$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: oDuuBzdCdyK2wuS/vD3/FjgcyL82B1q87HeZzVlhNfU= Subject key identifier: 52:F8:EE:F4:1B:25:BE:03:F2:63:94:B1:5E:C4:51:66:94:DB:87:FF Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 5D58D5338B9A5110F95EC8BEDEA9886263FBCAF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 018B Signing time: Sat 18 Apr 2026 01:31:02 +0000 Manifest this update: Sat 18 Apr 2026 01:26:02 +0000 Manifest next update: Tue 21 Apr 2026 02:59:02 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: 6xlug0XUa7+3muEc0qZobCHKsLZsnvqmD4DOKyPgW3E=) 2: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: lvsTtW252Ri8zLP6LeQkBWwPzY993cpPilJUNYfFwDQ=) 3: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: opThpjRoF16KaDU9q5ijJVWXaKccDNZoiK2W3UyqrLY=) 4: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: dSVS127lwWi8iK2HhNgRMx5903WtJScz9453drHDtJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:58:d5:33:8b:9a:51:10:f9:5e:c8:be:de:a9:88:62:63:fb:ca:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Apr 18 01:26:02 2026 GMT Not After : Apr 21 02:59:02 2026 GMT Subject: CN=52F8EEF41B25BE03F26394B15EC4516694DB87FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:b0:e7:e2:85:10:fd:b3:e1:4f:dd:7c:65: a4:92:e2:fc:09:b8:08:4a:52:8b:e4:6b:c3:5a:9b: 66:37:3d:22:6c:54:f4:ad:57:c9:1c:44:6b:27:79: e9:f7:56:a5:e3:9a:1f:60:32:99:86:91:57:b2:1c: 26:63:a5:72:b7:95:00:2a:db:82:38:f5:be:03:7e: f5:44:fc:46:b1:7b:59:e5:96:77:06:b9:f9:e6:99: fb:bc:9e:79:70:42:77:71:50:be:fe:f2:a7:17:5b: cf:98:08:68:54:14:10:05:18:b8:9e:f4:42:a0:69: b0:91:89:4f:2c:c9:e6:6f:e3:71:b4:85:d2:52:b6: 9a:fd:e0:1c:e1:e1:90:a3:3f:66:a9:d0:bd:da:0d: 82:91:5c:2b:2d:e2:e4:c0:48:26:b7:e1:24:56:46: f2:69:f1:63:c3:e2:3e:ae:15:7a:43:c0:d7:93:a1: 64:4f:80:ba:75:65:29:c5:b6:8f:80:17:5e:62:dc: 72:dd:37:0d:13:3b:19:e5:46:5a:27:99:ca:e5:e3: e0:b3:7a:5d:73:dc:35:d6:4c:a4:8a:35:7c:f4:84: 08:73:46:50:76:c8:54:04:d7:77:09:0f:7f:6e:01: 69:3d:53:09:37:d8:30:e1:ba:22:b6:93:91:e4:06: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F8:EE:F4:1B:25:BE:03:F2:63:94:B1:5E:C4:51:66:94:DB:87:FF X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:08:e3:18:58:d1:61:ae:c1:4b:35:de:11:19:f0:b0:87:03: 63:af:d7:6b:32:48:1f:7a:88:31:37:88:cc:7e:08:62:6b:9e: 76:b4:4c:a5:fd:2f:76:52:ec:5a:fd:e6:c5:4e:f8:7b:71:cd: d6:8b:df:6f:18:91:4d:a3:25:59:e8:a3:45:56:cf:57:7b:fd: fd:b1:00:13:5d:88:c1:6b:3d:f4:4e:f2:87:78:c0:de:97:1d: b1:0b:17:9c:b7:33:58:c7:fd:c3:d1:e9:e9:d7:9d:6f:dd:a2: e2:c7:b2:56:04:66:d0:d9:f1:53:7a:e3:c3:92:c9:42:99:85: d7:09:61:54:bd:5c:5a:95:20:26:f6:21:f4:4a:3e:83:f4:54: 52:20:ec:3a:13:d0:30:9e:13:41:d5:9c:66:16:3c:15:4d:13: 69:bf:b4:8f:d5:46:a3:05:92:09:50:08:c0:ea:05:80:01:6b: 47:14:7f:08:8b:80:7a:cf:74:03:a6:cb:a4:5c:2a:69:75:c2: 06:b6:e4:b2:75:12:8c:01:25:7a:79:7d:ad:56:ae:c4:8c:7a: 9a:a7:cd:4d:67:d7:a3:1f:ca:e7:ea:6e:3e:86:85:72:26:4c: 41:0d:08:02:42:3b:1f:d5:7d:da:3d:67:ec:e0:88:ac:c4:64: 7a:16:b9:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVjVM4uaURD5Xsi+3qmIYmP7yvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNjA0MTgwMTI2MDJaFw0yNjA0MjEwMjU5MDJaMDMxMTAvBgNV BAMTKDUyRjhFRUY0MUIyNUJFMDNGMjYzOTRCMTVFQzQ1MTY2OTREQjg3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEbDn4oUQ/bPhT918ZaSS4vwJ uAhKUovka8Nam2Y3PSJsVPStV8kcRGsneen3VqXjmh9gMpmGkVeyHCZjpXK3lQAq 24I49b4DfvVE/Eaxe1nllncGufnmmfu8nnlwQndxUL7+8qcXW8+YCGhUFBAFGLie 9EKgabCRiU8syeZv43G0hdJStpr94Bzh4ZCjP2ap0L3aDYKRXCst4uTASCa34SRW RvJp8WPD4j6uFXpDwNeToWRPgLp1ZSnFto+AF15i3HLdNw0TOxnlRlonmcrl4+Cz el1z3DXWTKSKNXz0hAhzRlB2yFQE13cJD39uAWk9Uwk32DDhuiK2k5HkBlqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUvju9BslvgPyY5SxXsRRZpTbh/8wHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMI4xhY0WGuwUs13hEZ8LCHA2Ov12sySB96 iDE3iMx+CGJrnna0TKX9L3ZS7Fr95sVO+HtxzdaL328YkU2jJVnoo0VWz1d7/f2x ABNdiMFrPfRO8od4wN6XHbELF5y3M1jH/cPR6enXnW/douLHslYEZtDZ8VN648OS yUKZhdcJYVS9XFqVICb2IfRKPoP0VFIg7DoT0DCeE0HVnGYWPBVNE2m/tI/VRqMF kglQCMDqBYABa0cUfwiLgHrPdAOmy6RcKml1wga25LJ1EowBJXp5fa1WrsSMepqn zU1n16Mfyufqbj6GhXImTEENCAJCOx/Vfdo9Z+zgiKzEZHoWuWM= -----END CERTIFICATE-----Generated at Sun Apr 19 12:18:21 2026 by rpki-client