$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft File: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft (raw, json) Hash identifier: JIH4RK6BpEFhZ1mUx+bcwip7bl0gj+JLxuSMBAXfImE= Subject key identifier: D5:B3:29:71:71:C7:CC:0B:6C:D5:8B:50:43:D9:EA:A6:50:8D:B4:FA Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 Certificate issuer: /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Certificate serial: 1C4AC42532288984CB7907517278F740FAFC4AFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 17:56:14 +0000 Manifest this update: Sat 13 Jun 2026 17:51:14 +0000 Manifest next update: Sun 14 Jun 2026 19:15:14 +0000 Files and hashes: 1: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: p8N00vRWvDoAwmvXOvK2uKQEKFr0HDo7546r1yOC14c=) 2: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl (hash: /4iiYp4XoeF03y3zJgg7M426z/zDFVpkuApcLAR+qEc=) 3: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=) 4: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: kXpbv8peYzzifLMXe3GcVqAoAy/+GcDR8wOc/Xv+1Rk=) 5: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: HJowqMt9szakFuZQV92I+RS0KrHeimMD9wrjjcADKbo=) 6: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: wkfJ8UPGVAxOk1V5VxqfOzTwHiofU6GLNqQzYRBk1vQ=) 7: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: 6SppfkF8eVpsbv3lpYMgeui/a2ZGzOBtIUsaQRZ4g0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4a:c4:25:32:28:89:84:cb:79:07:51:72:78:f7:40:fa:fc:4a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Validity Not Before: Jun 13 17:51:14 2026 GMT Not After : Jun 14 19:15:14 2026 GMT Subject: CN=D5B3297171C7CC0B6CD58B5043D9EAA6508DB4FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:e6:14:47:8a:5b:2b:04:9e:a7:a1:b0:db: 61:e1:56:41:70:01:9b:7c:5f:37:20:e9:35:93:00: 02:2d:f5:5d:28:a0:d3:7f:7e:fb:29:a6:e6:8f:c9: c6:88:ff:33:b0:8b:3a:bd:ec:00:7c:25:0e:ec:31: 29:f4:43:c3:0d:0a:4d:11:60:04:e2:ad:f2:dc:d4: aa:43:7c:ec:4f:93:47:8d:de:19:c5:e7:dc:b1:3f: 7c:ab:3f:b6:f5:a6:5d:0e:c5:5e:f0:48:c5:3b:1e: 7c:ca:96:77:7a:d5:9d:d3:d3:8f:df:fa:3f:3c:7a: c8:be:5e:54:d5:12:c6:e1:4f:85:85:35:c0:21:15: 2c:94:c0:ca:a3:08:77:83:39:7b:aa:cd:cc:cd:ae: d3:2d:a7:c7:b5:16:8f:d6:5b:83:30:a0:7a:3e:ae: 67:ed:19:2e:ef:cf:cb:06:f3:46:1a:75:9f:16:7c: cd:28:42:58:33:34:13:13:20:d8:d1:7a:4a:46:3d: 8b:46:52:c8:09:b5:f9:81:0d:14:fb:db:5b:99:ff: f6:8a:1c:3f:2f:2f:97:5d:48:53:b1:32:27:5e:38: f8:3a:5c:fd:81:15:84:cb:0d:67:4c:2a:a0:7c:a8: 7f:ab:ec:ef:e3:c0:2e:e7:02:e0:b7:f7:d3:ab:22: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B3:29:71:71:C7:CC:0B:6C:D5:8B:50:43:D9:EA:A6:50:8D:B4:FA