$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft File: FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft (raw, json) Hash identifier: fTQjjUOIh38Ji88WdA+sS3+L+CCKrRho9MKNuMV2rps= Subject key identifier: A9:EB:A3:ED:67:B3:FA:8D:51:01:50:2C:21:7D:C7:30:FF:E7:4E:03 Authority key identifier: FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF Certificate issuer: /CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF Certificate serial: 712D9962DDB90D81AD78874114FAAACAE68AB8FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft Manifest number: 69 Signing time: Mon 20 Jul 2026 19:35:33 +0000 Manifest this update: Mon 20 Jul 2026 19:30:33 +0000 Manifest next update: Tue 21 Jul 2026 21:56:33 +0000 Files and hashes: 1: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: dro/uVDmCCZVeSiHITBTTi+wa46OyEUBbiwxzlIppDE=) 2: FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl (hash: b8jflyHt+5iRU/8mPfULkJKnxM60ltN04saSv4DngdE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2d:99:62:dd:b9:0d:81:ad:78:87:41:14:fa:aa:ca:e6:8a:b8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA2C15411A0C30D52BAD995C192427BCD01C58FF Validity Not Before: Jul 20 19:30:33 2026 GMT Not After : Jul 21 21:56:33 2026 GMT Subject: CN=A9EBA3ED67B3FA8D5101502C217DC730FFE74E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:80:3f:26:b6:f9:83:18:b9:35:2d:35:86:18: 35:bb:51:d9:03:53:c2:8f:a1:1f:15:47:63:77:da: dc:2b:c8:94:57:b0:62:b4:f0:25:20:54:26:c0:db: 34:39:23:26:7d:5c:ee:c7:11:a5:17:06:d9:41:e7: 6a:47:f8:fe:6c:09:f5:4f:57:da:80:60:37:53:c2: 99:8e:f3:c9:6c:96:60:88:0e:b7:5f:d2:fc:7e:d3: 33:74:54:fe:6f:c9:31:44:20:d4:a4:57:4e:af:2a: d7:5a:04:eb:ce:d7:2b:64:bb:8c:94:59:8f:04:ac: 32:1c:f2:dd:4d:2a:6f:32:80:1a:71:01:9e:43:83: 3e:bc:8d:47:3b:69:3e:b7:7d:e2:af:52:b8:27:58: 0a:15:b0:5f:ac:58:b6:5e:fa:73:59:b8:fc:f5:f5: 82:08:2e:35:8a:59:37:ed:93:ff:b5:94:2a:c9:16: dc:28:6e:3e:57:61:44:0d:66:49:22:28:a6:d7:76: 9b:d9:5d:f4:2b:05:1f:2f:95:76:9e:74:cc:c8:7f: 30:1b:29:e9:f2:01:e1:c5:9c:f9:9b:c7:49:d1:aa: cb:d0:06:c5:36:b8:c5:3a:58:77:d1:18:c0:29:67: 03:62:c8:77:bc:2a:0a:88:fb:19:d2:59:ca:75:58: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EB:A3:ED:67:B3:FA:8D:51:01:50:2C:21:7D:C7:30:FF:E7:4E:03 X509v3 Authority Key Identifier: keyid:FA:2C:15:41:1A:0C:30:D5:2B:AD:99:5C:19:24:27:BC:D0:1C:58:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA2C15411A0C30D52BAD995C192427BCD01C58FF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/FA2C15411A0C30D52BAD995C192427BCD01C58FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:11:53:fb:9a:10:b3:c3:20:c6:70:56:cf:5a:9d:46:28:bd: