$ rpki-client -vvvf rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft File: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft (raw, json) Hash identifier: JMdeYTUeBhSF4IJUJz6V57bQdQTkDXa/wxUl6FcS89M= Subject key identifier: 5C:BB:63:9B:DF:F1:FB:52:A4:B7:A0:36:C5:CC:DF:85:FB:F8:73:F2 Authority key identifier: FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F Certificate issuer: /CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F Certificate serial: 2FED40F920D5F65869467EFAC861E6F848179631 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:32:53 +0000 Manifest this update: Wed 23 Sep 2026 09:27:53 +0000 Manifest next update: Thu 24 Sep 2026 12:05:53 +0000 Files and hashes: 1: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: XKdnxw/xojNzwS4ZrpciIaEdrs5hQa/CJQz9/Iivznw=) 2: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl (hash: TO+ZnLKKvzzCApbuKnW2HJI3GB+5/sayM9LIgss6cS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ed:40:f9:20:d5:f6:58:69:46:7e:fa:c8:61:e6:f8:48:17:96:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F Validity Not Before: Sep 23 09:27:53 2026 GMT Not After : Sep 24 12:05:53 2026 GMT Subject: CN=5CBB639BDFF1FB52A4B7A036C5CCDF85FBF873F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1a:a1:d2:fa:07:89:c7:14:a9:e4:04:99:45: e1:cc:86:04:8d:5e:8a:36:d1:82:42:2a:b2:4a:07: 48:03:96:68:0f:75:14:f6:b8:85:4d:b9:44:6f:f2: 4b:38:51:67:51:6c:4f:14:01:a5:ab:fb:e8:51:6c: 52:be:6d:d9:1f:29:39:79:cb:c3:94:82:82:ae:54: bc:af:45:81:00:3e:3f:04:6b:8c:e7:d8:9a:3c:f9: cb:2a:c0:57:6c:ea:33:87:76:26:f5:bf:55:ef:6a: 8e:5b:9f:b7:aa:60:ec:f0:d8:af:0e:24:9a:cc:44: 21:87:77:d0:ee:d5:5c:01:e0:4f:74:8e:9c:31:c0: 27:49:ec:9f:d9:5f:e7:5c:71:4b:8b:dd:6b:50:aa: ec:14:79:7d:81:1b:68:3d:9e:64:5a:b6:33:d9:85: 85:df:cd:46:46:ab:af:2d:85:6a:82:8a:1e:a5:93: 34:3d:ee:9c:13:e4:92:39:9a:34:15:79:b8:77:7f: 71:29:c8:4f:ad:7d:9c:04:98:d2:73:51:23:72:8e: d8:f9:74:54:45:16:c4:7b:76:db:ac:ab:df:97:3d: a5:00:69:c0:cb:bd:97:2c:39:14:d0:99:80:72:00: 09:36:44:ac:99:aa:b0:d6:ab:d6:a0:b6:99:25:91: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BB:63:9B:DF:F1:FB:52:A4:B7:A0:36:C5:CC:DF:85:FB:F8:73:F2 X509v3 Authority Key Identifier: keyid:FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:39:6d:f2:9c:12:92:b1:c2:b5:f6:42:17:2f:26:6c:8f:e3: 2c:e3:9e:e6:a4:20:e2:d8:24:b8:0c:a3:a1:5c:d1:bb:dc:b6: 19:4c:36:b0:bb:89:14:9b:ad:12:39:55:2f:91:2f:27:da:62: c4:a6:f1:ce:cf:b2:05:19:cd:9c:cc:f5:df:9c:b2:d5:4c:5a: e3:c6:f6:a8:99:69:d3:bb:5a:f4:7f:0b:30:bb:9c:01:aa:0d: c0:9d:66:06:87:d4:2e:99:30:6a:df:45:ca:c8:c8:64:2b:64: d8:45:d5:1e:b3:58:3e:86:f4:48:e6:08:c6:f3:b4:c5:83:b3: db:c6:4e:f6:5b:18:4d:63:08:cf:ed:a1:d2:38:d7:35:e4:5a: 48:93:9d:62:ac:ab:ff:c0:70:e9:08:8a:c7:ca:a6:47:0b:7e: a8:72:f0:16:7e:9a:2a:d5:49:ac:bc:56:72:1a:c6:a9:54:5a: 56:25:3c:9b:9c:b7:24:97:fb:83:b7:34:05:1a:28:26:ba:86: 34:b2:56:8f:40:f8:e7:23:71:c4:af:5e:d7:2b:ac:ee:a4:09: 1d:f4:8c:8d:59:b8:0e:bf:b0:b2:9a:57:21:ff:51:25:a9:5d: bc:33:55:83:e5:25:9a:24:e5:1e:ae:b0:0a:dd:43:cb:ec:c0: e0:3f:5a:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+1A+SDV9lhpRn76yGHm+EgXljEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVEMUEz Q0ZGODM5RjAeFw0yNjA5MjMwOTI3NTNaFw0yNjA5MjQxMjA1NTNaMDMxMTAvBgNV BAMTKDVDQkI2MzlCREZGMUZCNTJBNEI3QTAzNkM1Q0NERjg1RkJGODczRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGqHS+geJxxSp5ASZReHMhgSN Xoo20YJCKrJKB0gDlmgPdRT2uIVNuURv8ks4UWdRbE8UAaWr++hRbFK+bdkfKTl5 y8OUgoKuVLyvRYEAPj8Ea4zn2Jo8+csqwFds6jOHdib1v1Xvao5bn7eqYOzw2K8O JJrMRCGHd9Du1VwB4E90jpwxwCdJ7J/ZX+dccUuL3WtQquwUeX2BG2g9nmRatjPZ hYXfzUZGq68thWqCih6lkzQ97pwT5JI5mjQVebh3f3EpyE+tfZwEmNJzUSNyjtj5 dFRFFsR7dtusq9+XPaUAacDLvZcsORTQmYByAAk2RKyZqrDWq9agtpklkUVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXLtjm9/x+1Kkt6A2xczfhfv4c/IwHwYDVR0j BBgwFoAU+nGwXY8xKo33q9h5lstdGjz/g58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU4ZGI4N2ItMTZjZC00MzdhLWE1YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4 RjMxMkE4REY3QUJEODc5OTZDQjVEMUEzQ0ZGODM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTcxQjA1RDhGMzEyQThERjdBQkQ4Nzk5NkNCNUQxQTNDRkY4 MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVE MUEzQ0ZGODM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA05bfKcEpKxwrX2QhcvJmyP4yzjnuakIOLY JLgMo6Fc0bvcthlMNrC7iRSbrRI5VS+RLyfaYsSm8c7PsgUZzZzM9d+cstVMWuPG 9qiZadO7WvR/CzC7nAGqDcCdZgaH1C6ZMGrfRcrIyGQrZNhF1R6zWD6G9EjmCMbz tMWDs9vGTvZbGE1jCM/todI41zXkWkiTnWKsq//AcOkIisfKpkcLfqhy8BZ+mirV Say8VnIaxqlUWlYlPJuctySX+4O3NAUaKCa6hjSyVo9A+OcjccSvXtcrrO6kCR30 jI1ZuA6/sLKaVyH/USWpXbwzVYPlJZok5R6usArdQ8vswOA/Wg8= -----END CERTIFICATE-----Generated at Wed Sep 23 20:17:07 2026 by rpki-client