$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft File: 0A0BE818C9E480D5B3C1387F48406FDF75525054.mft (raw, json) Hash identifier: ealjTa5E00rwptCC41Ryuah+AzN6RxledusOugb6ZDs= Subject key identifier: 4E:52:92:53:8F:80:FF:37:91:6B:C0:38:8A:26:12:A6:17:B4:8B:C6 Authority key identifier: 0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 Certificate issuer: /CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Certificate serial: 4325B942D80C8B3F27F639A762C4FC7CDE96633F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 17:31:33 +0000 Manifest this update: Thu 23 Jul 2026 17:26:33 +0000 Manifest next update: Fri 24 Jul 2026 20:46:33 +0000 Files and hashes: 1: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: +JyCkLsQ3tpHW5cHfUXrYK9OeTIPdF1qJiIUkvR3JIw=) 2: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: XruWQQhjREtyk1SmNsMjFRHLoSTVd3r/+m7FYV8d8Kc=) 3: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: d/Fq+IffZJ+OozrZYhdBokPyli+2KVods0E+Vb13ir4=) 4: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: ZvHMdtaJZWzSLaq7f17lDIIdd170kCIaPzhP2QwWe1o=) 5: 0A0BE818C9E480D5B3C1387F48406FDF75525054.crl (hash: cfcTii9gtMDsP9STIhpgl/w94C8ziFMvtFxtKP3Qgw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:25:b9:42:d8:0c:8b:3f:27:f6:39:a7:62:c4:fc:7c:de:96:63:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Validity Not Before: Jul 23 17:26:33 2026 GMT Not After : Jul 24 20:46:33 2026 GMT Subject: CN=4E5292538F80FF37916BC0388A2612A617B48BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7d:9d:c8:71:cd:f1:2d:3b:b8:c3:92:21:cc: 30:bb:18:82:8c:39:b5:48:8b:48:c7:00:ea:a1:b3: 77:80:6a:16:23:10:28:e0:e5:01:7b:d4:2b:1f:58: c8:36:7a:9d:ee:a7:ac:a9:58:41:05:9b:56:b9:66: 8f:e9:f9:9c:c2:9d:1f:56:03:b4:10:74:4f:ff:fd: 30:58:33:47:0e:d2:24:1c:dd:b7:d8:5f:39:64:18: 8e:2b:76:82:91:13:2a:b2:7a:db:e6:f4:4d:48:a1: 63:2c:5e:21:64:4f:72:e1:43:1a:45:ee:84:4f:50: 73:5b:fa:7c:f9:75:2a:b9:0d:4d:ab:eb:1e:bc:c8: 76:04:b7:d7:7c:0e:02:7b:d4:44:6e:c6:f0:c5:43: 46:15:e3:5e:60:d7:ac:c7:c5:73:98:46:99:b3:fb: a9:44:05:bf:4e:78:9d:75:ca:96:35:e9:d7:da:46: 84:69:4e:56:cf:ba:82:36:23:fb:60:75:b3:1e:d3: 0c:1f:16:3a:ae:5d:f4:72:eb:da:f6:42:44:6f:9c: 1f:4f:78:c1:8e:aa:ba:aa:b0:f1:4f:a0:d1:f2:85: 50:6e:a6:71:0f:44:60:3a:f1:42:e9:59:d5:32:ce: 39:6e:f3:1f:74:d9:27:2d:ab:f2:35:be:14:19:7a: d6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:52:92:53:8F:80:FF:37:91:6B:C0:38:8A:26:12:A6:17:B4:8B:C6 