$ rpki-client -vvvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: /BfYED9+hBIiarunE2wSMBu6VFQ/JYb5+ZnTzauh5Vw= Subject key identifier: 79:1F:F0:64:DC:39:C3:B8:5D:B6:76:41:6E:5F:6F:39:53:D7:BB:A9 Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 416527EC355235F4E5350422DEE176AB8C0A5052 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: DC Signing time: Wed 14 Oct 2026 13:11:46 +0000 Manifest this update: Wed 14 Oct 2026 13:06:46 +0000 Manifest next update: Thu 15 Oct 2026 16:10:46 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) 2: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) 3: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: W59UIMSPbCK5IZP62mr+bwuztCThraMTm9Iy10encFA=) 4: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:65:27:ec:35:52:35:f4:e5:35:04:22:de:e1:76:ab:8c:0a:50:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: Oct 14 13:06:46 2026 GMT Not After : Oct 15 16:10:46 2026 GMT Subject: CN=791FF064DC39C3B85DB676416E5F6F3953D7BBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:79:6c:7d:ee:92:e0:76:1c:27:22:01:eb: d1:3b:6d:26:d4:5e:4f:06:8b:91:35:59:5c:4c:02: 2d:95:4c:1e:55:5e:47:5e:85:b4:a6:ce:52:16:26: bc:1a:0d:4c:60:cc:9f:42:70:1d:23:c4:33:95:bf: 6d:81:81:f7:d9:c6:28:cd:ae:fe:48:4f:25:24:4d: 0d:a4:d8:44:07:0b:29:5f:47:d6:e4:24:cc:86:5e: 33:71:2d:b9:53:9b:9a:53:f3:36:99:66:70:1d:49: 19:68:39:63:fe:f7:d3:48:cd:72:27:19:3b:f1:d9: a1:5c:b7:b0:37:8d:33:f1:d7:da:e6:9e:4d:6f:cb: 63:be:7f:cc:78:7f:d4:9f:f8:0d:2f:fe:79:a0:12: 43:0d:ed:54:f3:61:ed:22:d5:47:dd:86:0e:8a:70: ba:ac:ef:26:d9:c2:ce:fd:cf:dc:75:cf:da:ab:aa: 8f:11:ad:52:38:9b:b0:3a:4c:02:c5:da:e5:23:03: 70:77:1f:5e:3d:ee:c4:88:0b:7e:96:c1:b1:35:25: c4:37:7a:06:43:6f:af:a0:70:65:07:3e:d7:e0:74: 2d:e5:f8:70:06:a6:c7:74:d8:3b:78:29:85:d0:ca: 91:7a:3e:31:84:cf:9e:62:ae:ce:3f:4a:44:d2:f0: b7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1F:F0:64:DC:39:C3:B8:5D:B6:76:41:6E:5F:6F:39:53:D7:BB:A9 X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ca:f1:de:6f:1b:47:84:64:29:a4:6a:cb:29:18:52:39:c1: 2d:ed:f0:02:0c:e1:0a:5c:8c:f8:1b:1a:95:17:8e:68:71:11: c8:00:93:eb:cd:06:5b:fe:ca:58:35:14:f4:0f:f7:8e:1a:be: b7:93:38:ef:48:64:ac:30:35:e3:bd:b9:de:ac:4a:c4:f1:13: db:3f:16:c1:0b:9f:56:72:50:17:13:92:ac:e8:24:a4:75:ba: 3c:96:fc:d5:46:86:27:0f:14:08:3b:42:35:a3:c1:0c:31:26: bb:c1:2f:ad:a9:07:03:23:ed:06:bb:be:b5:bc:7a:7f:0a:80: 4c:54:f2:26:44:a1:5d:68:aa:fc:5a:e4:94:72:22:a5:b7:98: cb:db:87:00:fd:50:9f:59:f1:ae:ef:e3:7e:48:ce:ba:ac:db: 41:16:7f:c1:c9:9d:cb:8e:39:f9:3c:ba:d8:09:c2:74:b7:84: f8:42:c1:ab:cd:8b:d2:67:b1:06:9c:f3:b8:c4:1d:48:91:44: 92:92:ee:81:c1:d6:a0:53:0d:5c:1d:3e:37:39:5c:f4:8e:53: 77:5a:ee:e1:0c:8c:77:37:74:96:f3:da:8b:93:09:e7:2a:30: 6f:6e:60:0a:de:21:7f:cc:42:dd:02:bd:02:73:68:0d:d9:ba: a5:42:f1:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWUn7DVSNfTlNQQi3uF2q4wKUFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjEwMTQxMzA2NDZaFw0yNjEwMTUxNjEwNDZaMDMxMTAvBgNV BAMTKDc5MUZGMDY0REMzOUMzQjg1REI2NzY0MTZFNUY2RjM5NTNEN0JCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPUHlsfe6S4HYcJyIB69E7bSbU Xk8Gi5E1WVxMAi2VTB5VXkdehbSmzlIWJrwaDUxgzJ9CcB0jxDOVv22BgffZxijN rv5ITyUkTQ2k2EQHCylfR9bkJMyGXjNxLblTm5pT8zaZZnAdSRloOWP+99NIzXIn GTvx2aFct7A3jTPx19rmnk1vy2O+f8x4f9Sf+A0v/nmgEkMN7VTzYe0i1Ufdhg6K cLqs7ybZws79z9x1z9qrqo8RrVI4m7A6TALF2uUjA3B3H1497sSIC36WwbE1JcQ3 egZDb6+gcGUHPtfgdC3l+HAGpsd02Dt4KYXQypF6PjGEz55irs4/SkTS8Lc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeR/wZNw5w7hdtnZBbl9vOVPXu6kwHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvK8d5vG0eEZCmkasspGFI5wS3t8AIM4Qpc jPgbGpUXjmhxEcgAk+vNBlv+ylg1FPQP944avreTOO9IZKwwNeO9ud6sSsTxE9s/ FsELn1ZyUBcTkqzoJKR1ujyW/NVGhicPFAg7QjWjwQwxJrvBL62pBwMj7Qa7vrW8 en8KgExU8iZEoV1oqvxa5JRyIqW3mMvbhwD9UJ9Z8a7v435Izrqs20EWf8HJncuO Ofk8utgJwnS3hPhCwavNi9JnsQac87jEHUiRRJKS7oHB1qBTDVwdPjc5XPSOU3da 7uEMjHc3dJbz2ouTCecqMG9uYAreIX/MQt0CvQJzaA3ZuqVC8T4= -----END CERTIFICATE-----Generated at Thu Oct 15 05:55:02 2026 by rpki-client