$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft File: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft (raw, json) Hash identifier: KOL6Sd71RxgerQQQUeR5WZVhDDKHuA45LwbcUOuCnNg= Subject key identifier: F3:81:C8:05:6D:13:58:F7:99:34:AF:B0:63:AE:A8:F7:8C:98:8B:F5 Authority key identifier: FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F Certificate issuer: /CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Certificate serial: 0B40BBB1FDB691893451B28CFB84E1DB088FE67A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:44:04 +0000 Manifest this update: Tue 12 May 2026 07:39:04 +0000 Manifest next update: Wed 13 May 2026 07:58:04 +0000 Files and hashes: 1: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: C2LyqNKlYjBJHcopCRuKT/RkLPNHGOPCyAI5djtafa0=) 2: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl (hash: 4/Kpm/c05jvYnaBVGp2V7N6J+JMmVC5HL8orzdt0yvk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:40:bb:b1:fd:b6:91:89:34:51:b2:8c:fb:84:e1:db:08:8f:e6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Validity Not Before: May 12 07:39:04 2026 GMT Not After : May 13 07:58:04 2026 GMT Subject: CN=F381C8056D1358F79934AFB063AEA8F78C988BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:e3:0d:e9:35:85:b6:c8:c8:45:bb:d1:e4: da:e4:36:63:a1:33:cb:5a:fb:a3:4b:66:79:8f:a3: 6b:c5:a8:94:c1:9c:97:c0:ac:74:0b:3a:c9:92:af: ec:74:65:9a:f6:6b:ae:58:1f:51:d1:b5:60:1b:f7: 9b:99:04:80:31:50:9a:0b:86:3b:43:29:4a:e7:66: 26:d2:d9:f4:4c:f4:8d:8f:bf:f6:7b:16:d4:87:c7: df:28:dd:46:58:52:2c:d3:67:aa:a2:07:d7:69:24: db:60:66:0f:e8:5a:65:3b:b9:57:5d:d4:bb:be:55: f8:32:27:68:ec:ac:73:08:19:29:f5:3e:18:4b:47: 9a:50:02:d5:89:ad:96:5d:41:14:18:5b:48:61:3a: 3e:e6:b2:9a:d3:78:b1:4f:63:5f:02:67:4b:20:8f: e4:b8:a2:e5:ef:71:a6:5b:9d:b2:62:c3:e1:f8:1a: c4:5e:76:f3:14:7a:6e:a0:5d:7a:96:dc:44:bb:f8: a5:c5:8a:f7:e9:62:35:b6:6d:77:d7:07:0f:8f:60: f4:04:32:a2:c8:26:74:47:5c:9a:8c:96:6e:e0:dd: 33:ee:31:4c:01:bf:6f:ca:ae:4d:5c:ed:ea:d6:4e: b4:19:78:e2:ae:51:45:3b:62:db:bd:b8:79:39:73: 76:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:C8:05:6D:13:58:F7:99:34:AF:B0:63:AE:A8:F7:8C:98:8B:F5 X509v3 Authority Key Identifier: keyid:FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d9:2a:6e:f3:d2:2b:d8:bd:6b:04:b0:5c:2e:ac:a2:8f:92: b8:ee:fb:b7:61:53:01:35:ca:68:f3:bd:bd:39:a6:52:d7:31: fa:cb:a7:f8:04:0f:13:2a:67:68:51:43:bb:c3:17:0b:98:a1: b7:80:31:be:44:07:62:57:ee:ea:b5:f0:6d:12:71:27:e1:50: 85:51:fc:d3:f9:07:d7:bf:34:13:8b:01:4a:71:b2:63:c5:01: 0d:53:5d:52:70:1c:1b:94:bd:c6:da:13:19:d6:f4:7e:d0:78: 6f:7b:30:b1:cf:93:63:16:85:cf:bd:c4:ca:52:7d:84:32:9d: 66:ab:2f:c2:7f:da:9b:0b:89:3c:97:c7:92:c4:0f:f6:cb:70: fe:ff:ed:d5:f3:2e:ec:9a:cb:b6:52:ad:ee:31:cf:34:a1:e7: 60:90:f3:c2:da:a3:83:cb:7f:19:30:e7:d5:9a:a0:d1:c3:5e: 1e:e5:53:be:33:98:65:a9:c8:58:70:43:dc:e5:78:8a:24:b7: 90:99:98:62:60:85:0e:10:e3:e3:3b:12:37:dd:e6:03:61:c5: b7:7c:9f:67:54:a9:ea:4b:28:22:ad:4e:4d:8c:b9:ac:7f:f3: f0:d7:14:09:8b:61:83:bc:01:83:e6:3d:73:7f:39:80:8e:15: 8f:49:e2:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0C7sf22kYk0UbKM+4Th2wiP5nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5 Q0MzQUY1RjAeFw0yNjA1MTIwNzM5MDRaFw0yNjA1MTMwNzU4MDRaMDMxMTAvBgNV BAMTKEYzODFDODA1NkQxMzU4Rjc5OTM0QUZCMDYzQUVBOEY3OEM5ODhCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBeMN6TWFtsjIRbvR5NrkNmOh M8ta+6NLZnmPo2vFqJTBnJfArHQLOsmSr+x0ZZr2a65YH1HRtWAb95uZBIAxUJoL hjtDKUrnZibS2fRM9I2Pv/Z7FtSHx98o3UZYUizTZ6qiB9dpJNtgZg/oWmU7uVdd 1Lu+VfgyJ2jsrHMIGSn1PhhLR5pQAtWJrZZdQRQYW0hhOj7msprTeLFPY18CZ0sg j+S4ouXvcaZbnbJiw+H4GsRedvMUem6gXXqW3ES7+KXFivfpYjW2bXfXBw+PYPQE MqLIJnRHXJqMlm7g3TPuMUwBv2/Krk1c7erWTrQZeOKuUUU7Ytu9uHk5c3ZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU84HIBW0TWPeZNK+wY66o94yYi/UwHwYDVR0j BBgwFoAU+n0+uxc1H7Y8yBZ4GdEO0ZzDr18wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UzZDhjMDMtMTdiYi00Y2FiLTg1MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIx NzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5Q0MzQUY1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTdEM0VCQjE3MzUxRkI2M0NDODE2NzgxOUQxMEVEMTlDQzNB RjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBF RDE5Q0MzQUY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXZKm7z0ivYvWsEsFwurKKPkrju+7dhUwE1 ymjzvb05plLXMfrLp/gEDxMqZ2hRQ7vDFwuYobeAMb5EB2JX7uq18G0ScSfhUIVR /NP5B9e/NBOLAUpxsmPFAQ1TXVJwHBuUvcbaExnW9H7QeG97MLHPk2MWhc+9xMpS fYQynWarL8J/2psLiTyXx5LED/bLcP7/7dXzLuyay7ZSre4xzzSh52CQ88Lao4PL fxkw59WaoNHDXh7lU74zmGWpyFhwQ9zleIokt5CZmGJghQ4Q4+M7Ejfd5gNhxbd8 n2dUqepLKCKtTk2Muax/8/DXFAmLYYO8AYPmPXN/OYCOFY9J4hQ= -----END CERTIFICATE-----Generated at Wed May 13 01:40:58 2026 by rpki-client