$ rpki-client -vvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft File: FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft (raw, json) Hash identifier: 9lU8EksdNBa6KEmD/00WeB+Fh5VS6/fNJQWYPIdYQ3c= Subject key identifier: 8F:E3:FD:29:D7:FF:01:53:4B:07:0B:4F:F8:3D:6C:01:46:A2:43:05 Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 Certificate issuer: /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Certificate serial: 4ACA4E99F0D5FF44F629AD3142D1C1F53233B950 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:28:10 +0000 Manifest this update: Wed 17 Jun 2026 04:23:10 +0000 Manifest next update: Thu 18 Jun 2026 07:56:10 +0000 Files and hashes: 1: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: 3B/Kcnz6SN3QWJKso2FwDZnb6H6gRFM38JAa0O3o8qk=) 2: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: WO/HZkeGMlCtfYP3+X9HhjaUkBzT5oOMey9taigK+SI=) 3: FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl (hash: D1j43aVSkDRcbfOg0JMWRSk2fZ3zn7m78C/47KyatNA=) 4: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: uuP3mIBEEQQRdZDqxBE2OXZk3Oekoj4K3r/fRqZFmeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ca:4e:99:f0:d5:ff:44:f6:29:ad:31:42:d1:c1:f5:32:33:b9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Validity Not Before: Jun 17 04:23:10 2026 GMT Not After : Jun 18 07:56:10 2026 GMT Subject: CN=8FE3FD29D7FF01534B070B4FF83D6C0146A24305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:29:45:98:d0:64:1b:2c:80:ee:05:d9:ae: 4e:ca:cf:85:db:18:bb:8b:ba:35:38:74:c3:13:37: 63:c3:f9:f5:ad:85:f5:ad:39:3a:f2:fc:99:96:22: bd:08:23:67:f0:c1:c5:e6:c8:15:9a:ab:4b:88:68: 06:7c:29:d1:e9:9d:43:85:ee:dd:d2:4c:29:05:ed: 67:48:96:dd:8e:80:8c:65:82:22:3d:ad:32:fe:63: 04:9f:1f:47:ba:10:a2:62:f4:24:da:55:35:43:90: 27:b4:a5:06:f4:d6:6e:b6:d4:4c:f5:a1:92:90:dd: c4:a8:a3:35:d8:4e:f9:12:f3:9a:c2:f5:52:0f:04: ab:3c:c2:ca:13:20:93:93:f5:b0:3d:f9:a2:2b:e2: b5:83:02:cf:9e:9a:bf:85:dc:11:0f:bf:04:22:07: bb:74:2a:0f:df:ef:70:9f:d5:bc:24:d7:86:2e:a4: 35:c0:04:f1:f9:ce:4d:96:17:8d:a2:67:bb:0c:d3: d6:db:6c:4f:83:c1:b1:5c:71:87:34:ca:55:81:e9: e2:7b:9e:7f:59:80:77:79:aa:f8:03:58:93:c6:ad: 40:20:fa:e8:9b:9d:0c:d6:c5:6c:2a:7e:ab:db:5f: 73:58:8a:ba:c1:7d:6c:89:4c:b2:b2:e2:bd:08:22: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E3:FD:29:D7:FF:01:53:4B:07:0B:4F:F8:3D:6C:01:46:A2:43:05 X509v3 Authority Key Identifier: keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:28:9d:f0:ec:d6:df:a2:ad:92:e0:c0:21:df:8e:9d:ea:3e: 02:05:53:62:54:e1:4f:09:a2:3f:7a:e4:96:8e:98:a6:e6:af: 8c:4a:f1:6d:08:55:a7:ed:0d:aa:70:f8:b3:b6:6f:29:58:57: c1:30:95:90:13:ec:a5:7b:88:bf:53:28:dc:71:34:d9:dd:f6: 93:da:68:24:b6:ab:51:3f:9b:6b:ad:2b:fd:9c:6c:6c:3c:96: d0:b0:e2:e9:cd:dc:e9:a0:a4:95:87:9d:8a:a1:06:93:9c:b2: a4:67:71:ac:d0:3f:16:55:6a:f6:33:79:e2:ba:d7:a2:49:5d: a7:08:ac:10:f3:a2:8d:0b:a0:f0:a0:73:88:3f:ce:67:3d:4e: fc:96:e9:7b:fc:86:a2:4d:c3:41:b6:0b:31:9e:2c:00:36:a7: 42:9c:ca:44:75:8a:02:48:99:30:20:28:36:84:39:ca:ca:c0: b4:e2:5c:5d:ce:12:d6:24:55:4e:51:ec:eb:90:79:01:18:91: 33:72:3d:9a:82:2a:14:2c:f0:f2:0e:3c:9d:81:81:e4:3f:be: 15:32:eb:99:2c:d1:69:47:58:51:9b:d1:45:0a:bb:78:6b:29: 53:0a:67:28:44:83:96:2e:0d:5b:4e:c4:b7:ec:dc:49:ab:d6: f7:b5:93:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSspOmfDV/0T2Ka0xQtHB9TIzuVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYx RkQ0NkEzNjAeFw0yNjA2MTcwNDIzMTBaFw0yNjA2MTgwNzU2MTBaMDMxMTAvBgNV BAMTKDhGRTNGRDI5RDdGRjAxNTM0QjA3MEI0RkY4M0Q2QzAxNDZBMjQzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOuilFmNBkGyyA7gXZrk7Kz4Xb GLuLujU4dMMTN2PD+fWthfWtOTry/JmWIr0II2fwwcXmyBWaq0uIaAZ8KdHpnUOF 7t3STCkF7WdIlt2OgIxlgiI9rTL+YwSfH0e6EKJi9CTaVTVDkCe0pQb01m621Ez1 oZKQ3cSoozXYTvkS85rC9VIPBKs8wsoTIJOT9bA9+aIr4rWDAs+emr+F3BEPvwQi B7t0Kg/f73Cf1bwk14YupDXABPH5zk2WF42iZ7sM09bbbE+DwbFccYc0ylWB6eJ7 nn9ZgHd5qvgDWJPGrUAg+uibnQzWxWwqfqvbX3NYirrBfWyJTLKy4r0IIs47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+P9Kdf/AVNLBwtP+D1sAUaiQwUwHwYDVR0j BBgwFoAU+kL8ihsXJlkU8VIaEHnTXx/UajYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFlZDA5OGItNDliMS00ZjUzLWI3NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEEx QjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYxRkQ0NkEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTQyRkM4QTFCMTcyNjU5MTRGMTUyMUExMDc5RDM1RjFGRDQ2 QTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQz NUYxRkQ0NkEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4onfDs1t+irZLgwCHfjp3qPgIFU2JU4U8J oj965JaOmKbmr4xK8W0IVaftDapw+LO2bylYV8EwlZAT7KV7iL9TKNxxNNnd9pPa aCS2q1E/m2utK/2cbGw8ltCw4unN3OmgpJWHnYqhBpOcsqRncazQPxZVavYzeeK6 16JJXacIrBDzoo0LoPCgc4g/zmc9TvyW6Xv8hqJNw0G2CzGeLAA2p0KcykR1igJI mTAgKDaEOcrKwLTiXF3OEtYkVU5R7OuQeQEYkTNyPZqCKhQs8PIOPJ2BgeQ/vhUy 65ks0WlHWFGb0UUKu3hrKVMKZyhEg5YuDVtOxLfs3Emr1ve1k48= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:34 2026 by rpki-client