$ rpki-client -vvvf rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft File: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft (raw, json) Hash identifier: 3lVPW/bPMh4BHdk5mka8AIfN8MIsbV6argtHkFTs810= Subject key identifier: 9D:3A:71:D7:12:AE:A8:48:A9:27:FB:D0:D6:64:6F:9D:A5:B6:D9:2A Authority key identifier: FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F Certificate issuer: /CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F Certificate serial: 412129CA054A7F1EB3D5F836ADE262053BA5A7E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft Manifest number: E5 Signing time: Tue 20 Oct 2026 18:32:18 +0000 Manifest this update: Tue 20 Oct 2026 18:27:18 +0000 Manifest next update: Wed 21 Oct 2026 20:51:18 +0000 Files and hashes: 1: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl (hash: ELd6DzRFT50b0Bz6j0RHEAkW515EVpKIEpebTUvfCXs=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: XKdnxw/xojNzwS4ZrpciIaEdrs5hQa/CJQz9/Iivznw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 20:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:21:29:ca:05:4a:7f:1e:b3:d5:f8:36:ad:e2:62:05:3b:a5:a7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F Validity Not Before: Oct 20 18:27:18 2026 GMT Not After : Oct 21 20:51:18 2026 GMT Subject: CN=9D3A71D712AEA848A927FBD0D6646F9DA5B6D92A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:7d:9e:5e:59:23:74:6c:60:f6:37:46:d5: 17:57:94:31:20:08:97:25:7c:5a:4c:1c:d5:17:ca: fb:a8:2d:a3:82:ac:a7:42:66:27:3e:9e:e9:13:f0: 71:81:f4:c4:01:a4:fa:aa:f3:05:98:04:2e:76:c9: 79:0e:79:d5:a2:38:90:b1:c8:f4:90:c7:19:a6:f7: 5f:22:e3:7e:ec:8e:1b:96:fd:cf:2c:9f:1f:79:f9: 46:5d:93:71:da:bc:c5:32:1d:c5:89:af:0d:01:9c: b5:88:be:c1:fc:a0:f1:5d:41:e8:42:f5:1d:77:2e: 82:db:d7:aa:27:63:6d:82:27:67:aa:bb:b6:6f:d3: 04:a8:20:0c:96:a0:c9:53:d8:69:e7:ca:c3:2b:2e: b2:51:1a:52:56:89:8a:3e:7c:f3:1e:4d:57:be:f0: 3a:4d:5b:c1:a6:6e:25:19:a5:d7:a3:3c:92:67:83: f3:74:cb:8b:86:b7:67:fe:a9:6c:db:88:94:79:7c: ec:47:1b:18:4e:09:d8:f4:6e:41:fc:5f:a6:81:f0: 65:6f:80:a8:44:c2:21:a1:9b:b1:b2:cc:be:5f:83: 2f:f3:71:a5:5b:7f:ce:d5:bc:0d:d8:9e:78:4a:ba: 6d:7b:a0:42:02:08:69:34:e3:c3:b5:f5:0e:2a:e7: 3b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3A:71:D7:12:AE:A8:48:A9:27:FB:D0:D6:64:6F:9D:A5:B6:D9:2A X509v3 Authority Key Identifier: keyid:FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:99:8f:54:ae:0f:95:bc:dc:04:21:3d:07:26:42:28:ba:93: e2:a8:d9:ec:66:1a:9f:d3:a7:ef:96:e6:21:e3:5b:5c:ba:74: 30:e6:51:97:3a:bb:27:9d:c7:09:81:75:aa:47:f5:af:c5:e2: a6:73:a9:2f:5d:d5:ec:76:37:ba:c1:49:a4:60:0f:22:32:e9: 23:e1:82:a0:60:4e:22:cf:24:24:99:08:43:6e:78:3c:c0:48: 78:14:6b:69:e6:25:d4:91:0d:ca:ba:e5:c2:60:44:3e:3c:31: ad:dd:58:37:ab:52:94:e6:de:44:cf:04:6a:1b:01:27:31:af: d1:4f:ca:ef:11:d3:4f:cb:4a:62:b9:4d:d5:20:24:c1:30:56: e7:55:fa:d6:1e:3e:9f:6f:11:d2:b7:f4:7f:f5:bf:4d:30:b8: 2f:3f:a9:b5:8b:ed:cb:de:78:05:0f:d9:0d:0c:6d:7f:75:33: c4:28:0c:4c:3e:a7:ed:a5:e4:20:c1:29:00:72:af:18:38:e5: ee:96:75:bb:d9:1b:65:39:db:54:de:53:f9:d5:2d:c9:af:93: 6b:39:bb:eb:41:99:3c:75:b9:e2:e9:a7:a0:1b:2a:45:cf:71: 66:da:e0:f5:4c:b6:70:8b:9d:01:8c:33:c8:90:97:c2:d6:e5: ef:20:b6:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSEpygVKfx6z1fg2reJiBTulp+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVEMUEz Q0ZGODM5RjAeFw0yNjEwMjAxODI3MThaFw0yNjEwMjEyMDUxMThaMDMxMTAvBgNV BAMTKDlEM0E3MUQ3MTJBRUE4NDhBOTI3RkJEMEQ2NjQ2RjlEQTVCNkQ5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA532eXlkjdGxg9jdG1RdXlDEg CJclfFpMHNUXyvuoLaOCrKdCZic+nukT8HGB9MQBpPqq8wWYBC52yXkOedWiOJCx yPSQxxmm918i437sjhuW/c8snx95+UZdk3HavMUyHcWJrw0BnLWIvsH8oPFdQehC 9R13LoLb16onY22CJ2equ7Zv0wSoIAyWoMlT2GnnysMrLrJRGlJWiYo+fPMeTVe+ 8DpNW8GmbiUZpdejPJJng/N0y4uGt2f+qWzbiJR5fOxHGxhOCdj0bkH8X6aB8GVv gKhEwiGhm7GyzL5fgy/zcaVbf87VvA3YnnhKum17oEICCGk048O19Q4q5zt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTpx1xKuqEipJ/vQ1mRvnaW22SowHwYDVR0j BBgwFoAU+nGwXY8xKo33q9h5lstdGjz/g58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU4ZGI4N2ItMTZjZC00MzdhLWE1YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4 RjMxMkE4REY3QUJEODc5OTZDQjVEMUEzQ0ZGODM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTcxQjA1RDhGMzEyQThERjdBQkQ4Nzk5NkNCNUQxQTNDRkY4 MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVE MUEzQ0ZGODM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6Zj1SuD5W83AQhPQcmQii6k+Ko2exmGp/T p++W5iHjW1y6dDDmUZc6uyedxwmBdapH9a/F4qZzqS9d1ex2N7rBSaRgDyIy6SPh gqBgTiLPJCSZCENueDzASHgUa2nmJdSRDcq65cJgRD48Ma3dWDerUpTm3kTPBGob AScxr9FPyu8R00/LSmK5TdUgJMEwVudV+tYePp9vEdK39H/1v00wuC8/qbWL7cve eAUP2Q0MbX91M8QoDEw+p+2l5CDBKQByrxg45e6WdbvZG2U521TeU/nVLcmvk2s5 u+tBmTx1ueLpp6AbKkXPcWba4PVMtnCLnQGMM8iQl8LW5e8gtuo= -----END CERTIFICATE-----Generated at Wed Oct 21 11:33:35 2026 by rpki-client