$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft File: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft (raw, json) Hash identifier: QM36S4AlbvZ01R7Fho26GUQvbDRL8BRzyBhIkyg20IY= Subject key identifier: 2D:4A:A2:76:13:92:99:CC:8B:97:83:A0:C9:BF:DB:D2:68:F1:23:24 Authority key identifier: FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F Certificate issuer: /CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Certificate serial: 485835141CEB4B9CC2E4031665B924D56654460F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:23:05 +0000 Manifest this update: Mon 21 Sep 2026 09:18:05 +0000 Manifest next update: Tue 22 Sep 2026 12:15:05 +0000 Files and hashes: 1: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: C2LyqNKlYjBJHcopCRuKT/RkLPNHGOPCyAI5djtafa0=) 2: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl (hash: eJwU72gZQT9WbTruepqsGISeolbIjvIVKWl1/YMe7oY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:58:35:14:1c:eb:4b:9c:c2:e4:03:16:65:b9:24:d5:66:54:46:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Validity Not Before: Sep 21 09:18:05 2026 GMT Not After : Sep 22 12:15:05 2026 GMT Subject: CN=2D4AA276139299CC8B9783A0C9BFDBD268F12324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:ed:94:b3:6d:68:bf:df:6f:bb:b2:f8:f1: 01:94:9c:4e:45:97:05:a3:34:b9:14:bd:ac:1e:88: 04:85:bd:61:17:94:c1:f6:c0:1b:52:3d:02:2b:ba: e7:87:d5:ca:8b:92:d4:8a:fc:e1:6a:fa:9d:76:4a: 7a:76:22:8f:8b:7a:5a:65:28:3a:0a:f5:81:a8:ff: bd:55:da:b4:75:f9:ae:cc:d0:12:e6:51:78:9d:f5: d5:78:37:46:4e:df:e7:83:7c:0a:1c:cb:3e:e6:b4: e6:fb:f2:80:dd:ba:7a:45:93:ff:ac:65:a5:3c:43: 58:60:56:94:00:60:4c:4f:1e:14:33:3a:a8:2b:88: 06:89:f4:f2:5a:a8:e0:a5:7b:97:85:b5:40:b3:23: 0d:45:c0:de:9c:55:a6:f5:24:9d:0e:b6:9a:a8:99: a7:29:6e:8c:2f:d2:06:7c:b3:cb:fd:2b:05:0c:47: 8a:92:88:85:5e:9a:c8:09:44:ca:58:0d:15:6a:35: 9f:01:b3:7e:8c:66:38:a6:51:57:b0:74:e8:0f:a1: 57:32:0c:b7:1b:9d:0a:09:f4:c7:da:28:2d:f7:53: 42:e2:23:c2:4a:33:a5:df:d2:b9:e7:6a:52:52:b1: 67:38:0b:89:ea:de:09:9e:78:8a:7c:9b:bd:7c:34: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4A:A2:76:13:92:99:CC:8B:97:83:A0:C9:BF:DB:D2:68:F1:23:24 X509v3 Authority Key Identifier: keyid:FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4a:3e:ed:01:a8:bb:94:71:65:8f:eb:30:51:fb:bb:c3:89: d0:30:5b:df:b0:70:7a:d9:aa:4b:aa:2a:ab:01:47:b6:13:c8: 4a:9e:27:33:57:d8:e8:5f:0a:c9:47:28:b9:ec:af:6f:42:1f: c0:c8:ec:c9:3d:88:e8:1f:90:56:60:4a:e3:38:b6:f0:62:16: b9:6b:16:67:26:c3:70:d8:77:82:ce:ce:b5:24:9f:90:89:63: 43:16:b3:f8:a1:d4:b8:54:07:1c:a8:05:33:e3:53:3a:e1:4a: a2:49:dc:60:83:95:71:ed:40:9b:2a:32:3f:f3:46:28:3a:5d: 4a:79:7c:27:f5:95:44:cb:d3:d4:61:97:c3:b6:10:b0:3c:33: 60:d0:48:6a:93:6f:55:06:cf:86:57:75:3f:b0:e8:54:20:86: d8:5d:ad:b2:c7:4d:ab:7c:82:cf:41:6d:ef:5f:82:86:8f:0c: d2:71:79:15:34:ca:d1:48:50:45:bf:50:44:5f:12:51:d7:20: 6e:95:d0:e5:48:76:e6:6f:0c:19:4f:57:ce:e8:95:01:d4:82: 83:58:b3:ed:1f:2e:0e:59:40:73:ed:4f:16:62:c6:b2:a9:a0: 79:62:8c:82:22:6c:19:4f:f5:3c:47:98:76:af:3f:ea:94:8b: 1a:68:5d:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFg1FBzrS5zC5AMWZbkk1WZURg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5 Q0MzQUY1RjAeFw0yNjA5MjEwOTE4MDVaFw0yNjA5MjIxMjE1MDVaMDMxMTAvBgNV BAMTKDJENEFBMjc2MTM5Mjk5Q0M4Qjk3ODNBMEM5QkZEQkQyNjhGMTIzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcf+2Us21ov99vu7L48QGUnE5F lwWjNLkUvaweiASFvWEXlMH2wBtSPQIruueH1cqLktSK/OFq+p12Snp2Io+Lelpl KDoK9YGo/71V2rR1+a7M0BLmUXid9dV4N0ZO3+eDfAocyz7mtOb78oDdunpFk/+s ZaU8Q1hgVpQAYExPHhQzOqgriAaJ9PJaqOCle5eFtUCzIw1FwN6cVab1JJ0Otpqo macpbowv0gZ8s8v9KwUMR4qSiIVemsgJRMpYDRVqNZ8Bs36MZjimUVewdOgPoVcy DLcbnQoJ9MfaKC33U0LiI8JKM6Xf0rnnalJSsWc4C4nq3gmeeIp8m718NBq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULUqidhOSmcyLl4Ogyb/b0mjxIyQwHwYDVR0j BBgwFoAU+n0+uxc1H7Y8yBZ4GdEO0ZzDr18wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UzZDhjMDMtMTdiYi00Y2FiLTg1MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIx NzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5Q0MzQUY1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTdEM0VCQjE3MzUxRkI2M0NDODE2NzgxOUQxMEVEMTlDQzNB RjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBF RDE5Q0MzQUY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpKPu0BqLuUcWWP6zBR+7vDidAwW9+wcHrZ qkuqKqsBR7YTyEqeJzNX2OhfCslHKLnsr29CH8DI7Mk9iOgfkFZgSuM4tvBiFrlr Fmcmw3DYd4LOzrUkn5CJY0MWs/ih1LhUBxyoBTPjUzrhSqJJ3GCDlXHtQJsqMj/z Rig6XUp5fCf1lUTL09Rhl8O2ELA8M2DQSGqTb1UGz4ZXdT+w6FQghthdrbLHTat8 gs9Bbe9fgoaPDNJxeRU0ytFIUEW/UERfElHXIG6V0OVIduZvDBlPV87olQHUgoNY s+0fLg5ZQHPtTxZixrKpoHlijIIibBlP9TxHmHavP+qUixpoXfE= -----END CERTIFICATE-----Generated at Mon Sep 21 16:37:28 2026 by rpki-client