$ rpki-client -vvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: 3aFuxkWJh5cpjwUMcsawhWmMSHHu543jq98Z+9lelqs= Subject key identifier: 19:B0:21:6C:40:2C:3F:D9:5D:5E:A9:3D:1A:13:9F:53:0C:88:76:3A Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 2C22C5AD1C11B61F5D9E3381779FCCBCF6FA543E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: 91 Signing time: Wed 19 Aug 2026 19:27:27 +0000 Manifest this update: Wed 19 Aug 2026 19:22:27 +0000 Manifest next update: Thu 20 Aug 2026 20:09:27 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) 2: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) 3: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) 4: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: uhBNr8np7QAs4wh44ePiCP6Nqzli+sIKTb2z5W5XflU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 20:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:22:c5:ad:1c:11:b6:1f:5d:9e:33:81:77:9f:cc:bc:f6:fa:54:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: Aug 19 19:22:27 2026 GMT Not After : Aug 20 20:09:27 2026 GMT Subject: CN=19B0216C402C3FD95D5EA93D1A139F530C88763A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:93:bf:e6:01:5d:a1:13:04:c6:42:08:af: 49:83:06:d5:1f:8f:4e:12:2a:81:79:93:0b:45:a6: 1f:e9:50:98:75:e1:15:ff:de:64:8c:8c:2e:c0:43: b9:43:ff:1a:d0:51:f4:a5:7e:72:3b:d4:7b:89:5a: c5:f7:e7:b2:2e:be:be:ba:cd:4d:94:45:fa:49:08: 00:00:a1:51:3e:f8:8f:e1:ea:6c:94:fe:22:a8:c3: d7:83:d7:95:2a:c6:77:12:fe:e1:02:43:b2:f9:83: 99:f3:cb:68:3d:6d:66:a4:6a:70:a2:ce:0e:c5:d9: 3f:06:2f:b7:62:d2:8a:67:e5:bd:27:8d:ea:5f:5c: 67:ab:e3:1e:63:81:ba:78:c8:5f:84:ce:ce:fc:0a: 57:d4:f8:a0:c1:63:bf:63:52:fc:45:a0:f6:df:cf: 19:12:b7:70:cd:f0:42:7e:7b:fa:10:55:65:00:2d: e8:61:30:8c:8c:be:55:bf:f2:69:9b:9a:33:0d:08: 9c:e0:85:bd:cc:de:1f:55:65:4c:10:1b:42:b1:2d: de:4a:ff:79:f8:9a:1c:06:e0:85:a0:1a:f8:92:b8: d5:a4:b2:8c:d5:c2:3a:52:ac:ef:c0:c3:83:14:07: 54:24:1c:4d:87:ec:e7:2b:61:ab:b5:80:e3:bb:74: 6d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B0:21:6C:40:2C:3F:D9:5D:5E:A9:3D:1A:13:9F:53:0C:88:76:3A X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:34:52:ac:a3:ca:15:7e:d3:e7:5b:61:a2:a0:d0:9c:28:13: 41:90:31:23:1b:13:6e:55:25:d7:59:5b:fc:7d:4b:f5:cf:7c: 44:84:e3:f6:f2:f1:bc:05:10:54:90:2b:c1:3a:00:d9:74:1e: 63:9b:63:02:44:37:05:22:11:76:87:ed:08:01:db:1a:28:c2: 65:a9:4c:6b:f1:3f:e0:99:2c:6f:e9:42:be:f4:fc:4b:c1:38: 0a:c1:ec:39:8a:7e:02:a4:7e:5d:80:6a:8a:bf:fe:2f:2b:b7: 11:ab:e8:89:51:f9:ee:73:52:f1:7f:d4:20:b7:b7:8d:b3:60: 33:98:ea:77:ea:e0:d4:20:03:49:12:ea:6d:1d:79:8c:4b:d5: 71:04:34:5e:c9:b6:ce:00:5f:d1:1f:a1:08:e8:dc:22:d9:77: 1a:49:ef:c1:c2:bb:64:38:96:5f:d9:79:5e:77:d7:4f:fd:09: 82:70:80:89:ab:2d:2d:7b:48:38:a7:01:f5:35:6f:5d:62:cf: 91:8c:e5:91:7a:3c:fe:ae:dd:e4:7c:ea:3e:60:32:f0:a1:f4: a7:de:64:81:19:0c:68:22:9c:45:4d:aa:fa:dd:f5:2e:7d:31: 50:f5:0b:7b:35:60:3a:60:94:4d:d0:c6:38:04:18:46:ad:9d: 5f:b8:96:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCLFrRwRth9dnjOBd5/MvPb6VD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjA4MTkxOTIyMjdaFw0yNjA4MjAyMDA5MjdaMDMxMTAvBgNV BAMTKDE5QjAyMTZDNDAyQzNGRDk1RDVFQTkzRDFBMTM5RjUzMEM4ODc2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtUZO/5gFdoRMExkIIr0mDBtUf j04SKoF5kwtFph/pUJh14RX/3mSMjC7AQ7lD/xrQUfSlfnI71HuJWsX357Iuvr66 zU2URfpJCAAAoVE++I/h6myU/iKow9eD15UqxncS/uECQ7L5g5nzy2g9bWakanCi zg7F2T8GL7di0opn5b0njepfXGer4x5jgbp4yF+Ezs78ClfU+KDBY79jUvxFoPbf zxkSt3DN8EJ+e/oQVWUALehhMIyMvlW/8mmbmjMNCJzghb3M3h9VZUwQG0KxLd5K /3n4mhwG4IWgGviSuNWksozVwjpSrO/Aw4MUB1QkHE2H7OcrYau1gOO7dG1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGbAhbEAsP9ldXqk9GhOfUwyIdjowHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHE0UqyjyhV+0+dbYaKg0JwoE0GQMSMbE25V JddZW/x9S/XPfESE4/by8bwFEFSQK8E6ANl0HmObYwJENwUiEXaH7QgB2xoowmWp TGvxP+CZLG/pQr70/EvBOArB7DmKfgKkfl2Aaoq//i8rtxGr6IlR+e5zUvF/1CC3 t42zYDOY6nfq4NQgA0kS6m0deYxL1XEENF7Jts4AX9EfoQjo3CLZdxpJ78HCu2Q4 ll/ZeV5310/9CYJwgImrLS17SDinAfU1b11iz5GM5ZF6PP6u3eR86j5gMvCh9Kfe ZIEZDGginEVNqvrd9S59MVD1C3s1YDpglE3QxjgEGEatnV+4lks= -----END CERTIFICATE-----Generated at Thu Aug 20 07:01:23 2026 by rpki-client