X509v3 Authority Key Identifier: keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3c:9d:59:25:7c:a8:ab:96:24:c0:06:b1:c3:21:ad:6e:b1: 0a:3d:25:f8:5c:3f:d6:8d:ec:af:0c:d1:07:53:80:a2:ca:4d: 75:71:d1:17:6b:0b:79:79:12:76:23:1e:f9:2b:c5:53:88:2b: 68:9b:29:40:9d:97:19:84:e8:fd:b7:4d:1e:60:06:6e:0c:f3: e0:51:e9:5d:d1:56:0f:1b:ee:1d:5d:c5:cf:42:9d:0d:cb:66: 28:1e:d7:51:5c:8d:83:6c:8e:bb:e6:4d:f0:95:8e:61:90:5f: f0:6b:c2:95:3b:dc:19:49:dc:44:72:af:52:e0:17:8a:0f:82: f2:4f:9e:99:1e:71:ba:ee:97:66:9a:6a:cc:c7:44:5c:d0:90: 88:25:47:85:ae:f9:d9:86:ce:d3:ae:a6:85:a3:e0:60:bf:c2: d9:6f:6a:81:d8:7b:51:30:5e:5e:b8:5e:94:c4:e4:57:80:d9: 71:2d:ed:0b:01:62:de:ee:91:03:f9:de:d4:3c:e2:5e:9c:40: b6:d9:c9:6f:ab:51:d4:0d:2c:30:85:c4:60:89:04:f5:14:16: dc:b0:9a:33:56:a9:76:c0:81:73:be:54:64:ee:b2:7d:01:3b: fd:30:41:e9:da:d4:98:e8:e0:80:bb:8e:94:b0:73:8d:6b:99: d4:6b:aa:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHErEJTIoiYTLeQdRcnj3QPr8Sv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3 MzkzNkIwMzAeFw0yNjA2MTMxNzUxMTRaFw0yNjA2MTQxOTE1MTRaMDMxMTAvBgNV BAMTKEQ1QjMyOTcxNzFDN0NDMEI2Q0Q1OEI1MDQzRDlFQUE2NTA4REI0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvO+YUR4pbKwSep6Gw22HhVkFw AZt8Xzcg6TWTAAIt9V0ooNN/fvsppuaPycaI/zOwizq97AB8JQ7sMSn0Q8MNCk0R YATirfLc1KpDfOxPk0eN3hnF59yxP3yrP7b1pl0OxV7wSMU7HnzKlnd61Z3T04/f +j88esi+XlTVEsbhT4WFNcAhFSyUwMqjCHeDOXuqzczNrtMtp8e1Fo/WW4MwoHo+ rmftGS7vz8sG80YadZ8WfM0oQlgzNBMTINjRekpGPYtGUsgJtfmBDRT721uZ//aK HD8vL5ddSFOxMideOPg6XP2BFYTLDWdMKqB8qH+r7O/jwC7nAuC399OrIouPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1bMpcXHHzAts1YtQQ9nqplCNtPowHwYDVR0j BBgwFoAU+gyB+osktEXj/7uRYur0P3OTawMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWVmMDg5MDAtZjJjNi00ZDA3LWI2OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4 QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3MzkzNkIwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTBDODFGQThCMjRCNDQ1RTNGRkJCOTE2MkVBRjQzRjczOTM2 QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0 M0Y3MzkzNkIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHM8nVklfKirliTABrHDIa1usQo9JfhcP9aN 7K8M0QdTgKLKTXVx0RdrC3l5EnYjHvkrxVOIK2ibKUCdlxmE6P23TR5gBm4M8+BR 6V3RVg8b7h1dxc9CnQ3LZige11FcjYNsjrvmTfCVjmGQX/BrwpU73BlJ3ERyr1Lg F4oPgvJPnpkecbrul2aaaszHRFzQkIglR4Wu+dmGztOupoWj4GC/wtlvaoHYe1Ew Xl64XpTE5FeA2XEt7QsBYt7ukQP53tQ84l6cQLbZyW+rUdQNLDCFxGCJBPUUFtyw mjNWqXbAgXO+VGTusn0BO/0wQena1Jjo4IC7jpSwc41rmdRrqs4= -----END CERTIFICATE-----Generated at Sun Jun 14 00:59:40 2026 by rpki-client