$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft File: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft (raw, json) Hash identifier: jP5SP3e5MAEFzkD8+ZgKznug9kEyhbGsjCA+uEmOaaY= Subject key identifier: A0:9C:67:BC:86:4A:59:FB:36:8E:3E:3F:CF:33:09:77:C7:3F:4A:F5 Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 Certificate issuer: /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Certificate serial: 1ABA697BCFCCF72070C90F0812585E89D89EDEE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft Manifest number: D8 Signing time: Sun 11 Oct 2026 18:09:09 +0000 Manifest this update: Sun 11 Oct 2026 18:04:09 +0000 Manifest next update: Mon 12 Oct 2026 21:05:09 +0000 Files and hashes: 1: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: wkfJ8UPGVAxOk1V5VxqfOzTwHiofU6GLNqQzYRBk1vQ=) 2: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: 6SppfkF8eVpsbv3lpYMgeui/a2ZGzOBtIUsaQRZ4g0M=) 3: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: p8N00vRWvDoAwmvXOvK2uKQEKFr0HDo7546r1yOC14c=) 4: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=) 5: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl (hash: dpJQrC/KP7PE0GD5j8Im49uEU3qrshqV3vlAUl1acUg=) 6: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: HJowqMt9szakFuZQV92I+RS0KrHeimMD9wrjjcADKbo=) 7: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: kXpbv8peYzzifLMXe3GcVqAoAy/+GcDR8wOc/Xv+1Rk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 14:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ba:69:7b:cf:cc:f7:20:70:c9:0f:08:12:58:5e:89:d8:9e:de:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Validity Not Before: Oct 11 18:04:09 2026 GMT Not After : Oct 12 21:05:09 2026 GMT Subject: CN=A09C67BC864A59FB368E3E3FCF330977C73F4AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:ef:d2:15:09:e3:6e:3a:4d:fd:6d:85:16: 17:8c:b3:29:04:e6:6a:be:13:66:21:77:1a:d4:b9: 93:89:ed:ea:23:e5:0c:0b:42:ad:4a:b4:94:f4:68: 27:f1:89:2b:ba:7c:e0:a3:4d:ff:44:b7:09:91:f1: 0a:b8:4c:db:16:98:f5:a3:80:1f:3e:d3:3f:ea:59: a3:ca:61:98:33:36:15:a2:3f:80:0d:12:dc:25:b5: eb:6b:08:ff:93:9c:03:55:08:f7:2c:a5:30:73:67: 0f:ec:ea:32:9e:9d:c2:df:07:18:fe:26:5b:58:db: 36:0e:d1:ac:c3:23:1b:ab:60:d3:ca:30:9f:09:7b: e5:18:0e:e3:8b:7a:0c:84:38:bf:34:27:6c:44:3a: e3:c3:c5:10:89:c5:08:e8:dd:1d:b1:6d:35:8b:5e: ae:2d:7b:8c:c0:5e:a4:18:67:40:f8:ad:8c:4f:eb: ae:2f:f8:40:19:9a:df:bb:dc:52:67:17:f6:20:82: 0a:f2:d6:2d:b0:ac:4d:5e:64:0d:6e:80:ac:2f:20: 8c:dc:92:e9:15:0c:93:ba:13:19:b4:d4:26:d1:57: dd:28:e2:66:9e:e7:b2:ea:58:d5:56:ec:33:5d:1c: 