$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: fFUbkZZjJiB4RYLRT3TRWPHMdJl/g6lchL5Z6EFLbdA= Subject key identifier: B0:57:7A:D0:8B:46:46:A1:7F:78:E1:D0:F6:27:4D:04:01:76:5A:2B Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 58D8609DF6EBCC604856033EEE76CDB0B285C8E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0176 Signing time: Mon 02 Mar 2026 04:31:04 +0000 Manifest this update: Mon 02 Mar 2026 04:26:04 +0000 Manifest next update: Thu 05 Mar 2026 10:14:04 +0000 Files and hashes: 1: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: 7ijGX7phVKGBH9zY/yvv7nNaCznaGvFC9Apa4eVT9Lo=) 2: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: dSVS127lwWi8iK2HhNgRMx5903WtJScz9453drHDtJU=) 3: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: lvsTtW252Ri8zLP6LeQkBWwPzY993cpPilJUNYfFwDQ=) 4: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: 6xlug0XUa7+3muEc0qZobCHKsLZsnvqmD4DOKyPgW3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d8:60:9d:f6:eb:cc:60:48:56:03:3e:ee:76:cd:b0:b2:85:c8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Mar 2 04:26:04 2026 GMT Not After : Mar 5 10:14:04 2026 GMT Subject: CN=B0577AD08B4646A17F78E1D0F6274D0401765A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ce:60:73:54:62:02:7d:37:cf:4d:4b:53:88: 16:09:36:f1:91:db:cd:6b:c8:46:d8:53:c1:2e:34: e5:37:ae:97:f1:24:5a:86:20:4c:d0:a2:af:27:a0: 3b:a7:60:ba:ce:32:4f:54:b3:ba:74:45:0e:a7:4e: 94:e6:69:72:8e:b3:7a:17:cb:f1:65:4d:9d:c0:e3: ea:eb:0b:53:00:38:8e:86:ab:71:91:62:a9:d1:0a: b4:a5:eb:09:b9:3d:53:50:a5:b3:cb:69:9b:5e:9f: be:dc:40:64:43:85:2f:8f:b7:24:39:0e:d5:99:dc: 57:83:08:ea:81:a2:e3:65:1d:08:73:50:db:7b:1c: 04:c6:f7:a2:a9:fb:51:b9:09:48:a9:4b:87:f0:6f: 05:8c:f7:12:c6:b3:54:fc:30:64:8c:9f:18:bd:19: da:e7:db:b6:b6:7a:65:bb:a9:84:13:53:b5:10:ca: 96:de:37:b2:8f:dc:74:ea:5b:ab:14:53:c7:26:b3: 0d:81:d6:e2:2e:db:cd:63:5e:ae:fb:07:b0:9f:11: 0a:c4:91:ab:d6:e6:ae:5c:5b:28:06:f0:36:82:26: 71:42:89:c6:87:e3:4f:29:11:d1:5c:a8:b2:a3:c6: 4a:18:7d:86:2b:9d:0f:7e:97:bf:09:ab:0d:a5:13: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:57:7A:D0:8B:46:46:A1:7F:78:E1:D0:F6:27:4D:04:01:76:5A:2B X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a2:bd:07:46:4c:6a:ec:a3:03:bb:53:b3:2f:5d:1d:a3:5b: c1:d4:57:a4:23:83:32:67:59:ca:26:69:06:0e:eb:55:6a:d9: 11:73:ac:c0:91:e4:94:27:27:f8:a3:cf:c7:1e:08:11:7e:ad: a9:26:d2:bc:ad:c8:00:7a:d2:9e:8b:2e:f2:dc:8c:a9:2e:36: 29:d1:d0:65:e8:89:0a:a5:9a:42:15:c3:49:95:02:3a:c2:60: d7:3d:ea:30:b9:e6:74:4f:6b:5c:78:e1:2f:41:5b:3c:f2:ea: fc:c6:c6:e6:c1:05:f0:8c:12:06:e6:2c:98:96:12:f6:82:d0: 9a:6c:3f:0f:8a:29:89:fe:f7:02:04:54:14:69:d3:0a:c5:ac: e5:13:62:23:a1:04:74:6f:8d:ec:c9:c4:6c:9f:45:f9:91:bf: 4f:ef:dc:a2:28:0d:a4:be:1d:49:20:fb:33:3c:8d:8b:8a:a1: df:35:3d:f1:ab:4b:59:ca:0c:4d:53:de:b6:b0:be:97:a9:86: b2:29:42:04:ae:b6:1d:62:e6:82:82:88:05:9c:10:e0:42:65: 58:ee:a7:3c:fb:c8:04:6d:08:f8:57:f7:ff:fa:6f:9f:ab:7e: 86:df:21:b3:d2:ec:40:7a:74:0a:94:9c:cd:44:bf:86:56:95: 90:7b:b2:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNhgnfbrzGBIVgM+7nbNsLKFyOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNjAzMDIwNDI2MDRaFw0yNjAzMDUxMDE0MDRaMDMxMTAvBgNV BAMTKEIwNTc3QUQwOEI0NjQ2QTE3Rjc4RTFEMEY2Mjc0RDA0MDE3NjVBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzmBzVGICfTfPTUtTiBYJNvGR 281ryEbYU8EuNOU3rpfxJFqGIEzQoq8noDunYLrOMk9Us7p0RQ6nTpTmaXKOs3oX y/FlTZ3A4+rrC1MAOI6Gq3GRYqnRCrSl6wm5PVNQpbPLaZten77cQGRDhS+PtyQ5 DtWZ3FeDCOqBouNlHQhzUNt7HATG96Kp+1G5CUipS4fwbwWM9xLGs1T8MGSMnxi9 Gdrn27a2emW7qYQTU7UQypbeN7KP3HTqW6sUU8cmsw2B1uIu281jXq77B7CfEQrE kavW5q5cWygG8DaCJnFCicaH408pEdFcqLKjxkoYfYYrnQ9+l78Jqw2lE4jlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsFd60ItGRqF/eOHQ9idNBAF2WiswHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2ivQdGTGrsowO7U7MvXR2jW8HUV6QjgzJn WcomaQYO61Vq2RFzrMCR5JQnJ/ijz8ceCBF+rakm0rytyAB60p6LLvLcjKkuNinR 0GXoiQqlmkIVw0mVAjrCYNc96jC55nRPa1x44S9BWzzy6vzGxubBBfCMEgbmLJiW EvaC0JpsPw+KKYn+9wIEVBRp0wrFrOUTYiOhBHRvjezJxGyfRfmRv0/v3KIoDaS+ HUkg+zM8jYuKod81PfGrS1nKDE1T3rawvpephrIpQgSuth1i5oKCiAWcEOBCZVju pzz7yARtCPhX9//6b5+rfobfIbPS7EB6dAqUnM1Ev4ZWlZB7su0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:27 2026 by rpki-client