$ rpki-client -vvvf rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft (raw, json) Hash identifier: xxnSOhsTwo845Mgu37cyb1smGr7wNeDEphKePaubtS0= Subject key identifier: DB:D2:6D:87:47:2E:A2:B0:80:3F:6E:D2:A4:01:CE:40:B1:C5:02:CC Authority key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Certificate issuer: /CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Certificate serial: 1B940385762A6ED646A01E9AEFD4692B190BE4C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft Manifest number: FF Signing time: Tue 10 Nov 2026 03:40:11 +0000 Manifest this update: Tue 10 Nov 2026 03:35:11 +0000 Manifest next update: Wed 11 Nov 2026 05:12:11 +0000 Files and hashes: 1: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl (hash: Mi+ULXUpNPvzikjhvj2kvcmTqqzSSbCkZSwqZr1WKyA=) 2: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: u4jXy9cpz2cC9GANx8Rxrfc5xCnDEExSaiICGpHSMzY=) 3: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: qDIXRFKdiwmfafEmem3WCs/Hn+NiKgvK654gufwjvBM=) 4: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: RHfB9t3/zYh9O2J6A/JuUGJB/6Lz821Hmb7zLIV0TPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 05:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:94:03:85:76:2a:6e:d6:46:a0:1e:9a:ef:d4:69:2b:19:0b:e4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Validity Not Before: Nov 10 03:35:11 2026 GMT Not After : Nov 11 05:12:11 2026 GMT Subject: CN=DBD26D87472EA2B0803F6ED2A401CE40B1C502CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:c8:43:da:5a:6a:38:64:bf:ec:58:8d:06: 7d:8c:cb:79:e9:2c:aa:7a:9b:ca:1a:ba:3c:96:c7: a9:40:30:51:a7:fc:62:b1:16:27:d3:77:1b:00:98: 5c:53:62:42:d5:79:c4:98:c4:46:b3:52:ae:1e:99: 37:9a:82:4c:2a:77:08:cc:e0:49:38:de:68:fa:98: bc:ab:01:86:62:63:6d:74:12:2f:45:01:e8:ed:8b: d6:4d:4d:f1:ca:f5:d3:c0:26:e3:76:da:bd:69:74: d6:8d:f3:20:36:60:79:50:fc:aa:d9:71:52:09:d3: 99:90:20:aa:a9:a1:a0:ee:c4:fe:44:9b:91:b9:28: 1f:3f:dc:4d:96:da:66:62:03:0b:20:13:93:8a:aa: 26:36:dd:d0:35:71:ff:ce:d6:f9:4c:fb:68:90:84: 02:9a:f4:47:b2:b0:0d:0a:31:4d:16:e7:ee:96:cd: 54:1b:bf:3b:d4:64:6f:5e:64:55:bd:35:69:04:d7: 6f:1b:64:0c:5b:f3:1f:8e:ff:b5:05:a0:5c:60:4c: 4a:e6:de:0c:58:4d:64:3c:98:2b:87:96:03:eb:b4: 55:2a:66:c5:24:2d:7c:0a:c0:be:e2:3d:19:18:e3: f3:65:ea:2c:20:84:5b:df:57:db:33:37:e6:ea:b7: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D2:6D:87:47:2E:A2:B0:80:3F:6E:D2:A4:01:CE:40:B1:C5:02:CC X509v3 Authority Key Identifier: