$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft File: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft (raw, json) Hash identifier: 1aRZ7BJeOxa+M/Cb3TfQlRWItda3k5tlrD3EM9EbG1M= Subject key identifier: 08:47:0B:2D:6F:9B:5E:80:91:AE:95:91:D0:18:95:7A:93:22:88:1C Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 Certificate issuer: /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Certificate serial: 14BD83F6AC8E6E6218436EDE76588FC81B195F81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 13:29:58 +0000 Manifest this update: Wed 02 Sep 2026 13:24:58 +0000 Manifest next update: Thu 03 Sep 2026 16:08:58 +0000 Files and hashes: 1: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: 6SppfkF8eVpsbv3lpYMgeui/a2ZGzOBtIUsaQRZ4g0M=) 2: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: p8N00vRWvDoAwmvXOvK2uKQEKFr0HDo7546r1yOC14c=) 3: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: wkfJ8UPGVAxOk1V5VxqfOzTwHiofU6GLNqQzYRBk1vQ=) 4: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl (hash: jUcE45+iSfuW/JBeaHf9TZFBi09/QJ3m2597a4I/kGc=) 5: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=) 6: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: kXpbv8peYzzifLMXe3GcVqAoAy/+GcDR8wOc/Xv+1Rk=) 7: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: HJowqMt9szakFuZQV92I+RS0KrHeimMD9wrjjcADKbo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 16:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:bd:83:f6:ac:8e:6e:62:18:43:6e:de:76:58:8f:c8:1b:19:5f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Validity Not Before: Sep 2 13:24:58 2026 GMT Not After : Sep 3 16:08:58 2026 GMT Subject: CN=08470B2D6F9B5E8091AE9591D018957A9322881C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:1b:c0:03:fa:44:e2:7e:44:2f:38:55:45: f1:66:ea:e6:6e:83:cd:bf:7d:e4:27:0b:10:02:c8: 9a:10:9b:17:7e:70:b9:71:24:fe:82:b1:97:a0:a7: 15:78:94:4b:e9:74:55:79:7f:94:83:c5:1f:13:f0: 79:ed:61:5d:9d:a1:c9:1f:50:35:27:c0:01:3f:68: df:54:7b:f3:44:0f:0b:f8:3d:5d:c1:44:a2:06:a0: d6:a2:cf:9f:d9:8f:a9:5c:39:f1:09:e3:ef:d5:3b: f4:35:44:be:98:6a:b8:61:98:f4:d5:2d:0c:e0:0c: 71:48:17:2a:c9:0d:fd:22:bd:a4:a7:88:4f:59:ec: 51:a0:63:89:bd:ec:07:e6:59:8a:5d:eb:42:54:c9: c0:d3:1e:53:8a:9b:c4:41:fd:0b:82:91:5c:ae:30: 6e:11:eb:d7:8c:5b:12:39:2e:45:0a:4c:d0:98:40: ce:22:3a:a9:da:fd:b3:b0:ec:07:9a:bd:b6:b7:c3: f9:b4:f2:a9:f7:d0:2d:10:df:29:8d:ba:8e:80:a4: bf:d5:ab:55:54:b3:35:af:89:6d:dd:01:b2:9e:9f: f4:79:30:05:8c:f9:2c:2d:77:34:a6:21:1f:5d:98: 28:00:10:db:45:92:24:b8:4a:74:7e:4e:4a:f4:58: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:47:0B:2D:6F:9B:5E:80:91:AE:95:91:D0:18:95:7A:93:22:88:1C