1e:ea:f7:1f:fb:e1:81:91:54:29:15:31:14:3b:7f: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9C:67:BC:86:4A:59:FB:36:8E:3E:3F:CF:33:09:77:C7:3F:4A:F5 X509v3 Authority Key Identifier: keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4c:69:e1:e4:6a:a1:05:34:25:0a:b2:10:1f:c9:9b:ac:db: f8:14:70:81:a3:f9:53:44:0e:2e:0a:d8:a5:d3:c8:58:f3:2b: 94:f8:52:89:6e:ed:e2:8f:d8:58:fa:aa:95:db:37:aa:d8:2d: bd:98:d7:ac:be:fa:f9:e2:a3:7d:5c:47:f1:18:c7:c5:0e:e3: 09:4a:73:fb:14:52:85:3a:e4:39:00:13:3b:7a:6f:c5:90:96: e9:f8:23:4d:f0:f2:03:9a:81:db:2a:db:a3:d6:c7:ac:bd:42: 9c:d6:d8:b0:a1:0d:69:35:ab:fe:31:44:34:50:93:7e:2f:b8: 1c:a0:5f:95:8d:88:05:99:86:da:a3:5f:ff:4b:89:55:3e:57: e3:f2:3f:24:5c:72:b7:f2:bf:6d:94:b0:9a:61:2b:3c:ad:f3: 44:df:23:3b:5a:9e:39:d4:a7:e8:fe:f4:99:c8:5e:25:7a:8d: f0:26:ca:c7:46:30:f0:da:07:a8:ef:e0:bf:37:6a:d2:f5:c5: 51:38:2a:db:d6:59:44:43:82:ab:58:57:07:d3:7a:36:8d:4f: 4a:f0:15:96:a3:f4:4a:eb:9a:d4:1e:1c:03:a3:fc:4d:dd:94: e7:64:00:07:8f:d2:4a:71:f4:84:e6:a5:f6:0a:61:fb:08:00: 29:0a:62:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrppe8/M9yBwyQ8IElheidie3ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3 MzkzNkIwMzAeFw0yNjEwMTExODA0MDlaFw0yNjEwMTIyMTA1MDlaMDMxMTAvBgNV BAMTKEEwOUM2N0JDODY0QTU5RkIzNjhFM0UzRkNGMzMwOTc3QzczRjRBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsu/SFQnjbjpN/W2FFheMsykE 5mq+E2YhdxrUuZOJ7eoj5QwLQq1KtJT0aCfxiSu6fOCjTf9EtwmR8Qq4TNsWmPWj gB8+0z/qWaPKYZgzNhWiP4ANEtwltetrCP+TnANVCPcspTBzZw/s6jKencLfBxj+ JltY2zYO0azDIxurYNPKMJ8Je+UYDuOLegyEOL80J2xEOuPDxRCJxQjo3R2xbTWL Xq4te4zAXqQYZ0D4rYxP664v+EAZmt+73FJnF/Ygggry1i2wrE1eZA1ugKwvIIzc kukVDJO6Exm01CbRV90o4mae57LqWNVW7DNdHB7q9x/74YGRVCkVMRQ7fw71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoJxnvIZKWfs2jj4/zzMJd8c/SvUwHwYDVR0j BBgwFoAU+gyB+osktEXj/7uRYur0P3OTawMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWVmMDg5MDAtZjJjNi00ZDA3LWI2OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4 QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3MzkzNkIwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTBDODFGQThCMjRCNDQ1RTNGRkJCOTE2MkVBRjQzRjczOTM2 QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0 M0Y3MzkzNkIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNMaeHkaqEFNCUKshAfyZus2/gUcIGj+VNE Di4K2KXTyFjzK5T4Uolu7eKP2Fj6qpXbN6rYLb2Y16y++vnio31cR/EYx8UO4wlK c/sUUoU65DkAEzt6b8WQlun4I03w8gOagdsq26PWx6y9QpzW2LChDWk1q/4xRDRQ k34vuBygX5WNiAWZhtqjX/9LiVU+V+PyPyRccrfyv22UsJphKzyt80TfIztanjnU p+j+9JnIXiV6jfAmysdGMPDaB6jv4L83atL1xVE4KtvWWURDgqtYVwfTejaNT0rw FZaj9ErrmtQeHAOj/E3dlOdkAAeP0kpx9ITmpfYKYfsIACkKYh8= -----END CERTIFICATE-----Generated at Mon Oct 12 03:37:06 2026 by rpki-client