X509v3 Authority Key Identifier: keyid:0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f1:c1:b4:03:a5:41:7d:9c:2b:32:32:f1:c3:f7:15:1b:21: 0e:66:95:c9:a6:08:12:64:19:a8:be:2a:59:9d:e0:aa:a5:17: 08:b8:59:46:40:b5:14:ee:9b:b3:78:7d:60:57:0c:93:ea:69: c0:81:ee:6f:dc:2e:9b:a4:ef:a8:43:ed:57:22:c4:6b:58:61: f7:fc:41:27:94:9b:77:b1:ed:cb:56:58:42:28:a7:6e:e8:03: 2b:42:43:3e:29:08:84:47:2a:f3:8e:68:24:4a:0a:cf:29:6f: e5:38:11:6e:4f:95:b9:22:c6:ff:61:fa:49:4b:a7:cf:06:45: da:b2:1a:ba:b6:f6:3a:84:51:3a:55:94:64:ed:e4:dc:8b:42: 01:35:a5:87:be:23:a7:03:7e:2b:d1:62:8d:23:b6:68:b0:1a: 4a:31:8f:27:9b:33:10:ba:0f:7f:06:ac:56:7c:b7:0c:4c:af: 1f:b4:f5:44:8e:6d:7a:ad:09:e0:00:2e:93:a5:15:70:f7:e1: 5a:3a:58:91:fa:71:10:a3:89:b5:88:f8:a3:5f:4b:d0:8d:5a: c1:fb:b7:fe:bf:bc:53:0f:46:46:8b:15:81:fd:31:29:6c:28: a4:c9:e1:91:db:53:b5:bd:5e:36:38:4b:1b:97:95:71:37:22: 80:82:4b:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyW5QtgMiz8n9jmnYsT8fN6WYz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZGREY3 NTUyNTA1NDAeFw0yNjA3MjMxNzI2MzNaFw0yNjA3MjQyMDQ2MzNaMDMxMTAvBgNV BAMTKDRFNTI5MjUzOEY4MEZGMzc5MTZCQzAzODhBMjYxMkE2MTdCNDhCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXfZ3Icc3xLTu4w5IhzDC7GIKM ObVIi0jHAOqhs3eAahYjECjg5QF71CsfWMg2ep3up6ypWEEFm1a5Zo/p+ZzCnR9W A7QQdE///TBYM0cO0iQc3bfYXzlkGI4rdoKREyqyetvm9E1IoWMsXiFkT3LhQxpF 7oRPUHNb+nz5dSq5DU2r6x68yHYEt9d8DgJ71ERuxvDFQ0YV415g16zHxXOYRpmz +6lEBb9OeJ11ypY16dfaRoRpTlbPuoI2I/tgdbMe0wwfFjquXfRy69r2QkRvnB9P eMGOqrqqsPFPoNHyhVBupnEPRGA68ULpWdUyzjlu8x902Sctq/I1vhQZetZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTlKSU4+A/zeRa8A4iiYSphe0i8YwHwYDVR0j BBgwFoAUCgvoGMnkgNWzwTh/SEBv33VSUFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThD OUU0ODBENUIzQzEzODdGNDg0MDZGREY3NTUyNTA1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTBCRTgxOEM5RTQ4MEQ1QjNDMTM4N0Y0ODQwNkZERjc1NTI1 MDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZG REY3NTUyNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7xwbQDpUF9nCsyMvHD9xUbIQ5mlcmmCBJk Gai+Klmd4KqlFwi4WUZAtRTum7N4fWBXDJPqacCB7m/cLpuk76hD7VcixGtYYff8 QSeUm3ex7ctWWEIop27oAytCQz4pCIRHKvOOaCRKCs8pb+U4EW5Plbkixv9h+klL p88GRdqyGrq29jqEUTpVlGTt5NyLQgE1pYe+I6cDfivRYo0jtmiwGkoxjyebMxC6 D38GrFZ8twxMrx+09USObXqtCeAALpOlFXD34Vo6WJH6cRCjibWI+KNfS9CNWsH7 t/6/vFMPRkaLFYH9MSlsKKTJ4ZHbU7W9XjY4SxuXlXE3IoCCS6U= -----END CERTIFICATE-----Generated at Fri Jul 24 12:43:04 2026 by rpki-client