$ rpki-client -vvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft File: FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft (raw, json) Hash identifier: kAxu28RYD9VJU/Ael7h8qjhvlTQJPbOU+47cBvBmTqI= Subject key identifier: 34:83:A8:55:AF:05:B1:F9:9D:C2:0A:D0:8F:98:9C:F2:55:B0:28:AD Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 Certificate issuer: /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Certificate serial: 4021436AF6F19D586F26DEFDF903C2991EB04A42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:43:21 +0000 Manifest this update: Tue 02 Jun 2026 22:38:21 +0000 Manifest next update: Thu 04 Jun 2026 00:21:21 +0000 Files and hashes: 1: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: WO/HZkeGMlCtfYP3+X9HhjaUkBzT5oOMey9taigK+SI=) 2: FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl (hash: yYsXmwmm7gXCEUNRZIv7wTvVeyNea4Z3Wq3BVxyd5Ho=) 3: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: 3B/Kcnz6SN3QWJKso2FwDZnb6H6gRFM38JAa0O3o8qk=) 4: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: uuP3mIBEEQQRdZDqxBE2OXZk3Oekoj4K3r/fRqZFmeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:21:43:6a:f6:f1:9d:58:6f:26:de:fd:f9:03:c2:99:1e:b0:4a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Validity Not Before: Jun 2 22:38:21 2026 GMT Not After : Jun 4 00:21:21 2026 GMT Subject: CN=3483A855AF05B1F99DC20AD08F989CF255B028AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:c9:f7:4d:18:e3:01:1f:25:70:9f:e3:68: 8f:76:64:0a:1d:f9:2f:30:fc:05:17:f1:eb:e9:0e: f8:85:ba:7e:08:12:da:75:4c:0a:a4:47:40:14:28: 36:d5:4e:34:e7:5e:37:05:cf:22:d4:da:2f:a6:de: c9:b5:cc:d9:55:18:02:d1:54:cb:c0:25:51:1d:fb: e5:da:4d:28:68:4a:17:7e:61:73:a1:dd:a8:47:84: 39:58:b5:2c:64:b7:ad:b8:f7:bd:08:15:bd:9e:59: fa:40:a1:78:94:e9:18:06:d8:00:e5:0d:7b:79:5b: 9f:c1:3a:dd:f4:36:b6:9f:b2:f4:c6:95:65:b7:ff: 57:4b:98:0d:d5:4d:3b:b4:3a:6f:a3:c3:b0:d6:03: 88:9c:d9:a9:43:7d:ac:f9:4c:88:86:c1:cf:1c:d8: 35:75:c1:ba:a5:94:ad:00:03:d4:81:d9:68:ef:49: 1a:14:d2:ad:d9:ef:17:f2:ee:a3:2c:92:f8:2e:e2: fb:ad:52:5b:0e:a3:0e:06:cb:6f:b8:7f:60:9b:94: 20:74:be:5b:88:3a:a7:d7:45:86:6c:b1:0e:7a:c0: 9a:24:5e:01:51:f7:e1:96:3e:3f:f7:84:0d:28:2e: 59:a3:66:a8:c6:50:ef:ea:d6:30:b4:fd:45:0c:b1: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:83:A8:55:AF:05:B1:F9:9D:C2:0A:D0:8F:98:9C:F2:55:B0:28:AD X509v3 Authority Key Identifier: keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:46:f2:2e:b1:87:89:bf:29:94:ad:8c:82:f0:ce:34:da:93: 37:f4:cd:f8:28:b5:13:54:8c:5b:82:39:2d:bc:e2:e1:df:6d: 77:5f:39:db:63:fc:a6:93:f0:02:e4:9f:6f:19:f9:2f:65:6a: 7c:a4:0e:09:b8:15:d7:f1:ad:b1:8b:dd:2e:e9:42:d6:40:af: cf:53:6f:13:24:52:ae:4f:2b:fa:40:9c:44:34:f1:eb:37:a5: 0b:b0:4f:63:27:a2:16:6f:26:95:64:80:7f:66:da:86:48:8a: ab:59:c3:f9:48:34:50:63:8d:d3:d4:64:83:89:2b:d1:23:e6: d0:9b:5f:93:cf:2b:6f:6b:cf:3f:0d:37:f3:1b:e4:c2:e3:91: 00:d7:65:83:49:3c:95:b4:ca:31:81:2f:94:eb:c1:71:c6:59: 05:7e:4e:e5:38:93:6c:80:67:f6:a7:84:49:59:8c:00:bc:0b: b0:e7:08:08:c8:aa:58:b0:0d:74:81:74:41:2e:b3:69:46:1b: 94:ee:b0:73:34:cb:87:92:23:ce:bd:86:ed:47:d9:f6:da:16: e5:24:da:05:f8:c6:55:cf:8e:d0:e3:a0:76:98:4f:7c:d3:34: 33:55:8d:30:bc:c3:68:1f:13:c4:fc:1d:37:3e:e8:60:5e:4d: b3:94:d9:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCFDavbxnVhvJt79+QPCmR6wSkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYx RkQ0NkEzNjAeFw0yNjA2MDIyMjM4MjFaFw0yNjA2MDQwMDIxMjFaMDMxMTAvBgNV BAMTKDM0ODNBODU1QUYwNUIxRjk5REMyMEFEMDhGOTg5Q0YyNTVCMDI4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Bcn3TRjjAR8lcJ/jaI92ZAod +S8w/AUX8evpDviFun4IEtp1TAqkR0AUKDbVTjTnXjcFzyLU2i+m3sm1zNlVGALR VMvAJVEd++XaTShoShd+YXOh3ahHhDlYtSxkt624970IFb2eWfpAoXiU6RgG2ADl DXt5W5/BOt30NrafsvTGlWW3/1dLmA3VTTu0Om+jw7DWA4ic2alDfaz5TIiGwc8c 2DV1wbqllK0AA9SB2WjvSRoU0q3Z7xfy7qMskvgu4vutUlsOow4Gy2+4f2CblCB0 vluIOqfXRYZssQ56wJokXgFR9+GWPj/3hA0oLlmjZqjGUO/q1jC0/UUMseiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNIOoVa8FsfmdwgrQj5ic8lWwKK0wHwYDVR0j BBgwFoAU+kL8ihsXJlkU8VIaEHnTXx/UajYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFlZDA5OGItNDliMS00ZjUzLWI3NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEEx QjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYxRkQ0NkEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTQyRkM4QTFCMTcyNjU5MTRGMTUyMUExMDc5RDM1RjFGRDQ2 QTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQz NUYxRkQ0NkEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVG8i6xh4m/KZStjILwzjTakzf0zfgotRNU jFuCOS284uHfbXdfOdtj/KaT8ALkn28Z+S9lanykDgm4FdfxrbGL3S7pQtZAr89T bxMkUq5PK/pAnEQ08es3pQuwT2MnohZvJpVkgH9m2oZIiqtZw/lINFBjjdPUZIOJ K9Ej5tCbX5PPK29rzz8NN/Mb5MLjkQDXZYNJPJW0yjGBL5TrwXHGWQV+TuU4k2yA Z/anhElZjAC8C7DnCAjIqliwDXSBdEEus2lGG5TusHM0y4eSI869hu1H2fbaFuUk 2gX4xlXPjtDjoHaYT3zTNDNVjTC8w2gfE8T8HTc+6GBeTbOU2Tw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:40 2026 by rpki-client