$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft File: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft (raw, json) Hash identifier: 0aNX5m4JjCk18yXnC/T48mi3H4saIcwyiOQBDbW92Uo= Subject key identifier: 00:73:F2:9C:39:12:9D:49:3B:BF:07:8D:CF:42:71:2A:6D:60:FB:A9 Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 Certificate issuer: /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Certificate serial: 5B622E2CAC2C00728359F51455BEBEF5FCB2B6E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 18:22:44 +0000 Manifest this update: Sat 26 Sep 2026 18:17:44 +0000 Manifest next update: Sun 27 Sep 2026 21:03:44 +0000 Files and hashes: 1: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: 6SppfkF8eVpsbv3lpYMgeui/a2ZGzOBtIUsaQRZ4g0M=) 2: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: HJowqMt9szakFuZQV92I+RS0KrHeimMD9wrjjcADKbo=) 3: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: kXpbv8peYzzifLMXe3GcVqAoAy/+GcDR8wOc/Xv+1Rk=) 4: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: p8N00vRWvDoAwmvXOvK2uKQEKFr0HDo7546r1yOC14c=) 5: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=) 6: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl (hash: PvU510UtIMsbbxOMICuIo3cWYO+RQ9+0leXFlrnVS44=) 7: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: wkfJ8UPGVAxOk1V5VxqfOzTwHiofU6GLNqQzYRBk1vQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:62:2e:2c:ac:2c:00:72:83:59:f5:14:55:be:be:f5:fc:b2:b6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Validity Not Before: Sep 26 18:17:44 2026 GMT Not After : Sep 27 21:03:44 2026 GMT Subject: CN=0073F29C39129D493BBF078DCF42712A6D60FBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:a7:7b:00:c4:75:7b:6c:3c:6c:25:b7:b2: d2:3e:c8:4c:3d:ee:f7:de:96:f4:75:36:c9:d5:71: 96:d7:f7:f2:3c:7d:82:ce:24:e7:e8:ad:95:05:f1: fa:4e:d8:ad:5e:d3:fd:1c:3a:b5:b9:67:79:49:ea: f4:b5:44:76:07:30:3e:d5:47:50:1f:dd:3b:86:8c: 6e:3d:88:cc:f6:d2:9e:5e:54:36:06:32:fa:8c:e9: cf:ff:81:2a:8f:fa:05:73:9f:84:7f:85:35:6b:0b: ae:ae:f4:44:3d:0a:1a:9e:41:ce:a1:c3:43:b0:a6: 1b:07:85:c6:e0:d1:e3:a9:fe:dd:49:be:3c:c4:e4: 39:8c:f3:9d:b5:db:0a:de:2d:d7:29:f6:46:fc:c7: 74:7d:84:24:71:41:cb:f9:c0:f0:ed:5e:a4:79:ec: d3:cf:1e:02:8e:85:c3:82:8d:4e:60:65:85:b2:72: 5c:a0:bb:46:02:6c:02:8a:a4:d5:a9:0e:5a:fc:51: fc:8b:6b:96:d5:fb:67:81:bb:56:5f:f0:95:cf:dd: f8:33:da:42:13:5c:fb:01:7a:d9:8f:32:de:02:2e: 53:57:6a:2e:93:fe:31:6e:29:72:d7:c9:59:e1:b6: fe:e5:42:d0:86:53:df:bf:0b:6c:51:dd:a6:e5:e8: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:73:F2:9C:39:12:9D:49:3B:BF:07:8D:CF:42:71:2A:6D:60:FB:A9 