$ rpki-client -vvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft File: FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft (raw, json) Hash identifier: CkIGH+4P36yDbt+A81ZOZdPtp+lQOtryaZkTPwmEURM= Subject key identifier: 5A:A5:7C:36:C1:8D:24:EC:2E:0E:D7:4F:6A:E0:42:29:BF:54:E9:E8 Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 Certificate issuer: /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Certificate serial: 34FD03E78B48B245B417427073EF218787B8C55E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:33:50 +0000 Manifest this update: Tue 21 Jul 2026 02:28:50 +0000 Manifest next update: Wed 22 Jul 2026 02:33:50 +0000 Files and hashes: 1: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: uuP3mIBEEQQRdZDqxBE2OXZk3Oekoj4K3r/fRqZFmeA=) 2: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: 3B/Kcnz6SN3QWJKso2FwDZnb6H6gRFM38JAa0O3o8qk=) 3: FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl (hash: eUfH21JkohRh2c1cKUoC48S/CVP1ztVgRDTMGg9NOI8=) 4: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: WO/HZkeGMlCtfYP3+X9HhjaUkBzT5oOMey9taigK+SI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fd:03:e7:8b:48:b2:45:b4:17:42:70:73:ef:21:87:87:b8:c5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Validity Not Before: Jul 21 02:28:50 2026 GMT Not After : Jul 22 02:33:50 2026 GMT Subject: CN=5AA57C36C18D24EC2E0ED74F6AE04229BF54E9E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:22:27:d8:f0:0a:cf:4b:a8:e6:7b:e1:ea: 25:b3:d3:1b:c9:9a:5a:e5:f9:d7:22:a4:65:67:f9: a8:e1:61:cf:fb:9d:a3:c9:7a:28:82:57:f2:f6:8c: ad:52:fe:ef:da:43:25:61:33:65:a0:97:d1:fd:9b: 64:23:2a:8f:2b:93:6a:e0:d6:d2:0d:8e:e8:05:b5: 20:23:06:a1:b6:bf:08:ab:ae:06:54:2c:e6:78:a0: 22:1d:ca:6d:04:44:ff:6f:eb:b1:53:fd:30:b4:54: 8f:9b:dd:43:08:04:f5:39:62:1b:b9:cb:7c:a5:36: e8:e0:e1:a1:5a:de:b4:76:34:04:b5:f0:1a:7a:6e: de:81:2e:33:12:a8:12:10:ac:14:62:34:dd:3f:a1: ec:ac:76:6d:f3:d5:48:61:9b:6c:42:4a:78:be:dc: a7:26:5d:45:71:53:f8:a8:f7:f3:45:ae:eb:84:30: 03:42:a0:fc:e3:15:0b:a0:18:80:e6:83:10:83:e2: 91:4c:dd:70:66:74:a0:d2:ab:58:68:4f:34:82:57: 23:d8:c3:32:6d:c7:18:b1:47:52:10:9f:22:f4:c5: 71:da:f2:54:b9:34:cf:a9:0a:ae:a4:9c:95:ea:67: fc:bd:f5:d3:79:16:2e:45:d0:51:35:53:e1:0b:d2: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A5:7C:36:C1:8D:24:EC:2E:0E:D7:4F:6A:E0:42:29:BF:54:E9:E8 X509v3 Authority Key Identifier: keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ff:bd:1c:a8:f7:be:d7:1f:c9:b4:70:c0:16:6e:aa:01:d3: 44:8e:52:c9:cf:20:35:d3:be:f6:9f:bc:af:df:bc:e0:c2:eb: 6b:aa:aa:66:8d:76:e0:42:3e:32:3a:5e:34:87:2f:3b:e3:40: 51:1b:4f:f0:95:8d:5f:65:f5:5e:5f:0d:42:a6:a7:2d:35:c8: e5:87:61:a4:6d:ed:b5:f7:3c:62:4f:c8:34:89:cd:e1:b0:b7: d4:2e:97:3d:52:84:0c:cf:53:14:77:73:56:ac:5c:a9:d6:86: e9:bc:c5:08:a0:88:48:de:f3:50:87:e8:9c:82:38:66:72:2a: 4f:cb:3d:b0:e1:4a:f1:7d:24:21:49:96:92:76:66:9a:d4:a9: a5:ce:74:75:66:08:f0:2d:ec:1b:18:e3:82:74:50:4c:b2:6b: b2:c7:6e:87:33:9b:cc:36:d9:72:7e:5a:45:a4:ce:11:a2:7c: 91:77:d4:8c:24:59:e9:d3:18:d1:b3:86:f5:4f:4d:fd:6f:26: 21:9e:25:6e:bf:a2:6d:b5:82:b2:19:a0:4b:18:5e:e6:d7:80: ea:a0:11:f2:b3:1b:0d:30:2f:51:93:f7:9d:9e:aa:e9:b7:d3: c0:a0:b2:3a:29:6e:23:84:43:cb:02:3a:df:16:5f:bc:10:08: 7f:13:d6:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNP0D54tIskW0F0Jwc+8hh4e4xV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYx RkQ0NkEzNjAeFw0yNjA3MjEwMjI4NTBaFw0yNjA3MjIwMjMzNTBaMDMxMTAvBgNV BAMTKDVBQTU3QzM2QzE4RDI0RUMyRTBFRDc0RjZBRTA0MjI5QkY1NEU5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6CIn2PAKz0uo5nvh6iWz0xvJ mlrl+dcipGVn+ajhYc/7naPJeiiCV/L2jK1S/u/aQyVhM2Wgl9H9m2QjKo8rk2rg 1tINjugFtSAjBqG2vwirrgZULOZ4oCIdym0ERP9v67FT/TC0VI+b3UMIBPU5Yhu5 y3ylNujg4aFa3rR2NAS18Bp6bt6BLjMSqBIQrBRiNN0/oeysdm3z1Uhhm2xCSni+ 3KcmXUVxU/io9/NFruuEMANCoPzjFQugGIDmgxCD4pFM3XBmdKDSq1hoTzSCVyPY wzJtxxixR1IQnyL0xXHa8lS5NM+pCq6knJXqZ/y99dN5Fi5F0FE1U+EL0jjdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqV8NsGNJOwuDtdPauBCKb9U6egwHwYDVR0j BBgwFoAU+kL8ihsXJlkU8VIaEHnTXx/UajYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFlZDA5OGItNDliMS00ZjUzLWI3NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEEx QjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYxRkQ0NkEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTQyRkM4QTFCMTcyNjU5MTRGMTUyMUExMDc5RDM1RjFGRDQ2 QTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQz NUYxRkQ0NkEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH//vRyo977XH8m0cMAWbqoB00SOUsnPIDXT vvafvK/fvODC62uqqmaNduBCPjI6XjSHLzvjQFEbT/CVjV9l9V5fDUKmpy01yOWH YaRt7bX3PGJPyDSJzeGwt9Qulz1ShAzPUxR3c1asXKnWhum8xQigiEje81CH6JyC OGZyKk/LPbDhSvF9JCFJlpJ2ZprUqaXOdHVmCPAt7BsY44J0UEyya7LHboczm8w2 2XJ+WkWkzhGifJF31IwkWenTGNGzhvVPTf1vJiGeJW6/om21grIZoEsYXubXgOqg EfKzGw0wL1GT952equm308CgsjopbiOEQ8sCOt8WX7wQCH8T1iM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:09:18 2026 by rpki-client