$ rpki-client -vvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: OqFx8xNy1nZl8WiQNdXw2uhwD0ecuBO2I5pRx/PZVuo= Subject key identifier: 3F:E9:C3:F3:B7:1B:66:27:01:8D:83:FE:8C:3C:CF:28:02:BA:6A:CF Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 6BB4B88C1FAEB5A24CF664DE58E4226B2EC233F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:14:12 +0000 Manifest this update: Fri 19 Jun 2026 19:09:12 +0000 Manifest next update: Sat 20 Jun 2026 21:07:12 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) 2: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) 3: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) 4: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: u6DupXvoo9sDKacweOFNOcHtWEPfBCeOuwx36hVBjo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 21:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b4:b8:8c:1f:ae:b5:a2:4c:f6:64:de:58:e4:22:6b:2e:c2:33:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: Jun 19 19:09:12 2026 GMT Not After : Jun 20 21:07:12 2026 GMT Subject: CN=3FE9C3F3B71B6627018D83FE8C3CCF2802BA6ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:2b:44:fd:bb:44:06:6d:51:a3:04:9f:91: c1:7a:e2:e9:1f:30:8e:80:40:1f:e7:62:86:20:2c: 05:c1:8b:a5:06:a0:49:86:ee:90:f1:29:c9:15:5c: 92:26:28:7f:d8:de:dc:ae:86:bb:04:c8:c3:85:d8: d9:a7:a7:bf:2b:d0:87:c6:81:c4:28:14:22:db:53: 3f:a0:24:0a:6c:5d:cc:dc:55:99:41:33:86:2a:f6: 90:ba:7a:f0:27:d9:b4:52:2b:b1:82:1d:2e:bc:85: 2a:68:75:d0:28:4d:fa:25:c2:af:b6:c6:b4:7f:dd: 38:12:fd:b0:48:b2:67:c5:96:67:d1:21:98:db:ef: da:84:f5:0c:12:cb:cd:fc:bb:00:7f:82:34:53:f1: 4f:72:cd:00:c1:29:dc:aa:1c:d6:34:da:b2:93:f7: fa:d5:fe:1d:d9:d4:13:e0:43:f6:f7:4d:65:a6:48: 9e:a7:68:78:0a:a8:3a:b6:f9:46:17:a6:08:b9:6f: fc:bf:e4:ba:26:28:86:20:9e:dc:bd:36:24:98:92: 70:ec:05:65:0f:b1:25:bc:f8:fe:9e:bb:0e:7f:e0: 23:4e:75:0e:87:1f:48:f5:b5:8a:dd:57:f5:2b:b9: 4d:ab:ed:1e:94:38:9b:f9:6f:ae:39:20:2b:9b:cc: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E9:C3:F3:B7:1B:66:27:01:8D:83:FE:8C:3C:CF:28:02:BA:6A:CF X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:35:96:74:58:4c:30:0d:7a:98:f1:6c:9f:57:6a:64:3b:6b: f1:36:72:ef:75:bc:e6:51:98:75:8c:00:1b:a8:9c:51:51:dd: ca:c5:7a:22:61:84:48:28:53:86:6f:45:5b:5d:a8:c7:92:47: 23:48:87:5d:66:2b:20:0b:e0:bd:3b:80:0d:80:93:0e:a0:64: b0:87:c6:3a:d4:46:98:b2:7f:ac:88:59:56:8c:07:4d:22:d6: 56:df:93:88:ce:3a:de:08:fb:67:e1:72:32:62:85:a0:42:a2: f5:f9:e7:15:9e:bf:1d:38:b2:0c:06:26:96:77:64:5b:e4:19: 87:2a:f2:11:63:cc:b3:e9:e4:58:27:52:c5:94:4c:c3:42:43: 6b:41:15:45:da:05:5e:75:ce:cf:62:59:81:26:f2:42:52:84: c8:21:38:df:e5:20:a3:3e:2b:7b:7d:ef:b7:e9:71:1b:ef:d8: 14:55:2b:5e:d1:02:34:77:b6:e6:c0:40:73:67:67:82:f0:17: e6:c8:35:a1:59:a9:ac:5f:46:70:02:63:ce:80:ce:d7:89:e1: df:b6:97:c6:0d:5c:f6:32:16:61:ea:84:10:b7:bb:1d:b4:b4: f6:3e:7f:b8:21:8a:7c:0f:64:06:6c:16:6b:7d:5b:e1:84:f5: fe:ce:5b:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7S4jB+utaJM9mTeWOQiay7CM/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjA2MTkxOTA5MTJaFw0yNjA2MjAyMTA3MTJaMDMxMTAvBgNV BAMTKDNGRTlDM0YzQjcxQjY2MjcwMThEODNGRThDM0NDRjI4MDJCQTZBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjitE/btEBm1RowSfkcF64ukf MI6AQB/nYoYgLAXBi6UGoEmG7pDxKckVXJImKH/Y3tyuhrsEyMOF2Nmnp78r0IfG gcQoFCLbUz+gJApsXczcVZlBM4Yq9pC6evAn2bRSK7GCHS68hSpoddAoTfolwq+2 xrR/3TgS/bBIsmfFlmfRIZjb79qE9QwSy838uwB/gjRT8U9yzQDBKdyqHNY02rKT 9/rV/h3Z1BPgQ/b3TWWmSJ6naHgKqDq2+UYXpgi5b/y/5LomKIYgnty9NiSYknDs BWUPsSW8+P6euw5/4CNOdQ6HH0j1tYrdV/UruU2r7R6UOJv5b645ICubzO+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+nD87cbZicBjYP+jDzPKAK6as8wHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFE1lnRYTDANepjxbJ9XamQ7a/E2cu91vOZR mHWMABuonFFR3crFeiJhhEgoU4ZvRVtdqMeSRyNIh11mKyAL4L07gA2Akw6gZLCH xjrURpiyf6yIWVaMB00i1lbfk4jOOt4I+2fhcjJihaBCovX55xWevx04sgwGJpZ3 ZFvkGYcq8hFjzLPp5FgnUsWUTMNCQ2tBFUXaBV51zs9iWYEm8kJShMghON/lIKM+ K3t977fpcRvv2BRVK17RAjR3tubAQHNnZ4LwF+bINaFZqaxfRnACY86AzteJ4d+2 l8YNXPYyFmHqhBC3ux20tPY+f7ghinwPZAZsFmt9W+GE9f7OW1w= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:20 2026 by rpki-client