$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft File: FAF852347432F9918D1450C78A1EC83C3599937A.mft (raw, json) Hash identifier: 3FywKj4ycB2JrNhY+rjU6dWZRBYooxivO9mst8Gj3ys= Subject key identifier: 1C:B2:0C:C7:13:C3:C0:17:46:9C:F7:4F:30:77:DF:DA:FB:AD:44:8E Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 57BF69B208796B2D73FC1620E11CF8E205418D84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 02:28:45 +0000 Manifest this update: Tue 21 Jul 2026 02:23:45 +0000 Manifest next update: Wed 22 Jul 2026 03:34:45 +0000 Files and hashes: 1: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=) 2: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=) 3: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: cODmeerLR567ao+7Fcrm0HEn3E2rcMUDte7vapcxFDQ=) 4: FAF852347432F9918D1450C78A1EC83C3599937A.crl (hash: yLgV5jTuIdqDAzglBVdoskIxv8WTNHwg8PxRabYpAdE=) 5: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: UzvqFPsUw2UDPZr/Tb1I0DK7ahyAgNpcOMHRIjrwBD4=) 6: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=) 7: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc=) 8: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: YIhkZGCrEo7q6dhmARTKbRHKotzBRbwB1hBqlD6N5YU=) 9: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: yw71sEyG6SYVV0OrPV1gsKYKQVEpFjzFii37SAAB9FU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bf:69:b2:08:79:6b:2d:73:fc:16:20:e1:1c:f8:e2:05:41:8d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: Jul 21 02:23:45 2026 GMT Not After : Jul 22 03:34:45 2026 GMT Subject: CN=1CB20CC713C3C017469CF74F3077DFDAFBAD448E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:17:a1:5a:3d:42:95:24:ab:f6:ce:b6:06: 34:e6:ba:2a:1e:7f:6e:59:bf:35:cc:1c:fb:60:84: 68:dc:48:de:6e:df:51:8f:d4:c8:eb:d8:21:e4:90: d9:82:c2:28:80:cc:55:c5:8f:d8:9d:c2:e7:92:3e: 33:a4:89:f7:19:c2:7c:9b:c6:3d:b3:9f:c4:db:f5: 18:2f:4b:26:10:d2:fa:bc:f0:03:93:15:d8:de:62: ee:16:57:24:1e:4c:51:76:2e:a8:46:de:9d:2e:f4: 6d:45:63:d9:3d:5c:fb:08:b4:6e:c5:86:4a:25:b2: b2:e2:2c:e8:3f:41:f7:77:be:83:33:eb:b1:84:e0: c4:cb:c1:11:01:41:0c:ca:6a:22:d9:a5:25:32:6d: 25:ff:fc:90:a4:3e:40:7e:83:f8:f4:56:11:63:c2: ad:92:ba:6a:c3:4a:d8:99:73:58:21:52:cb:03:ee: 54:74:5f:44:ca:6c:dd:05:df:ec:a6:88:23:7a:72: 82:78:a1:95:8a:7a:44:04:2b:c0:b7:4a:40:b3:0f: 81:02:a9:4f:bb:72:40:9b:6b:82:aa:0f:71:80:d0: 9e:66:c0:bb:c6:6d:67:ad:9b:21:07:f7:38:da:e9: a1:2e:99:18:6c:02:c8:ca:89:90:bc:ea:e3:0d:be: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B2:0C:C7:13:C3:C0:17:46:9C:F7:4F:30:77:DF:DA:FB:AD:44:8E X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:dd:19:82:fe:b1:70:c3:41:ce:9a:31:8a:d0:01:5c:e4:5c: 72:0f:18:5c:e7:17:8e:bb:14:cc:42:10:0b:6e:d7:d1:68:ea: 39:db:5a:1e:2b:c7:c0:be:85:2c:72:69:86:15:76:dc:03:87: 87:fb:ce:43:17:7a:63:c6:40:13:ef:f1:25:f8:e1:8c:a1:d2: 4c:ba:60:77:e2:22:66:20:ee:b5:ad:89:2b:73:a7:e1:a9:6f: 41:96:4e:5c:7b:43:9d:b0:50:f2:a0:8b:6a:96:e0:04:8b:ed: 59:13:d9:a1:f2:36:93:98:55:01:b6:cd:c8:d0:a8:64:46:8c: 05:8a:da:48:4e:6c:c3:39:d2:25:8e:3a:0b:6b:48:ec:b2:9f: 1c:d0:a1:da:dc:c9:c8:07:71:7b:53:cd:3c:e9:19:63:a2:d3: ca:05:b9:9c:f3:db:5e:6e:b8:db:97:15:3b:42:91:f6:1b:55: d3:a4:52:ac:ab:22:54:50:56:ab:5b:7e:16:c6:81:cd:9d:b5: bc:ed:69:ec:6d:e3:80:d8:ab:c1:96:17:f3:0b:56:4f:ae:6f: a9:70:02:f6:2d:4e:26:b9:24:32:36:c1:f4:76:f5:bb:f8:a5: 6a:d4:ef:b2:44:2a:70:34:e0:47:5a:15:c4:c0:f1:20:e9:83: a4:d9:27:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV79psgh5ay1z/BYg4Rz44gVBjYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjA3MjEwMjIzNDVaFw0yNjA3MjIwMzM0NDVaMDMxMTAvBgNV BAMTKDFDQjIwQ0M3MTNDM0MwMTc0NjlDRjc0RjMwNzdERkRBRkJBRDQ0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7BehWj1ClSSr9s62BjTmuioe f25ZvzXMHPtghGjcSN5u31GP1Mjr2CHkkNmCwiiAzFXFj9idwueSPjOkifcZwnyb xj2zn8Tb9RgvSyYQ0vq88AOTFdjeYu4WVyQeTFF2LqhG3p0u9G1FY9k9XPsItG7F hkolsrLiLOg/Qfd3voMz67GE4MTLwREBQQzKaiLZpSUybSX//JCkPkB+g/j0VhFj wq2SumrDStiZc1ghUssD7lR0X0TKbN0F3+ymiCN6coJ4oZWKekQEK8C3SkCzD4EC qU+7ckCba4KqD3GA0J5mwLvGbWetmyEH9zja6aEumRhsAsjKiZC86uMNvlUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHLIMxxPDwBdGnPdPMHff2vutRI4wHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4 M0MzNTk5OTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfdGYL+sXDDQc6aMYrQAVzkXHIPGFznF467 FMxCEAtu19Fo6jnbWh4rx8C+hSxyaYYVdtwDh4f7zkMXemPGQBPv8SX44Yyh0ky6 YHfiImYg7rWtiStzp+Gpb0GWTlx7Q52wUPKgi2qW4ASL7VkT2aHyNpOYVQG2zcjQ qGRGjAWK2khObMM50iWOOgtrSOyynxzQodrcycgHcXtTzTzpGWOi08oFuZzz215u uNuXFTtCkfYbVdOkUqyrIlRQVqtbfhbGgc2dtbztaext44DYq8GWF/MLVk+ub6lw AvYtTia5JDI2wfR29bv4pWrU77JEKnA04EdaFcTA8SDpg6TZJ04= -----END CERTIFICATE-----Generated at Tue Jul 21 06:40:22 2026 by rpki-client