$ rpki-client -vvvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: mjV55UvB2jPCmwhAN+L+lie3u+k8uPut0HTHqSd7tRo= Subject key identifier: 07:21:B0:2F:45:1B:33:DA:8A:C1:4A:87:6F:81:E1:3A:16:FC:F7:38 Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 2BB1056ABA75276707BEAD26A2A979335D6D9D0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:07:56 +0000 Manifest this update: Mon 21 Sep 2026 05:02:56 +0000 Manifest next update: Tue 22 Sep 2026 06:45:56 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) 2: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) 3: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: FN59RZ8kPcuiu6P17DYe5qlsja0gq4WKqNva1Hmi0Ho=) 4: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b1:05:6a:ba:75:27:67:07:be:ad:26:a2:a9:79:33:5d:6d:9d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: Sep 21 05:02:56 2026 GMT Not After : Sep 22 06:45:56 2026 GMT Subject: CN=0721B02F451B33DA8AC14A876F81E13A16FCF738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:38:fb:d2:9f:0d:98:5a:9c:8f:35:38:2a: 49:e9:37:ff:60:03:dc:53:5b:50:f0:0d:d9:78:24: ae:08:e1:8c:2f:61:ef:27:4d:e1:a4:1e:2c:07:93: 75:76:72:dd:3f:46:15:fc:8e:d8:9d:43:dd:7a:2f: 16:99:15:48:60:e1:4a:9e:b2:d4:04:42:95:c4:59: 7f:e3:fe:c0:08:c9:5b:03:7f:f0:9d:87:bc:89:d9: 5f:78:57:fb:1d:05:f6:d1:66:b5:d8:20:45:ff:56: d8:c8:97:9e:1b:06:2d:40:2e:dd:05:6f:ae:7b:61: 09:ce:39:0f:fe:3a:db:f4:55:79:ad:df:0c:20:21: d1:97:df:b8:57:03:08:ec:e4:d8:01:99:5a:a5:60: 25:ef:4f:98:10:96:af:d5:52:fe:3e:0d:ca:3f:22: d0:ea:b6:26:8d:94:cd:92:38:0d:f7:d1:69:8f:87: e1:7c:08:0c:84:b8:bc:bd:28:1d:2c:cf:7a:74:7a: c0:b1:34:af:4d:23:77:96:1f:bd:24:5b:5d:36:58: f9:dd:e8:13:25:30:11:90:05:fe:53:54:1c:b9:43: dd:b9:15:02:f7:0f:c6:46:91:9e:2a:41:b3:41:22: dd:58:02:ec:38:1f:2b:56:b5:6c:70:90:40:76:c5: ef:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:21:B0:2F:45:1B:33:DA:8A:C1:4A:87:6F:81:E1:3A:16:FC:F7:38 X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:00:ab:04:9e:7d:45:d0:c3:91:c5:72:77:f6:50:5c:15:db: c9:36:d8:cf:75:d9:b0:8c:6a:ab:14:d9:ef:d6:78:a3:c2:28: 9b:37:f3:37:9a:c7:6b:6d:88:52:8c:93:83:33:e1:82:30:63: c8:d3:f7:b9:6e:42:e5:1f:bd:7f:69:1b:33:8b:c0:c2:f9:20: 7f:03:d3:6d:04:41:c2:60:8f:ea:7d:80:90:20:83:a8:f0:cd: 2c:c3:11:d8:61:d4:fb:43:ce:19:ea:e5:21:74:17:8d:86:29: 0a:f2:ef:c9:c7:39:20:67:62:d2:7f:03:4b:e1:f2:58:26:50: 9f:d9:0c:41:c2:ce:36:c8:3a:ee:82:09:ba:70:92:a3:6d:86: 64:73:f4:48:0b:c3:b4:25:37:dc:6f:44:9c:35:68:a7:d8:26: 26:3e:65:fb:a4:14:4c:d0:5b:b5:b1:ba:9b:45:0a:b9:14:d6: 3a:21:99:43:c7:11:af:89:51:d9:9a:44:03:f8:14:1e:2b:ad: 0f:c3:6b:9e:0f:96:4a:4d:ae:57:70:ac:de:27:87:03:28:42: d7:9f:34:91:1a:5f:08:18:ba:4e:b7:a0:d8:42:39:c7:98:03: ed:36:ef:31:a1:3a:81:b7:60:24:d2:df:aa:ca:e7:fc:a5:38: f4:20:4a:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7EFarp1J2cHvq0moql5M11tnQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjA5MjEwNTAyNTZaFw0yNjA5MjIwNjQ1NTZaMDMxMTAvBgNV BAMTKDA3MjFCMDJGNDUxQjMzREE4QUMxNEE4NzZGODFFMTNBMTZGQ0Y3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWdTj70p8NmFqcjzU4KknpN/9g A9xTW1DwDdl4JK4I4YwvYe8nTeGkHiwHk3V2ct0/RhX8jtidQ916LxaZFUhg4Uqe stQEQpXEWX/j/sAIyVsDf/Cdh7yJ2V94V/sdBfbRZrXYIEX/VtjIl54bBi1ALt0F b657YQnOOQ/+Otv0VXmt3wwgIdGX37hXAwjs5NgBmVqlYCXvT5gQlq/VUv4+Dco/ ItDqtiaNlM2SOA330WmPh+F8CAyEuLy9KB0sz3p0esCxNK9NI3eWH70kW102WPnd 6BMlMBGQBf5TVBy5Q925FQL3D8ZGkZ4qQbNBIt1YAuw4HytWtWxwkEB2xe8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUByGwL0UbM9qKwUqHb4HhOhb89zgwHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsAqwSefUXQw5HFcnf2UFwV28k22M912bCM aqsU2e/WeKPCKJs38zeax2ttiFKMk4Mz4YIwY8jT97luQuUfvX9pGzOLwML5IH8D 020EQcJgj+p9gJAgg6jwzSzDEdhh1PtDzhnq5SF0F42GKQry78nHOSBnYtJ/A0vh 8lgmUJ/ZDEHCzjbIOu6CCbpwkqNthmRz9EgLw7QlN9xvRJw1aKfYJiY+ZfukFEzQ W7WxuptFCrkU1johmUPHEa+JUdmaRAP4FB4rrQ/Da54PlkpNrldwrN4nhwMoQtef NJEaXwgYuk63oNhCOceYA+027zGhOoG3YCTS36rK5/ylOPQgStI= -----END CERTIFICATE-----Generated at Mon Sep 21 13:19:22 2026 by rpki-client