keyid:0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e7:0e:e2:0d:ab:d1:02:ea:4c:2e:80:e6:05:09:f0:7e:9d: 12:1c:7d:6e:6c:f4:60:ce:5e:27:94:3c:09:6f:34:55:e1:d8: 08:95:a5:3c:07:16:30:5d:6f:c0:58:17:1a:42:7d:19:ae:66: 06:14:ba:c9:77:05:cf:93:61:26:ed:14:59:13:1b:c4:c9:a9: d5:ba:c1:37:68:01:9f:9f:43:ee:0f:44:34:7c:86:1d:72:e6: c5:f0:f7:9e:58:d9:28:ac:56:0b:69:27:90:59:ef:9c:b7:b2: ee:d2:bb:c7:e6:50:3f:41:a9:31:0e:d0:d5:e1:6d:7c:83:4a: 7e:80:c2:c7:26:cb:54:62:16:0a:bd:4a:00:22:39:1b:8d:35: 83:af:1d:fe:65:a4:b9:c1:88:83:d2:a0:51:fb:27:27:94:60: e7:d8:2f:db:68:6e:85:67:99:6c:b7:d9:36:3f:38:b4:81:1b: c5:d9:b4:55:e1:ef:c2:9e:8a:1c:fa:91:44:f4:50:d7:ac:bc: 3b:37:55:99:59:1f:4b:40:96:21:12:c5:06:fd:11:df:6a:54: b1:1f:dd:39:1e:d1:67:5e:d1:db:67:43:c7:51:bc:4f:b3:93: 7e:82:a5:1d:1b:1b:17:01:eb:2c:14:11:11:a2:22:77:e6:8b: 0d:f0:fd:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5QDhXYqbtZGoB6a79RpKxkL5MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0OTg5 NzI5QjI0MjAeFw0yNjExMTAwMzM1MTFaFw0yNjExMTEwNTEyMTFaMDMxMTAvBgNV BAMTKERCRDI2RDg3NDcyRUEyQjA4MDNGNkVEMkE0MDFDRTQwQjFDNTAyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHR8hD2lpqOGS/7FiNBn2My3np LKp6m8oaujyWx6lAMFGn/GKxFifTdxsAmFxTYkLVecSYxEazUq4emTeagkwqdwjM 4Ek43mj6mLyrAYZiY210Ei9FAejti9ZNTfHK9dPAJuN22r1pdNaN8yA2YHlQ/KrZ cVIJ05mQIKqpoaDuxP5Em5G5KB8/3E2W2mZiAwsgE5OKqiY23dA1cf/O1vlM+2iQ hAKa9EeysA0KMU0W5+6WzVQbvzvUZG9eZFW9NWkE128bZAxb8x+O/7UFoFxgTErm 3gxYTWQ8mCuHlgPrtFUqZsUkLXwKwL7iPRkY4/Nl6iwghFvfV9szN+bqt80zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU29Jth0cuorCAP27SpAHOQLHFAswwHwYDVR0j BBgwFoAUCjI/3+XSgH7CqNd6eFj0mJcpskIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc2ZmRjNjAtODAyMy00MGNkLWFhYTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZF NUQyODA3RUMyQThENzdBNzg1OEY0OTg5NzI5QjI0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTMyM0ZERkU1RDI4MDdFQzJBOEQ3N0E3ODU4RjQ5ODk3MjlC MjQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvMEEzMjNGREZFNUQyODA3RUMyQThENzdBNzg1OEY0 OTg5NzI5QjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAznDuINq9EC6kwugOYFCfB+nRIcfW5s9GDO XieUPAlvNFXh2AiVpTwHFjBdb8BYFxpCfRmuZgYUusl3Bc+TYSbtFFkTG8TJqdW6 wTdoAZ+fQ+4PRDR8hh1y5sXw955Y2SisVgtpJ5BZ75y3su7Su8fmUD9BqTEO0NXh bXyDSn6Awscmy1RiFgq9SgAiORuNNYOvHf5lpLnBiIPSoFH7JyeUYOfYL9toboVn mWy32TY/OLSBG8XZtFXh78Keihz6kUT0UNesvDs3VZlZH0tAliESxQb9Ed9qVLEf 3Tke0Wde0dtnQ8dRvE+zk36CpR0bGxcB6ywUERGiInfmiw3w/Z8= -----END CERTIFICATE-----Generated at Tue Nov 10 19:48:41 2026 by rpki-client