$ rpki-client -vvvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: 5GApbK2+09p2pPrizI2I13H+7eUZ1oqMIs2G+9hVank= Subject key identifier: 6A:35:7C:C4:E9:5A:15:8B:1E:3E:D6:E0:39:A6:A2:6B:39:6F:BB:90 Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 4D4C65173D7A99C047E7067807B006EB5E0AE298 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:57:07 +0000 Manifest this update: Wed 23 Sep 2026 12:52:07 +0000 Manifest next update: Thu 24 Sep 2026 14:15:07 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) 2: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: GXMoUwIa8eHvQz7K5dwdbk+VUxJItJ6Y+oL65OEzgQM=) 3: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) 4: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4c:65:17:3d:7a:99:c0:47:e7:06:78:07:b0:06:eb:5e:0a:e2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: Sep 23 12:52:07 2026 GMT Not After : Sep 24 14:15:07 2026 GMT Subject: CN=6A357CC4E95A158B1E3ED6E039A6A26B396FBB90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:4f:7a:7b:68:42:d2:3e:4a:11:cb:50:d0: 75:15:4f:bf:ee:51:8d:fc:1c:29:0b:08:9a:d7:be: 55:e6:a0:47:85:19:c1:b7:80:79:f7:37:fc:5a:62: 6b:6b:a1:18:62:a6:33:d0:26:cd:22:1e:3e:3e:be: b2:cd:a6:23:a1:2c:ce:22:f4:b6:1d:bf:a5:d6:d4: ac:c0:25:c2:d5:55:dc:a6:78:68:c4:37:8f:c6:8f: 6e:30:11:90:a0:e3:5b:d9:a7:85:dc:76:83:f5:17: 1a:41:6e:b6:1d:23:80:6b:79:e6:f7:c1:7d:b5:bb: 8a:53:12:f5:eb:72:26:7e:a3:6e:db:9b:fb:27:4b: b8:3a:eb:12:1b:12:97:32:4a:7b:5a:51:d8:56:77: 70:07:72:fb:1c:d8:7a:5c:5f:8f:c6:68:f2:b9:28: c8:57:ea:dd:0a:12:32:70:fb:16:c4:69:c2:f8:01: c2:b7:f1:36:e0:8f:ea:87:c0:67:4f:ed:2f:37:71: 8f:00:07:53:b1:4b:3a:7f:c8:31:30:df:b1:9d:3f: dc:45:60:54:88:4f:cb:9c:8b:51:1c:4d:fc:72:34: df:7d:ee:26:15:37:5f:48:11:31:40:4d:41:b3:02: de:06:5b:3d:9f:e8:f4:ab:c1:04:79:c8:eb:5b:9c: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:7C:C4:E9:5A:15:8B:1E:3E:D6:E0:39:A6:A2:6B:39:6F:BB:90 X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ee:4b:7f:5d:78:44:3b:a3:ed:46:4a:7d:40:c9:88:3b:8c: b8:14:4a:d9:58:75:49:b5:cd:74:aa:bc:96:62:0c:20:77:bb: ac:16:68:fa:9d:c2:a4:4c:27:70:bd:7c:02:a5:c2:7d:03:ee: 69:ca:30:21:25:51:68:30:43:9b:17:e2:96:e2:2a:b9:8c:1b: de:aa:95:d5:02:a9:a8:38:c9:b2:e7:b0:3d:2e:d7:24:d9:3c: 95:8f:31:6d:83:ed:ee:6c:2f:e1:84:99:d9:7e:fd:9f:85:bc: 40:42:47:a5:b5:e4:04:11:bb:aa:f2:44:21:49:65:e4:2d:cf: a6:7b:63:bd:5f:56:bd:b9:2b:4d:93:29:97:b1:31:e5:69:c7: 9c:c3:d3:b9:f6:79:01:fe:b5:c7:34:c5:ea:67:26:eb:41:f2: 7f:a9:04:7d:90:19:57:19:00:5c:af:5e:70:63:9e:4a:e0:07: a8:4d:5c:4f:29:ba:c2:48:4b:f9:11:3f:7b:dc:9a:a6:6d:b5: f4:18:f3:7b:a3:f6:15:2f:6e:ca:ea:0e:38:fe:51:24:c1:c2: fe:a4:42:0f:8e:a8:ea:61:e8:1b:f0:b5:b8:2f:12:b1:a6:13: a8:ac:cb:de:cf:5e:39:5f:f4:d2:d6:b2:92:de:99:0d:25:a3: dc:c6:5e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUxlFz16mcBH5wZ4B7AG614K4pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjA5MjMxMjUyMDdaFw0yNjA5MjQxNDE1MDdaMDMxMTAvBgNV BAMTKDZBMzU3Q0M0RTk1QTE1OEIxRTNFRDZFMDM5QTZBMjZCMzk2RkJCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0096e2hC0j5KEctQ0HUVT7/u UY38HCkLCJrXvlXmoEeFGcG3gHn3N/xaYmtroRhipjPQJs0iHj4+vrLNpiOhLM4i 9LYdv6XW1KzAJcLVVdymeGjEN4/Gj24wEZCg41vZp4XcdoP1FxpBbrYdI4Breeb3 wX21u4pTEvXrciZ+o27bm/snS7g66xIbEpcySntaUdhWd3AHcvsc2HpcX4/GaPK5 KMhX6t0KEjJw+xbEacL4AcK38Tbgj+qHwGdP7S83cY8AB1OxSzp/yDEw37GdP9xF YFSIT8uci1EcTfxyNN997iYVN19IETFATUGzAt4GWz2f6PSrwQR5yOtbnE9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUajV8xOlaFYsePtbgOaaiazlvu5AwHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHuS39deEQ7o+1GSn1AyYg7jLgUStlYdUm1 zXSqvJZiDCB3u6wWaPqdwqRMJ3C9fAKlwn0D7mnKMCElUWgwQ5sX4pbiKrmMG96q ldUCqag4ybLnsD0u1yTZPJWPMW2D7e5sL+GEmdl+/Z+FvEBCR6W15AQRu6ryRCFJ ZeQtz6Z7Y71fVr25K02TKZexMeVpx5zD07n2eQH+tcc0xepnJutB8n+pBH2QGVcZ AFyvXnBjnkrgB6hNXE8pusJIS/kRP3vcmqZttfQY83uj9hUvbsrqDjj+USTBwv6k Qg+OqOph6BvwtbgvErGmE6isy97PXjlf9NLWspLemQ0lo9zGXqg= -----END CERTIFICATE-----Generated at Thu Sep 24 05:57:15 2026 by rpki-client