$ rpki-client -vvf rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft File: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft (raw, json) Hash identifier: n32KZdqKY3LRhKK5gbPZE+cFMIseD1gtnQDM9wX05UU= Subject key identifier: 53:2B:AB:93:DA:02:7E:03:E6:29:54:47:A1:CB:F2:D1:E8:10:B8:FF Authority key identifier: FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F Certificate issuer: /CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F Certificate serial: 3915065B700116D09DAAD7AB64535567CB289881 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:56:25 +0000 Manifest this update: Tue 05 May 2026 08:51:25 +0000 Manifest next update: Wed 06 May 2026 11:28:25 +0000 Files and hashes: 1: FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl (hash: VyYwL3Hc0g8tX2hwJXm346A0D/jt2kjGNvD39s+xr8M=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: XKdnxw/xojNzwS4ZrpciIaEdrs5hQa/CJQz9/Iivznw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:15:06:5b:70:01:16:d0:9d:aa:d7:ab:64:53:55:67:cb:28:98:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F Validity Not Before: May 5 08:51:25 2026 GMT Not After : May 6 11:28:25 2026 GMT Subject: CN=532BAB93DA027E03E6295447A1CBF2D1E810B8FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:70:1a:9f:c4:50:ce:1b:d4:89:3b:a0:e9: f3:d9:d7:53:63:79:0f:5f:b0:e4:42:5c:4e:bb:ee: 2b:ea:02:69:ff:dc:28:2e:f8:4f:7f:eb:93:98:d6: 2b:af:98:29:a9:3d:3a:1a:bb:9f:94:f6:67:e5:24: 7c:c2:72:1e:b1:21:fe:9a:8c:92:b5:34:0d:f2:68: e2:20:ad:d1:fa:e7:e8:53:1a:3a:00:9b:9f:8a:c8: 39:cd:54:77:32:db:b3:f6:ff:38:71:01:f0:5b:9c: 0e:3d:97:81:e2:0d:1d:53:82:55:ce:d4:a5:9f:0f: 31:a1:55:f7:2f:00:4a:3c:c7:40:55:ba:d4:bc:0c: 81:44:d7:68:eb:83:6a:b5:9f:9a:1e:f8:a5:da:13: 36:00:ee:d8:7f:00:30:90:c5:e7:20:ec:d4:f5:9e: d4:a6:0e:d3:5b:8c:d0:56:bc:03:5b:32:0f:b3:a0: 9f:35:b7:18:e8:24:89:da:ca:0f:32:5e:07:54:e5: 6f:5c:28:4d:d9:31:b9:98:79:39:a4:18:85:bf:e2: 58:1b:62:4d:f6:2c:ff:f5:af:4a:e4:c7:e7:69:eb: a2:69:1a:7b:83:7d:a4:2e:6d:1b:ad:6a:cc:d9:34: 4c:61:d0:db:c7:a1:4a:e2:30:23:c5:ab:d2:71:c8: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2B:AB:93:DA:02:7E:03:E6:29:54:47:A1:CB:F2:D1:E8:10:B8:FF X509v3 Authority Key Identifier: keyid:FA:71:B0:5D:8F:31:2A:8D:F7:AB:D8:79:96:CB:5D:1A:3C:FF:83:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/FA71B05D8F312A8DF7ABD87996CB5D1A3CFF839F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:29:83:9f:7b:7e:fd:cf:c5:ae:c7:7b:ce:ab:c9:7b:b4:15: d9:cf:db:4f:ea:e2:c0:45:83:a5:9b:65:c1:44:b3:01:9c:70: 4c:68:db:49:dc:de:5e:43:43:b8:4d:85:a2:19:6f:78:c4:0b: 86:1c:32:46:61:db:83:e0:4c:08:da:e4:5c:48:8d:c2:ef:cd: 45:e5:20:24:c4:20:66:55:68:77:e8:99:e9:2b:87:f4:87:ad: 0d:2e:01:ff:da:5a:97:91:8d:9c:d4:4e:89:02:32:5e:0c:98: 5e:af:e7:fd:5c:4f:ec:7a:c7:42:52:68:3d:53:2d:53:6d:c7: 24:14:76:14:a9:c0:d6:2d:70:fb:85:20:49:da:d9:cb:69:5c: 39:06:7b:b5:94:fd:66:8d:fb:10:ad:89:d5:cb:e4:de:43:21: 7c:32:3b:34:83:96:01:95:79:ce:94:e8:21:13:6f:26:8e:b6: eb:96:ff:71:a9:d9:a1:2a:c3:66:e5:2d:6e:23:e7:49:cf:fa: 51:11:bd:43:e5:4f:e4:6a:ca:23:22:d5:db:31:4f:a9:2c:45: 9a:c2:ff:df:e5:22:18:6e:7d:19:c7:ac:ad:48:a7:5c:ef:fd: fc:73:d0:20:ad:06:ff:29:1a:de:93:9a:af:07:d3:4f:c2:84: 2a:78:0b:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORUGW3ABFtCdqterZFNVZ8somIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVEMUEz Q0ZGODM5RjAeFw0yNjA1MDUwODUxMjVaFw0yNjA1MDYxMTI4MjVaMDMxMTAvBgNV BAMTKDUzMkJBQjkzREEwMjdFMDNFNjI5NTQ0N0ExQ0JGMkQxRTgxMEI4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbO3Aan8RQzhvUiTug6fPZ11Nj eQ9fsORCXE677ivqAmn/3Cgu+E9/65OY1iuvmCmpPToau5+U9mflJHzCch6xIf6a jJK1NA3yaOIgrdH65+hTGjoAm5+KyDnNVHcy27P2/zhxAfBbnA49l4HiDR1TglXO 1KWfDzGhVfcvAEo8x0BVutS8DIFE12jrg2q1n5oe+KXaEzYA7th/ADCQxecg7NT1 ntSmDtNbjNBWvANbMg+zoJ81txjoJInayg8yXgdU5W9cKE3ZMbmYeTmkGIW/4lgb Yk32LP/1r0rkx+dp66JpGnuDfaQubRutaszZNExh0NvHoUriMCPFq9JxyI+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUyurk9oCfgPmKVRHocvy0egQuP8wHwYDVR0j BBgwFoAU+nGwXY8xKo33q9h5lstdGjz/g58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU4ZGI4N2ItMTZjZC00MzdhLWE1YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4 RjMxMkE4REY3QUJEODc5OTZDQjVEMUEzQ0ZGODM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTcxQjA1RDhGMzEyQThERjdBQkQ4Nzk5NkNCNUQxQTNDRkY4 MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvRkE3MUIwNUQ4RjMxMkE4REY3QUJEODc5OTZDQjVE MUEzQ0ZGODM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkpg597fv3Pxa7He86ryXu0FdnP20/q4sBF g6WbZcFEswGccExo20nc3l5DQ7hNhaIZb3jEC4YcMkZh24PgTAja5FxIjcLvzUXl ICTEIGZVaHfomekrh/SHrQ0uAf/aWpeRjZzUTokCMl4MmF6v5/1cT+x6x0JSaD1T LVNtxyQUdhSpwNYtcPuFIEna2ctpXDkGe7WU/WaN+xCtidXL5N5DIXwyOzSDlgGV ec6U6CETbyaOtuuW/3Gp2aEqw2blLW4j50nP+lERvUPlT+RqyiMi1dsxT6ksRZrC /9/lIhhufRnHrK1Ip1zv/fxz0CCtBv8pGt6Tmq8H00/ChCp4C0M= -----END CERTIFICATE-----Generated at Tue May 5 17:51:33 2026 by rpki-client