$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft File: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft (raw, json) Hash identifier: uYUpaT4p7Uvb+vyc5i0W/33k3W/h7zYk5I6jZyUlZq8= Subject key identifier: 7D:83:A1:23:C0:21:EF:8E:5A:73:49:4D:DB:0A:FB:E9:AC:E4:EE:76 Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 Certificate issuer: /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Certificate serial: 4AC6562C835A64CA163B73B9ACFFFD1A3302CDD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 04:09:33 +0000 Manifest this update: Fri 24 Jul 2026 04:04:33 +0000 Manifest next update: Sat 25 Jul 2026 07:07:33 +0000 Files and hashes: 1: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=) 2: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: p8N00vRWvDoAwmvXOvK2uKQEKFr0HDo7546r1yOC14c=) 3: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: HJowqMt9szakFuZQV92I+RS0KrHeimMD9wrjjcADKbo=) 4: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl (hash: CsCmbgEmYOuxp4LKfkELAfVDVDbF8KOjhw3rEcdzwmE=) 5: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: 6SppfkF8eVpsbv3lpYMgeui/a2ZGzOBtIUsaQRZ4g0M=) 6: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: kXpbv8peYzzifLMXe3GcVqAoAy/+GcDR8wOc/Xv+1Rk=) 7: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: wkfJ8UPGVAxOk1V5VxqfOzTwHiofU6GLNqQzYRBk1vQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c6:56:2c:83:5a:64:ca:16:3b:73:b9:ac:ff:fd:1a:33:02:cd:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Validity Not Before: Jul 24 04:04:33 2026 GMT Not After : Jul 25 07:07:33 2026 GMT Subject: CN=7D83A123C021EF8E5A73494DDB0AFBE9ACE4EE76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:1d:1f:42:98:37:3e:2f:a5:98:72:b9:d1: 0c:a2:40:b4:44:65:b8:29:6b:54:0d:f9:43:19:e7: e1:6d:83:17:2e:1b:91:99:89:71:6d:94:71:70:5f: 28:78:08:f5:1b:e0:92:a6:70:c4:30:22:dd:4f:e4: 08:ee:a6:87:c3:fb:3f:a2:5d:ad:30:de:b1:c0:d6: 1e:6f:ad:b3:72:31:7a:c3:c7:8f:8c:f2:20:24:18: 01:ab:37:01:28:3d:76:d1:b8:20:6c:4f:a9:8e:28: 9a:13:0e:d5:b4:58:5f:e3:e8:c7:b1:b0:dd:48:46: 28:f4:9a:50:72:c7:c9:13:2d:79:99:3a:0f:d6:cf: c0:91:5f:71:86:71:cd:35:66:2f:cb:b6:34:88:d3: 43:b7:78:a4:ad:98:35:23:1e:97:5e:9a:f6:a8:4d: 01:79:74:15:3e:89:dc:6a:bf:85:3d:a6:7c:bb:1b: 96:75:ef:81:7e:21:da:21:d4:2b:3b:31:01:31:2d: 0d:c8:f7:08:aa:ed:87:5d:61:16:f7:32:98:7e:cf: 65:e3:9c:a7:73:b9:d0:82:44:e2:8f:06:22:e8:5b: 35:68:ed:6e:36:49:91:c7:ce:a2:d1:5b:e2:16:a3: 1a:36:a2:97:47:0c:b3:9e:82:da:94:e9:0f:9b:d8: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:83:A1:23:C0:21:EF:8E:5A:73:49:4D:DB:0A:FB:E9:AC:E4:EE:76 