$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft File: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft (raw, json) Hash identifier: +R6mKnD7t8CEkDa1zcK2A41VTnQx61nUfXvp6g3Rn4k= Subject key identifier: 83:C1:14:87:DF:38:A7:AE:7F:07:8B:CC:D7:37:81:59:E3:AF:BA:D9 Authority key identifier: FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F Certificate issuer: /CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Certificate serial: 57E3006370249A18DB9DA513CE88C7516A15DA75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:44:03 +0000 Manifest this update: Thu 24 Sep 2026 06:39:03 +0000 Manifest next update: Fri 25 Sep 2026 10:27:03 +0000 Files and hashes: 1: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: C2LyqNKlYjBJHcopCRuKT/RkLPNHGOPCyAI5djtafa0=) 2: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl (hash: VtIan5WOziilRIXY8fKWKyp/dnVxl3mp1ZMTVuCsktk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e3:00:63:70:24:9a:18:db:9d:a5:13:ce:88:c7:51:6a:15:da:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Validity Not Before: Sep 24 06:39:03 2026 GMT Not After : Sep 25 10:27:03 2026 GMT Subject: CN=83C11487DF38A7AE7F078BCCD7378159E3AFBAD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:9d:2d:90:38:e5:c1:46:18:91:46:d5:39: 54:5e:b8:70:be:30:73:c4:8f:e2:88:06:65:9c:ba: 70:76:c1:52:da:40:14:0d:03:bd:32:06:68:82:0c: aa:40:c7:2a:9a:a4:27:06:49:ff:3c:18:4a:a4:ac: 34:f4:6c:8d:ef:16:9f:28:4c:bf:07:e5:72:0a:c7: 73:71:f4:84:03:0d:7b:d5:07:ab:78:fb:17:65:9a: 23:87:9f:c5:d7:23:4c:6d:c2:b3:1d:67:55:57:73: af:98:ca:4e:82:8f:0f:89:ce:5c:91:49:c0:1d:ea: 56:85:0c:0e:e9:27:46:96:05:f8:0d:59:2a:34:64: ac:25:09:63:77:44:39:54:31:72:4f:1c:1d:63:04: 5e:63:e5:6c:ff:a4:b0:3d:d1:6b:3a:88:5a:54:5a: c0:3f:cf:d7:3e:ae:60:3e:87:48:bf:95:da:b6:10: c6:ab:b3:e6:d5:46:28:17:28:dd:95:48:8b:e6:d2: fa:18:64:48:e1:ad:d4:07:1e:6d:48:72:55:79:90: 08:55:43:89:7f:aa:67:71:46:81:d5:15:6e:bf:6d: 19:0d:f1:5a:d9:dc:2b:8f:2e:db:e5:5f:67:8b:02: 3c:5f:d3:84:2d:8d:a3:3f:06:d5:2c:25:5a:8d:0b: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C1:14:87:DF:38:A7:AE:7F:07:8B:CC:D7:37:81:59:E3:AF:BA:D9 X509v3 Authority Key Identifier: keyid:FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3c:4c:1c:df:bb:ed:4f:85:a4:21:02:97:7a:89:97:c2:3d: 62:24:09:1d:06:d4:0d:e8:5c:a0:9f:e0:de:ed:03:32:4c:64: 2a:1f:81:ad:23:a3:62:1a:40:1a:6b:90:90:24:f7:08:20:5c: a1:a3:4d:14:ca:1b:4e:2c:b2:94:b1:62:96:09:e2:71:0f:af: 22:23:80:c1:cc:10:6e:5b:b0:95:07:2f:fa:60:22:b3:51:8a: a1:d6:57:5c:73:60:7d:39:9f:3a:ae:fa:d2:58:25:1e:34:f1: 43:e8:4a:9f:4c:18:77:21:98:0c:b5:7b:80:2e:96:b4:95:7f: b7:36:e0:87:25:49:ed:7e:2d:6a:8e:26:b1:cf:f2:21:d3:08: 12:8b:1c:f8:5e:00:66:f9:e8:82:ac:c1:90:3f:12:51:a3:e2: 13:71:9d:3e:82:d1:67:82:36:77:1b:e3:47:b6:b7:e7:92:0f: 51:20:81:c9:3b:72:43:e7:fd:2a:2f:a0:87:9a:02:f0:a0:a3: 4e:23:2a:e0:e8:15:3e:c8:70:1e:f6:ac:9b:6c:cd:84:16:41: 1a:09:e2:e5:f0:2d:9b:38:b9:81:7a:c2:84:ca:3f:62:d5:b2: 65:af:a2:8a:6e:a5:74:78:7a:b4:6b:26:e6:57:bd:bf:3c:83: 8a:cd:5e:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+MAY3AkmhjbnaUTzojHUWoV2nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5 Q0MzQUY1RjAeFw0yNjA5MjQwNjM5MDNaFw0yNjA5MjUxMDI3MDNaMDMxMTAvBgNV BAMTKDgzQzExNDg3REYzOEE3QUU3RjA3OEJDQ0Q3Mzc4MTU5RTNBRkJBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70Z0tkDjlwUYYkUbVOVReuHC+ MHPEj+KIBmWcunB2wVLaQBQNA70yBmiCDKpAxyqapCcGSf88GEqkrDT0bI3vFp8o TL8H5XIKx3Nx9IQDDXvVB6t4+xdlmiOHn8XXI0xtwrMdZ1VXc6+Yyk6Cjw+JzlyR ScAd6laFDA7pJ0aWBfgNWSo0ZKwlCWN3RDlUMXJPHB1jBF5j5Wz/pLA90Ws6iFpU WsA/z9c+rmA+h0i/ldq2EMars+bVRigXKN2VSIvm0voYZEjhrdQHHm1IclV5kAhV Q4l/qmdxRoHVFW6/bRkN8VrZ3CuPLtvlX2eLAjxf04QtjaM/BtUsJVqNCx8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg8EUh984p65/B4vM1zeBWeOvutkwHwYDVR0j BBgwFoAU+n0+uxc1H7Y8yBZ4GdEO0ZzDr18wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UzZDhjMDMtMTdiYi00Y2FiLTg1MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIx NzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5Q0MzQUY1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTdEM0VCQjE3MzUxRkI2M0NDODE2NzgxOUQxMEVEMTlDQzNB RjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBF RDE5Q0MzQUY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADA8TBzfu+1PhaQhApd6iZfCPWIkCR0G1A3o XKCf4N7tAzJMZCofga0jo2IaQBprkJAk9wggXKGjTRTKG04sspSxYpYJ4nEPryIj gMHMEG5bsJUHL/pgIrNRiqHWV1xzYH05nzqu+tJYJR408UPoSp9MGHchmAy1e4Au lrSVf7c24IclSe1+LWqOJrHP8iHTCBKLHPheAGb56IKswZA/ElGj4hNxnT6C0WeC Nncb40e2t+eSD1Eggck7ckPn/SovoIeaAvCgo04jKuDoFT7IcB72rJtszYQWQRoJ 4uXwLZs4uYF6woTKP2LVsmWvoopupXR4erRrJuZXvb88g4rNXh8= -----END CERTIFICATE-----Generated at Thu Sep 24 12:00:58 2026 by rpki-client