$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft File: FAF852347432F9918D1450C78A1EC83C3599937A.mft (raw, json) Hash identifier: 5iLD8k/0anH9VNEa7nQPlEA3IzQb04QVBOs2F5gsrag= Subject key identifier: BC:56:BD:2D:E6:7E:DD:D0:2C:7C:F4:94:65:DC:D1:C2:2A:3A:57:A9 Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A Certificate serial: 580C550A08E2228E5E95C131EF2FC9C92517D6A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 18:52:31 +0000 Manifest this update: Wed 16 Sep 2026 18:47:31 +0000 Manifest next update: Thu 17 Sep 2026 21:56:31 +0000 Files and hashes: 1: 3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (hash: UzvqFPsUw2UDPZr/Tb1I0DK7ahyAgNpcOMHRIjrwBD4=) 2: 3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (hash: YIhkZGCrEo7q6dhmARTKbRHKotzBRbwB1hBqlD6N5YU=) 3: 3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (hash: ewQ6iXIhuUAl7kqR6m/ckq2ZC+S2rYtpx+y5kc5ryZc=) 4: 3230322e3138302e35312e302f32342d3234203d3e203338313435.roa (hash: cODmeerLR567ao+7Fcrm0HEn3E2rcMUDte7vapcxFDQ=) 5: FAF852347432F9918D1450C78A1EC83C3599937A.crl (hash: paqCAWo60KcHJYbXEtLx9udNfHLS9GmIy+YeOQXds/M=) 6: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (hash: jYh/8DeC6MGduy9a59ZlrYpV1Zy029mpfofzMC1+aS4=) 7: 3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (hash: yw71sEyG6SYVV0OrPV1gsKYKQVEpFjzFii37SAAB9FU=) 8: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (hash: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=) 9: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (hash: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0c:55:0a:08:e2:22:8e:5e:95:c1:31:ef:2f:c9:c9:25:17:d6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A Validity Not Before: Sep 16 18:47:31 2026 GMT Not After : Sep 17 21:56:31 2026 GMT Subject: CN=BC56BD2DE67EDDD02C7CF49465DCD1C22A3A57A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:d4:46:03:45:00:76:ab:bc:1e:b7:79:e2: 11:da:e7:f9:7a:61:bd:99:d8:87:ce:c0:ce:af:2f: 80:8a:7f:be:ee:d7:4c:77:4f:b7:fc:97:c8:90:a6: 1e:dd:ed:08:c7:1e:8e:31:c2:ee:71:bf:e7:7d:21: 61:93:9b:0b:c5:74:ca:4e:85:ef:53:6f:74:84:bd: c8:10:25:95:17:1a:42:f9:f6:3d:2d:71:70:5b:c3: df:f3:e9:8e:1f:0e:69:62:7e:b9:c3:e0:22:be:b3: 57:08:dc:26:c3:91:e6:36:75:e5:1a:3b:65:29:87: 90:76:ad:e4:c6:1a:89:e8:99:f7:e2:9b:de:25:10: b0:e6:da:98:b5:5b:9d:08:c6:8e:13:73:86:d6:46: 4a:c1:b4:64:fe:31:3e:46:e5:bf:17:61:79:81:f3: d9:3c:5e:43:cb:46:b7:75:d2:b1:90:f7:1c:58:e7: 67:58:d0:6c:2d:6d:2d:10:f7:75:6e:84:23:e1:e5: 8a:cc:eb:77:d8:4f:50:1f:3a:e0:e3:90:ac:ce:38: 1a:3c:30:5c:13:9d:de:a9:53:eb:e4:5e:f1:f3:0b: 