$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft File: FAF852347432F9918D1450C78A1EC83C3599937A.mft (raw, json) Hash identifier: /iFhcX1ka6N0bXHAJMSl42QYwbpdfNVW5RsXQRLB5L0= Subject key identifier: 3D:E2:D6:35:F5:ED:43:0F:58:F8:A2:4D:92:D9:56:56:D8:9C:B1:88 Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 3C5D5882F3D7189EF1C2A951C697EB483FD4157C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 04:38:52 +0000 Manifest this update: Wed 04 Nov 2026 04:33:52 +0000 Manifest next update: Thu 05 Nov 2026 07:14:52 +0000 Files and hashes: 1: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc=) 2: FAF852347432F9918D1450C78A1EC83C3599937A.crl (hash: aD+MSh5KpJ2U9rUzpcFrRdwBApM0FaPDjKXz2VkO1Bs=) 3: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: YIhkZGCrEo7q6dhmARTKbRHKotzBRbwB1hBqlD6N5YU=) 4: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: yw71sEyG6SYVV0OrPV1gsKYKQVEpFjzFii37SAAB9FU=) 5: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: cODmeerLR567ao+7Fcrm0HEn3E2rcMUDte7vapcxFDQ=) 6: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=) 7: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=) 8: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=) 9: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: UzvqFPsUw2UDPZr/Tb1I0DK7ahyAgNpcOMHRIjrwBD4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 07:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5d:58:82:f3:d7:18:9e:f1:c2:a9:51:c6:97:eb:48:3f:d4:15:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: Nov 4 04:33:52 2026 GMT Not After : Nov 5 07:14:52 2026 GMT Subject: CN=3DE2D635F5ED430F58F8A24D92D95656D89CB188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:34:71:be:7f:83:28:71:04:57:dc:e1:7b: ee:b0:90:2f:87:43:b3:ba:63:18:80:49:f2:4a:0d: c2:ff:e0:cf:7f:23:17:6d:d3:c7:e4:3b:3c:d8:d2: 37:8b:59:64:f5:a7:39:4b:63:90:3f:c8:f7:2e:82: 75:29:7c:57:97:e7:b2:ea:d7:15:c2:54:6c:db:e1: d7:43:c7:59:f4:e8:5f:8a:c4:b1:bf:62:d0:69:4c: 67:9b:e0:a2:58:e0:2c:40:f6:ef:f0:5b:ab:0b:33: c6:5f:96:80:df:78:6e:39:24:9b:41:03:3c:48:c1: ab:2b:61:c8:d5:b6:28:0a:63:23:cb:28:b6:dd:a7: 01:73:63:e9:7b:66:e1:d9:76:90:c3:f1:86:05:c8: 4a:ce:f7:e5:eb:9a:4c:3b:a6:a9:04:bd:19:2c:9a: 4f:03:be:c8:81:ee:8d:75:46:ef:86:7b:26:e5:21: 22:ef:8d:db:f2:2e:e0:ce:c1:03:1e:37:a4:4c:ad: 4b:8c:9c:d3:50:a6:13:9f:dc:69:af:e3:b0:06:c0: a5:ed:19:08:c4:61:8d:cc:22:13:de:92:45:f1:15: ad:b1:b8:f7:b2:18:b9:e3:5e:62:81:ef:64:f9:2a: 70:13:8a:ce:a3:06:82:ad:7a:e5:47:9f:45:d6:1e: 58:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E2:D6:35:F5:ED:43:0F:58:F8:A2:4D:92:D9:56:56:D8:9C:B1:88 X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:64:6e:c4:2e:45:14:38:4e:4f:dc:e9:0e:e7:02:84:37:c8: 56:3f:17:f5:ec:af:87:91:cd:f2:86:7a:74:46:41:04:71:6d: 81:54:63:3a:6e:86:f0:23:52:e9:eb:cf:75:6f:d5:a0:d8:af: 6b:9f:66:89:14:79:ef:8c:31:f8:35:b2:68:fb:c5:a4:77:b6: 9d:a6:52:65:a3:03:de:8b:17:56:04:f5:0e:6e:31:54:12:3e: 3b:8b:b0:4e:83:3d:fa:4c:bf:50:15:a9:85:7d:d3:c6:d7:d0: 86:51:bc:80:67:5e:83:e2:b9:56:87:4a:ff:f4:27:c1:c9:e3: 02:ac:6d:a8:db:f6:5c:2f:ed:81:9b:bc:7e:d1:9c:90:42:2f: 65:52:7c:7a:01:ea:4f:da:cd:39:26:04:75:31:2f:c6:18:99: 61:5f:d9:54:6b:87:d4:05:14:32:c4:87:76:c6:e5:0b:b8:8a: 1e:2b:b9:54:1a:ca:6e:cf:ec:76:f4:64:41:32:ee:65:3d:42: 22:07:f4:68:0f:d9:13:72:cb:10:05:51:3c:3c:51:5c:c3:63: 85:6b:d9:ac:b8:75:a9:8a:f3:6c:aa:f9:f9:e4:92:1f:78:0b: 6a:02:2f:3e:29:5b:62:42:ce:d0:df:e4:b2:83:0b:fd:b0:f6: 0f:59:9c:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPF1YgvPXGJ7xwqlRxpfrSD/UFXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjExMDQwNDMzNTJaFw0yNjExMDUwNzE0NTJaMDMxMTAvBgNV BAMTKDNERTJENjM1RjVFRDQzMEY1OEY4QTI0RDkyRDk1NjU2RDg5Q0IxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUjRxvn+DKHEEV9zhe+6wkC+H Q7O6YxiASfJKDcL/4M9/Ixdt08fkOzzY0jeLWWT1pzlLY5A/yPcugnUpfFeX57Lq 1xXCVGzb4ddDx1n06F+KxLG/YtBpTGeb4KJY4CxA9u/wW6sLM8ZfloDfeG45JJtB AzxIwasrYcjVtigKYyPLKLbdpwFzY+l7ZuHZdpDD8YYFyErO9+Xrmkw7pqkEvRks mk8DvsiB7o11Ru+GeyblISLvjdvyLuDOwQMeN6RMrUuMnNNQphOf3Gmv47AGwKXt GQjEYY3MIhPekkXxFa2xuPeyGLnjXmKB72T5KnATis6jBoKteuVHn0XWHlhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPeLWNfXtQw9Y+KJNktlWVticsYgwHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4 M0MzNTk5OTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFkbsQuRRQ4Tk/c6Q7nAoQ3yFY/F/Xsr4eR zfKGenRGQQRxbYFUYzpuhvAjUunrz3Vv1aDYr2ufZokUee+MMfg1smj7xaR3tp2m UmWjA96LF1YE9Q5uMVQSPjuLsE6DPfpMv1AVqYV908bX0IZRvIBnXoPiuVaHSv/0 J8HJ4wKsbajb9lwv7YGbvH7RnJBCL2VSfHoB6k/azTkmBHUxL8YYmWFf2VRrh9QF FDLEh3bG5Qu4ih4ruVQaym7P7Hb0ZEEy7mU9QiIH9GgP2RNyyxAFUTw8UVzDY4Vr 2ay4damK82yq+fnkkh94C2oCLz4pW2JCztDf5LKDC/2w9g9ZnM0= -----END CERTIFICATE-----Generated at Wed Nov 4 11:26:51 2026 by rpki-client