$ rpki-client -vvvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: 7/YDnldgtV4Ztsa3MV+V5STy+DcHAbAK8oTnmlK7eI0= Subject key identifier: 61:02:36:10:1F:6F:D6:B7:20:02:48:10:6D:FC:CF:67:9D:ED:7B:4A Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 154F3681B1DDF14A48A977435892E363D19C9E64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 19:18:46 +0000 Manifest this update: Sat 14 Nov 2026 19:13:46 +0000 Manifest next update: Sun 15 Nov 2026 23:08:46 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) 2: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: 9l6m7WyRhWzNcgxPnsuAlLiepYkguHiKBsk8LOGUcGs=) 3: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) 4: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4f:36:81:b1:dd:f1:4a:48:a9:77:43:58:92:e3:63:d1:9c:9e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: Nov 14 19:13:46 2026 GMT Not After : Nov 15 23:08:46 2026 GMT Subject: CN=610236101F6FD6B7200248106DFCCF679DED7B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:17:a2:64:b1:df:15:f5:df:c6:04:d1:fe:1b: fd:8e:02:9a:24:a3:88:00:28:c7:a5:cd:01:2d:ed: e6:02:52:54:23:0c:f8:cd:dc:10:05:3a:b7:a5:b7: c2:06:ca:3a:a7:91:60:58:c8:b4:44:e3:0b:1c:27: af:9f:ca:a5:e1:34:ea:79:56:f5:1c:43:93:99:02: 88:da:5a:f9:12:ee:44:3b:cf:bc:f6:23:a3:df:f5: 3e:31:97:6f:77:55:a8:89:03:07:81:42:f8:3c:2f: 80:70:e6:97:df:0d:d5:2b:4e:1c:bc:d6:06:6a:e7: aa:f3:f4:75:45:99:59:af:2d:ef:c9:7f:7f:d2:e2: 4e:ce:aa:18:4e:16:82:10:aa:ee:c5:3b:8d:6f:93: 65:1c:14:6b:7f:c7:e0:e1:28:60:5c:6f:51:3f:ee: 88:e4:cb:36:a5:6b:52:64:2b:86:0a:d0:54:7a:04: 00:77:5f:40:67:a5:25:59:fe:ac:ae:09:94:10:14: b4:91:44:66:d3:12:46:16:ee:b4:e4:ee:14:53:a6: 50:18:50:46:ce:24:da:ed:be:90:1c:62:55:ec:d1: f8:f4:5c:96:01:20:e2:fc:6b:ac:d3:65:70:3d:f6: e0:99:ab:11:39:ca:1e:4a:77:cf:08:87:05:dc:83: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:02:36:10:1F:6F:D6:B7:20:02:48:10:6D:FC:CF:67:9D:ED:7B:4A X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9a:c0:0b:82:1f:2f:71:73:20:7b:df:a2:a2:e9:b3:84:82: fe:29:8c:0a:a5:4c:30:ce:98:74:26:31:e0:cf:ff:e3:88:b4: 75:7d:ea:52:77:42:d9:cd:f0:86:03:71:b7:c5:24:88:0f:2d: 36:87:83:f1:c8:75:b2:e5:7d:47:2e:ee:3f:6c:a7:1c:a8:96: a6:9e:e5:97:53:6c:ef:93:82:4c:32:63:0c:06:e8:73:8e:12: fe:76:9c:fa:1e:3e:c7:22:4b:00:49:49:f6:48:b1:8f:d2:3e: 7d:b9:70:f9:80:a1:c0:e2:31:5a:75:c1:c6:90:89:c0:a6:94: 37:50:51:44:8e:b5:04:8d:39:71:40:3f:7c:3e:de:62:1b:d3: f8:05:32:b6:91:ff:81:69:80:ed:2c:eb:5d:2a:49:05:0c:d6: 34:61:39:73:18:d5:4c:41:f1:4d:e9:45:dd:81:1a:10:de:5b: fc:7f:a0:20:c5:66:df:40:e4:ce:b3:06:ee:be:94:87:3c:2f: b8:72:bd:9d:2f:22:ff:3f:cf:6a:11:b2:97:f7:b2:ac:3d:9d: 10:6b:79:59:e7:44:27:f1:b5:4b:52:5c:bc:c6:a3:15:7b:ba: ea:a6:43:20:28:b0:45:d0:f0:d0:f9:34:dc:62:5f:41:2c:e6: 63:17:d2:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFU82gbHd8UpIqXdDWJLjY9GcnmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjExMTQxOTEzNDZaFw0yNjExMTUyMzA4NDZaMDMxMTAvBgNV BAMTKDYxMDIzNjEwMUY2RkQ2QjcyMDAyNDgxMDZERkNDRjY3OURFRDdCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0F6Jksd8V9d/GBNH+G/2OApok o4gAKMelzQEt7eYCUlQjDPjN3BAFOrelt8IGyjqnkWBYyLRE4wscJ6+fyqXhNOp5 VvUcQ5OZAojaWvkS7kQ7z7z2I6Pf9T4xl293VaiJAweBQvg8L4Bw5pffDdUrThy8 1gZq56rz9HVFmVmvLe/Jf3/S4k7OqhhOFoIQqu7FO41vk2UcFGt/x+DhKGBcb1E/ 7ojkyzala1JkK4YK0FR6BAB3X0BnpSVZ/qyuCZQQFLSRRGbTEkYW7rTk7hRTplAY UEbOJNrtvpAcYlXs0fj0XJYBIOL8a6zTZXA99uCZqxE5yh5Kd88IhwXcg8fPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYQI2EB9v1rcgAkgQbfzPZ53te0owHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+awAuCHy9xcyB736Ki6bOEgv4pjAqlTDDO mHQmMeDP/+OItHV96lJ3QtnN8IYDcbfFJIgPLTaHg/HIdbLlfUcu7j9spxyolqae 5ZdTbO+TgkwyYwwG6HOOEv52nPoePsciSwBJSfZIsY/SPn25cPmAocDiMVp1wcaQ icCmlDdQUUSOtQSNOXFAP3w+3mIb0/gFMraR/4FpgO0s610qSQUM1jRhOXMY1UxB 8U3pRd2BGhDeW/x/oCDFZt9A5M6zBu6+lIc8L7hyvZ0vIv8/z2oRspf3sqw9nRBr eVnnRCfxtUtSXLzGoxV7uuqmQyAosEXQ8ND5NNxiX0Es5mMX0hc= -----END CERTIFICATE-----Generated at Sun Nov 15 02:48:49 2026 by rpki-client