$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft File: FAF852347432F9918D1450C78A1EC83C3599937A.mft (raw, json) Hash identifier: CJ6Wqe2pyXsX6qDJDEYUqs4juDB9MmXAf83cN4eZNq8= Subject key identifier: 10:2F:7D:19:9E:95:FD:73:F0:B1:0D:9D:AC:34:B5:EE:F3:D1:99:04 Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 573A73E8B9D39E9B4493E7054A197A93A6F8B377 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:24:25 +0000 Manifest this update: Wed 17 Jun 2026 05:19:25 +0000 Manifest next update: Thu 18 Jun 2026 06:29:25 +0000 Files and hashes: 1: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=) 2: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: UzvqFPsUw2UDPZr/Tb1I0DK7ahyAgNpcOMHRIjrwBD4=) 3: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: YIhkZGCrEo7q6dhmARTKbRHKotzBRbwB1hBqlD6N5YU=) 4: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: yw71sEyG6SYVV0OrPV1gsKYKQVEpFjzFii37SAAB9FU=) 5: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=) 6: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=) 7: FAF852347432F9918D1450C78A1EC83C3599937A.crl (hash: 1DFYBR4qfvE8S8ESxgy1um7ScvGAqNhBYBRjE2XAzJk=) 8: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: cODmeerLR567ao+7Fcrm0HEn3E2rcMUDte7vapcxFDQ=) 9: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3a:73:e8:b9:d3:9e:9b:44:93:e7:05:4a:19:7a:93:a6:f8:b3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: Jun 17 05:19:25 2026 GMT Not After : Jun 18 06:29:25 2026 GMT Subject: CN=102F7D199E95FD73F0B10D9DAC34B5EEF3D19904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:48:15:e7:09:1e:53:4f:eb:50:80:d2:f2: 16:bd:1b:c0:e9:e3:7b:1a:c8:6a:cc:c6:ac:58:85: 1e:9e:c3:03:01:c0:7c:0c:d4:1e:28:48:d7:09:0c: b6:3c:d3:76:d1:12:89:75:f4:c3:78:8f:dc:f7:02: 98:eb:13:0d:fc:7d:06:39:04:3c:b6:83:3d:91:71: 41:c8:93:29:a0:29:3f:c0:c4:91:b5:45:9c:e3:98: 03:77:f7:08:f6:30:2f:51:c1:9c:bf:a7:2d:53:c9: 84:e2:d1:de:7b:86:4e:93:2b:01:db:62:5f:63:52: 9e:8a:c6:de:f4:f7:42:95:ee:94:57:89:4b:e9:69: bf:55:cf:7a:c2:33:79:f4:b6:80:b1:bb:c2:04:40: 4e:df:3f:18:63:62:98:1e:53:f3:8c:b0:1d:d7:51: 12:ce:af:6e:08:a0:6b:bb:4d:98:90:9a:20:55:de: 88:1a:34:7b:eb:6f:dd:5d:82:53:44:bb:ba:cb:5a: 6e:f0:51:b5:d6:3c:e8:6b:16:c5:b5:19:bf:57:7e: 63:e2:79:eb:96:6e:e0:e6:c1:4c:a0:06:b4:9a:22: 10:18:d3:d5:9d:fe:a0:27:db:b4:79:49:86:ad:0e: 70:62:63:51:f8:50:68:16:f7:1b:8d:36:0d:78:1d: 16:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2F:7D:19:9E:95:FD:73:F0:B1:0D:9D:AC:34:B5:EE:F3:D1:99:04 X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:f5:8a:e9:19:33:a1:4c:e9:c4:c2:23:85:f8:81:6b:ff:2b: c2:1e:2c:45:67:0c:ec:db:c2:ef:24:d8:d1:2f:bc:e0:be:eb: 31:f7:e7:4a:90:a2:0a:b8:65:11:b4:9f:aa:83:cb:16:df:51: 7c:b8:9a:ac:07:13:31:6f:3d:8a:08:b5:de:31:59:94:e5:3c: 0d:1d:02:12:79:3b:c0:96:34:3b:15:c1:21:56:40:8b:43:9a: 95:18:2a:0a:45:38:25:a3:74:21:8f:41:52:80:56:60:51:8c: 62:8d:4e:34:bb:c5:bc:76:8d:6e:88:7b:95:6e:ae:f1:9b:86: 52:4c:1b:11:56:96:23:0b:0d:b3:cb:2b:b2:85:e2:1f:33:de: 85:62:fa:24:b2:e4:5c:7d:fb:97:14:38:40:c2:bd:5b:af:a0: 37:35:11:be:e6:1b:ef:63:b0:12:6b:e2:66:59:ae:0a:39:30: a6:0a:7a:da:94:98:88:37:39:1b:12:87:dc:9b:7a:6a:bc:35: dd:99:7e:4b:35:ec:47:9f:6e:d1:c1:04:cd:d7:b5:7a:02:3e: 26:13:37:d9:09:eb:09:ba:b4:c2:3d:6f:dc:bc:db:50:7b:b9: de:87:80:32:cf:a7:7d:87:94:19:20:3c:fa:31:44:0a:fa:03: 13:5f:60:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzpz6LnTnptEk+cFShl6k6b4s3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjA2MTcwNTE5MjVaFw0yNjA2MTgwNjI5MjVaMDMxMTAvBgNV BAMTKDEwMkY3RDE5OUU5NUZENzNGMEIxMEQ5REFDMzRCNUVFRjNEMTk5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtEgV5wkeU0/rUIDS8ha9G8Dp 43sayGrMxqxYhR6ewwMBwHwM1B4oSNcJDLY803bREol19MN4j9z3ApjrEw38fQY5 BDy2gz2RcUHIkymgKT/AxJG1RZzjmAN39wj2MC9RwZy/py1TyYTi0d57hk6TKwHb Yl9jUp6Kxt7090KV7pRXiUvpab9Vz3rCM3n0toCxu8IEQE7fPxhjYpgeU/OMsB3X URLOr24IoGu7TZiQmiBV3ogaNHvrb91dglNEu7rLWm7wUbXWPOhrFsW1Gb9XfmPi eeuWbuDmwUygBrSaIhAY09Wd/qAn27R5SYatDnBiY1H4UGgW9xuNNg14HRYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEC99GZ6V/XPwsQ2drDS17vPRmQQwHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4 M0MzNTk5OTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALv1iukZM6FM6cTCI4X4gWv/K8IeLEVnDOzb wu8k2NEvvOC+6zH350qQogq4ZRG0n6qDyxbfUXy4mqwHEzFvPYoItd4xWZTlPA0d AhJ5O8CWNDsVwSFWQItDmpUYKgpFOCWjdCGPQVKAVmBRjGKNTjS7xbx2jW6Ie5Vu rvGbhlJMGxFWliMLDbPLK7KF4h8z3oVi+iSy5Fx9+5cUOEDCvVuvoDc1Eb7mG+9j sBJr4mZZrgo5MKYKetqUmIg3ORsSh9ybemq8Nd2Zfks17EefbtHBBM3XtXoCPiYT N9kJ6wm6tMI9b9y821B7ud6HgDLPp32HlBkgPPoxRAr6AxNfYLc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:10 2026 by rpki-client