$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft File: FAF852347432F9918D1450C78A1EC83C3599937A.mft (raw, json) Hash identifier: tl6ks8eRh+3lTm3ch08U5JYlTm1N8KaYUg/jWzpDOwY= Subject key identifier: A8:52:65:8D:2D:DC:F8:68:71:F8:68:31:7A:69:6C:CA:1D:E9:5D:9A Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 70A2D2C28EF78C739DFC3A1542089A57A7088A4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft Manifest number: BE Signing time: Sun 20 Sep 2026 13:13:23 +0000 Manifest this update: Sun 20 Sep 2026 13:08:23 +0000 Manifest next update: Mon 21 Sep 2026 15:16:23 +0000 Files and hashes: 1: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: YIhkZGCrEo7q6dhmARTKbRHKotzBRbwB1hBqlD6N5YU=) 2: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc=) 3: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: cODmeerLR567ao+7Fcrm0HEn3E2rcMUDte7vapcxFDQ=) 4: FAF852347432F9918D1450C78A1EC83C3599937A.crl (hash: kmiDxMASJVFy+4OfYTh2hoiDOBijoJ2CMtPNB/pxcDs=) 5: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: yw71sEyG6SYVV0OrPV1gsKYKQVEpFjzFii37SAAB9FU=) 6: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: UzvqFPsUw2UDPZr/Tb1I0DK7ahyAgNpcOMHRIjrwBD4=) 7: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=) 8: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=) 9: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a2:d2:c2:8e:f7:8c:73:9d:fc:3a:15:42:08:9a:57:a7:08:8a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: Sep 20 13:08:23 2026 GMT Not After : Sep 21 15:16:23 2026 GMT Subject: CN=A852658D2DDCF86871F868317A696CCA1DE95D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:a6:7e:4b:43:1f:8b:b2:62:a9:8c:2f:51: a5:c6:01:b8:ed:a8:b1:70:21:28:0e:83:fb:fe:8f: 3d:1a:6d:dd:55:db:26:55:17:9b:0d:10:e5:2b:ce: d8:17:d0:bd:26:fa:eb:8a:2d:d6:50:ba:70:55:7a: e5:f1:ae:a2:86:75:c4:88:46:c2:61:16:e1:af:41: fc:16:d0:d0:87:24:d1:07:83:a8:cd:45:95:c6:2e: ab:4e:42:49:90:6b:4d:c3:44:36:20:66:fd:76:f5: 64:21:9f:51:1a:c1:5c:d7:45:ba:0b:c4:00:25:49: d0:10:58:37:32:51:8e:6f:60:6e:47:48:3c:62:17: fc:74:05:b1:f6:e8:0e:c5:10:9a:97:0b:1f:e4:8d: 91:f6:dd:48:0c:57:09:ed:ee:45:e8:00:51:d5:67: 97:75:83:bc:7f:65:33:62:90:53:74:f3:bd:fd:9d: 7d:0e:99:68:05:59:fd:d5:61:5a:72:18:94:e9:f2: 5c:fe:36:40:74:fa:22:83:c7:4e:7f:d2:55:e1:03: 96:d1:f2:c3:38:66:89:5c:93:ab:63:c5:a8:a4:37: f2:45:d1:d4:2f:c0:29:43:4c:fc:19:58:40:73:98: 43:f2:6b:0a:4b:1d:bb:ff:33:5d:bb:ff:d6:2e:d6: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:52:65:8D:2D:DC:F8:68:71:F8:68:31:7A:69:6C:CA:1D:E9:5D:9A X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:62:c7:9a:9e:b3:ac:d2:5e:47:ad:8a:eb:9e:c8:67:9b:5f: 5b:c8:9e:47:63:8b:ae:20:d7:84:24:bb:9e:e8:8e:72:33:23: 8e:2c:1e:ec:da:a3:51:e0:33:66:d4:f2:8c:0e:89:79:a2:ce: 50:a8:24:29:37:03:4c:91:84:17:10:be:01:d1:2a:cc:4c:96: bb:57:f1:c2:d1:b4:af:3d:32:c1:41:f1:50:43:93:30:d5:07: d8:f9:a8:97:d4:23:ae:d3:e9:db:c5:37:10:11:2e:aa:58:d0: f8:47:f2:6e:53:d2:fb:7e:c8:61:70:88:ca:a3:0b:39:39:d5: 4c:7e:58:c9:da:34:8e:63:0e:e3:bb:aa:4a:44:59:97:d3:83: 9f:99:05:6f:eb:99:24:88:bf:28:c7:42:a3:cb:14:ac:63:40: 33:41:ad:29:47:28:d8:28:06:d7:25:50:57:b3:d3:6f:39:c9: 4e:d6:ef:82:14:65:d6:f5:c4:4d:3a:5a:95:af:1f:4e:5b:be: 0a:46:de:3a:cc:81:86:55:9f:1e:1c:8c:0c:b5:d9:1d:dc:3d: da:b4:07:94:16:97:0d:25:b3:d2:5e:7b:84:06:bf:92:ae:ea: cd:77:95:e9:b4:95:a0:f0:ad:8c:a4:da:a1:37:1a:1b:97:6d: 04:2e:64:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKLSwo73jHOd/DoVQgiaV6cIikowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjA5MjAxMzA4MjNaFw0yNjA5MjExNTE2MjNaMDMxMTAvBgNV BAMTKEE4NTI2NThEMkREQ0Y4Njg3MUY4NjgzMTdBNjk2Q0NBMURFOTVEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC986Z+S0Mfi7JiqYwvUaXGAbjt qLFwISgOg/v+jz0abd1V2yZVF5sNEOUrztgX0L0m+uuKLdZQunBVeuXxrqKGdcSI RsJhFuGvQfwW0NCHJNEHg6jNRZXGLqtOQkmQa03DRDYgZv129WQhn1EawVzXRboL xAAlSdAQWDcyUY5vYG5HSDxiF/x0BbH26A7FEJqXCx/kjZH23UgMVwnt7kXoAFHV Z5d1g7x/ZTNikFN08739nX0OmWgFWf3VYVpyGJTp8lz+NkB0+iKDx05/0lXhA5bR 8sM4Zolck6tjxaikN/JF0dQvwClDTPwZWEBzmEPyawpLHbv/M127/9Yu1hP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqFJljS3c+Ghx+Ggxemlsyh3pXZowHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4 M0MzNTk5OTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1ix5qes6zSXketiuueyGebX1vInkdji64g 14Qku57ojnIzI44sHuzao1HgM2bU8owOiXmizlCoJCk3A0yRhBcQvgHRKsxMlrtX 8cLRtK89MsFB8VBDkzDVB9j5qJfUI67T6dvFNxARLqpY0PhH8m5T0vt+yGFwiMqj Czk51Ux+WMnaNI5jDuO7qkpEWZfTg5+ZBW/rmSSIvyjHQqPLFKxjQDNBrSlHKNgo BtclUFez0285yU7W74IUZdb1xE06WpWvH05bvgpG3jrMgYZVnx4cjAy12R3cPdq0 B5QWlw0ls9Jee4QGv5Ku6s13lem0laDwrYyk2qE3GhuXbQQuZLA= -----END CERTIFICATE-----Generated at Sun Sep 20 21:15:28 2026 by rpki-client