$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft File: FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft (raw, json) Hash identifier: iPvofTGbhOUOCfkE3VThRSycjKXJWV+SN4e+IGqh+lI= Subject key identifier: F6:39:A6:43:8C:E7:2C:39:C5:CB:CB:82:7F:38:09:68:8E:06:3A:28 Authority key identifier: FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF Certificate issuer: /CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF Certificate serial: 684FA45F5024B94C920B1A3568B58D7F0B20D607 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft Manifest number: BC Signing time: Mon 21 Sep 2026 04:47:34 +0000 Manifest this update: Mon 21 Sep 2026 04:42:34 +0000 Manifest next update: Tue 22 Sep 2026 07:43:34 +0000 Files and hashes: 1: FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl (hash: RxnmxEbBWVbGRtloaL8wQc3ele55e1JX9kcIQgIVCXs=) 2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: dro/uVDmCCZVeSiHITBTTi+wa46OyEUBbiwxzlIppDE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4f:a4:5f:50:24:b9:4c:92:0b:1a:35:68:b5:8d:7f:0b:20:d6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF Validity Not Before: Sep 21 04:42:34 2026 GMT Not After : Sep 22 07:43:34 2026 GMT Subject: CN=F639A6438CE72C39C5CBCB827F3809688E063A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:47:cd:37:26:c7:47:37:6e:8a:84:58:e3: 06:d5:58:fd:b1:08:5a:b4:5a:69:56:d5:5f:39:3f: 43:02:8c:8f:af:12:d2:0f:37:ac:52:7b:8f:e4:4e: ab:96:64:0c:e1:e8:5a:50:0d:e3:e8:42:fb:a5:02: b5:f0:b6:46:16:d2:69:85:3d:66:bf:41:1c:4c:fc: 78:6c:81:f6:d1:51:7e:ed:76:18:7e:a0:9c:9a:cf: b0:e4:f6:de:76:0b:8c:43:b0:37:be:3d:2e:83:83: df:2e:23:4c:56:f7:58:d0:89:fc:d8:54:a7:c4:92: 6a:55:9b:93:da:3e:af:a4:49:8b:19:20:7a:3a:22: 26:fe:80:b9:e9:f8:13:89:90:37:03:24:46:11:3a: 1d:bd:15:96:7f:56:f6:f0:af:63:17:5d:c7:fe:00: 14:e2:c9:bf:16:d4:35:fd:33:d4:41:b8:a0:02:83: 5e:e5:c1:71:9e:31:db:ea:da:5f:46:15:02:56:c7: 39:11:6b:91:5e:54:c7:79:b6:32:ff:f2:10:65:b2: 04:51:6e:90:01:f1:1f:35:9b:4c:6a:06:72:f3:55: 17:0c:10:c6:ae:87:7e:32:08:e1:13:3e:5d:ad:25: 7d:3b:96:a0:a3:63:75:3f:d9:d4:4c:11:88:14:d4: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:39:A6:43:8C:E7:2C:39:C5:CB:CB:82:7F:38:09:68:8E:06:3A:28 X509v3 Authority Key Identifier: keyid:FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:cc:04:a4:b7:55:aa:ab:de:1b:f8:1d:23:c2:d5:6f:7a:cd: 49:9e:cf:75:28:3e:db:58:6d:9e:93:ca:d1:a2:8d:6e:b0:85: 62:10:81:98:b2:26:ef:4f:e1:2f:33:5b:83:40:0a:45:28:64: db:4d:fc:e3:07:49:17:32:e4:3e:81:3f:59:5e:53:5a:ed:bd: c8:05:a7:56:7c:75:9f:6d:1d:00:37:9e:51:78:57:2b:7c:67: d2:e3:8d:0f:bb:23:fe:e0:14:9b:42:f8:38:53:ff:eb:a2:70: ad:74:ca:fe:ef:2a:88:ee:7d:87:6e:fa:4f:60:74:00:4a:f9: 46:7b:57:d1:5e:a7:be:30:9d:ae:cb:fe:70:50:79:d8:ea:e4: de:6e:c4:ac:8e:ec:40:8c:03:f1:68:3c:27:3d:ea:f9:19:45: 47:09:54:c4:d0:19:d5:3c:f9:69:51:b0:0e:82:e3:db:bd:8d: b1:b6:d6:ce:08:e5:1e:51:4b:cb:ae:83:f8:a8:fd:a2:0f:d3: 3a:6c:35:96:37:c6:f5:5a:83:1d:ca:4b:a5:8c:d0:58:46:6d: ca:e5:f7:d6:ba:21:56:56:b9:79:6b:18:8e:e9:2e:d4:45:e7: 14:6a:e9:4c:ae:1c:e1:c2:45:c0:a5:96:9c:09:15:b4:0c:aa: 48:38:2c:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaE+kX1AkuUySCxo1aLWNfwsg1gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEyQzE1NDExQTBDMzBENTJCQUQ5OTVDMTkyNDI3QkNE MDFDNThGRjAeFw0yNjA5MjEwNDQyMzRaFw0yNjA5MjIwNzQzMzRaMDMxMTAvBgNV BAMTKEY2MzlBNjQzOENFNzJDMzlDNUNCQ0I4MjdGMzgwOTY4OEUwNjNBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbQ0fNNybHRzduioRY4wbVWP2x CFq0WmlW1V85P0MCjI+vEtIPN6xSe4/kTquWZAzh6FpQDePoQvulArXwtkYW0mmF PWa/QRxM/HhsgfbRUX7tdhh+oJyaz7Dk9t52C4xDsDe+PS6Dg98uI0xW91jQifzY VKfEkmpVm5PaPq+kSYsZIHo6Iib+gLnp+BOJkDcDJEYROh29FZZ/Vvbwr2MXXcf+ ABTiyb8W1DX9M9RBuKACg17lwXGeMdvq2l9GFQJWxzkRa5FeVMd5tjL/8hBlsgRR bpAB8R81m0xqBnLzVRcMEMauh34yCOETPl2tJX07lqCjY3U/2dRMEYgU1PGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9jmmQ4znLDnFy8uCfzgJaI4GOigwHwYDVR0j BBgwFoAU+iwVQRoMMNUrrZlcGSQnvNAcWP8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ4MDhmNjctOWFiYy00NmRkLTk4MTctYjkzMzkwOTNmODhlLzAvRkEyQzE1NDEx QTBDMzBENTJCQUQ5OTVDMTkyNDI3QkNEMDFDNThGRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTJDMTU0MTFBMEMzMEQ1MkJBRDk5NUMxOTI0MjdCQ0QwMUM1 OEZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvRkEyQzE1NDExQTBDMzBENTJCQUQ5OTVDMTkyNDI3 QkNEMDFDNThGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjMBKS3Vaqr3hv4HSPC1W96zUmez3UoPttY bZ6TytGijW6whWIQgZiyJu9P4S8zW4NACkUoZNtN/OMHSRcy5D6BP1leU1rtvcgF p1Z8dZ9tHQA3nlF4Vyt8Z9LjjQ+7I/7gFJtC+DhT/+uicK10yv7vKojufYdu+k9g dABK+UZ7V9Fep74wna7L/nBQedjq5N5uxKyO7ECMA/FoPCc96vkZRUcJVMTQGdU8 +WlRsA6C49u9jbG21s4I5R5RS8uug/io/aIP0zpsNZY3xvVagx3KS6WM0FhGbcrl 99a6IVZWuXlrGI7pLtRF5xRq6UyuHOHCRcCllpwJFbQMqkg4LPI= -----END CERTIFICATE-----Generated at Mon Sep 21 13:40:57 2026 by rpki-client