$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft File: FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft (raw, json) Hash identifier: agBJ0+AF+n7PlfSUMbFeL7eKXVO2KQqf8aCSJCX2QY4= Subject key identifier: EA:6C:A7:8C:99:AF:85:9A:58:91:45:E1:E0:26:CC:70:38:03:E5:04 Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 Certificate issuer: /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Certificate serial: 0D2D02369EE98615942F93455B540A685F6EFC32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 23:23:44 +0000 Manifest this update: Sat 26 Sep 2026 23:18:44 +0000 Manifest next update: Sun 27 Sep 2026 23:59:44 +0000 Files and hashes: 1: FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl (hash: RHyKs4jNeAOorUDSZzoVUqaeKcp1oumz1QV5RvSKMhY=) 2: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: WO/HZkeGMlCtfYP3+X9HhjaUkBzT5oOMey9taigK+SI=) 3: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: uuP3mIBEEQQRdZDqxBE2OXZk3Oekoj4K3r/fRqZFmeA=) 4: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: 3B/Kcnz6SN3QWJKso2FwDZnb6H6gRFM38JAa0O3o8qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2d:02:36:9e:e9:86:15:94:2f:93:45:5b:54:0a:68:5f:6e:fc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Validity Not Before: Sep 26 23:18:44 2026 GMT Not After : Sep 27 23:59:44 2026 GMT Subject: CN=EA6CA78C99AF859A589145E1E026CC703803E504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:fe:f3:40:01:dc:c9:c4:d6:4b:6a:15:38: 40:7a:06:84:04:06:41:46:20:86:af:96:80:19:15: e1:2a:ea:e8:45:5f:87:f1:a6:b6:b9:6a:78:dd:f2: 7b:61:05:da:05:06:c6:c7:55:24:6e:ed:93:d8:d3: d0:20:72:f0:3b:33:03:9f:03:21:f3:de:ca:e5:e0: d8:eb:ce:04:d0:8a:8f:ed:41:18:f4:67:16:98:8f: 52:36:f9:da:58:00:a1:24:c3:4c:ae:49:d0:7e:78: 72:d9:7a:43:14:97:61:d0:e9:94:0d:1e:d9:07:e0: 83:60:de:84:c4:45:6d:7e:79:e8:1f:13:03:cb:10: 21:f7:ad:41:4f:2b:a1:e2:44:78:0f:41:d5:48:69: 85:43:9b:d1:76:b9:2a:a1:c4:b2:48:ec:76:f9:5e: 48:4f:2c:17:14:bd:11:06:7c:66:b3:7c:c0:30:0f: 3e:f8:39:3c:82:49:4b:db:88:ba:2c:5e:78:e4:7f: 0a:71:fe:e9:27:71:9e:e0:6b:0f:0d:76:e2:ab:1a: 77:dc:cd:98:ab:9c:27:db:e6:8a:98:28:b0:06:4f: 03:24:75:2b:2f:7f:75:d6:3b:15:a6:35:31:d6:e5: ec:57:2e:70:a3:d4:73:06:ff:f9:c5:ad:fb:91:64: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6C:A7:8C:99:AF:85:9A:58:91:45:E1:E0:26:CC:70:38:03:E5:04 X509v3 Authority Key Identifier: keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:03:ae:7d:52:02:18:fc:59:6f:37:aa:b9:bc:9f:6b:1c:d6: 59:86:52:8e:8f:20:64:b0:53:7d:52:fd:88:ef:e1:40:84:79: cd:5d:38:8c:d3:12:69:88:be:b9:38:1c:bc:82:49:2c:62:97: 17:89:6d:76:a5:7a:2c:39:0d:74:88:fc:dc:13:61:80:22:b3: 4d:ab:9e:e9:74:37:8b:23:54:30:97:ce:ea:21:fd:59:cd:c0: 1c:6c:d0:a9:36:cb:d2:75:c0:ae:5c:ac:af:1d:f7:38:83:17: 00:16:76:59:ce:70:3b:ae:1f:92:03:9f:59:63:7f:b9:12:5a: f2:b3:54:71:b8:4b:ed:5f:75:c7:09:fc:3f:64:bb:3a:7c:2e: 4e:b0:40:11:05:86:f4:c5:ee:32:6f:a5:38:ab:67:bb:fc:12: 93:fd:e2:06:8b:aa:c1:e0:9c:1a:47:d2:56:d7:e0:2a:81:78: d3:d3:2c:a6:3a:ae:70:0c:3f:cc:e8:62:74:28:72:88:bd:c5: 06:46:92:a4:a5:37:68:33:91:4c:0e:b5:e4:09:05:b4:27:af: f2:73:03:36:c8:f2:2f:2e:47:a4:6d:79:64:33:46:69:bf:9d: 43:fd:b9:1e:3f:1d:09:f0:d8:09:54:19:95:a6:13:09:04:c3: b2:05:8a:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDS0CNp7phhWUL5NFW1QKaF9u/DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYx RkQ0NkEzNjAeFw0yNjA5MjYyMzE4NDRaFw0yNjA5MjcyMzU5NDRaMDMxMTAvBgNV BAMTKEVBNkNBNzhDOTlBRjg1OUE1ODkxNDVFMUUwMjZDQzcwMzgwM0U1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mv7zQAHcycTWS2oVOEB6BoQE BkFGIIavloAZFeEq6uhFX4fxpra5anjd8nthBdoFBsbHVSRu7ZPY09AgcvA7MwOf AyHz3srl4NjrzgTQio/tQRj0ZxaYj1I2+dpYAKEkw0yuSdB+eHLZekMUl2HQ6ZQN HtkH4INg3oTERW1+eegfEwPLECH3rUFPK6HiRHgPQdVIaYVDm9F2uSqhxLJI7Hb5 XkhPLBcUvREGfGazfMAwDz74OTyCSUvbiLosXnjkfwpx/ukncZ7gaw8NduKrGnfc zZirnCfb5oqYKLAGTwMkdSsvf3XWOxWmNTHW5exXLnCj1HMG//nFrfuRZGqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6mynjJmvhZpYkUXh4CbMcDgD5QQwHwYDVR0j BBgwFoAU+kL8ihsXJlkU8VIaEHnTXx/UajYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFlZDA5OGItNDliMS00ZjUzLWI3NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEEx QjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYxRkQ0NkEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTQyRkM4QTFCMTcyNjU5MTRGMTUyMUExMDc5RDM1RjFGRDQ2 QTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQz NUYxRkQ0NkEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwDrn1SAhj8WW83qrm8n2sc1lmGUo6PIGSw U31S/Yjv4UCEec1dOIzTEmmIvrk4HLyCSSxilxeJbXaleiw5DXSI/NwTYYAis02r nul0N4sjVDCXzuoh/VnNwBxs0Kk2y9J1wK5crK8d9ziDFwAWdlnOcDuuH5IDn1lj f7kSWvKzVHG4S+1fdccJ/D9kuzp8Lk6wQBEFhvTF7jJvpTirZ7v8EpP94gaLqsHg nBpH0lbX4CqBeNPTLKY6rnAMP8zoYnQocoi9xQZGkqSlN2gzkUwOteQJBbQnr/Jz AzbI8i8uR6RteWQzRmm/nUP9uR4/HQnw2AlUGZWmEwkEw7IFiqg= -----END CERTIFICATE-----Generated at Sun Sep 27 05:20:48 2026 by rpki-client