X509v3 Authority Key Identifier: keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fe:fb:3a:b6:06:c5:4d:40:6f:48:aa:31:f4:de:38:25:04: 17:33:f5:e6:02:e4:6c:46:b7:a3:0f:c8:59:ef:c4:29:7e:6a: 22:fc:9b:7d:03:7e:96:01:97:33:86:b3:88:b5:86:44:69:63: 2c:78:e2:df:36:43:35:56:5e:0e:68:b2:2b:d5:a9:77:02:1b: 60:a3:88:27:45:49:e1:b4:e6:69:cc:21:3f:5b:2b:f2:db:f9: 97:05:e7:3c:29:9a:f6:d3:e9:7b:27:42:57:12:23:56:fe:47: 1b:13:51:f1:83:6e:7d:97:26:d2:94:b9:96:42:c9:f9:b9:4a: 13:b1:ce:9d:a3:e3:cb:33:7f:69:45:d8:22:ca:2b:b0:52:74: 9a:35:f5:81:bc:67:34:cb:69:52:9c:4a:b9:29:86:18:91:6a: 8c:74:d3:22:f5:14:6e:93:17:45:9b:8e:79:fa:94:fc:4a:f0: 5a:92:f0:b4:64:13:41:7a:ad:fd:bb:66:12:f2:c6:12:1b:24: bc:b6:45:43:65:68:f3:e2:d5:ac:ee:6e:c0:d5:0a:c2:02:dc: 57:64:4f:15:62:26:c6:d1:63:80:bc:98:ce:c1:fc:56:f2:79: 23:30:12:55:b0:1b:f2:32:17:07:2e:d9:bd:63:25:46:33:b4: ef:fd:1b:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsZWLINaZMoWO3O5rP/9GjMCzdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3 MzkzNkIwMzAeFw0yNjA3MjQwNDA0MzNaFw0yNjA3MjUwNzA3MzNaMDMxMTAvBgNV BAMTKDdEODNBMTIzQzAyMUVGOEU1QTczNDk0RERCMEFGQkU5QUNFNEVFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiiR0fQpg3Pi+lmHK50QyiQLRE Zbgpa1QN+UMZ5+FtgxcuG5GZiXFtlHFwXyh4CPUb4JKmcMQwIt1P5AjupofD+z+i Xa0w3rHA1h5vrbNyMXrDx4+M8iAkGAGrNwEoPXbRuCBsT6mOKJoTDtW0WF/j6Mex sN1IRij0mlByx8kTLXmZOg/Wz8CRX3GGcc01Zi/LtjSI00O3eKStmDUjHpdemvao TQF5dBU+idxqv4U9pny7G5Z174F+Idoh1Cs7MQExLQ3I9wiq7YddYRb3Mph+z2Xj nKdzudCCROKPBiLoWzVo7W42SZHHzqLRW+IWoxo2opdHDLOegtqU6Q+b2MhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfYOhI8Ah745ac0lN2wr76azk7nYwHwYDVR0j BBgwFoAU+gyB+osktEXj/7uRYur0P3OTawMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWVmMDg5MDAtZjJjNi00ZDA3LWI2OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4 QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3MzkzNkIwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTBDODFGQThCMjRCNDQ1RTNGRkJCOTE2MkVBRjQzRjczOTM2 QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0 M0Y3MzkzNkIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHf++zq2BsVNQG9IqjH03jglBBcz9eYC5GxG t6MPyFnvxCl+aiL8m30DfpYBlzOGs4i1hkRpYyx44t82QzVWXg5osivVqXcCG2Cj iCdFSeG05mnMIT9bK/Lb+ZcF5zwpmvbT6XsnQlcSI1b+RxsTUfGDbn2XJtKUuZZC yfm5ShOxzp2j48szf2lF2CLKK7BSdJo19YG8ZzTLaVKcSrkphhiRaox00yL1FG6T F0Wbjnn6lPxK8FqS8LRkE0F6rf27ZhLyxhIbJLy2RUNlaPPi1azubsDVCsIC3Fdk TxViJsbRY4C8mM7B/FbyeSMwElWwG/IyFwcu2b1jJUYztO/9G2g= -----END CERTIFICATE-----Generated at Fri Jul 24 20:16:53 2026 by rpki-client