$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft File: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft (raw, json) Hash identifier: y8qpgPSIX7OTUmwB/c/YUIW/BnO1LoJRN36JVk8YHds= Subject key identifier: 09:B6:A0:A8:86:D0:4D:D5:81:08:48:F5:DF:27:EC:E1:44:BE:2E:58 Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 Certificate issuer: /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Certificate serial: 7978D6909F29F90588C9723DFF9A3EC3F5523C95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 08:12:38 +0000 Manifest this update: Thu 03 Sep 2026 08:07:38 +0000 Manifest next update: Fri 04 Sep 2026 10:28:38 +0000 Files and hashes: 1: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: 6SppfkF8eVpsbv3lpYMgeui/a2ZGzOBtIUsaQRZ4g0M=) 2: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=) 3: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl (hash: oU3kxzbO87HF4fhEl3Ultkb2c73Dcp82JGUlU2cmKjY=) 4: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: p8N00vRWvDoAwmvXOvK2uKQEKFr0HDo7546r1yOC14c=) 5: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: wkfJ8UPGVAxOk1V5VxqfOzTwHiofU6GLNqQzYRBk1vQ=) 6: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: HJowqMt9szakFuZQV92I+RS0KrHeimMD9wrjjcADKbo=) 7: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: kXpbv8peYzzifLMXe3GcVqAoAy/+GcDR8wOc/Xv+1Rk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 10:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:78:d6:90:9f:29:f9:05:88:c9:72:3d:ff:9a:3e:c3:f5:52:3c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Validity Not Before: Sep 3 08:07:38 2026 GMT Not After : Sep 4 10:28:38 2026 GMT Subject: CN=09B6A0A886D04DD5810848F5DF27ECE144BE2E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:e8:34:7a:e3:04:d0:3b:d1:81:14:3f:8f: bf:2b:ff:cd:3e:ab:86:3d:48:36:16:44:b7:e2:de: 90:9d:02:22:fe:0b:fc:bf:31:fa:2c:40:16:dd:78: eb:e2:b1:db:b7:e9:e3:fc:a2:4a:4e:55:36:a3:6c: 94:aa:25:ce:ce:c6:9a:31:fc:c9:31:c0:be:47:87: 7f:94:f3:8b:e2:e7:bf:c8:d4:a5:89:5e:4b:18:85: c6:cb:e1:7a:fc:dd:cc:95:73:fd:3c:0f:f0:94:82: 52:4b:09:53:1a:dd:eb:c9:e6:8d:50:8f:21:c4:a8: e0:66:d2:76:42:4d:82:04:e4:25:fb:50:95:c6:13: 48:62:af:ea:6d:45:8a:d9:29:34:1d:7b:59:99:c1: 14:44:68:10:c5:f2:c3:54:97:e9:63:65:5b:1c:6c: 6f:99:25:64:ca:f9:c8:b2:27:43:4e:41:46:3f:d0: 17:e1:ad:b8:91:28:21:f1:95:2e:26:a9:86:7c:53: fc:e9:48:f7:fa:7a:46:b2:da:25:f7:99:e3:b7:93: 5d:ee:5d:e1:cf:af:25:22:17:84:a9:74:6e:7c:ee: 7b:af:4f:ea:86:fe:0a:e3:9b:ca:8d:ff:f2:bf:6e: 73:2b:ee:63:81:4e:14:5d:ba:75:59:e4:88:86:18: 