$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft File: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft (raw, json) Hash identifier: uNpf3kAdrPDVEtVqZFoYLQGpErDR0cFb9oEhC6TLpc8= Subject key identifier: 28:84:D1:23:77:4F:F2:4A:53:68:B7:95:B4:93:18:92:EB:2A:E1:DC Authority key identifier: FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 Certificate issuer: /CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Certificate serial: 7F2306CF0DB02B05716A884CCD62D69941C4C118 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft Manifest number: E8 Signing time: Fri 23 Oct 2026 20:04:06 +0000 Manifest this update: Fri 23 Oct 2026 19:59:06 +0000 Manifest next update: Sat 24 Oct 2026 21:20:06 +0000 Files and hashes: 1: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: 6SppfkF8eVpsbv3lpYMgeui/a2ZGzOBtIUsaQRZ4g0M=) 2: 3130332e3130302e3138302e302f32342d3234203d3e203435333035.roa (hash: p8N00vRWvDoAwmvXOvK2uKQEKFr0HDo7546r1yOC14c=) 3: 3130332e3130302e3138302e302f32332d3234203d3e203435333035.roa (hash: kXpbv8peYzzifLMXe3GcVqAoAy/+GcDR8wOc/Xv+1Rk=) 4: FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl (hash: T+2ZOsxpxAQhux4cDGHCWsmXdVdSzUN1uW+9So05iFY=) 5: 3130332e3130302e3138312e302f32342d3234203d3e203435333035.roa (hash: HJowqMt9szakFuZQV92I+RS0KrHeimMD9wrjjcADKbo=) 6: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: wkfJ8UPGVAxOk1V5VxqfOzTwHiofU6GLNqQzYRBk1vQ=) 7: 3130332e3130302e3138322e302f32342d3234203d3e203435333035.roa (hash: YtzaSaPgwxEZQsnLcZtioEhiAZkM/IlAbU0GAn592AA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 21:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:23:06:cf:0d:b0:2b:05:71:6a:88:4c:cd:62:d6:99:41:c4:c1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA0C81FA8B24B445E3FFBB9162EAF43F73936B03 Validity Not Before: Oct 23 19:59:06 2026 GMT Not After : Oct 24 21:20:06 2026 GMT Subject: CN=2884D123774FF24A5368B795B4931892EB2AE1DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:94:c1:e0:8c:55:a1:1f:bb:df:03:dc:7c: dd:e5:86:4f:30:f9:a5:da:bf:c7:a2:ae:37:92:cb: 0f:3d:f9:18:1a:3f:ce:c0:5c:35:9b:c7:11:34:c4: a6:ce:7b:cc:21:a2:0f:06:6b:d4:28:c6:eb:e2:75: 63:4e:f9:0a:7e:86:99:7c:6c:e6:fc:3f:7b:03:cd: 0c:5a:5e:fd:0e:15:7a:37:4b:a5:4d:20:68:b4:aa: 7e:d9:78:d9:e1:4b:b6:ca:32:2c:9b:87:0b:bf:25: 3e:3c:81:34:4b:34:b7:75:ab:d1:ab:65:cb:fa:90: 47:d5:d4:72:a9:82:1b:6a:36:4f:d2:e4:df:f1:0d: 1d:b8:7d:98:a9:b8:e1:ff:1e:e2:4b:cc:81:58:a2: dc:66:03:2d:41:81:02:50:60:30:ff:37:ea:2d:98: 64:73:0d:f2:39:80:a2:e0:cf:68:2e:4f:17:b4:21: cc:45:f0:ba:d5:ee:1c:af:67:33:ae:5a:9b:72:93: 55:bc:09:d3:53:b3:fd:f7:17:62:72:ab:83:df:24: 8c:99:0d:cb:f4:15:83:77:d4:b1:61:66:c0:12:63: 4b:e2:30:5d:00:86:42:52:ad:de:2a:b2:54:df:fa: 