$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft File: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft (raw, json) Hash identifier: HgytNNVpvjGia+AK4iJV8o42OL2cDoUW6srGSvqkvZ4= Subject key identifier: 2C:10:A7:D6:AA:03:DA:6D:2E:03:3E:E4:90:20:1D:A1:00:DD:CB:EC Authority key identifier: FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F Certificate issuer: /CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Certificate serial: 693453FF5ADB370CE733C25B3A494A57D0FA6D46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft Manifest number: EA Signing time: Sun 25 Oct 2026 07:00:00 +0000 Manifest this update: Sun 25 Oct 2026 06:55:00 +0000 Manifest next update: Mon 26 Oct 2026 10:22:00 +0000 Files and hashes: 1: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: C2LyqNKlYjBJHcopCRuKT/RkLPNHGOPCyAI5djtafa0=) 2: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl (hash: HuSH9okSju3iqSOL+OEAHaFQV1YkmtI2P1LW0QXyN3w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 10:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:34:53:ff:5a:db:37:0c:e7:33:c2:5b:3a:49:4a:57:d0:fa:6d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Validity Not Before: Oct 25 06:55:00 2026 GMT Not After : Oct 26 10:22:00 2026 GMT Subject: CN=2C10A7D6AA03DA6D2E033EE490201DA100DDCBEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:68:93:bf:a9:95:25:96:b1:9c:8d:58:32: ee:86:b3:9c:16:4b:8f:21:80:10:06:ba:70:36:3d: 06:70:df:d6:78:27:59:fd:b8:3e:8c:4c:76:80:67: 40:ec:43:c0:15:20:3c:cf:be:be:f9:35:03:fa:c9: b1:3e:4c:26:8e:50:5d:3b:42:e0:1c:8b:66:e6:80: 8a:e9:46:f8:54:e5:c4:6b:40:89:a5:fa:36:46:ad: 13:e9:f6:a8:61:7a:b1:d1:c9:cd:e7:d8:c7:74:5f: 66:19:f2:1b:f5:c5:b0:a4:69:36:46:98:83:a7:2e: c3:ce:ac:4e:44:a1:8d:2d:82:b1:e4:90:13:20:be: 4f:2d:cb:c2:01:f2:c7:af:8b:e4:97:89:5a:14:6b: 62:5f:63:7c:35:fd:26:ac:93:17:5f:17:20:ee:ee: e0:ce:81:c8:f1:da:06:40:41:9e:09:30:ae:a2:5b: ff:bd:5e:eb:28:1b:25:ad:38:bb:b0:75:04:67:fe: 0b:55:51:3c:ca:49:56:eb:fd:9f:9a:59:81:e1:82: 18:e0:d0:0c:66:26:3d:97:88:ee:9c:14:85:58:4d: 79:e9:5c:d2:c4:30:15:03:ce:68:37:01:40:1c:4d: 2f:94:8a:97:b3:e1:54:2b:30:0e:bf:d8:c2:40:8a: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:10:A7:D6:AA:03:DA:6D:2E:03:3E:E4:90:20:1D:A1:00:DD:CB:EC X509v3 Authority Key Identifier: keyid:FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:dd:ab:50:be:ef:37:7b:eb:f4:34:ed:3b:ff:81:9d:38:99: 9e:df:b4:d3:f4:cd:cf:b2:00:31:8c:34:4d:04:cc:bd:69:2a: ed:15:18:b1:b0:18:5b:b4:7a:c3:e5:67:98:50:2a:df:bb:28: 28:00:78:f4:2b:8f:71:96:ef:67:e7:52:d1:6f:07:0f:d9:23: d7:da:b6:23:89:0d:4c:35:28:72:c6:c2:e4:f2:ed:bb:21:b1: 67:83:26:7c:aa:80:7d:3c:40:dd:a1:3a:2f:ed:b9:be:a2:d5: 8a:a4:99:ae:d3:7a:02:c1:4f:fd:e2:6c:b1:22:31:43:8b:b6: 7a:d4:bb:20:aa:da:5d:e9:26:da:56:cd:a1:bd:09:a5:3a:a6: 3c:47:d0:93:69:ac:ef:eb:4b:0a:f9:3d:41:ce:8d:0d:3d:25: d3:6d:89:24:96:52:56:19:ba:d7:ae:41:80:c8:45:a1:a4:22: be:0a:36:df:85:98:26:59:62:f2:00:18:8e:d0:c9:68:a0:d7: 9a:48:1b:9c:1d:a7:fa:e7:50:ea:03:d4:b6:e7:14:2f:fd:d3: 71:ae:c9:46:ed:a8:6e:a2:d5:43:b0:43:57:07:f3:63:12:c9: 14:fe:97:ad:a0:82:1b:4d:02:af:24:6c:d4:e9:5b:f6:4b:ee: 6d:a7:72:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTRT/1rbNwznM8JbOklKV9D6bUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5 Q0MzQUY1RjAeFw0yNjEwMjUwNjU1MDBaFw0yNjEwMjYxMDIyMDBaMDMxMTAvBgNV BAMTKDJDMTBBN0Q2QUEwM0RBNkQyRTAzM0VFNDkwMjAxREExMDBERENCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWmiTv6mVJZaxnI1YMu6Gs5wW S48hgBAGunA2PQZw39Z4J1n9uD6MTHaAZ0DsQ8AVIDzPvr75NQP6ybE+TCaOUF07 QuAci2bmgIrpRvhU5cRrQIml+jZGrRPp9qhherHRyc3n2Md0X2YZ8hv1xbCkaTZG mIOnLsPOrE5EoY0tgrHkkBMgvk8ty8IB8sevi+SXiVoUa2JfY3w1/SaskxdfFyDu 7uDOgcjx2gZAQZ4JMK6iW/+9XusoGyWtOLuwdQRn/gtVUTzKSVbr/Z+aWYHhghjg 0AxmJj2XiO6cFIVYTXnpXNLEMBUDzmg3AUAcTS+Uipez4VQrMA6/2MJAinEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULBCn1qoD2m0uAz7kkCAdoQDdy+wwHwYDVR0j BBgwFoAU+n0+uxc1H7Y8yBZ4GdEO0ZzDr18wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UzZDhjMDMtMTdiYi00Y2FiLTg1MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIx NzM1MUZCNjNDQzgxNjc4MTlEMTBFRDE5Q0MzQUY1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQTdEM0VCQjE3MzUxRkI2M0NDODE2NzgxOUQxMEVEMTlDQzNB RjVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvRkE3RDNFQkIxNzM1MUZCNjNDQzgxNjc4MTlEMTBF RDE5Q0MzQUY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbdq1C+7zd76/Q07Tv/gZ04mZ7ftNP0zc+y ADGMNE0EzL1pKu0VGLGwGFu0esPlZ5hQKt+7KCgAePQrj3GW72fnUtFvBw/ZI9fa tiOJDUw1KHLGwuTy7bshsWeDJnyqgH08QN2hOi/tub6i1Yqkma7TegLBT/3ibLEi MUOLtnrUuyCq2l3pJtpWzaG9CaU6pjxH0JNprO/rSwr5PUHOjQ09JdNtiSSWUlYZ uteuQYDIRaGkIr4KNt+FmCZZYvIAGI7QyWig15pIG5wdp/rnUOoD1LbnFC/903Gu yUbtqG6i1UOwQ1cH82MSyRT+l62gghtNAq8kbNTpW/ZL7m2ncqM= -----END CERTIFICATE-----Generated at Mon Oct 26 01:43:11 2026 by rpki-client