$ rpki-client -vvf rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft File: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft (raw, json) Hash identifier: FiTPH7PkDE2AG41ksAwf8/hFyP51Wi84lTdfAJSlo20= Subject key identifier: 69:E1:09:D5:E4:8F:0F:BA:52:F1:32:26:EB:40:A0:FB:16:8D:64:B8 Authority key identifier: FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F Certificate issuer: /CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F Certificate serial: 065CBAD6D6BB171F04F0C875C277270909C9C4D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 12:50:26 +0000 Manifest this update: Sat 20 Jun 2026 12:45:26 +0000 Manifest next update: Sun 21 Jun 2026 16:20:26 +0000 Files and hashes: 1: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: XKdnxw/xojNzwS4ZrpciIaEdrs5hQa/CJQz9/Iivznw=) 2: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl (hash: O9zoRakEHBF5q2ifZx9DxBCXgqPA58KFbjbegXvtSVg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 10:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5c:ba:d6:d6:bb:17:1f:04:f0:c8:75:c2:77:27:09:09:c9:c4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F Validity Not Before: Jun 20 12:45:26 2026 GMT Not After : Jun 21 16:20:26 2026 GMT Subject: CN=69E109D5E48F0FBA52F13226EB40A0FB168D64B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:b9:16:19:e7:8b:67:0c:5d:e1:09:be:19: 68:1c:25:71:8c:99:89:c6:7e:8a:65:d6:5d:1d:c1: 3c:a1:69:0c:7d:f9:66:94:04:dc:dc:c0:a2:35:7c: 47:4e:1d:4f:7b:c2:80:dc:86:aa:15:9c:97:39:08: f8:fe:d0:05:a2:b4:51:a2:59:e1:bb:dd:00:1d:e1: 4f:e9:38:8d:cf:5f:85:37:56:ea:20:7a:54:47:27: c6:e0:ca:00:fa:7f:e9:f6:e5:f4:45:80:63:ea:4e: e0:54:c9:4d:69:3d:56:eb:29:1a:74:86:aa:68:fa: 8f:27:d4:cb:c7:b2:90:b3:f8:cc:df:8a:4f:f9:a8: 4c:7a:36:7a:81:9b:4e:53:52:07:e8:6d:e6:e6:07: 37:70:fd:b2:98:1e:30:58:b0:16:6a:9d:95:c5:d0: c8:9b:eb:87:dd:75:33:88:90:2f:47:5e:70:a0:a0: 4c:85:92:28:19:92:67:db:c7:a3:b9:67:af:84:3e: c7:d2:15:5d:e1:d6:be:f7:90:4c:d6:89:2d:37:ff: c9:d1:bf:4f:8b:ce:be:77:ee:be:fc:c0:18:ae:ea: 80:6e:1c:34:3a:85:59:c9:6c:65:12:e4:bd:be:35: 35:34:2e:54:81:7d:94:46:67:47:95:05:89:db:62: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E1:09:D5:E4:8F:0F:BA:52:F1:32:26:EB:40:A0:FB:16:8D:64:B8 X509v3 Authority Key Identifier: keyid:FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:3e:a8:d9:14:c8:13:71:8f:e4:01:a0:db:fe:b3:b3:7d:22: 50:1e:84:df:a3:e4:b0:13:3f:00:bf:ec:11:87:44:d2:dc:6b: 30:78:cf:6e:2a:c9:01:41:a7:c7:9f:14:bb:c4:37:e2:71:c5: 82:78:8f:bb:71:c9:22:83:fa:5b:af:ca:24:3e:5b:b3:bb:e6: ef:8f:c5:65:f2:d8:72:0b:22:5c:bd:e3:23:24:88:64:50:c3: 64:64:44:c5:0a:37:5d:0f:b1:d3:44:ba:93:ce:31:ea:d2:7e: c3:fb:f6:fa:d7:df:00:26:93:1e:8e:86:42:5e:f4:3c:33:99: 42:25:e4:26:a3:6d:97:01:c8:00:46:3a:5a:9e:8b:0c:0a:e6: 71:18:1d:00:ce:a7:2d:c6:5a:96:98:39:60:2b:b5:24:bf:3d: 25:5e:16:9a:02:72:e2:6b:27:47:1c:66:e5:2d:6b:4c:63:66: 36:7d:cf:4c:1a:0b:83:05:d1:07:d1:ff:a9:61:ad:d6:db:f5: 58:2c:84:aa:1f:c6:61:f9:40:ab:8a:ee:e7:ea:80:f1:48:dc: 9b:54:3f:61:ac:c2:11:ea:b4:e8:23:58:db:2d:39:bd:5c:29: 92:48:a1:33:32:dc:8e:71:d7:e4:3c:cb:a1:99:0d:cc:ec:ae: f3:eb:7c:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBly61ta7Fx8E8Mh1wncnCQnJxNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVEMUEz Q0ZGODM5RjAeFw0yNjA2MjAxMjQ1MjZaFw0yNjA2MjExNjIwMjZaMDMxMTAvBgNV BAMTKDY5RTEwOUQ1RTQ4RjBGQkE1MkYxMzIyNkVCNDBBMEZCMTY4RDY0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuirkWGeeLZwxd4Qm+GWgcJXGM mYnGfopl1l0dwTyhaQx9+WaUBNzcwKI1fEdOHU97woDchqoVnJc5CPj+0AWitFGi WeG73QAd4U/pOI3PX4U3VuogelRHJ8bgygD6f+n25fRFgGPqTuBUyU1pPVbrKRp0 hqpo+o8n1MvHspCz+Mzfik/5qEx6NnqBm05TUgfobebmBzdw/bKYHjBYsBZqnZXF 0Mib64fddTOIkC9HXnCgoEyFkigZkmfbx6O5Z6+EPsfSFV3h1r73kEzWiS03/8nR v0+Lzr537r78wBiu6oBuHDQ6hVnJbGUS5L2+NTU0LlSBfZRGZ0eVBYnbYqijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaeEJ1eSPD7pS8TIm60Cg+xaNZLgwHwYDVR0j BBgwFoAU+nGwXY8xKo33q9h5lstdGjz/g58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU4ZGI4N2ItMTZjZC00MzdhLWE1YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4 RjMxMkE4REY3QUJEODc5OTZDQjVEMUEzQ0ZGODM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTcxQjA1RDhGMzEyQThERjdBQkQ4Nzk5NkNCNUQxQTNDRkY4 MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVE MUEzQ0ZGODM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACI+qNkUyBNxj+QBoNv+s7N9IlAehN+j5LAT PwC/7BGHRNLcazB4z24qyQFBp8efFLvEN+JxxYJ4j7txySKD+luvyiQ+W7O75u+P xWXy2HILIly94yMkiGRQw2RkRMUKN10PsdNEupPOMerSfsP79vrX3wAmkx6OhkJe 9DwzmUIl5CajbZcByABGOlqeiwwK5nEYHQDOpy3GWpaYOWArtSS/PSVeFpoCcuJr J0ccZuUta0xjZjZ9z0waC4MF0QfR/6lhrdbb9VgshKofxmH5QKuK7ufqgPFI3JtU P2GswhHqtOgjWNstOb1cKZJIoTMy3I5x1+Q8y6GZDczsrvPrfMw= -----END CERTIFICATE-----Generated at Sat Jun 20 20:01:27 2026 by rpki-client