X509v3 Authority Key Identifier: keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ec:8b:30:0e:df:66:cf:ed:da:9f:c8:8b:a2:d3:8b:40:1b: 41:24:bb:3e:f6:fc:08:83:24:a0:95:60:45:84:59:f0:f3:14: 46:63:f0:f1:71:8f:b9:cd:0e:ec:e0:e8:bf:a2:65:77:a8:4f: 1b:bc:4e:53:b6:65:3f:49:de:03:08:3e:a3:38:55:ed:b8:27: d6:29:1f:63:30:69:10:90:71:09:e0:24:fe:bb:84:71:e8:28: bd:24:6a:c8:59:bb:52:22:50:43:8f:5f:d0:d8:cb:89:f5:2f: e0:0b:3d:1e:c2:9c:ca:37:1f:e5:b5:5c:11:c8:83:5d:ca:64: 74:c6:ec:a8:b2:f5:17:ac:a1:c1:be:4f:9b:f4:d5:f2:43:72: ec:48:01:c4:2f:6a:b3:02:24:cd:c1:fc:c5:fe:35:fe:0d:2f: 07:f1:de:5d:8d:da:a9:31:69:fa:e9:9a:dd:ed:1b:02:23:f6: 92:a8:2a:62:4f:4d:3f:42:9d:73:f5:b9:7d:3a:20:c5:46:76: 82:fb:8d:8e:71:45:83:c0:29:a5:cf:0d:cb:37:c2:4d:77:62: f6:ac:c6:27:0a:c3:57:d3:8e:c0:e3:74:1e:81:d1:ae:ec:a1: 17:45:2e:8b:33:5f:62:ea:5e:b8:7e:1d:8a:55:f1:ee:bd:8b: 51:b2:36:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2IuLKwsAHKDWfUUVb6+9fyytukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3 MzkzNkIwMzAeFw0yNjA5MjYxODE3NDRaFw0yNjA5MjcyMTAzNDRaMDMxMTAvBgNV BAMTKDAwNzNGMjlDMzkxMjlENDkzQkJGMDc4RENGNDI3MTJBNkQ2MEZCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRKd7AMR1e2w8bCW3stI+yEw9 7vfelvR1NsnVcZbX9/I8fYLOJOforZUF8fpO2K1e0/0cOrW5Z3lJ6vS1RHYHMD7V R1Af3TuGjG49iMz20p5eVDYGMvqM6c//gSqP+gVzn4R/hTVrC66u9EQ9ChqeQc6h w0OwphsHhcbg0eOp/t1JvjzE5DmM85212wreLdcp9kb8x3R9hCRxQcv5wPDtXqR5 7NPPHgKOhcOCjU5gZYWyclygu0YCbAKKpNWpDlr8UfyLa5bV+2eBu1Zf8JXP3fgz 2kITXPsBetmPMt4CLlNXai6T/jFuKXLXyVnhtv7lQtCGU9+/C2xR3abl6KqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAHPynDkSnUk7vweNz0JxKm1g+6kwHwYDVR0j BBgwFoAU+gyB+osktEXj/7uRYur0P3OTawMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWVmMDg5MDAtZjJjNi00ZDA3LWI2OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4 QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3MzkzNkIwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTBDODFGQThCMjRCNDQ1RTNGRkJCOTE2MkVBRjQzRjczOTM2 QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0 M0Y3MzkzNkIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXsizAO32bP7dqfyIui04tAG0Ekuz72/AiD JKCVYEWEWfDzFEZj8PFxj7nNDuzg6L+iZXeoTxu8TlO2ZT9J3gMIPqM4Ve24J9Yp H2MwaRCQcQngJP67hHHoKL0kashZu1IiUEOPX9DYy4n1L+ALPR7CnMo3H+W1XBHI g13KZHTG7Kiy9ResocG+T5v01fJDcuxIAcQvarMCJM3B/MX+Nf4NLwfx3l2N2qkx afrpmt3tGwIj9pKoKmJPTT9CnXP1uX06IMVGdoL7jY5xRYPAKaXPDcs3wk13Yvas xicKw1fTjsDjdB6B0a7soRdFLoszX2LqXrh+HYpV8e69i1GyNmQ= -----END CERTIFICATE-----Generated at Sun Sep 27 04:51:32 2026 by rpki-client