$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft File: FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft (raw, json) Hash identifier: r9H899JsVZEv9BSsz+cxADmnUbZQv15W73aPmWspRTQ= Subject key identifier: 78:94:5D:13:4C:9C:5D:81:81:7F:85:B6:0F:E9:7E:5B:36:4A:E7:8F Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 Certificate issuer: /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Certificate serial: 1B1228E0498DB20D8BC17571D085F6025F9274E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 05:43:01 +0000 Manifest this update: Wed 23 Sep 2026 05:38:01 +0000 Manifest next update: Thu 24 Sep 2026 08:43:01 +0000 Files and hashes: 1: FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl (hash: PSmsmEKUpI5Sf176OQbhiSmQbAzpSyLXb+B+LMR56FA=) 2: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: 3B/Kcnz6SN3QWJKso2FwDZnb6H6gRFM38JAa0O3o8qk=) 3: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: WO/HZkeGMlCtfYP3+X9HhjaUkBzT5oOMey9taigK+SI=) 4: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: uuP3mIBEEQQRdZDqxBE2OXZk3Oekoj4K3r/fRqZFmeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:12:28:e0:49:8d:b2:0d:8b:c1:75:71:d0:85:f6:02:5f:92:74:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Validity Not Before: Sep 23 05:38:01 2026 GMT Not After : Sep 24 08:43:01 2026 GMT Subject: CN=78945D134C9C5D81817F85B60FE97E5B364AE78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:5f:48:0f:f8:ca:f3:3f:80:64:b5:fb:8c: 9a:4e:e2:ca:0d:83:d4:63:cc:cf:24:1b:2b:c9:dc: 31:9b:5a:81:46:37:55:f6:d3:52:d6:c7:da:74:df: e4:e6:4b:e7:00:5e:b5:0c:47:51:82:f5:0a:a4:f5: 63:1a:a2:ad:d1:73:7c:eb:38:3b:59:67:b4:27:be: 4f:fc:12:82:e4:43:f5:b7:59:ba:b1:8b:82:c6:88: 29:ed:02:57:ce:73:74:37:5e:25:b6:e3:24:7e:ef: 59:c6:64:88:8a:e0:dc:3a:78:55:7e:ea:c9:d5:82: dc:76:b2:dd:24:90:e6:25:35:71:83:0b:b4:82:b5: 47:52:91:8c:15:30:48:24:ee:d2:1f:7a:e1:a8:13: a5:99:c5:c1:db:ee:09:38:5e:97:35:ca:40:e7:a8: 9b:e2:92:9e:d8:62:29:44:b2:51:03:9c:bf:8e:59: 02:d3:7c:70:13:c5:0e:11:2b:4b:c8:bd:8d:c8:60: 2c:94:e2:35:07:84:19:d6:f0:ee:59:43:c5:53:8b: 22:9d:f9:2a:4f:2a:61:20:73:c7:f6:ba:21:00:fa: 4f:ed:77:48:f4:7c:3b:ca:1f:94:95:a9:e8:1f:aa: d1:d4:66:ca:99:ad:0f:11:78:51:21:b5:48:d2:23: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:94:5D:13:4C:9C:5D:81:81:7F:85:B6:0F:E9:7E:5B:36:4A:E7:8F X509v3 Authority Key Identifier: keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:19:e3:9c:b7:c4:b6:9d:a2:22:5d:7f:b6:5f:ee:a6:2e:87: 03:c0:7c:bd:d2:92:f7:31:04:e4:41:1d:9b:fd:31:2c:71:92: fc:0a:23:b9:2b:b8:ee:4f:eb:34:7b:6a:b9:11:ad:e6:07:b1: 82:68:ec:33:2b:5d:98:84:28:14:13:33:c0:03:7a:7c:16:b2: 26:39:91:95:a2:0c:52:ce:6f:3e:e8:95:c9:13:9d:85:ed:0e: 6c:4d:72:0f:8e:05:96:34:04:c8:6a:3a:67:9a:4e:a3:65:5d: 0c:63:98:b7:bc:85:ad:6f:8e:d9:3c:a8:3c:36:75:96:0a:49: 3e:0c:bf:1a:44:f3:a6:b5:78:b6:e3:5f:37:d0:c2:f6:ed:c0: 90:c3:fc:2e:1c:01:00:1f:e0:32:03:7e:df:eb:a5:c8:de:e7: b4:f0:72:69:b1:fc:bb:3f:dd:fe:c4:99:b3:4a:5f:f7:66:80: 71:67:b3:64:65:50:34:b1:90:7e:b1:59:69:7c:b8:27:fb:fc: ed:e4:25:72:63:a7:2c:18:df:8b:44:87:57:81:27:43:ae:8b: 1c:2c:ec:b2:0b:53:6e:d9:03:bd:95:cc:c7:26:ce:fe:59:27: e1:f1:15:39:3d:73:a8:ba:0a:26:47:18:dd:67:70:06:ab:bb: 76:ab:ec:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxIo4EmNsg2LwXVx0IX2Al+SdOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYx RkQ0NkEzNjAeFw0yNjA5MjMwNTM4MDFaFw0yNjA5MjQwODQzMDFaMDMxMTAvBgNV BAMTKDc4OTQ1RDEzNEM5QzVEODE4MTdGODVCNjBGRTk3RTVCMzY0QUU3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zV9ID/jK8z+AZLX7jJpO4soN g9RjzM8kGyvJ3DGbWoFGN1X201LWx9p03+TmS+cAXrUMR1GC9Qqk9WMaoq3Rc3zr ODtZZ7Qnvk/8EoLkQ/W3Wbqxi4LGiCntAlfOc3Q3XiW24yR+71nGZIiK4Nw6eFV+ 6snVgtx2st0kkOYlNXGDC7SCtUdSkYwVMEgk7tIfeuGoE6WZxcHb7gk4Xpc1ykDn qJvikp7YYilEslEDnL+OWQLTfHATxQ4RK0vIvY3IYCyU4jUHhBnW8O5ZQ8VTiyKd +SpPKmEgc8f2uiEA+k/td0j0fDvKH5SVqegfqtHUZsqZrQ8ReFEhtUjSI5dzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeJRdE0ycXYGBf4W2D+l+WzZK548wHwYDVR0j BBgwFoAU+kL8ihsXJlkU8VIaEHnTXx/UajYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFlZDA5OGItNDliMS00ZjUzLWI3NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEEx QjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYxRkQ0NkEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTQyRkM4QTFCMTcyNjU5MTRGMTUyMUExMDc5RDM1RjFGRDQ2 QTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQz NUYxRkQ0NkEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAZ45y3xLadoiJdf7Zf7qYuhwPAfL3Skvcx BORBHZv9MSxxkvwKI7kruO5P6zR7arkRreYHsYJo7DMrXZiEKBQTM8ADenwWsiY5 kZWiDFLObz7olckTnYXtDmxNcg+OBZY0BMhqOmeaTqNlXQxjmLe8ha1vjtk8qDw2 dZYKST4MvxpE86a1eLbjXzfQwvbtwJDD/C4cAQAf4DIDft/rpcje57Twcmmx/Ls/ 3f7EmbNKX/dmgHFns2RlUDSxkH6xWWl8uCf7/O3kJXJjpywY34tEh1eBJ0Ouixws 7LILU27ZA72VzMcmzv5ZJ+HxFTk9c6i6CiZHGN1ncAaru3ar7Os= -----END CERTIFICATE-----Generated at Wed Sep 23 11:56:29 2026 by rpki-client