$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: 7Zuqyj46E34cY3bNIh0vPXhbsP4tDWIf7QxGfz7f6mw= Subject key identifier: E9:22:94:73:91:06:D7:20:C1:C6:AE:95:48:CD:0A:82:C1:29:7A:D0 Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 175D2FF0BA247BDCDEEFD231E0D65FC75C278D5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 02D7 Signing time: Fri 17 Apr 2026 00:21:05 +0000 Manifest this update: Fri 17 Apr 2026 00:16:05 +0000 Manifest next update: Mon 20 Apr 2026 08:18:05 +0000 Files and hashes: 1: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: sSnxtf8TtC4PO2zmbNaGgHD80ecB0QzT4ZxlEb0ObOM=) 2: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: 3AxVb6J8QGyIMX4nnpHtCvYFVxODojImY3S+dPMLim4=) 3: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: QDYd1r7MuHrIRve+YZB+akBHVN55yvcqnLt7Vp1XJcQ=) 4: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: piBMQKLQ4vl4/HEDElryTA2LFV1e3urfPVD8hTuJ8gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5d:2f:f0:ba:24:7b:dc:de:ef:d2:31:e0:d6:5f:c7:5c:27:8d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Apr 17 00:16:05 2026 GMT Not After : Apr 20 08:18:05 2026 GMT Subject: CN=E92294739106D720C1C6AE9548CD0A82C1297AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:39:ed:c7:36:71:ca:d2:ea:40:62:c8:4c: 84:bd:10:f5:58:e9:c3:b7:87:5c:9a:65:f5:76:d1: d4:f3:5c:c2:b0:2b:3e:99:3b:a2:44:b0:d9:65:25: 50:7c:79:6a:9d:68:52:02:ac:95:f0:0f:a0:30:94: dd:dc:32:a8:e0:69:7e:0c:be:19:a1:9d:dd:34:98: 36:e4:a2:b8:b5:c1:df:84:84:0e:34:1e:dd:51:fc: 0f:65:8e:52:b4:40:a2:00:c9:68:d9:c8:81:7f:ab: ac:e5:a3:7d:16:8a:c4:6e:2f:70:5e:03:d8:6f:0f: 29:a0:4b:67:e1:eb:73:4e:03:ad:2e:29:15:92:31: 25:58:23:37:e0:7a:96:72:54:d7:d5:1f:93:3a:d1: 62:f2:e2:2d:9c:e3:9f:6c:72:a4:2e:3b:65:6c:9a: 5b:17:b2:bc:54:12:7d:e1:bf:f1:62:be:d2:1b:09: c7:d3:82:93:25:23:f3:6f:8b:d2:e0:c5:c9:06:ba: e1:61:8e:e3:2e:eb:c1:9d:55:c0:a1:fb:09:f2:0d: 6c:02:3a:51:78:e7:b7:26:b2:a4:01:8c:35:53:a7: ad:f5:ff:b5:df:08:db:ed:03:72:8c:5c:ec:52:7e: c4:de:7a:3d:cf:ce:0e:1c:7a:b2:d2:e9:2e:af:a6: 28:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:22:94:73:91:06:D7:20:C1:C6:AE:95:48:CD:0A:82:C1:29:7A:D0 X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ef:19:3a:30:bf:4e:61:4a:35:aa:d2:8f:f7:cc:8c:d6:3f: b2:fc:30:17:11:00:19:d8:61:4b:6b:47:a6:6a:66:67:c2:1c: ed:c2:cf:71:14:ed:fd:af:1d:73:da:25:0a:68:bf:5d:91:11: c3:44:a2:94:e3:3e:28:1f:05:c8:5d:b5:bf:48:39:a3:16:73: a0:d9:f3:a9:ba:02:7c:b7:f0:38:63:04:be:62:c1:da:45:09: 88:87:b3:1c:98:35:0b:8d:83:d2:50:cd:a0:cf:d0:a5:3a:79: b5:d8:07:2e:a4:15:53:f8:b4:3d:8c:30:80:c5:2a:1d:3c:19: dc:c4:60:13:5e:c2:0e:2f:d5:52:e7:f7:0c:d2:b3:a7:a5:80: aa:c5:bc:24:6e:77:70:a0:27:a7:91:54:d6:c8:68:ac:cb:3a: 43:b4:96:2e:5e:2e:2b:07:69:28:87:51:07:d1:2e:26:5f:fb: b7:40:da:e7:17:6b:7c:53:46:97:b2:1c:b6:66:da:41:ad:30: f3:13:1d:54:da:43:97:64:59:40:cd:47:3b:3a:ef:92:51:db: 80:0b:0d:4b:e7:e3:1a:99:84:43:8c:08:92:2a:ee:dc:45:c6: 54:a1:ab:13:e8:cb:c4:94:6e:01:01:b7:e8:8c:47:55:67:11: e1:4a:19:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF10v8Loke9ze79Ix4NZfx1wnjV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNjA0MTcwMDE2MDVaFw0yNjA0MjAwODE4MDVaMDMxMTAvBgNV BAMTKEU5MjI5NDczOTEwNkQ3MjBDMUM2QUU5NTQ4Q0QwQTgyQzEyOTdBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUUDntxzZxytLqQGLITIS9EPVY 6cO3h1yaZfV20dTzXMKwKz6ZO6JEsNllJVB8eWqdaFICrJXwD6AwlN3cMqjgaX4M vhmhnd00mDbkori1wd+EhA40Ht1R/A9ljlK0QKIAyWjZyIF/q6zlo30WisRuL3Be A9hvDymgS2fh63NOA60uKRWSMSVYIzfgepZyVNfVH5M60WLy4i2c459scqQuO2Vs mlsXsrxUEn3hv/FivtIbCcfTgpMlI/Nvi9LgxckGuuFhjuMu68GdVcCh+wnyDWwC OlF457cmsqQBjDVTp631/7XfCNvtA3KMXOxSfsTeej3Pzg4cerLS6S6vpihhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6SKUc5EG1yDBxq6VSM0KgsEpetAwHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjvGTowv05hSjWq0o/3zIzWP7L8MBcRABnY YUtrR6ZqZmfCHO3Cz3EU7f2vHXPaJQpov12REcNEopTjPigfBchdtb9IOaMWc6DZ 86m6Any38DhjBL5iwdpFCYiHsxyYNQuNg9JQzaDP0KU6ebXYBy6kFVP4tD2MMIDF Kh08GdzEYBNewg4v1VLn9wzSs6elgKrFvCRud3CgJ6eRVNbIaKzLOkO0li5eLisH aSiHUQfRLiZf+7dA2ucXa3xTRpeyHLZm2kGtMPMTHVTaQ5dkWUDNRzs675JR24AL DUvn4xqZhEOMCJIq7txFxlShqxPoy8SUbgEBt+iMR1VnEeFKGV0= -----END CERTIFICATE-----Generated at Sat Apr 18 00:03:24 2026 by rpki-client