1c:00:f3:28:82:85:06:55:7b:f3:e0:70:ca:aa:66: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:84:D1:23:77:4F:F2:4A:53:68:B7:95:B4:93:18:92:EB:2A:E1:DC X509v3 Authority Key Identifier: keyid:FA:0C:81:FA:8B:24:B4:45:E3:FF:BB:91:62:EA:F4:3F:73:93:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/FA0C81FA8B24B445E3FFBB9162EAF43F73936B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5c:39:58:ce:ac:71:7b:e6:d8:b2:bd:12:04:9e:bf:5c:60: 05:34:53:d4:03:2a:8d:ef:a6:fa:83:b4:c6:68:73:f8:ab:d0: 0e:5d:30:26:5f:4e:c0:18:86:82:49:de:fe:3b:d6:9c:82:57: 2a:cc:23:38:60:f5:17:cd:ff:de:37:0f:00:0e:57:03:1c:0d: 81:a7:c4:b8:b6:c1:a2:e9:13:53:a2:16:fa:6b:7e:30:35:47: e3:1b:bf:b2:38:b8:de:b2:3a:d5:bc:3d:4d:50:4a:08:99:4a: c7:3c:f0:84:a1:ef:2a:b5:25:d2:b0:18:68:54:fa:4d:5d:fe: 2c:ac:64:51:35:8d:89:25:d6:d9:b3:3e:a1:a7:f6:4a:bc:bc: b8:2d:da:c4:94:8a:bf:e0:55:96:14:0e:af:0a:eb:9c:cc:dc: 06:ff:74:bb:d2:af:f9:79:97:a7:d0:f8:06:f0:79:49:a2:c7: e7:04:51:21:93:df:f7:b2:75:24:0f:f7:a4:cf:9f:3c:3d:d9: 83:46:11:42:2d:bc:30:c7:d2:91:da:94:a1:00:9c:db:af:f2: af:6c:68:a4:c6:71:8b:9e:dd:70:37:db:8b:ba:6f:ca:49:e7: 7b:82:fe:7b:a2:1d:93:f4:48:71:7f:5d:78:97:4d:0c:9b:31: 2e:45:7e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyMGzw2wKwVxaohMzWLWmUHEwRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3 MzkzNkIwMzAeFw0yNjEwMjMxOTU5MDZaFw0yNjEwMjQyMTIwMDZaMDMxMTAvBgNV BAMTKDI4ODREMTIzNzc0RkYyNEE1MzY4Qjc5NUI0OTMxODkyRUIyQUUxREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDZTB4IxVoR+73wPcfN3lhk8w +aXav8eirjeSyw89+RgaP87AXDWbxxE0xKbOe8whog8Ga9QoxuvidWNO+Qp+hpl8 bOb8P3sDzQxaXv0OFXo3S6VNIGi0qn7ZeNnhS7bKMiybhwu/JT48gTRLNLd1q9Gr Zcv6kEfV1HKpghtqNk/S5N/xDR24fZipuOH/HuJLzIFYotxmAy1BgQJQYDD/N+ot mGRzDfI5gKLgz2guTxe0IcxF8LrV7hyvZzOuWptyk1W8CdNTs/33F2Jyq4PfJIyZ Dcv0FYN31LFhZsASY0viMF0AhkJSrd4qslTf+hwA8yiChQZVe/PgcMqqZsMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKITRI3dP8kpTaLeVtJMYkusq4dwwHwYDVR0j BBgwFoAU+gyB+osktEXj/7uRYur0P3OTawMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWVmMDg5MDAtZjJjNi00ZDA3LWI2OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4 QjI0QjQ0NUUzRkZCQjkxNjJFQUY0M0Y3MzkzNkIwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTBDODFGQThCMjRCNDQ1RTNGRkJCOTE2MkVBRjQzRjczOTM2 QjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRkEwQzgxRkE4QjI0QjQ0NUUzRkZCQjkxNjJFQUY0 M0Y3MzkzNkIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxcOVjOrHF75tiyvRIEnr9cYAU0U9QDKo3v pvqDtMZoc/ir0A5dMCZfTsAYhoJJ3v471pyCVyrMIzhg9RfN/943DwAOVwMcDYGn xLi2waLpE1OiFvprfjA1R+Mbv7I4uN6yOtW8PU1QSgiZSsc88ISh7yq1JdKwGGhU +k1d/iysZFE1jYkl1tmzPqGn9kq8vLgt2sSUir/gVZYUDq8K65zM3Ab/dLvSr/l5 l6fQ+AbweUmix+cEUSGT3/eydSQP96TPnzw92YNGEUItvDDH0pHalKEAnNuv8q9s aKTGcYue3XA324u6b8pJ53uC/nuiHZP0SHF/XXiXTQybMS5FfhM= -----END CERTIFICATE-----Generated at Sat Oct 24 07:16:43 2026 by rpki-client