6:01:75:7f:32:a3:31:33:c7:63:8c:81:2b:b2: 87:f4:51:00:2d:ba:8c:05:27:5e:89:70:ce:05:a4: 42:b8:6d:c2:82:09:79:fb:9c:ec:08:7f:0a:94:14: e7:0e:9d:1a:ca:88:75:6a:1b:53:7f:1b:ea:ef:68: b6:53:dd:83:39:af:9f:0d:9d:2f:89:b4:47:9d:bf: 8c:01:b7:c9:80:59:11:30:69:94:75:d0:67:ae:85: 0f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EC:FF:F9:C4:E0:D1:A9:4B:CF:D7:FC:EB:13:28:BD:EB:59:1E:DE X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1e:15:6d:49:c9:94:05:e3:32:d4:79:75:b5:6a:88:b3:3c: ce:d0:fd:5b:6f:6b:df:ec:1c:55:25:94:52:65:53:33:2c:27: c1:1f:fd:f3:39:6c:7e:47:74:4f:29:f3:9d:97:a4:13:6e:ff: a2:64:69:ea:3f:06:e8:60:a4:27:66:82:57:f0:f1:7b:90:6f: 36:ad:e0:f1:b6:c4:62:5c:ca:41:96:d8:8d:d7:76:8f:40:64: 61:88:b8:5e:4b:88:11:0f:0d:ea:3c:c4:05:e4:a9:d3:14:21: dc:c8:51:91:99:26:93:99:eb:10:4c:ab:f4:0d:f8:60:e2:ab: f4:f6:6f:99:7a:24:11:fe:88:4d:17:90:34:63:19:ef:58:ac: 27:3b:19:de:23:1c:6e:39:3d:d9:13:bb:99:28:de:6d:64:44: e6:87:92:96:68:88:f5:cb:be:f8:89:58:2f:33:4d:60:4c:12: 60:bc:43:a5:cc:3b:c0:cf:b0:4a:f8:09:aa:cf:05:9a:2f:e2: 71:f2:5a:b3:45:73:19:2e:8f:65:e8:9a:1a:18:dc:73:d5:fd: f5:70:3f:bb:b6:74:a5:55:19:ba:58:ce:56:24:32:6b:a9:00: b2:6c:63:87:82:45:7e:94:c2:25:88:e0:d8:ec:05:26:41:f2: 04:d6:0c:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeFIiNXypVP7JnwbL3TtjRsdb8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjA5MjMxMjU3MTZaFw0yNjA5MjQxNTE4MTZaMDMxMTAvBgNV BAMTKEEyRUNGRkY5QzRFMEQxQTk0QkNGRDdGQ0VCMTMyOEJERUI1OTFFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2srrbxEiZ1iDbcadX6De6rPY DMz9ovrUoCvtNxR3MmCWsfcOl0nzcgO2jOikqaMZ/wmO6SSJ2HvwtJbw2cxUAPSd ygw65u20rLvXVeuInyIY5C/LfFBCkRMTniHqurkGRzyJy5Vhynu+7M5oCLDJyW3v jWIk9tr1TdlurnI1biNhgXKKmJXXBxOIWpM2vbfkCnqi/VKl6piUmBTV2pfin6uV jxPmAXV/MqMxM8djjIErsof0UQAtuowFJ16JcM4FpEK4bcKCCXn7nOwIfwqUFOcO nRrKiHVqG1N/G+rvaLZT3YM5r58NnS+JtEedv4wBt8mAWREwaZR10GeuhQ91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUouz/+cTg0alLz9f86xMovetZHt4wHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4 M0MzNTk5OTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4eFW1JyZQF4zLUeXW1aoizPM7Q/Vtva9/s HFUllFJlUzMsJ8Ef/fM5bH5HdE8p852XpBNu/6Jkaeo/BuhgpCdmglfw8XuQbzat 4PG2xGJcykGW2I3Xdo9AZGGIuF5LiBEPDeo8xAXkqdMUIdzIUZGZJpOZ6xBMq/QN +GDiq/T2b5l6JBH+iE0XkDRjGe9YrCc7Gd4jHG45PdkTu5ko3m1kROaHkpZoiPXL vviJWC8zTWBMEmC8Q6XMO8DPsEr4CarPBZov4nHyWrNFcxkuj2XomhoY3HPV/fVw P7u2dKVVGbpYzlYkMmupALJsY4eCRX6UwiWI4NjsBSZB8gTWDKw= -----END CERTIFICATE-----Generated at Thu Sep 24 03:51:04 2026 by rpki-client