$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft File: 32857E62250C763037D1ED291D7937072EB50DC5.mft (raw, json) Hash identifier: s3tP70j8MpMCo63E7yugA0SS11FF6MXf4aNRMeLmtsM= Subject key identifier: 23:95:AD:65:5A:CE:68:F4:14:B7:30:C2:8D:D9:92:69:D0:FC:09:3B Authority key identifier: 32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 Certificate issuer: /CN=32857E62250C763037D1ED291D7937072EB50DC5 Certificate serial: 1FC1F1F30D07D58CAEB3902549F8F5F3A6782C94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft Manifest number: BD Signing time: Sun 20 Sep 2026 05:23:48 +0000 Manifest this update: Sun 20 Sep 2026 05:18:48 +0000 Manifest next update: Mon 21 Sep 2026 09:04:48 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: bObGNzkzxqsMtfGussqQMllg3CDeiOkWDE0MTteiGhQ=) 2: 32857E62250C763037D1ED291D7937072EB50DC5.crl (hash: cy8YgUcFPsFLPNBpx65Hx7fFj1d+lO7iBd7GKzOxYMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c1:f1:f3:0d:07:d5:8c:ae:b3:90:25:49:f8:f5:f3:a6:78:2c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32857E62250C763037D1ED291D7937072EB50DC5 Validity Not Before: Sep 20 05:18:48 2026 GMT Not After : Sep 21 09:04:48 2026 GMT Subject: CN=2395AD655ACE68F414B730C28DD99269D0FC093B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:34:a9:ca:6c:34:6d:8f:e7:d3:29:b7:f4: 48:05:47:4c:27:21:6d:52:18:7d:d4:0b:09:e8:5c: c4:cc:26:c4:68:1f:1d:b2:fa:3f:a3:07:04:69:72: c6:4c:6a:45:73:5c:cf:9e:92:31:1c:07:fa:b9:78: aa:88:b3:ee:80:42:4c:8d:3a:59:94:fd:62:99:15: 0f:16:6f:1c:e7:44:11:0b:5b:3d:32:a0:ab:cc:b5: 67:e6:5e:85:aa:33:e4:d6:20:5f:d7:02:b2:89:bc: 22:5a:35:36:15:88:06:64:b6:f7:e8:e2:f3:6e:82: 97:08:cd:7e:55:c5:c5:83:7b:95:7e:dc:be:3c:a7: b5:f7:b4:4b:ac:3c:28:37:e6:1d:67:2d:12:41:fe: a2:ec:f2:0c:9c:f2:e2:29:07:2c:d8:f9:a5:b8:d1: 01:74:ed:92:3a:a2:07:0e:4d:b8:31:34:94:5a:9d: 18:48:78:a7:79:7b:9e:e9:f3:e6:6a:49:00:d5:6c: d3:14:af:d3:78:e0:0d:50:79:df:13:1f:0b:b7:7a: ba:11:4d:95:d2:34:de:75:aa:3d:5d:b7:15:62:e4: 5a:bd:14:68:c1:e7:25:b8:7d:f9:6e:32:b4:2b:ec: a0:aa:e2:4c:41:7a:e3:07:02:4d:85:f7:3a:27:c6: d0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:95:AD:65:5A:CE:68:F4:14:B7:30:C2:8D:D9:92:69:D0:FC:09:3B X509v3 Authority Key Identifier: keyid:32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:21:e4:6a:4f:e6:2a:99:aa:04:47:4c:a9:77:5f:4d:e2:5c: f6:5e:26:89:d8:42:fa:ed:64:2b:08:86:22:89:9a:0f:62:fa: 85:57:c8:b9:26:ef:36:af:ff:91:20:15:b7:c3:ae:5f:a9:56: bf:0d:a6:ed:44:c0:13:21:13:b5:ee:b2:27:b3:b8:c6:b9:d3: da:c0:b8:c0:26:ed:9f:93:e9:c7:82:09:1a:1c:72:93:cc:35: 2c:63:93:a9:47:93:ba:a9:2d:79:b6:83:be:ce:27:79:22:a0: f9:13:44:8e:60:85:0e:4c:15:b7:94:b6:e9:7c:9a:9b:95:e4: 79:78:83:3c:74:1b:3f:f4:31:6f:ec:23:6d:05:eb:43:1d:e6: f6:ce:db:7b:d4:6b:4e:d0:ad:d7:a8:7e:60:40:56:3a:2d:1e: 1a:1a:da:63:8d:c5:6e:6a:07:69:89:b0:1d:3d:d7:57:04:0a: a3:a2:b5:cb:5f:b9:71:39:30:99:f8:f6:09:a1:25:fa:30:4f: 42:61:cc:7b:40:8e:b5:e2:c2:d5:33:3c:b5:04:13:ce:27:53: ff:50:0c:6d:f2:8b:f8:e0:b1:b0:01:88:8b:01:a6:7b:76:c7: 6a:2a:2f:59:bd:e5:03:f9:b1:71:2d:f0:fe:d4:bf:27:3e:10: 5d:95:f7:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8Hx8w0H1Yyus5AlSfj186Z4LJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcy RUI1MERDNTAeFw0yNjA5MjAwNTE4NDhaFw0yNjA5MjEwOTA0NDhaMDMxMTAvBgNV BAMTKDIzOTVBRDY1NUFDRTY4RjQxNEI3MzBDMjhERDk5MjY5RDBGQzA5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoDSpymw0bY/n0ym39EgFR0wn IW1SGH3UCwnoXMTMJsRoHx2y+j+jBwRpcsZMakVzXM+ekjEcB/q5eKqIs+6AQkyN OlmU/WKZFQ8WbxznRBELWz0yoKvMtWfmXoWqM+TWIF/XArKJvCJaNTYViAZktvfo 4vNugpcIzX5VxcWDe5V+3L48p7X3tEusPCg35h1nLRJB/qLs8gyc8uIpByzY+aW4 0QF07ZI6ogcOTbgxNJRanRhIeKd5e57p8+ZqSQDVbNMUr9N44A1Qed8THwu3eroR TZXSNN51qj1dtxVi5Fq9FGjB5yW4ffluMrQr7KCq4kxBeuMHAk2F9zonxtAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI5WtZVrOaPQUtzDCjdmSadD8CTswHwYDVR0j BBgwFoAUMoV+YiUMdjA30e0pHXk3By61DcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWQwMTItYWZkYi00MmZiLTk3MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIy NTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcyRUI1MERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1N0U2MjI1MEM3NjMwMzdEMUVEMjkxRDc5MzcwNzJFQjUw REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3 MDcyRUI1MERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwh5GpP5iqZqgRHTKl3X03iXPZeJonYQvrt ZCsIhiKJmg9i+oVXyLkm7zav/5EgFbfDrl+pVr8Npu1EwBMhE7XusiezuMa509rA uMAm7Z+T6ceCCRoccpPMNSxjk6lHk7qpLXm2g77OJ3kioPkTRI5ghQ5MFbeUtul8 mpuV5Hl4gzx0Gz/0MW/sI20F60Md5vbO23vUa07QrdeofmBAVjotHhoa2mONxW5q B2mJsB0911cECqOitctfuXE5MJn49gmhJfowT0JhzHtAjrXiwtUzPLUEE84nU/9Q DG3yi/jgsbABiIsBpnt2x2oqL1m95QP5sXEt8P7Uvyc+EF2V98c= -----END CERTIFICATE-----Generated at Mon Sep 21 03:00:23 2026 by rpki-client