$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft File: FAF852347432F9918D1450C78A1EC83C3599937A.mft (raw, json) Hash identifier: 3BMenYYpBOr/9fDP1VN58Qde9lxxI0yRq85f27xZ54M= Subject key identifier: 82:61:66:B5:CD:D4:B5:D2:D5:D6:4D:9A:3E:69:81:98:44:CD:01:86 Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 423FCCF98CD0658E550F0C8E2C1572B5CC0D80B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 23:18:16 +0000 Manifest this update: Thu 23 Jul 2026 23:13:16 +0000 Manifest next update: Fri 24 Jul 2026 23:44:16 +0000 Files and hashes: 1: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: YIhkZGCrEo7q6dhmARTKbRHKotzBRbwB1hBqlD6N5YU=) 2: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: cODmeerLR567ao+7Fcrm0HEn3E2rcMUDte7vapcxFDQ=) 3: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: UzvqFPsUw2UDPZr/Tb1I0DK7ahyAgNpcOMHRIjrwBD4=) 4: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=) 5: FAF852347432F9918D1450C78A1EC83C3599937A.crl (hash: ZHBPpNgqSisSNlhOJddfAqAOx3l2pNWSN70a1YGmvB8=) 6: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=) 7: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=) 8: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: yw71sEyG6SYVV0OrPV1gsKYKQVEpFjzFii37SAAB9FU=) 9: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3f:cc:f9:8c:d0:65:8e:55:0f:0c:8e:2c:15:72:b5:cc:0d:80:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: Jul 23 23:13:16 2026 GMT Not After : Jul 24 23:44:16 2026 GMT Subject: CN=826166B5CDD4B5D2D5D64D9A3E69819844CD0186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:74:cb:52:15:16:c2:7c:00:a6:84:e6:d7:ef: 98:6a:b5:9c:34:86:d5:e6:50:68:fe:74:62:7a:8c: af:85:5c:fc:47:35:46:7c:da:8c:77:67:80:07:41: 1e:61:4f:66:f1:1f:eb:53:f4:2c:8d:eb:ff:24:61: 96:29:de:4e:73:88:14:08:28:d5:cd:53:48:28:81: 0a:a2:74:30:cc:c9:ce:77:29:e2:ba:48:71:d3:69: b1:79:ef:99:77:12:0e:4d:b5:d9:73:9c:df:11:f8: 7e:7a:28:df:1e:2a:69:3d:b2:bf:63:d7:db:1b:de: 3f:ae:7f:f5:70:cb:ab:1c:13:52:80:72:17:31:58: 57:a0:44:7a:54:68:24:81:b0:3c:c2:4b:17:0f:8c: aa:44:33:37:99:65:7f:69:a4:8e:c3:3b:e4:89:2f: 9b:2c:65:1e:6b:25:99:62:ee:f8:8f:63:a5:33:5d: 2c:94:63:c2:f5:25:ee:d6:86:ea:c9:fa:52:85:c3: 9b:75:24:c2:90:54:9c:a4:b6:2a:21:71:a3:50:f3: 2a:08:95:f2:ce:2f:2f:85:98:00:70:56:3d:65:82: 5c:42:a0:67:25:0e:a5:4b:ec:2c:a2:97:5f:12:17: 96:ce:53:b8:15:cd:a2:d3:0a:dd:8c:e3:c3:32:ad: 6d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:61:66:B5:CD:D4:B5:D2:D5:D6:4D:9A:3E:69:81:98:44:CD:01:86 X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:86:b0:a8:2a:a2:39:d5:b6:28:92:1b:3d:e0:86:3e:47:55: 13:94:59:b5:07:08:bc:fc:5f:4f:52:f2:43:41:e7:6b:bc:08: 91:70:a0:22:85:74:aa:f7:3c:c0:67:00:a6:ea:93:39:cc:50: 13:6f:97:82:0f:cb:fd:a7:c8:9e:6f:46:04:0a:71:76:78:62: 1e:8f:27:5b:b0:b8:02:16:aa:0d:95:b6:15:98:07:de:ec:5b: 01:3f:38:17:d3:1f:92:a4:65:c7:a8:9e:43:29:7d:72:7a:13: 83:c6:6a:63:b3:75:3e:10:64:5d:3d:2e:05:00:4f:55:6c:b7: 62:8e:55:b7:33:18:2c:d5:be:52:ef:11:78:a2:ea:3d:4d:2b: e2:d6:df:3b:64:b3:aa:40:7c:fc:81:7a:11:f8:3d:db:e8:d9: 04:fa:d4:7a:30:ad:72:d5:2b:a1:4f:ae:96:42:72:e6:2d:ba: 7a:e3:b0:e8:d4:0c:f5:80:e5:eb:36:42:ea:5e:6e:45:de:63: 45:5e:a0:b1:a4:74:6b:fa:2c:f0:d1:69:14:f5:31:20:0c:d9: 98:6d:43:61:6e:a0:56:2b:3d:90:5f:48:7e:8f:77:9c:59:ac: 04:a0:81:71:af:31:19:0c:41:99:ed:cd:14:34:4b:b0:a3:d6: f6:26:71:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQj/M+YzQZY5VDwyOLBVytcwNgLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjA3MjMyMzEzMTZaFw0yNjA3MjQyMzQ0MTZaMDMxMTAvBgNV BAMTKDgyNjE2NkI1Q0RENEI1RDJENUQ2NEQ5QTNFNjk4MTk4NDRDRDAxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndMtSFRbCfACmhObX75hqtZw0 htXmUGj+dGJ6jK+FXPxHNUZ82ox3Z4AHQR5hT2bxH+tT9CyN6/8kYZYp3k5ziBQI KNXNU0gogQqidDDMyc53KeK6SHHTabF575l3Eg5NtdlznN8R+H56KN8eKmk9sr9j 19sb3j+uf/Vwy6scE1KAchcxWFegRHpUaCSBsDzCSxcPjKpEMzeZZX9ppI7DO+SJ L5ssZR5rJZli7viPY6UzXSyUY8L1Je7WhurJ+lKFw5t1JMKQVJyktiohcaNQ8yoI lfLOLy+FmABwVj1lglxCoGclDqVL7Cyil18SF5bOU7gVzaLTCt2M48MyrW21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgmFmtc3UtdLV1k2aPmmBmETNAYYwHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4 M0MzNTk5OTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6GsKgqojnVtiiSGz3ghj5HVROUWbUHCLz8 X09S8kNB52u8CJFwoCKFdKr3PMBnAKbqkznMUBNvl4IPy/2nyJ5vRgQKcXZ4Yh6P J1uwuAIWqg2VthWYB97sWwE/OBfTH5KkZceonkMpfXJ6E4PGamOzdT4QZF09LgUA T1Vst2KOVbczGCzVvlLvEXii6j1NK+LW3ztks6pAfPyBehH4Pdvo2QT61HowrXLV K6FPrpZCcuYtunrjsOjUDPWA5es2QupebkXeY0VeoLGkdGv6LPDRaRT1MSAM2Zht Q2FuoFYrPZBfSH6Pd5xZrASggXGvMRkMQZntzRQ0S7Cj1vYmcU0= -----END CERTIFICATE-----Generated at Fri Jul 24 11:19:32 2026 by rpki-client