$ rpki-client -vvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: 6stHmtUQGQG6+zGOz3bDiGfGZi0+yl9ASfa/l2Qegpo= Subject key identifier: B7:CB:CA:A5:2C:6C:B1:C2:93:93:2B:2C:87:C9:22:1F:CC:08:DE:87 Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 48F14B87F011B7A5B03281BBD8BE05C549620D91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: 05 Signing time: Tue 05 May 2026 10:09:37 +0000 Manifest this update: Tue 05 May 2026 10:04:37 +0000 Manifest next update: Wed 06 May 2026 11:59:37 +0000 Files and hashes: 1: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: WfkSboJNMnKav7z7sJyb7bR5XDFlizBkfvJ2Ujtkepk=) 2: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) 3: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) 4: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f1:4b:87:f0:11:b7:a5:b0:32:81:bb:d8:be:05:c5:49:62:0d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: May 5 10:04:37 2026 GMT Not After : May 6 11:59:37 2026 GMT Subject: CN=B7CBCAA52C6CB1C293932B2C87C9221FCC08DE87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:39:0c:dc:29:21:d1:09:62:3a:13:f6:b1: 87:74:75:54:ca:43:6f:4e:0b:72:67:3c:c3:75:54: db:ad:38:d3:e1:03:85:04:7c:74:c3:77:24:f5:14: 2f:fc:09:e9:e5:68:ec:7b:20:8c:59:f3:43:8d:21: 47:04:f3:b9:2d:0e:2e:e9:c8:fa:9f:a1:2d:25:59: 5f:17:74:61:30:bf:28:25:6c:82:8f:f7:67:6c:9f: 5b:3e:89:f7:ed:50:98:9d:9c:19:86:05:bb:4d:47: e8:da:ed:7e:62:49:f3:4b:e9:82:46:4c:6e:95:d1: 15:b5:ed:b3:8a:45:ac:7f:a4:cc:e2:25:9b:1d:55: ec:95:53:de:00:65:63:bb:2a:17:bd:f4:12:ba:69: c4:2e:b7:60:e7:0c:25:3d:92:fc:4d:7f:1b:aa:f0: e8:99:69:0f:f5:3c:8e:76:5b:be:32:e1:99:5f:73: 52:3b:89:f7:9c:1d:a2:94:0b:2b:3e:1c:c6:30:d2: 2e:c9:5e:99:1d:6c:df:2a:61:6d:10:03:18:ab:9c: 92:1f:07:79:8e:81:e9:f3:12:2a:ff:ce:4a:4c:a6: 7d:42:f5:d1:4b:b2:6c:3e:ca:92:07:cb:6c:d5:43: 1d:53:de:28:e7:1c:9d:52:19:d9:80:60:3e:a1:e1: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CB:CA:A5:2C:6C:B1:C2:93:93:2B:2C:87:C9:22:1F:CC:08:DE:87 X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9b:9c:b5:be:2d:b7:ed:e1:e5:d1:05:fe:75:3f:90:63:25: bb:ec:ca:1d:c4:ee:31:1e:10:07:61:63:f5:85:83:50:94:a3: 1a:c4:d3:2b:f5:fa:c2:29:86:d4:48:93:14:28:5c:15:3b:8b: 67:ee:a7:32:3e:74:cc:ce:5b:48:8e:33:3a:f7:cd:21:7a:8b: e9:42:cd:2d:f3:bb:4c:56:75:91:eb:9c:b1:0b:52:0d:ac:78: 9b:98:ec:d2:af:51:a8:80:e3:0c:d9:3c:7c:f5:30:07:57:80: 1f:db:95:ba:0d:8e:48:06:24:ef:63:2c:1a:c5:37:e3:0b:81: c1:78:15:ff:96:be:2e:64:d0:60:c4:55:c4:5d:96:9b:8c:6d: ea:81:33:d9:00:95:6e:64:dc:64:42:28:b7:31:65:0a:36:79: de:28:3c:ad:a2:18:42:3c:06:6a:44:7c:ca:21:7b:fa:b0:a3: a6:01:60:f7:41:3d:f9:6e:d5:76:cd:98:b0:d2:b3:b0:be:eb: 52:46:e7:08:25:74:ea:e6:32:41:f1:73:49:27:f7:01:ab:fd: 01:55:4c:d6:f4:d8:d5:e9:e0:38:f2:12:88:78:38:5d:32:02: 8f:50:b6:a8:ef:f1:e9:6a:63:66:05:85:40:48:12:f8:69:54: 81:2a:00:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPFLh/ARt6WwMoG72L4FxUliDZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjA1MDUxMDA0MzdaFw0yNjA1MDYxMTU5MzdaMDMxMTAvBgNV BAMTKEI3Q0JDQUE1MkM2Q0IxQzI5MzkzMkIyQzg3QzkyMjFGQ0MwOERFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgDkM3Ckh0QliOhP2sYd0dVTK Q29OC3JnPMN1VNutONPhA4UEfHTDdyT1FC/8CenlaOx7IIxZ80ONIUcE87ktDi7p yPqfoS0lWV8XdGEwvyglbIKP92dsn1s+ifftUJidnBmGBbtNR+ja7X5iSfNL6YJG TG6V0RW17bOKRax/pMziJZsdVeyVU94AZWO7Khe99BK6acQut2DnDCU9kvxNfxuq 8OiZaQ/1PI52W74y4Zlfc1I7ifecHaKUCys+HMYw0i7JXpkdbN8qYW0QAxirnJIf B3mOgenzEir/zkpMpn1C9dFLsmw+ypIHy2zVQx1T3ijnHJ1SGdmAYD6h4c+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt8vKpSxsscKTkyssh8kiH8wI3ocwHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6bnLW+Lbft4eXRBf51P5BjJbvsyh3E7jEe EAdhY/WFg1CUoxrE0yv1+sIphtRIkxQoXBU7i2fupzI+dMzOW0iOMzr3zSF6i+lC zS3zu0xWdZHrnLELUg2seJuY7NKvUaiA4wzZPHz1MAdXgB/blboNjkgGJO9jLBrF N+MLgcF4Ff+Wvi5k0GDEVcRdlpuMbeqBM9kAlW5k3GRCKLcxZQo2ed4oPK2iGEI8 BmpEfMohe/qwo6YBYPdBPflu1XbNmLDSs7C+61JG5wgldOrmMkHxc0kn9wGr/QFV TNb02NXp4DjyEoh4OF0yAo9Qtqjv8elqY2YFhUBIEvhpVIEqACE= -----END CERTIFICATE-----Generated at Tue May 5 14:06:17 2026 by rpki-client