$ rpki-client -vvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: +XqMWOv+KDvh0YGYn8zVXtMMePrC/q6ihyH9R+4CwuQ= Subject key identifier: B9:75:6F:5F:FC:57:0B:6E:5A:AC:83:F6:BB:21:28:58:4E:7E:90:4E Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 0CC345C153DEA16C3B5DEBD0CB17CE9AA5E3CD72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 02:37:30 +0000 Manifest this update: Fri 24 Jul 2026 02:32:30 +0000 Manifest next update: Sat 25 Jul 2026 05:20:30 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) 2: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) 3: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: RLeWBFa6EmX4wWGAN5N/SlaYWhtzcLSqbv4Mt/QeBS4=) 4: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c3:45:c1:53:de:a1:6c:3b:5d:eb:d0:cb:17:ce:9a:a5:e3:cd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: Jul 24 02:32:30 2026 GMT Not After : Jul 25 05:20:30 2026 GMT Subject: CN=B9756F5FFC570B6E5AAC83F6BB2128584E7E904E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:eb:aa:0f:0c:88:a6:4d:bf:e2:21:2b:8f:35: 67:6e:46:ad:f4:e5:8c:f6:e4:91:40:2c:9c:09:ec: bc:9a:ad:3b:92:6d:07:e0:ae:e5:2f:8a:4b:87:43: 52:be:1a:3b:81:39:5c:8a:4e:af:0e:e9:0b:fe:66: b3:ec:e6:26:f4:19:46:35:ca:7b:87:88:af:4c:ac: 0f:33:d7:19:4a:73:4f:7b:10:d4:d5:56:a0:cb:87: d4:33:20:83:67:cb:a6:78:07:70:9e:3a:ff:e6:66: 1d:2b:88:cf:2d:d6:4f:96:f6:e0:f9:b5:b9:a9:16: 23:66:e4:62:be:c4:69:4b:60:26:9e:88:b2:7a:e2: a6:eb:9f:47:5e:18:a7:1d:61:65:65:07:ef:db:3a: 6d:43:2d:64:93:cf:f7:88:19:20:1a:45:31:79:07: d7:e0:c7:0d:00:33:ad:6b:bf:8e:b9:39:61:f9:eb: 8b:d3:f1:70:4a:7a:b9:88:50:11:a4:0c:e2:c8:b6: 39:05:4c:8b:8f:53:ad:58:89:b8:b9:9c:0a:22:61: 21:f6:0b:48:d4:38:77:26:a9:1f:45:6d:ce:b7:b5: 78:76:b5:54:08:ff:22:f2:5f:3d:f1:3f:fe:96:45: 21:1e:32:44:d7:b3:44:11:12:53:06:12:58:b7:ad: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:75:6F:5F:FC:57:0B:6E:5A:AC:83:F6:BB:21:28:58:4E:7E:90:4E X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c5:6d:b7:59:4c:c8:82:51:79:4a:4f:1f:25:2a:ca:7d:c0: 4b:60:bb:14:09:84:14:dc:bc:db:b2:c1:b3:f2:0f:d9:95:cc: d9:9d:12:e3:4e:58:5d:5d:1d:d4:14:b3:d9:73:13:b8:d1:b5: 91:82:de:76:c7:09:89:e5:4e:18:88:50:c2:28:ef:d3:66:16: a2:d2:7a:4d:d8:10:64:ae:8a:db:b8:8e:a7:36:d8:75:0c:02: 32:e9:16:23:33:b2:73:78:51:55:a3:6e:28:ea:9a:36:e1:57: e4:c5:6a:c4:8c:aa:e1:a5:a2:c3:f5:d1:cd:9d:a1:7b:18:42: e2:6e:70:0a:f5:e1:3f:42:37:4d:46:62:16:13:4b:b5:eb:b6: 4f:97:ef:d3:67:3a:6a:62:a3:2f:04:f9:b4:19:aa:fc:98:64: 51:56:cf:47:fc:eb:c2:58:c8:36:01:27:0d:93:6c:0e:bd:5f: 6e:0c:97:0d:8a:37:d7:d0:bc:40:03:2a:b2:0a:66:93:c5:1f: 0d:c5:22:1f:2e:15:cd:b5:15:74:f9:69:5d:71:bc:83:a2:3e: 49:77:7e:05:5a:74:e2:23:18:35:5a:28:e0:f8:7a:04:dc:f6: cc:9d:6b:b3:67:8c:13:d8:f0:8d:06:45:fb:94:30:7f:12:53: 09:46:68:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMNFwVPeoWw7XevQyxfOmqXjzXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjA3MjQwMjMyMzBaFw0yNjA3MjUwNTIwMzBaMDMxMTAvBgNV BAMTKEI5NzU2RjVGRkM1NzBCNkU1QUFDODNGNkJCMjEyODU4NEU3RTkwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ66oPDIimTb/iISuPNWduRq30 5Yz25JFALJwJ7LyarTuSbQfgruUvikuHQ1K+GjuBOVyKTq8O6Qv+ZrPs5ib0GUY1 ynuHiK9MrA8z1xlKc097ENTVVqDLh9QzIINny6Z4B3CeOv/mZh0riM8t1k+W9uD5 tbmpFiNm5GK+xGlLYCaeiLJ64qbrn0deGKcdYWVlB+/bOm1DLWSTz/eIGSAaRTF5 B9fgxw0AM61rv465OWH564vT8XBKermIUBGkDOLItjkFTIuPU61Yibi5nAoiYSH2 C0jUOHcmqR9Fbc63tXh2tVQI/yLyXz3xP/6WRSEeMkTXs0QRElMGEli3rXu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuXVvX/xXC25arIP2uyEoWE5+kE4wHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPFbbdZTMiCUXlKTx8lKsp9wEtguxQJhBTc vNuywbPyD9mVzNmdEuNOWF1dHdQUs9lzE7jRtZGC3nbHCYnlThiIUMIo79NmFqLS ek3YEGSuitu4jqc22HUMAjLpFiMzsnN4UVWjbijqmjbhV+TFasSMquGlosP10c2d oXsYQuJucAr14T9CN01GYhYTS7Xrtk+X79NnOmpioy8E+bQZqvyYZFFWz0f868JY yDYBJw2TbA69X24Mlw2KN9fQvEADKrIKZpPFHw3FIh8uFc21FXT5aV1xvIOiPkl3 fgVadOIjGDVaKOD4egTc9syda7NnjBPY8I0GRfuUMH8SUwlGaLc= -----END CERTIFICATE-----Generated at Fri Jul 24 06:56:40 2026 by rpki-client