8d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B6:A0:A8:86:D0:4D:D5:81:08:48:F5:DF:27:EC:E1:44:BE:2E:58 X509v3 Authority Key Identifier: keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3a:16:ba:81:0a:32:f6:e9:f9:d8:50:3a:00:21:65:68:4c: d8:45:3e:43:42:99:df:e1:a0:d2:fe:75:85:96:b7:aa:ab:04: c0:1e:61:27:36:36:60:0b:77:44:24:3d:e9:71:0b:e5:12:55: f2:26:ea:b8:01:ae:48:3c:5d:4c:c9:ba:90:71:38:8e:88:04: 34:3e:57:6d:d7:97:c3:9e:e4:6e:17:09:16:72:8d:2a:77:ac: 99:af:c9:6a:30:a5:6f:d7:2f:43:70:d2:65:3f:b3:5b:25:4f: 7d:fe:54:5b:c3:9d:71:76:df:05:e6:41:20:9b:e5:11:31:ba: 8e:ec:5b:6e:bc:ce:e8:93:23:37:8e:78:52:be:a5:66:14:57: e4:c7:2e:d0:28:b6:cc:23:9d:b6:15:fc:14:9e:ab:0e:78:5c: 2e:e7:3e:b8:07:01:fb:d8:88:cd:65:ec:99:8e:7f:cd:8d:aa: c9:59:95:3f:46:8b:44:4c:87:39:d2:10:40:87:03:1f:34:30: 3a:5f:20:55:b4:ac:bc:16:2f:e9:94:6b:69:4f:b4:64:df:b9: 56:75:cd:b9:90:66:c5:b5:b8:c0:de:ad:72:9a:bd:2e:1e:00: 1a:e4:b0:52:02:b6:83:f9:48:9e:4b:43:88:6b:3f:c9:6f:f3: 8f:d9:e7:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXjWkJ8p+QWIyXI9/5o+w/VSPJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3 MzkzNkIwMzAeFw0yNjA5MDMwODA3MzhaFw0yNjA5MDQxMDI4MzhaMDMxMTAvBgNV BAMTKDA5QjZBMEE4ODZEMDRERDU4MTA4NDhGNURGMjdFQ0UxNDRCRTJFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9Og0euME0DvRgRQ/j78r/80+ q4Y9SDYWRLfi3pCdAiL+C/y/MfosQBbdeOvisdu36eP8okpOVTajbJSqJc7Oxpox /MkxwL5Hh3+U84vi57/I1KWJXksYhcbL4Xr83cyVc/08D/CUglJLCVMa3evJ5o1Q jyHEqOBm0nZCTYIE5CX7UJXGE0hir+ptRYrZKTQde1mZwRREaBDF8sNUl+ljZVsc bG+ZJWTK+ciyJ0NOQUY/0BfhrbiRKCHxlS4mqYZ8U/zpSPf6ekay2iX3meO3k13u XeHPryUiF4SpdG587nuvT+qG/grjm8qN//K/bnMr7mOBThRdunVZ5IiGGI1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCbagqIbQTdWBCEj13yfs4US+LlgwHwYDVR0j BBgwFoAU+gyB+osktEXj/7uRYur0P3OTawMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWVmMDg5MDAtZjJjNi00ZDA3LWI2OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4 QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3MzkzNkIwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTBDODFGQThCMjRCNDQ1RTNGRkJCOTE2MkVBRjQzRjczOTM2 QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0 M0Y3MzkzNkIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACA6FrqBCjL26fnYUDoAIWVoTNhFPkNCmd/h oNL+dYWWt6qrBMAeYSc2NmALd0QkPelxC+USVfIm6rgBrkg8XUzJupBxOI6IBDQ+ V23Xl8Oe5G4XCRZyjSp3rJmvyWowpW/XL0Nw0mU/s1slT33+VFvDnXF23wXmQSCb 5RExuo7sW268zuiTIzeOeFK+pWYUV+THLtAotswjnbYV/BSeqw54XC7nPrgHAfvY iM1l7JmOf82NqslZlT9Gi0RMhznSEECHAx80MDpfIFW0rLwWL+mUa2lPtGTfuVZ1 zbmQZsW1uMDerXKavS4eABrksFICtoP5SJ5LQ4hrP8lv84/Z5wo= -----END CERTIFICATE-----Generated at Thu Sep 3 18:58:25 2026 by rpki-client