cb:7d:ac:9e:f7:2e:b3:e5:1c:8a:d3:9c:2a:55:72:a7:20:fe: 17:4c:b0:5a:38:cd:d3:3d:83:e1:c5:9a:0c:f4:55:c0:5b:8f: 1d:fc:d0:27:52:96:ac:33:3f:71:cd:9c:ed:96:b3:82:77:be: 17:68:7e:c6:df:8a:29:36:8e:5c:a8:ae:c0:eb:6b:34:e3:90: 0f:b6:0d:08:3f:66:d2:9f:81:91:fc:d7:11:d9:49:9f:96:8d: 08:c2:b9:98:cf:5a:49:35:ec:bf:a4:1e:d8:e4:25:b8:f6:73: 19:85:07:bc:77:8f:be:fd:60:b1:b8:47:c9:02:a6:cc:10:f1: 87:ce:2b:1a:f1:51:73:6b:2f:a6:94:3f:cc:5a:93:f8:6f:df: 53:c4:d1:eb:cb:23:17:b5:cb:63:b8:a3:fe:f0:08:0e:c5:82: 4c:6b:2b:21:63:fd:8f:41:c1:2b:c9:97:2a:c7:8e:ba:1b:76: 91:25:64:69:b8:ba:f7:27:f7:4e:0a:43:ea:4f:11:01:1e:d6: fa:00:b6:9f:f8:96:f4:29:20:ab:9e:37:64:5f:ce:5f:7c:02: e5:29:5d:49:3f:8c:9b:e1:2a:38:be:fd:81:38:ce:5d:75:08: a3:ab:94:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcS2ZYt25DYGteIdBFPqqyuaKuPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEyQzE1NDExQTBDMzBENTJCQUQ5OTVDMTkyNDI3QkNE MDFDNThGRjAeFw0yNjA3MjAxOTMwMzNaFw0yNjA3MjEyMTU2MzNaMDMxMTAvBgNV BAMTKEE5RUJBM0VENjdCM0ZBOEQ1MTAxNTAyQzIxN0RDNzMwRkZFNzRFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfgD8mtvmDGLk1LTWGGDW7UdkD U8KPoR8VR2N32twryJRXsGK08CUgVCbA2zQ5IyZ9XO7HEaUXBtlB52pH+P5sCfVP V9qAYDdTwpmO88lslmCIDrdf0vx+0zN0VP5vyTFEINSkV06vKtdaBOvO1ytku4yU WY8ErDIc8t1NKm8ygBpxAZ5Dgz68jUc7aT63feKvUrgnWAoVsF+sWLZe+nNZuPz1 9YIILjWKWTftk/+1lCrJFtwobj5XYUQNZkkiKKbXdpvZXfQrBR8vlXaedMzIfzAb KenyAeHFnPmbx0nRqsvQBsU2uMU6WHfRGMApZwNiyHe8KgqI+xnSWcp1WAShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeuj7Wez+o1RAVAsIX3HMP/nTgMwHwYDVR0j BBgwFoAU+iwVQRoMMNUrrZlcGSQnvNAcWP8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ4MDhmNjctOWFiYy00NmRkLTk4MTctYjkzMzkwOTNmODhlLzAvRkEyQzE1NDEx QTBDMzBENTJCQUQ5OTVDMTkyNDI3QkNEMDFDNThGRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTJDMTU0MTFBMEMzMEQ1MkJBRDk5NUMxOTI0MjdCQ0QwMUM1 OEZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvRkEyQzE1NDExQTBDMzBENTJCQUQ5OTVDMTkyNDI3 QkNEMDFDNThGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMRU/uaELPDIMZwVs9anUYovct9rJ73LrPl HIrTnCpVcqcg/hdMsFo4zdM9g+HFmgz0VcBbjx380CdSlqwzP3HNnO2Ws4J3vhdo fsbfiik2jlyorsDrazTjkA+2DQg/ZtKfgZH81xHZSZ+WjQjCuZjPWkk17L+kHtjk Jbj2cxmFB7x3j779YLG4R8kCpswQ8YfOKxrxUXNrL6aUP8xak/hv31PE0evLIxe1 y2O4o/7wCA7FgkxrKyFj/Y9BwSvJlyrHjrobdpElZGm4uvcn904KQ+pPEQEe1voA tp/4lvQpIKueN2Rfzl98AuUpXUk/jJvhKji+/YE4zl11CKOrlCc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:35 2026 by rpki-client