$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft File: 0A0BE818C9E480D5B3C1387F48406FDF75525054.mft (raw, json) Hash identifier: O+7WChFrJHqlnjOHhAW7orJ653ylk3Ag1zun+nAiNAs= Subject key identifier: 05:39:1C:3B:C8:76:73:2B:F5:66:84:75:D4:49:9D:53:91:A5:EC:93 Authority key identifier: 0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 Certificate issuer: /CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Certificate serial: 48F7E8C76F6A20B2C8D3B1AB411FC1A5E44DC042 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft Manifest number: 95 Signing time: Thu 20 Aug 2026 03:01:30 +0000 Manifest this update: Thu 20 Aug 2026 02:56:30 +0000 Manifest next update: Fri 21 Aug 2026 03:06:30 +0000 Files and hashes: 1: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: d/Fq+IffZJ+OozrZYhdBokPyli+2KVods0E+Vb13ir4=) 2: 0A0BE818C9E480D5B3C1387F48406FDF75525054.crl (hash: lE4lWMEbC+LjjA9vKpSDvZ6KTajkqlJh+JaqezduVw0=) 3: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: +JyCkLsQ3tpHW5cHfUXrYK9OeTIPdF1qJiIUkvR3JIw=) 4: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: ZvHMdtaJZWzSLaq7f17lDIIdd170kCIaPzhP2QwWe1o=) 5: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: XruWQQhjREtyk1SmNsMjFRHLoSTVd3r/+m7FYV8d8Kc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 03:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f7:e8:c7:6f:6a:20:b2:c8:d3:b1:ab:41:1f:c1:a5:e4:4d:c0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Validity Not Before: Aug 20 02:56:30 2026 GMT Not After : Aug 21 03:06:30 2026 GMT Subject: CN=05391C3BC876732BF5668475D4499D5391A5EC93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:98:b6:42:45:a0:d1:16:a6:45:db:f4:48:55: 72:f8:9b:c6:16:a9:55:3a:fe:94:94:03:c1:f3:ee: ea:a0:51:16:59:89:e9:2e:b2:85:39:b9:0d:68:f7: 08:47:53:77:87:ff:0c:ff:17:19:ec:b8:49:2f:40: cc:5a:c2:38:ec:98:8c:70:9a:4d:53:c5:ba:fd:25: 7a:2a:0c:b0:0f:18:ae:c0:3f:30:5f:b5:6b:9a:fb: cf:c5:a3:e6:65:6d:ea:dd:77:db:f7:6b:64:11:57: 9b:1e:d1:64:4c:09:48:70:cf:66:13:1e:f5:20:f9: 30:84:3b:fa:7f:fe:ac:d6:f8:4f:e2:39:93:1b:6f: 0f:95:a0:b2:57:f8:91:9a:48:6b:56:60:ca:9a:e2: 67:3a:82:d4:b7:13:ad:f1:3f:d1:c9:61:cb:ea:06: 83:e0:b2:1a:50:09:87:60:38:d8:f2:d6:a2:7c:1f: c9:26:bc:01:01:b6:e3:df:85:46:cc:be:bb:97:99: 3f:8d:6e:bd:d3:aa:98:e3:26:bf:7b:3b:28:80:87: ee:ac:10:fb:06:b7:94:35:ea:7a:a3:66:f8:51:11: 01:26:96:99:46:dd:53:31:5a:b4:8f:16:f9:c3:fe: 08:09:97:ff:90:03:48:a7:fe:a6:67:3e:2d:67:5a: 00:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:39:1C:3B:C8:76:73:2B:F5:66:84:75:D4:49:9D:53:91:A5:EC:93 X509v3 Authority Key Identifier: keyid:0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4e:12:6f:ae:9f:34:77:73:79:03:97:0b:f0:be:34:85:df: dd:67:1e:8c:95:3f:ab:8a:83:cd:95:9e:6a:53:5c:cc:f2:39: 23:e7:32:31:d7:c4:b4:24:40:55:d0:58:99:2a:89:91:90:dc: e6:89:23:f0:92:6d:a4:33:ad:a4:dc:8d:ab:66:2d:cd:5e:60: 5b:8f:4b:82:2b:96:8f:d1:06:93:05:52:ef:29:5f:23:d7:9c: 8c:4d:93:27:5d:60:aa:a8:1e:e3:a0:3e:65:5e:6b:4e:1b:12: 5a:77:61:13:8c:c8:e6:75:ce:00:f1:ee:75:d9:1f:1f:00:5a: f5:e5:1b:99:3f:cc:f9:b3:06:04:ee:df:09:02:d5:0a:8c:78: 9f:0a:0f:1a:15:87:19:3f:db:52:55:c1:9c:07:04:21:ef:e4: 9a:ca:7f:52:54:a9:b3:37:16:c3:65:f3:46:cd:f4:9a:5a:5d: 0a:1d:11:60:33:6c:bd:f9:19:00:59:a2:77:e7:82:1e:78:f4: 48:95:de:89:5e:5d:42:83:16:49:34:51:b8:d5:eb:63:30:6c: 53:46:3f:48:f5:c4:cf:04:74:8d:0e:bd:55:74:57:e3:19:0d: fe:cd:4d:ca:c3:fc:5e:a4:c3:b4:b3:be:5e:fa:06:4a:19:a0: c5:b7:29:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPfox29qILLI07GrQR/BpeRNwEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZGREY3 NTUyNTA1NDAeFw0yNjA4MjAwMjU2MzBaFw0yNjA4MjEwMzA2MzBaMDMxMTAvBgNV BAMTKDA1MzkxQzNCQzg3NjczMkJGNTY2ODQ3NUQ0NDk5RDUzOTFBNUVDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimLZCRaDRFqZF2/RIVXL4m8YW qVU6/pSUA8Hz7uqgURZZiekusoU5uQ1o9whHU3eH/wz/FxnsuEkvQMxawjjsmIxw mk1Txbr9JXoqDLAPGK7APzBftWua+8/Fo+Zlberdd9v3a2QRV5se0WRMCUhwz2YT HvUg+TCEO/p//qzW+E/iOZMbbw+VoLJX+JGaSGtWYMqa4mc6gtS3E63xP9HJYcvq BoPgshpQCYdgONjy1qJ8H8kmvAEBtuPfhUbMvruXmT+Nbr3TqpjjJr97OyiAh+6s EPsGt5Q16nqjZvhREQEmlplG3VMxWrSPFvnD/ggJl/+QA0in/qZnPi1nWgD5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTkcO8h2cyv1ZoR11EmdU5Gl7JMwHwYDVR0j BBgwFoAUCgvoGMnkgNWzwTh/SEBv33VSUFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThD OUU0ODBENUIzQzEzODdGNDg0MDZGREY3NTUyNTA1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTBCRTgxOEM5RTQ4MEQ1QjNDMTM4N0Y0ODQwNkZERjc1NTI1 MDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZG REY3NTUyNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJOEm+unzR3c3kDlwvwvjSF391nHoyVP6uK g82VnmpTXMzyOSPnMjHXxLQkQFXQWJkqiZGQ3OaJI/CSbaQzraTcjatmLc1eYFuP S4Irlo/RBpMFUu8pXyPXnIxNkyddYKqoHuOgPmVea04bElp3YROMyOZ1zgDx7nXZ Hx8AWvXlG5k/zPmzBgTu3wkC1QqMeJ8KDxoVhxk/21JVwZwHBCHv5JrKf1JUqbM3 FsNl80bN9JpaXQodEWAzbL35GQBZonfngh549EiV3oleXUKDFkk0UbjV62MwbFNG P0j1xM8EdI0OvVV0V+MZDf7NTcrD/F6kw7Szvl76BkoZoMW3KUk= -----END CERTIFICATE-----Generated at Thu Aug 20 09:45:35 2026 by rpki-client