$ rpki-client -vvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: ubp1xLpUQBJPzM1L1Cn13KjHhteEPIrJNdHP0ZmkYVo= Subject key identifier: F2:B2:40:5F:3D:04:6F:E9:06:45:69:5A:94:83:55:73:47:A4:97:50 Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 0EC8FBF1C77AC139273C62AB64A26C2965C0F8A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 16:16:40 +0000 Manifest this update: Tue 28 Jul 2026 16:11:40 +0000 Manifest next update: Wed 29 Jul 2026 16:47:40 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) 2: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: SMxUX7SFBhdt7wVfqseCR/IlxrOHormNsbzM//Ol1FU=) 3: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) 4: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c8:fb:f1:c7:7a:c1:39:27:3c:62:ab:64:a2:6c:29:65:c0:f8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: Jul 28 16:11:40 2026 GMT Not After : Jul 29 16:47:40 2026 GMT Subject: CN=F2B2405F3D046FE90645695A9483557347A49750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:89:a7:89:25:cc:82:10:f8:ad:2e:54:3e: f1:f3:cb:43:e3:c7:f3:0e:2e:0e:09:43:d0:26:87: a9:5b:71:49:0d:ce:56:01:96:e4:df:67:c7:65:51: be:31:dc:22:d0:5e:68:83:ca:56:67:c6:e8:9e:81: 77:ad:cf:9d:5c:51:7c:ac:0d:7c:72:0f:5e:f1:20: 36:bb:f6:1c:1c:cb:ae:22:d4:df:17:4a:4b:6d:ef: 6c:89:bc:08:aa:0a:09:dc:94:8c:93:a6:4d:81:4b: b7:42:27:57:c1:50:92:7e:9e:2d:2f:e9:8e:3a:28: 41:70:38:ba:b1:be:3a:0f:02:36:80:5e:45:3b:eb: da:88:80:4b:ed:74:fa:20:5d:48:54:00:3b:c0:c9: 0a:a8:26:a2:ea:2e:af:b7:5b:e0:7f:72:d0:e0:f0: 1d:39:21:fe:34:b4:6e:dc:1b:dc:33:f3:3e:15:6c: e6:01:29:20:05:0e:95:96:be:1a:48:e0:8e:29:47: 3f:1f:3e:aa:37:23:56:f5:e1:2b:fd:ea:f5:b4:90: 91:32:48:49:67:f9:81:ea:07:a3:dc:58:ba:52:f9: cc:7f:bf:b7:1f:6d:1e:20:2c:f9:65:e7:78:be:ae: 6a:df:af:33:3e:c5:05:57:3f:04:02:b8:2a:47:da: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:40:5F:3D:04:6F:E9:06:45:69:5A:94:83:55:73:47:A4:97:50 X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:da:24:4b:41:e4:b5:34:a9:f2:64:29:a8:67:46:06:7a:d1: 2b:f3:1a:2a:84:62:53:d0:e3:41:e4:15:9a:e4:06:01:cf:86: db:13:61:28:cb:f6:55:7b:3f:e9:f5:05:0b:7d:35:b8:d8:43: 75:37:55:b3:b4:6f:b6:e6:8d:62:ec:3e:d5:33:00:70:c9:9c: 26:d7:de:a8:39:b7:13:49:7d:94:63:6f:80:f8:ec:9f:c2:c1: 6c:d0:b3:fd:05:45:ef:83:7f:fc:0d:46:d1:e7:af:eb:56:44: 0d:12:7b:42:43:df:0c:21:3f:8b:9c:1a:c8:93:c3:fc:54:66: af:ef:8b:60:27:ce:06:b2:85:0d:42:87:87:50:99:e4:37:95: 3f:8c:d6:cb:c7:aa:d8:95:d5:9a:36:b5:2c:d1:94:5b:93:f3: 34:dc:e4:2f:34:9a:b0:37:25:7f:84:d0:c7:6f:fe:e8:5b:73: 07:64:fe:cd:72:82:25:47:ca:09:9a:1f:98:4a:14:9d:3e:20: 3c:d0:aa:eb:5f:6f:d4:49:4a:6f:ba:23:7c:e6:1b:e1:cf:1b: 81:70:a8:65:d8:f6:4d:f2:38:c3:bc:0f:e2:a1:d4:fc:97:f6: f3:9a:85:a9:23:a2:f2:e0:24:d0:c4:2f:41:9b:5d:6b:9e:7f: 9a:9e:19:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsj78cd6wTknPGKrZKJsKWXA+KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjA3MjgxNjExNDBaFw0yNjA3MjkxNjQ3NDBaMDMxMTAvBgNV BAMTKEYyQjI0MDVGM0QwNDZGRTkwNjQ1Njk1QTk0ODM1NTczNDdBNDk3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA4mniSXMghD4rS5UPvHzy0Pj x/MOLg4JQ9Amh6lbcUkNzlYBluTfZ8dlUb4x3CLQXmiDylZnxuiegXetz51cUXys DXxyD17xIDa79hwcy64i1N8XSktt72yJvAiqCgnclIyTpk2BS7dCJ1fBUJJ+ni0v 6Y46KEFwOLqxvjoPAjaAXkU769qIgEvtdPogXUhUADvAyQqoJqLqLq+3W+B/ctDg 8B05If40tG7cG9wz8z4VbOYBKSAFDpWWvhpI4I4pRz8fPqo3I1b14Sv96vW0kJEy SEln+YHqB6PcWLpS+cx/v7cfbR4gLPll53i+rmrfrzM+xQVXPwQCuCpH2qYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8rJAXz0Eb+kGRWlalINVc0ekl1AwHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHaJEtB5LU0qfJkKahnRgZ60SvzGiqEYlPQ 40HkFZrkBgHPhtsTYSjL9lV7P+n1BQt9NbjYQ3U3VbO0b7bmjWLsPtUzAHDJnCbX 3qg5txNJfZRjb4D47J/CwWzQs/0FRe+Df/wNRtHnr+tWRA0Se0JD3wwhP4ucGsiT w/xUZq/vi2AnzgayhQ1Ch4dQmeQ3lT+M1svHqtiV1Zo2tSzRlFuT8zTc5C80mrA3 JX+E0Mdv/uhbcwdk/s1ygiVHygmaH5hKFJ0+IDzQqutfb9RJSm+6I3zmG+HPG4Fw qGXY9k3yOMO8D+Kh1PyX9vOahakjovLgJNDEL0GbXWuef5qeGV0= -----END CERTIFICATE-----Generated at Wed Jul 29 06:36:48 2026 by rpki-client