$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft File: FAF852347432F9918D1450C78A1EC83C3599937A.mft (raw, json) Hash identifier: kXwLwsNgtlDd7fYPgZGZJD18p6Io3JWXU9w5j7VCUeA= Subject key identifier: DE:A6:EB:18:E6:7C:32:63:1D:45:FC:FF:8C:40:1D:36:6E:51:AD:A4 Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 6F3CBEAA439525C84AB794AF35761DFB2BC768AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:08:28 +0000 Manifest this update: Tue 12 May 2026 21:03:28 +0000 Manifest next update: Wed 13 May 2026 23:20:28 +0000 Files and hashes: 1: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=) 2: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: UzvqFPsUw2UDPZr/Tb1I0DK7ahyAgNpcOMHRIjrwBD4=) 3: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: cODmeerLR567ao+7Fcrm0HEn3E2rcMUDte7vapcxFDQ=) 4: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=) 5: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc=) 6: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=) 7: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: yw71sEyG6SYVV0OrPV1gsKYKQVEpFjzFii37SAAB9FU=) 8: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: YIhkZGCrEo7q6dhmARTKbRHKotzBRbwB1hBqlD6N5YU=) 9: FAF852347432F9918D1450C78A1EC83C3599937A.crl (hash: rYUnbagzfzanWvFilaxofk9N1imp2/9uS/vfzXYA394=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3c:be:aa:43:95:25:c8:4a:b7:94:af:35:76:1d:fb:2b:c7:68:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: May 12 21:03:28 2026 GMT Not After : May 13 23:20:28 2026 GMT Subject: CN=DEA6EB18E67C32631D45FCFF8C401D366E51ADA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8c:9d:e0:e0:c5:3a:51:8f:64:bd:4e:8b:2a: 3c:97:6b:0c:39:8f:df:8c:36:cf:9a:65:9f:22:f6: 65:58:45:80:13:3d:8b:fd:9e:08:a1:f2:b7:1f:2f: 11:e0:2c:a2:10:fc:b8:6b:41:c1:3a:a6:6e:af:14: b9:67:a4:29:cc:cc:71:76:67:c3:44:6b:1a:a4:73: 53:a6:f1:e1:3d:46:f6:3c:e5:d6:25:d5:18:1d:5b: 28:27:1c:00:7a:57:cc:b3:9d:f1:74:f8:59:a4:1c: 15:4f:04:8a:58:69:f4:b4:85:3e:01:5c:63:40:cb: da:fb:44:61:a8:a8:d5:89:33:41:de:26:4d:bf:18: bb:e2:07:b7:f0:ca:a4:cf:06:2a:a6:78:4f:c3:03: b3:c3:45:9f:d1:f1:da:76:3d:bf:da:29:f2:44:8c: cd:f1:1b:91:ce:83:40:7f:89:1a:c9:a6:dc:54:ef: ee:64:a1:8b:68:32:0a:7e:50:df:c6:8f:05:e4:a4: 65:a6:d6:cd:e3:5d:4b:5f:96:bf:b7:40:4a:44:42: ea:72:37:dc:e9:04:a1:34:9a:f4:56:36:76:5c:92: 19:a5:4e:7f:ac:dd:8c:6b:3e:b1:23:0b:be:ac:c8: 76:9b:05:d0:77:88:8b:81:42:ae:11:6b:3d:7f:78: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A6:EB:18:E6:7C:32:63:1D:45:FC:FF:8C:40:1D:36:6E:51:AD:A4 X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:23:ae:60:32:73:df:2c:75:09:9f:37:94:aa:c7:8c:e0:b2: 1a:5c:9a:8d:73:78:a9:ac:76:5a:61:2c:44:36:5f:77:75:3d: 46:eb:f7:7e:70:2d:ab:b7:56:b1:ad:a2:d3:cb:2c:a7:7f:e6: 8a:85:8e:13:d5:46:ae:17:cb:53:51:e5:a4:9b:8a:ec:01:cb: 08:bb:76:52:9b:87:91:f8:7c:a8:23:dc:d8:96:89:b4:97:2b: 13:c6:ae:be:f4:2e:99:16:a6:aa:e6:35:d4:83:db:cc:7d:ca: 44:3a:70:86:ec:4b:6f:1f:89:1a:2e:bf:f4:7d:2a:04:1b:d0: 82:28:63:38:8f:36:d1:4c:c3:da:e2:c0:d2:de:0d:6b:fa:65: 91:ee:c5:8c:91:63:a6:e1:30:a3:73:c4:c2:63:1a:65:7d:d7: a0:c5:cb:13:61:73:4c:8f:b2:32:23:ad:a0:52:d5:b6:e2:5d: f1:00:db:4d:9b:27:e8:9b:49:f6:3e:9c:31:53:fc:b3:b2:72: b0:04:11:7f:97:d7:84:b0:68:1c:70:04:c1:96:d9:10:28:f8: 9c:dc:57:17:83:84:38:57:b6:e7:ae:e1:50:73:5b:47:d0:3a: 7b:4d:be:ef:84:d8:3b:7b:4a:ec:ce:64:7b:b9:ea:3c:99:ae: 86:7f:db:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzy+qkOVJchKt5SvNXYd+yvHaKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjA1MTIyMTAzMjhaFw0yNjA1MTMyMzIwMjhaMDMxMTAvBgNV BAMTKERFQTZFQjE4RTY3QzMyNjMxRDQ1RkNGRjhDNDAxRDM2NkU1MUFEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCljJ3g4MU6UY9kvU6LKjyXaww5 j9+MNs+aZZ8i9mVYRYATPYv9ngih8rcfLxHgLKIQ/LhrQcE6pm6vFLlnpCnMzHF2 Z8NEaxqkc1Om8eE9RvY85dYl1RgdWygnHAB6V8yznfF0+FmkHBVPBIpYafS0hT4B XGNAy9r7RGGoqNWJM0HeJk2/GLviB7fwyqTPBiqmeE/DA7PDRZ/R8dp2Pb/aKfJE jM3xG5HOg0B/iRrJptxU7+5koYtoMgp+UN/GjwXkpGWm1s3jXUtflr+3QEpEQupy N9zpBKE0mvRWNnZckhmlTn+s3YxrPrEjC76syHabBdB3iIuBQq4Raz1/eGONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3qbrGOZ8MmMdRfz/jEAdNm5RraQwHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4 M0MzNTk5OTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsjrmAyc98sdQmfN5Sqx4zgshpcmo1zeKms dlphLEQ2X3d1PUbr935wLau3VrGtotPLLKd/5oqFjhPVRq4Xy1NR5aSbiuwBywi7 dlKbh5H4fKgj3NiWibSXKxPGrr70LpkWpqrmNdSD28x9ykQ6cIbsS28fiRouv/R9 KgQb0IIoYziPNtFMw9riwNLeDWv6ZZHuxYyRY6bhMKNzxMJjGmV916DFyxNhc0yP sjIjraBS1bbiXfEA202bJ+ibSfY+nDFT/LOycrAEEX+X14SwaBxwBMGW2RAo+Jzc VxeDhDhXtueu4VBzW0fQOntNvu+E2Dt7SuzOZHu56jyZroZ/23Y= -----END CERTIFICATE-----Generated at Wed May 13 01:35:40 2026 by rpki-client