$ rpki-client -vvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft File: FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft (raw, json) Hash identifier: nAXYc6XbmArU3f6wL9cA7ixDErmYjrzDL3ti1zg0B4c= Subject key identifier: 0B:EB:13:1D:DC:E3:20:E9:7F:D8:00:C3:24:D3:CB:EB:2C:24:DF:17 Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 Certificate issuer: /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Certificate serial: 18F5BF0E46C08BA82277CAB800AEB253AB7A6675 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft Manifest number: 0F Signing time: Wed 13 May 2026 02:11:09 +0000 Manifest this update: Wed 13 May 2026 02:06:09 +0000 Manifest next update: Thu 14 May 2026 03:44:09 +0000 Files and hashes: 1: FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl (hash: Py1hEH/EVuhjSJDmJLzfZtKeYzLtzESgqn/fS+tUa2w=) 2: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: 3B/Kcnz6SN3QWJKso2FwDZnb6H6gRFM38JAa0O3o8qk=) 3: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: uuP3mIBEEQQRdZDqxBE2OXZk3Oekoj4K3r/fRqZFmeA=) 4: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: WO/HZkeGMlCtfYP3+X9HhjaUkBzT5oOMey9taigK+SI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f5:bf:0e:46:c0:8b:a8:22:77:ca:b8:00:ae:b2:53:ab:7a:66:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Validity Not Before: May 13 02:06:09 2026 GMT Not After : May 14 03:44:09 2026 GMT Subject: CN=0BEB131DDCE320E97FD800C324D3CBEB2C24DF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:95:a1:7d:16:c8:bd:ea:67:02:08:75:d4: 3d:7f:94:1c:66:a8:2c:e3:89:36:07:db:f6:85:d5: 2e:e5:a2:78:48:20:95:74:fa:f3:06:f8:37:08:77: d8:cf:b9:3f:59:d3:62:6e:cd:45:ca:9f:ce:f0:9b: ed:6f:58:2b:79:94:96:9a:4b:ff:67:ee:cf:40:06: b5:8a:93:b2:3c:e5:c9:ce:7d:ad:5a:c3:98:a8:f2: 45:2b:e0:c2:09:20:89:a5:51:dd:7d:92:6d:6e:65: 4a:ba:53:37:9c:8c:77:a1:a0:d4:09:7e:bb:0e:cb: 1c:d8:f9:33:3d:a5:58:54:c4:59:06:ed:c4:79:3a: 75:3f:e7:b4:63:9a:90:48:53:10:b5:47:c4:1c:cc: ee:c6:8f:4c:1d:ae:20:e0:64:b3:0b:95:64:03:7b: b1:9d:a6:4a:4e:2d:c0:c6:eb:94:ed:4d:20:13:0f: ff:70:26:d1:5b:5d:26:18:64:64:6c:04:f3:29:e3: 2f:05:6d:86:29:d0:42:39:12:3e:f0:36:6d:95:19: a1:3f:98:80:11:12:4b:29:19:00:ac:93:9a:da:d0: 7e:88:a5:f6:46:0f:fb:9b:af:1d:92:21:c4:73:72: da:11:01:91:15:ff:0d:e0:68:f2:9b:32:56:32:05: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:13:1D:DC:E3:20:E9:7F:D8:00:C3:24:D3:CB:EB:2C:24:DF:17 X509v3 Authority Key Identifier: keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9a:94:38:83:7f:7d:2b:51:56:4a:ed:09:01:c2:5e:d1:ac: a8:4e:3a:4a:10:46:3a:c6:38:df:ba:f1:70:7b:e5:66:21:ea: 6d:26:35:da:8e:be:fd:82:75:88:7d:53:86:2c:ca:9f:9c:0c: 46:b0:d3:50:bb:57:f7:35:0f:6a:c7:b3:bf:bc:13:89:1a:53: 54:fe:b8:bf:dc:7c:4e:41:fb:ac:54:63:d3:2e:03:d6:a9:eb: 40:2e:a7:13:70:a6:a0:38:68:c6:b3:d1:18:41:a0:38:34:06: 39:4b:c2:5d:81:12:02:ea:7a:c3:1e:dc:bf:23:ef:13:88:55: e8:f7:3d:2d:0b:93:16:dc:33:40:5e:8f:27:77:27:42:6b:cd: c2:19:2a:44:e4:bb:d6:76:2e:c9:c9:73:3d:65:0f:32:d7:e0: e9:a0:1c:52:c8:57:5b:62:6a:8a:14:0a:6a:83:4e:00:67:91: e8:83:de:0c:e1:f9:d1:05:b4:ee:78:9e:a2:03:46:af:f3:cb: 7b:ad:9e:e4:b9:58:05:b4:72:3f:e3:73:ed:7a:d8:15:da:01: 15:7c:cf:7a:98:f9:9e:e5:d1:e1:58:04:12:59:4f:42:95:9b: 69:e1:74:5b:b4:50:53:1f:92:8d:37:50:66:e5:12:a0:1d:fa: 6c:8b:3d:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGPW/DkbAi6gid8q4AK6yU6t6ZnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYx RkQ0NkEzNjAeFw0yNjA1MTMwMjA2MDlaFw0yNjA1MTQwMzQ0MDlaMDMxMTAvBgNV BAMTKDBCRUIxMzFERENFMzIwRTk3RkQ4MDBDMzI0RDNDQkVCMkMyNERGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGJWhfRbIvepnAgh11D1/lBxm qCzjiTYH2/aF1S7lonhIIJV0+vMG+DcId9jPuT9Z02JuzUXKn87wm+1vWCt5lJaa S/9n7s9ABrWKk7I85cnOfa1aw5io8kUr4MIJIImlUd19km1uZUq6UzecjHehoNQJ frsOyxzY+TM9pVhUxFkG7cR5OnU/57RjmpBIUxC1R8QczO7Gj0wdriDgZLMLlWQD e7GdpkpOLcDG65TtTSATD/9wJtFbXSYYZGRsBPMp4y8FbYYp0EI5Ej7wNm2VGaE/ mIAREkspGQCsk5ra0H6IpfZGD/ubrx2SIcRzctoRAZEV/w3gaPKbMlYyBcl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC+sTHdzjIOl/2ADDJNPL6ywk3xcwHwYDVR0j BBgwFoAU+kL8ihsXJlkU8VIaEHnTXx/UajYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFlZDA5OGItNDliMS00ZjUzLWI3NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEEx QjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYxRkQ0NkEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTQyRkM4QTFCMTcyNjU5MTRGMTUyMUExMDc5RDM1RjFGRDQ2 QTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQz NUYxRkQ0NkEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKalDiDf30rUVZK7QkBwl7RrKhOOkoQRjrG ON+68XB75WYh6m0mNdqOvv2CdYh9U4Ysyp+cDEaw01C7V/c1D2rHs7+8E4kaU1T+ uL/cfE5B+6xUY9MuA9ap60AupxNwpqA4aMaz0RhBoDg0BjlLwl2BEgLqesMe3L8j 7xOIVej3PS0LkxbcM0Bejyd3J0JrzcIZKkTku9Z2LsnJcz1lDzLX4OmgHFLIV1ti aooUCmqDTgBnkeiD3gzh+dEFtO54nqIDRq/zy3utnuS5WAW0cj/jc+162BXaARV8 z3qY+Z7l0eFYBBJZT0KVm2nhdFu0UFMfko03UGblEqAd+myLPcE= -----END CERTIFICATE-----Generated at Wed May 13 03:51:35 2026 by rpki-client