$ rpki-client -vvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: jzrRYNVC3eLu78NBoafVFRap8N4a9rr9gQHT9ZYRFlU= Subject key identifier: 22:6B:2C:87:D7:24:AA:EB:BD:C3:83:54:59:33:4D:1D:64:4F:63:B1 Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 4C95869213C3AAD4AE41D2564F44C439B0B18AC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:53:22 +0000 Manifest this update: Tue 12 May 2026 03:48:22 +0000 Manifest next update: Wed 13 May 2026 06:41:22 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) 2: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) 3: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) 4: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: iZlRVDHuU5p3iJl8+UMCOuch3YA8yFe0u8BwMc1IpxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:95:86:92:13:c3:aa:d4:ae:41:d2:56:4f:44:c4:39:b0:b1:8a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: May 12 03:48:22 2026 GMT Not After : May 13 06:41:22 2026 GMT Subject: CN=226B2C87D724AAEBBDC3835459334D1D644F63B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:81:a2:ad:21:39:ff:1e:74:12:84:dc:5f: cb:ae:f8:46:1b:96:b7:27:c3:d2:1c:22:d1:5a:bb: a6:56:3a:a5:52:54:16:05:17:90:36:ca:60:a3:8a: 4f:6a:8f:cd:24:2b:e5:4f:b3:ca:40:c0:17:d0:10: 72:e2:0d:1a:aa:51:76:df:c7:cf:f7:7f:55:95:28: 95:e7:f9:18:b7:ab:7b:3f:4e:12:06:ca:b8:d2:47: df:f2:b2:ff:05:e7:82:60:86:99:7a:04:61:61:b5: cb:0f:32:66:66:bf:62:f4:44:67:fe:f4:d0:03:31: 80:69:22:0b:cf:5b:21:97:cb:86:0b:06:25:cc:f1: f4:1d:c9:22:53:d3:e7:46:36:36:d8:49:5b:49:2b: 3e:61:df:3a:12:8c:49:6a:1b:9b:5b:15:1a:fd:f0: 41:5f:1d:b8:92:2e:81:c5:31:32:59:fb:ee:ca:de: 8d:39:26:5c:2a:5e:c9:89:0c:47:f5:25:13:4f:ed: f4:62:1e:2f:42:27:11:9a:2b:14:74:85:d7:f1:da: 31:a0:af:f6:7d:e6:d8:66:1e:8a:3d:68:a5:6c:07: e4:ed:f5:e6:68:0e:1a:cd:9b:bc:57:da:10:46:b4: 68:ad:61:e1:ad:10:29:9c:a8:aa:ab:c7:00:6b:a6: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6B:2C:87:D7:24:AA:EB:BD:C3:83:54:59:33:4D:1D:64:4F:63:B1 X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2c:9a:42:07:66:26:3f:90:42:57:25:86:c1:65:2d:be:27: 3a:e4:70:79:8d:f0:68:7e:ce:e1:88:97:2d:00:b4:78:35:7d: e9:3a:45:a2:79:0d:65:03:a0:3a:67:99:ab:be:da:0d:aa:e5: fa:99:52:95:26:00:e4:84:a6:ff:e8:6f:6e:7e:ca:4b:80:21: e1:3f:0d:14:cd:77:c6:37:b1:05:fc:ca:a9:dc:55:52:c2:45: 0f:8a:fc:ea:52:47:56:9d:b8:63:95:7e:00:9c:84:c2:88:8e: dc:36:99:d6:24:9b:03:de:af:28:a1:cb:1d:b4:58:35:b5:7d: c1:06:1c:65:5e:28:5e:e7:5e:01:a7:d4:d9:1c:21:77:3c:76: 4a:3c:c4:a9:21:86:9b:77:c6:e0:6e:22:64:de:0a:4d:7c:fd: 83:79:9f:5a:44:2d:f3:69:e0:12:0a:3a:5c:43:68:aa:08:32: d2:0a:26:bd:20:44:05:d5:2c:87:8c:89:8c:57:81:fe:c8:b9: 22:ef:41:5d:62:09:54:58:2f:34:60:01:0d:29:18:62:96:e2: 6f:0c:0e:f2:e8:63:e4:b0:64:9c:14:0f:10:d2:21:a0:71:4d: 4d:84:3e:59:d0:79:8f:e2:7a:21:c8:cb:98:47:ed:f9:b7:e4: 02:57:fa:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJWGkhPDqtSuQdJWT0TEObCxisIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjA1MTIwMzQ4MjJaFw0yNjA1MTMwNjQxMjJaMDMxMTAvBgNV BAMTKDIyNkIyQzg3RDcyNEFBRUJCREMzODM1NDU5MzM0RDFENjQ0RjYzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpYGirSE5/x50EoTcX8uu+EYb lrcnw9IcItFau6ZWOqVSVBYFF5A2ymCjik9qj80kK+VPs8pAwBfQEHLiDRqqUXbf x8/3f1WVKJXn+Ri3q3s/ThIGyrjSR9/ysv8F54Jghpl6BGFhtcsPMmZmv2L0RGf+ 9NADMYBpIgvPWyGXy4YLBiXM8fQdySJT0+dGNjbYSVtJKz5h3zoSjElqG5tbFRr9 8EFfHbiSLoHFMTJZ++7K3o05JlwqXsmJDEf1JRNP7fRiHi9CJxGaKxR0hdfx2jGg r/Z95thmHoo9aKVsB+Tt9eZoDhrNm7xX2hBGtGitYeGtECmcqKqrxwBrpi09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUImssh9ckquu9w4NUWTNNHWRPY7EwHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAsmkIHZiY/kEJXJYbBZS2+JzrkcHmN8Gh+ zuGIly0AtHg1fek6RaJ5DWUDoDpnmau+2g2q5fqZUpUmAOSEpv/ob25+ykuAIeE/ DRTNd8Y3sQX8yqncVVLCRQ+K/OpSR1aduGOVfgCchMKIjtw2mdYkmwPeryihyx20 WDW1fcEGHGVeKF7nXgGn1NkcIXc8dko8xKkhhpt3xuBuImTeCk18/YN5n1pELfNp 4BIKOlxDaKoIMtIKJr0gRAXVLIeMiYxXgf7IuSLvQV1iCVRYLzRgAQ0pGGKW4m8M DvLoY+SwZJwUDxDSIaBxTU2EPlnQeY/ieiHIy5hH7fm35AJX+gs= -----END CERTIFICATE-----Generated at Tue May 12 22:52:09 2026 by rpki-client