$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft File: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft (raw, json) Hash identifier: GLj0mucovJxvv4ObbWkqQX/QaSBgI4X40vRpgsb4ecA= Subject key identifier: FD:7F:09:4E:D2:71:9E:DC:F7:45:F5:7A:7D:B5:6E:C9:E0:64:36:85 Authority key identifier: FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F Certificate issuer: /CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Certificate serial: 40F98D23071D021E9829653E8EDEC2F95588A9A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 00:09:25 +0000 Manifest this update: Sun 15 Nov 2026 00:04:25 +0000 Manifest next update: Mon 16 Nov 2026 03:32:25 +0000 Files and hashes: 1: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl (hash: 0VO1MPtSgzp8qvnlO0DhZPk1HY4V31R0T5aRUgAG3zc=) 2: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: C2LyqNKlYjBJHcopCRuKT/RkLPNHGOPCyAI5djtafa0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f9:8d:23:07:1d:02:1e:98:29:65:3e:8e:de:c2:f9:55:88:a9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Validity Not Before: Nov 15 00:04:25 2026 GMT Not After : Nov 16 03:32:25 2026 GMT Subject: CN=FD7F094ED2719EDCF745F57A7DB56EC9E0643685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:b9:b2:46:b8:be:f2:fc:20:b7:8c:35:6a: 17:b8:08:db:23:89:e7:89:51:41:eb:39:b8:d5:ec: fc:10:09:39:0c:76:62:6c:ac:ed:37:c8:d0:c3:98: ba:c0:26:5c:be:5d:1e:ea:76:3f:5a:7b:76:45:c8: 60:26:7e:61:aa:19:19:61:33:44:f0:0d:27:71:6c: 98:69:ee:63:fd:47:cc:cf:6d:56:2d:42:b3:b4:77: 75:38:56:e4:ea:fd:3f:ec:1a:bb:d0:89:7c:be:1d: 11:2d:14:79:96:0d:d3:b0:b2:18:13:07:01:33:be: c9:2e:d4:af:d7:5a:fe:34:07:16:ac:77:99:bb:65: fe:8c:61:43:22:05:a9:b2:40:db:bc:91:fd:43:e5: 42:c0:d1:7c:4c:23:39:c2:c4:70:b5:1f:c8:13:a2: 95:3c:1b:07:81:91:28:50:17:9a:aa:65:03:17:ad: 2c:b0:7b:b4:3c:d8:11:b8:50:0a:a6:ca:7d:c8:a3: 83:66:17:ef:d1:bc:a4:a0:78:d8:30:68:34:ea:a1: eb:b2:1c:9e:7a:eb:90:62:3a:73:dc:ec:03:06:6f: 4d:c7:0c:b5:c2:3c:fd:90:cf:7b:aa:30:4e:82:9a: 39:87:9c:fb:0f:0b:36:18:9d:51:36:bc:f9:8c:33: 97:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7F:09:4E:D2:71:9E:DC:F7:45:F5:7A:7D:B5:6E:C9:E0:64:36:85 X509v3 Authority Key Identifier: keyid:FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f7:2e:c4:a2:59:0b:dc:c9:64:4f:60:7d:b7:f2:1e:3f:b7: 20:a6:11:d7:e4:4f:d2:1a:60:73:b2:b1:3a:33:cc:2d:ec:89: c3:8e:22:60:0a:16:23:74:ba:33:09:39:bf:ae:70:94:a1:76: 66:5e:89:1b:e5:97:e1:6c:3d:3e:9c:0d:a0:23:0f:f0:cf:4d: c7:ac:2a:e0:2b:99:b0:c6:27:31:8b:dc:82:5c:00:41:46:f0: c0:be:83:9f:3d:89:d0:e2:db:14:bc:c8:da:bb:44:80:5b:68: d5:82:54:66:61:90:72:bf:49:d7:52:2f:36:e2:69:af:dc:68: 54:c2:6a:27:6b:8f:f0:59:55:75:07:27:a5:4e:f0:66:17:3e: 4e:5f:86:1a:9b:fc:c4:3f:63:ac:9e:d5:94:fb:9d:03:67:76: 48:cd:0f:9a:1c:0b:09:5e:d8:78:e5:d9:5c:a9:51:f9:17:39: 06:34:a1:59:44:69:32:24:b4:4a:08:bb:f0:e0:99:76:40:7f: ec:9a:0c:98:04:8a:42:84:d5:c1:0f:11:68:81:aa:64:d2:b5: 48:7a:1e:1d:ed:c0:de:01:21:e5:04:fe:80:a7:fe:86:86:49: a8:a0:34:17:90:b5:d5:73:e0:ad:36:38:ab:83:ae:2c:ba:fd: 98:44:66:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPmNIwcdAh6YKWU+jt7C+VWIqaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5 Q0MzQUY1RjAeFw0yNjExMTUwMDA0MjVaFw0yNjExMTYwMzMyMjVaMDMxMTAvBgNV BAMTKEZEN0YwOTRFRDI3MTlFRENGNzQ1RjU3QTdEQjU2RUM5RTA2NDM2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDLmyRri+8vwgt4w1ahe4CNsj ieeJUUHrObjV7PwQCTkMdmJsrO03yNDDmLrAJly+XR7qdj9ae3ZFyGAmfmGqGRlh M0TwDSdxbJhp7mP9R8zPbVYtQrO0d3U4VuTq/T/sGrvQiXy+HREtFHmWDdOwshgT BwEzvsku1K/XWv40Bxasd5m7Zf6MYUMiBamyQNu8kf1D5ULA0XxMIznCxHC1H8gT opU8GweBkShQF5qqZQMXrSywe7Q82BG4UAqmyn3Io4NmF+/RvKSgeNgwaDTqoeuy HJ5665BiOnPc7AMGb03HDLXCPP2Qz3uqME6CmjmHnPsPCzYYnVE2vPmMM5fPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/X8JTtJxntz3RfV6fbVuyeBkNoUwHwYDVR0j BBgwFoAU+n0+uxc1H7Y8yBZ4GdEO0ZzDr18wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UzZDhjMDMtMTdiYi00Y2FiLTg1MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIx NzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5Q0MzQUY1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTdEM0VCQjE3MzUxRkI2M0NDODE2NzgxOUQxMEVEMTlDQzNB RjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBF RDE5Q0MzQUY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF33LsSiWQvcyWRPYH238h4/tyCmEdfkT9Ia YHOysTozzC3sicOOImAKFiN0ujMJOb+ucJShdmZeiRvll+FsPT6cDaAjD/DPTces KuArmbDGJzGL3IJcAEFG8MC+g589idDi2xS8yNq7RIBbaNWCVGZhkHK/SddSLzbi aa/caFTCaidrj/BZVXUHJ6VO8GYXPk5fhhqb/MQ/Y6ye1ZT7nQNndkjND5ocCwle 2Hjl2VypUfkXOQY0oVlEaTIktEoIu/DgmXZAf+yaDJgEikKE1cEPEWiBqmTStUh6 Hh3twN4BIeUE/oCn/oaGSaigNBeQtdVz4K02OKuDriy6/ZhEZng= -----END CERTIFICATE-----Generated at Sun Nov 15 17:58:28 2026 by rpki-client