95:99:49:18:fb:99:7b:99:21:75:3c:9b:ea:a2:a9: 8e:e6:05:b4:32:2d:bf:42:49:fc:b4:c1:c6:66:ee: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:56:BD:2D:E6:7E:DD:D0:2C:7C:F4:94:65:DC:D1:C2:2A:3A:57:A9 X509v3 Authority Key Identifier: keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d3:c8:ad:71:bd:81:f8:4b:2a:3b:5a:29:b6:99:01:a3:24: c4:a8:df:26:54:c9:70:9e:f5:64:93:69:8c:95:c2:1e:bb:aa: 08:b7:b8:06:92:41:d2:93:82:0b:84:09:de:9c:ba:9b:b1:fb: 0d:2b:c7:e5:5b:fa:ea:dd:7d:38:c2:ec:21:66:ae:76:51:ca: 3f:cc:9e:a3:11:57:a5:52:c0:5f:9b:b6:17:7b:f5:ee:76:81: ce:01:d3:7a:eb:38:d7:49:81:bd:77:06:55:dc:96:e3:2e:2e: ec:07:df:43:ae:25:dc:34:85:f3:10:ed:8c:38:68:e9:f6:86: 3c:cb:49:eb:6f:96:66:66:81:d5:80:c6:37:7b:a9:f7:d8:2b: 1a:24:80:3c:87:35:c8:6f:c4:30:e8:1c:bd:a9:00:7c:77:1f: 67:9f:15:b2:d1:84:3e:5d:83:0c:2c:30:fa:e5:e4:84:44:23: d1:a2:6b:77:47:8f:e0:10:93:bf:ea:e0:26:bb:49:ee:58:83: ad:e6:9d:41:29:9c:f1:bd:8a:ff:49:d4:c4:97:9e:9b:76:32: 8e:2f:80:77:00:77:bf:d4:48:69:88:03:a9:c6:f7:d7:4a:7e: 6d:ff:77:90:36:bf:b1:02:5a:48:cb:23:34:22:5d:22:cb:90: 08:7f:f7:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAxVCgjiIo5elcEx7y/JySUX1qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz NTk5OTM3QTAeFw0yNjA5MTYxODQ3MzFaFw0yNjA5MTcyMTU2MzFaMDMxMTAvBgNV BAMTKEJDNTZCRDJERTY3RURERDAyQzdDRjQ5NDY1RENEMUMyMkEzQTU3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROdRGA0UAdqu8Hrd54hHa5/l6 Yb2Z2IfOwM6vL4CKf77u10x3T7f8l8iQph7d7QjHHo4xwu5xv+d9IWGTmwvFdMpO he9Tb3SEvcgQJZUXGkL59j0tcXBbw9/z6Y4fDmlifrnD4CK+s1cI3CbDkeY2deUa O2Uph5B2reTGGonomffim94lELDm2pi1W50Ixo4Tc4bWRkrBtGT+MT5G5b8XYXmB 89k8XkPLRrd10rGQ9xxY52dY0GwtbS0Q93VuhCPh5YrM63fYT1AfOuDjkKzOOBo8 MFwTnd6pU+vkXvHzC5WZSRj7mXuZIXU8m+qiqY7mBbQyLb9CSfy0wcZm7kHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvFa9LeZ+3dAsfPSUZdzRwio6V6kwHwYDVR0j BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3 NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5 MzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTc5ODRlM2EtNDhmOS00Y2RhLWJl NmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4 M0MzNTk5OTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXTyK1xvYH4Syo7Wim2mQGjJMSo3yZUyXCe 9WSTaYyVwh67qgi3uAaSQdKTgguECd6cupux+w0rx+Vb+urdfTjC7CFmrnZRyj/M nqMRV6VSwF+bthd79e52gc4B03rrONdJgb13BlXcluMuLuwH30OuJdw0hfMQ7Yw4 aOn2hjzLSetvlmZmgdWAxjd7qffYKxokgDyHNchvxDDoHL2pAHx3H2efFbLRhD5d gwwsMPrl5IREI9Gia3dHj+AQk7/q4Ca7Se5Yg63mnUEpnPG9iv9J1MSXnpt2Mo4v gHcAd7/USGmIA6nG99dKfm3/d5A2v7ECWkjLIzQiXSLLkAh/95I= -----END CERTIFICATE-----Generated at Thu Sep 17 09:25:07 2026 by rpki-client