X509v3 Authority Key Identifier: keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:bf:ee:b3:24:19:1c:8c:6c:e0:21:fb:37:a5:f8:1f:31:3e: 4b:63:ce:99:94:c9:b5:27:db:4f:82:4a:39:b2:15:86:8f:ae: cd:ce:37:17:3d:8d:6c:b5:c6:a9:7b:c3:ae:f6:60:a9:6d:4c: 42:b1:89:ab:1b:5e:59:c3:4c:8b:12:d3:0a:e8:63:60:f7:54: 6a:50:82:e5:38:86:78:fa:01:b1:f5:7b:99:f8:15:b2:f8:78: c4:32:eb:72:33:d4:48:07:00:95:a8:23:df:96:2c:a2:c7:f5: 00:5b:b3:4c:dd:43:27:69:3c:a3:f2:a7:7b:dc:1d:2d:3c:20: 0e:ae:b1:39:59:15:50:8e:15:ca:6b:32:42:34:61:a9:35:63: 1e:3d:51:48:42:f4:47:c2:b9:a3:20:08:e6:b2:22:3f:14:a1: 5b:7f:d0:97:dd:53:1f:21:c6:d6:5c:c6:d5:74:75:5f:75:0d: d6:7b:7f:83:1b:b6:42:20:d5:e9:f3:b3:59:21:c3:f7:f8:8b: d7:4b:f7:3a:27:f6:d6:56:a1:54:5f:6c:da:7c:9e:06:92:f9: 38:1d:fe:45:11:45:d0:dc:d6:59:df:b3:23:55:ca:1b:28:8e: d1:6f:7c:c3:6e:25:35:03:1e:84:6f:a5:4d:da:6e:b2:6c:d9: cb:f2:76:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFL2D9qyObmIYQ27edliPyBsZX4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3 MzkzNkIwMzAeFw0yNjA5MDIxMzI0NThaFw0yNjA5MDMxNjA4NThaMDMxMTAvBgNV BAMTKDA4NDcwQjJENkY5QjVFODA5MUFFOTU5MUQwMTg5NTdBOTMyMjg4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIhvAA/pE4n5ELzhVRfFm6uZu g82/feQnCxACyJoQmxd+cLlxJP6CsZegpxV4lEvpdFV5f5SDxR8T8HntYV2dockf UDUnwAE/aN9Ue/NEDwv4PV3BRKIGoNaiz5/Zj6lcOfEJ4+/VO/Q1RL6YarhhmPTV LQzgDHFIFyrJDf0ivaSniE9Z7FGgY4m97AfmWYpd60JUycDTHlOKm8RB/QuCkVyu MG4R69eMWxI5LkUKTNCYQM4iOqna/bOw7Aeavba3w/m08qn30C0Q3ymNuo6ApL/V q1VUszWviW3dAbKen/R5MAWM+SwtdzSmIR9dmCgAENtFkiS4SnR+Tkr0WGYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCEcLLW+bXoCRrpWR0BiVepMiiBwwHwYDVR0j BBgwFoAU+gyB+osktEXj/7uRYur0P3OTawMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWVmMDg5MDAtZjJjNi00ZDA3LWI2OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4 QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3MzkzNkIwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTBDODFGQThCMjRCNDQ1RTNGRkJCOTE2MkVBRjQzRjczOTM2 QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0 M0Y3MzkzNkIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6/7rMkGRyMbOAh+zel+B8xPktjzpmUybUn 20+CSjmyFYaPrs3ONxc9jWy1xql7w672YKltTEKxiasbXlnDTIsS0wroY2D3VGpQ guU4hnj6AbH1e5n4FbL4eMQy63Iz1EgHAJWoI9+WLKLH9QBbs0zdQydpPKPyp3vc HS08IA6usTlZFVCOFcprMkI0Yak1Yx49UUhC9EfCuaMgCOayIj8UoVt/0JfdUx8h xtZcxtV0dV91DdZ7f4MbtkIg1enzs1khw/f4i9dL9zon9tZWoVRfbNp8ngaS+Tgd /kURRdDc1lnfsyNVyhsojtFvfMNuJTUDHoRvpU3abrJs2cvydvg= -----END CERTIFICATE-----Generated at Thu Sep 3 09:31:21 2026 by rpki-client