$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft File: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft (raw, json) Hash identifier: XSpcBdb4Yf7eWpadn6Ta6SBmgGPO53eG3KJWOeARtNM= Subject key identifier: 37:18:57:C0:39:7E:C5:10:C9:AB:10:8C:22:9C:38:FC:C3:2E:98:69 Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 Certificate issuer: /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Certificate serial: 43F376213049F978CDE261366632D5C49951A229 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:25:46 +0000 Manifest this update: Tue 12 May 2026 22:20:46 +0000 Manifest next update: Thu 14 May 2026 00:24:46 +0000 Files and hashes: 1: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: p8N00vRWvDoAwmvXOvK2uKQEKFr0HDo7546r1yOC14c=) 2: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=) 3: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: 6SppfkF8eVpsbv3lpYMgeui/a2ZGzOBtIUsaQRZ4g0M=) 4: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl (hash: w9idx/KtaZ8adVs2qvCjGXqjRxXYuEO1EWu1UYfyZsU=) 5: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: HJowqMt9szakFuZQV92I+RS0KrHeimMD9wrjjcADKbo=) 6: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: kXpbv8peYzzifLMXe3GcVqAoAy/+GcDR8wOc/Xv+1Rk=) 7: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: wkfJ8UPGVAxOk1V5VxqfOzTwHiofU6GLNqQzYRBk1vQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f3:76:21:30:49:f9:78:cd:e2:61:36:66:32:d5:c4:99:51:a2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Validity Not Before: May 12 22:20:46 2026 GMT Not After : May 14 00:24:46 2026 GMT Subject: CN=371857C0397EC510C9AB108C229C38FCC32E9869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:d3:a0:18:3f:b3:07:09:c0:d5:39:bb:cd: 8e:a8:e1:5d:64:3b:98:98:63:4e:45:5f:e5:a1:51: fe:ca:db:d0:f8:96:41:7a:30:12:b6:b6:d7:b1:1c: d8:be:bc:7f:de:64:fa:21:aa:c0:16:45:64:48:77: 28:a5:24:8a:22:d8:86:61:d0:53:a0:50:a7:fb:7c: 8a:13:fd:3f:0b:a5:ca:fb:f9:55:de:e3:d7:ea:66: 73:25:fa:fd:6e:60:d7:0e:fa:4a:81:77:0a:8a:8c: 7f:08:d3:79:af:c6:f1:0f:51:a5:78:17:74:5b:8e: b0:32:c5:1a:ef:20:aa:5f:33:9a:04:f8:23:c2:5f: b7:7a:9a:b3:b6:d5:5f:70:e0:94:cf:73:4b:85:63: da:8d:11:19:bf:79:7b:2c:ca:d2:f5:ea:ca:10:ee: 5a:1e:ab:d4:c0:28:40:18:4d:bc:86:1b:00:84:0b: 5a:20:0c:3e:93:16:bf:4f:b2:c6:79:5f:4c:37:cb: 84:4c:98:85:f9:d3:22:4b:0a:2b:c6:7a:03:aa:56: 50:e7:18:15:b1:1b:a4:a6:fb:f0:bd:6e:7c:c1:22: 9a:18:66:42:39:3c:cf:b8:4d:15:62:6e:c2:4a:5b: ab:c3:2f:04:2c:5d:1a:52:2b:28:63:cb:0f:93:8b: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:18:57:C0:39:7E:C5:10:C9:AB:10:8C:22:9C:38:FC:C3:2E:98:69 