$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft File: FAF852347432F9918D1450C78A1EC83C3599937A.mft (raw, json) Hash identifier: k0pCZTIZ92I74VGVXyVTuZtSQcdMxwiCd6e9qyE8O8M= Subject key identifier: EC:05:E7:F7:0F:03:7E:6E:27:EB:2C:DF:1E:6C:8F:33:A0:BF:78:16 Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 1B80E3AB0E47EC3EE360CB8C38526B11C80C551D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:50:16 +0000 Manifest this update: Tue 02 Jun 2026 20:45:16 +0000 Manifest next update: Wed 03 Jun 2026 23:20:16 +0000 Files and hashes: 1: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc=) 2: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: cODmeerLR567ao+7Fcrm0HEn3E2rcMUDte7vapcxFDQ=) 3: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: yw71sEyG6SYVV0OrPV1gsKYKQVEpFjzFii37SAAB9FU=) 4: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: YIhkZGCrEo7q6dhmARTKbRHKotzBRbwB1hBqlD6N5YU=) 5: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=) 6: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=) 7: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=) 8: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: UzvqFPsUw2UDPZr/Tb1I0DK7ahyAgNpcOMHRIjrwBD4=) 9: FAF852347432F9918D1450C78A1EC83C3599937A.crl (hash: 4DGq+QjqjYU7QWvmyXX41YELnx8QOFvjRpr0gre8ChE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:80:e3:ab:0e:47:ec:3e:e3:60:cb:8c:38:52:6b:11:c8:0c:55:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: Jun 2 20:45:16 2026 GMT Not After : Jun 3 23:20:16 2026 GMT Subject: CN=EC05E7F70F037E6E27EB2CDF1E6C8F33A0BF7816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:e6:51:d1:f5:c7:11:85:e7:b0:2e:ea:78: 53:34:d4:97:c5:1f:6e:32:60:8b:b0:9a:b0:8d:11: b7:a5:e3:7c:17:fe:e3:e4:06:b6:25:a9:ba:0a:61: e4:9c:46:69:39:62:b6:4b:5e:5b:3c:89:67:0a:c5: a5:f5:bc:fd:22:5b:85:18:fe:25:1b:bb:86:47:bf: e6:11:f9:ac:19:db:bb:61:64:bc:79:10:3a:96:bf: 0d:55:d1:af:ce:24:b0:f3:41:12:bb:d2:86:6b:27: 77:36:d8:47:2a:78:f5:ae:9d:d8:6f:27:71:3c:c8: 9f:a0:51:c6:bc:8d:63:1f:d8:c0:a7:55:02:d9:de: 08:6e:25:bb:32:90:c4:e9:ff:b4:8e:ba:2b:b7:29: d6:87:5c:d6:36:28:72:88:1f:c0:ce:db:86:56:e8: c1:c0:fd:d9:d3:76:7d:b7:80:1f:f1:cb:fd:a3:5e: 13:8d:41:66:a8:b0:5b:7c:df:4e:a6:8e:69:3a:58: 58:71:d7:b6:6d:a4:6a:e8:2f:08:65:10:7a:5d:79: ca:50:c8:75:84:67:b9:ba:eb:5a:4b:1c:c0:f0:d0: 36:66:f1:1d:cf:e0:80:e4:7e:90:8d:7a:97:eb:6b: 78:ac:a2:d6:2f:a1:a4:d6:13:a5:31:0b:be:06:4e: 5e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:05:E7:F7:0F:03:7E:6E:27:EB:2C:DF:1E:6C:8F:33:A0:BF:78:16 X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:50:48:8e:2b:b4:ad:e7:6c:3f:98:b4:f7:59:00:10:1e:1e: 4c:a6:5d:1c:94:c1:87:31:86:94:47:04:fa:cc:6a:e8:a1:d2: 69:a1:d2:c3:bf:0a:5f:66:87:53:ed:83:eb:cd:ff:2c:03:1e: 0c:bf:c9:70:e8:b9:dd:6e:f1:75:b0:d2:81:7f:60:bc:59:79: 18:d3:eb:e1:37:33:46:2a:ae:45:3d:93:94:39:eb:75:b5:57: 25:e5:4f:d2:e2:12:3e:91:7c:02:d5:d1:99:66:1e:1f:a4:7a: 34:67:14:a8:79:44:cd:15:77:93:24:7b:c0:60:75:c2:0c:bc: eb:20:3c:7e:7f:2f:89:fa:9c:bc:a9:79:4c:97:06:00:8c:5f: 3b:5c:5f:c9:8b:21:4d:31:49:0d:27:b5:dc:81:e8:f9:2b:75: 76:12:be:f3:b0:b8:06:95:0b:4e:f2:68:b7:76:49:b5:d7:36: ba:e3:0c:c1:f1:73:2b:b4:8a:a8:a3:28:c2:81:ad:42:f7:4e: 21:a6:5c:5e:99:05:c4:9e:05:be:dc:b3:21:c1:9d:78:2a:e0: 6b:d1:83:96:b9:a9:b9:00:6a:24:b1:f2:a6:cc:ed:9b:01:31: 9c:9c:da:8d:a0:ba:80:62:10:bf:ed:cb:0c:ba:73:48:2d:4a: 8c:40:c0:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4Djqw5H7D7jYMuMOFJrEcgMVR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjA2MDIyMDQ1MTZaFw0yNjA2MDMyMzIwMTZaMDMxMTAvBgNV BAMTKEVDMDVFN0Y3MEYwMzdFNkUyN0VCMkNERjFFNkM4RjMzQTBCRjc4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzOZR0fXHEYXnsC7qeFM01JfF H24yYIuwmrCNEbel43wX/uPkBrYlqboKYeScRmk5YrZLXls8iWcKxaX1vP0iW4UY /iUbu4ZHv+YR+awZ27thZLx5EDqWvw1V0a/OJLDzQRK70oZrJ3c22EcqePWundhv J3E8yJ+gUca8jWMf2MCnVQLZ3ghuJbsykMTp/7SOuiu3KdaHXNY2KHKIH8DO24ZW 6MHA/dnTdn23gB/xy/2jXhONQWaosFt8306mjmk6WFhx17ZtpGroLwhlEHpdecpQ yHWEZ7m661pLHMDw0DZm8R3P4IDkfpCNepfra3isotYvoaTWE6UxC74GTl69AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7AXn9w8Dfm4n6yzfHmyPM6C/eBYwHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4 M0MzNTk5OTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFQSI4rtK3nbD+YtPdZABAeHkymXRyUwYcx hpRHBPrMauih0mmh0sO/Cl9mh1Ptg+vN/ywDHgy/yXDoud1u8XWw0oF/YLxZeRjT 6+E3M0YqrkU9k5Q563W1VyXlT9LiEj6RfALV0ZlmHh+kejRnFKh5RM0Vd5Mke8Bg dcIMvOsgPH5/L4n6nLypeUyXBgCMXztcX8mLIU0xSQ0ntdyB6PkrdXYSvvOwuAaV C07yaLd2SbXXNrrjDMHxcyu0iqijKMKBrUL3TiGmXF6ZBcSeBb7csyHBnXgq4GvR g5a5qbkAaiSx8qbM7ZsBMZyc2o2guoBiEL/tywy6c0gtSoxAwCA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:20:56 2026 by rpki-client