$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft File: FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft (raw, json) Hash identifier: 8Mv1D8eEiI2tWJSVfLg1WhJv+aYVLu26DkEVtMewe3s= Subject key identifier: F4:D8:E2:2F:25:4C:BD:7A:01:4C:84:41:B8:E6:23:F2:A1:F1:A8:6B Authority key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 Certificate issuer: /CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Certificate serial: 557008AF29E2973EF3501D8E9C52D92FA24C2FDD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:57:36 +0000 Manifest this update: Wed 16 Sep 2026 18:52:36 +0000 Manifest next update: Thu 17 Sep 2026 20:00:36 +0000 Files and hashes: 1: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: 3B/Kcnz6SN3QWJKso2FwDZnb6H6gRFM38JAa0O3o8qk=) 2: FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl (hash: 8HGaw5QQeBZoXdUJ4SUMaeoVNrOQOpuz6FENDzoWzMw=) 3: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: WO/HZkeGMlCtfYP3+X9HhjaUkBzT5oOMey9taigK+SI=) 4: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: uuP3mIBEEQQRdZDqxBE2OXZk3Oekoj4K3r/fRqZFmeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:70:08:af:29:e2:97:3e:f3:50:1d:8e:9c:52:d9:2f:a2:4c:2f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Validity Not Before: Sep 16 18:52:36 2026 GMT Not After : Sep 17 20:00:36 2026 GMT Subject: CN=F4D8E22F254CBD7A014C8441B8E623F2A1F1A86B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b4:84:61:43:88:52:af:08:3d:d7:d7:df:a8: 05:96:9f:fe:9c:d0:a0:7c:3e:f5:28:55:ae:9a:55: ef:9f:ce:e0:01:9b:0c:19:d7:ed:2f:d1:bd:09:d5: b8:41:33:50:05:c2:46:58:92:2d:10:27:2d:26:52: df:13:c0:85:00:29:28:47:a2:ff:b2:f7:7d:db:58: 2a:33:0d:9c:42:19:b1:d5:c2:69:a0:f1:30:4b:40: 5b:43:93:58:96:b8:94:8c:24:fb:80:2c:cd:0f:46: f2:4f:b5:29:78:82:15:50:61:09:90:0a:43:c3:1b: 11:9f:cf:7d:1d:9e:bb:67:4d:14:d5:0a:16:3c:18: 87:65:d5:d9:67:02:cd:ce:d2:13:72:ad:7d:29:b3: c3:5f:95:eb:e2:93:d4:0d:3b:df:17:e0:31:44:b1: c5:87:89:9f:7a:d0:1e:50:88:55:4d:80:ee:72:34: 96:18:b2:31:a6:fe:96:26:7a:ad:87:6b:58:62:b4: 7f:6c:5d:21:16:66:06:01:9d:10:ae:87:0b:6a:c8: a5:b2:10:20:3a:fc:8d:3e:f1:2d:e7:44:03:a7:75: bf:98:3c:22:2d:13:08:13:85:fc:71:47:99:d7:cb: 77:62:a4:08:cb:6a:7c:9a:0c:37:77:26:81:ba:8f: f5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D8:E2:2F:25:4C:BD:7A:01:4C:84:41:B8:E6:23:F2:A1:F1:A8:6B X509v3 Authority Key Identifier: keyid:FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cb:bb:2d:51:c8:b5:7b:8e:4a:27:26:f0:2b:c6:df:ed:b9: 7b:f2:b6:83:79:6c:69:0d:45:4e:9a:81:3a:31:d9:00:67:16: b7:e3:f4:13:57:23:e7:23:2e:c1:c3:d6:32:52:19:7d:23:83: 6a:96:b4:64:57:f6:dc:14:20:47:32:89:46:e7:44:8b:d0:0b: 83:47:dd:df:aa:cc:e2:61:56:bf:56:94:42:6e:cb:fe:75:f7: 1e:fe:7b:4c:ac:13:4f:93:03:86:18:7f:13:fa:32:e2:10:ea: 17:3a:89:af:ed:c6:e2:e5:0d:22:54:b9:7f:4e:96:4b:77:83: b6:97:50:31:f8:e3:d0:41:20:53:05:39:d4:d9:c9:27:b1:2b: 80:97:bc:13:dd:17:30:cb:9a:66:dd:93:16:41:d3:c7:39:74: 3c:2f:d6:01:14:d0:74:39:e1:5f:c2:ac:95:b6:9e:b0:7f:3a: b2:d0:2c:3d:de:47:86:e9:13:43:10:24:25:cc:61:a1:ba:f3: 8b:e2:29:41:3e:ab:54:25:5c:14:63:93:96:bc:97:84:c1:cb: 37:c5:52:d4:cc:dd:2b:71:f3:a3:f0:df:71:e8:04:9c:f5:d6: bd:0d:cc:3f:8b:41:62:34:48:3e:13:4f:c3:7f:cc:61:09:3f: 03:eb:30:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXAIrynilz7zUB2OnFLZL6JML90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYx RkQ0NkEzNjAeFw0yNjA5MTYxODUyMzZaFw0yNjA5MTcyMDAwMzZaMDMxMTAvBgNV BAMTKEY0RDhFMjJGMjU0Q0JEN0EwMTRDODQ0MUI4RTYyM0YyQTFGMUE4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtIRhQ4hSrwg919ffqAWWn/6c 0KB8PvUoVa6aVe+fzuABmwwZ1+0v0b0J1bhBM1AFwkZYki0QJy0mUt8TwIUAKShH ov+y933bWCozDZxCGbHVwmmg8TBLQFtDk1iWuJSMJPuALM0PRvJPtSl4ghVQYQmQ CkPDGxGfz30dnrtnTRTVChY8GIdl1dlnAs3O0hNyrX0ps8Nflevik9QNO98X4DFE scWHiZ960B5QiFVNgO5yNJYYsjGm/pYmeq2Ha1hitH9sXSEWZgYBnRCuhwtqyKWy ECA6/I0+8S3nRAOndb+YPCItEwgThfxxR5nXy3dipAjLanyaDDd3JoG6j/VXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9NjiLyVMvXoBTIRBuOYj8qHxqGswHwYDVR0j BBgwFoAU+kL8ihsXJlkU8VIaEHnTXx/UajYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFlZDA5OGItNDliMS00ZjUzLWI3NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEEx QjE3MjY1OTE0RjE1MjFBMTA3OUQzNUYxRkQ0NkEzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTQyRkM4QTFCMTcyNjU5MTRGMTUyMUExMDc5RDM1RjFGRDQ2 QTM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvRkE0MkZDOEExQjE3MjY1OTE0RjE1MjFBMTA3OUQz NUYxRkQ0NkEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/Luy1RyLV7jkonJvArxt/tuXvytoN5bGkN RU6agTox2QBnFrfj9BNXI+cjLsHD1jJSGX0jg2qWtGRX9twUIEcyiUbnRIvQC4NH 3d+qzOJhVr9WlEJuy/519x7+e0ysE0+TA4YYfxP6MuIQ6hc6ia/txuLlDSJUuX9O lkt3g7aXUDH449BBIFMFOdTZySexK4CXvBPdFzDLmmbdkxZB08c5dDwv1gEU0HQ5 4V/CrJW2nrB/OrLQLD3eR4bpE0MQJCXMYaG684viKUE+q1QlXBRjk5a8l4TByzfF UtTM3Stx86Pw33HoBJz11r0NzD+LQWI0SD4TT8N/zGEJPwPrMB8= -----END CERTIFICATE-----Generated at Thu Sep 17 09:27:05 2026 by rpki-client