X509v3 Authority Key Identifier: keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:3a:db:6c:00:f2:b1:c0:77:c3:66:0a:25:04:94:e7:8f:3b: 3b:20:c3:21:5a:60:62:7f:b1:20:1c:51:04:54:b1:db:87:61: 7e:03:8c:0c:51:64:fe:e3:79:bb:e6:00:f8:f2:11:da:7c:86: f3:2d:6e:87:51:00:c9:58:d6:a2:0f:a4:2b:6c:48:a9:ea:1d: 95:46:f2:83:1e:82:1f:7f:4a:eb:a6:89:ac:99:96:93:4a:49: 89:6d:ca:0b:e4:48:6c:ac:7e:9b:25:27:ae:ef:de:0b:5a:bf: a6:ff:fd:73:1a:9f:be:50:da:a4:fd:30:46:d2:7e:53:da:9d: 9b:a7:04:08:1d:7d:d4:d1:ad:c2:fa:1d:06:d1:66:e0:06:fb: 8b:dd:12:6e:7b:fd:c2:f6:4a:c0:70:c6:ca:fe:a0:e4:cf:5e: 0c:c9:c3:ee:97:fd:07:2b:99:cf:4e:6b:48:76:13:b3:e0:c0: 0a:0a:b6:25:54:a0:6e:fa:b2:5b:c9:f9:db:e6:33:a3:47:a4: 9b:13:67:d7:99:bb:4b:49:b1:03:b6:b8:a4:14:b8:d7:66:a0: fa:60:5a:57:d6:36:1e:54:92:c6:8d:b8:81:87:b1:1d:cd:1f: 67:76:f4:56:83:a0:f6:39:8b:4a:e6:cb:33:42:1b:c9:73:0c: eb:5f:b4:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/N2ITBJ+XjN4mE2ZjLVxJlRoikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3 MzkzNkIwMzAeFw0yNjA1MTIyMjIwNDZaFw0yNjA1MTQwMDI0NDZaMDMxMTAvBgNV BAMTKDM3MTg1N0MwMzk3RUM1MTBDOUFCMTA4QzIyOUMzOEZDQzMyRTk4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv99OgGD+zBwnA1Tm7zY6o4V1k O5iYY05FX+WhUf7K29D4lkF6MBK2ttexHNi+vH/eZPohqsAWRWRIdyilJIoi2IZh 0FOgUKf7fIoT/T8Lpcr7+VXe49fqZnMl+v1uYNcO+kqBdwqKjH8I03mvxvEPUaV4 F3RbjrAyxRrvIKpfM5oE+CPCX7d6mrO21V9w4JTPc0uFY9qNERm/eXssytL16soQ 7loeq9TAKEAYTbyGGwCEC1ogDD6TFr9PssZ5X0w3y4RMmIX50yJLCivGegOqVlDn GBWxG6Sm+/C9bnzBIpoYZkI5PM+4TRVibsJKW6vDLwQsXRpSKyhjyw+Ti0mZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxhXwDl+xRDJqxCMIpw4/MMumGkwHwYDVR0j BBgwFoAU+gyB+osktEXj/7uRYur0P3OTawMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWVmMDg5MDAtZjJjNi00ZDA3LWI2OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4 QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3MzkzNkIwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTBDODFGQThCMjRCNDQ1RTNGRkJCOTE2MkVBRjQzRjczOTM2 QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0 M0Y3MzkzNkIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGE622wA8rHAd8NmCiUElOePOzsgwyFaYGJ/ sSAcUQRUsduHYX4DjAxRZP7jebvmAPjyEdp8hvMtbodRAMlY1qIPpCtsSKnqHZVG 8oMegh9/SuumiayZlpNKSYltygvkSGysfpslJ67v3gtav6b//XMan75Q2qT9MEbS flPanZunBAgdfdTRrcL6HQbRZuAG+4vdEm57/cL2SsBwxsr+oOTPXgzJw+6X/Qcr mc9Oa0h2E7PgwAoKtiVUoG76slvJ+dvmM6NHpJsTZ9eZu0tJsQO2uKQUuNdmoPpg WlfWNh5UksaNuIGHsR3NH2d29FaDoPY5i0rmyzNCG8lzDOtftMk= -----END CERTIFICATE-----Generated at Wed May 13 09:17:38 2026 by rpki-client