$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft File: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft (raw, json) Hash identifier: D7LLbocWgY+Qz+WUAI7vIWJCS64Uk9w/v2qT7uk5S7g= Subject key identifier: 37:9B:A8:CF:83:C0:75:D6:9E:81:A4:87:AB:06:D3:0A:30:9B:37:70 Authority key identifier: B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05 Certificate issuer: /CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105 Certificate serial: 657D88E7692E29328802504CCF19FA04097FA0A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft Manifest number: BC Signing time: Sun 20 Sep 2026 23:25:50 +0000 Manifest this update: Sun 20 Sep 2026 23:20:50 +0000 Manifest next update: Tue 22 Sep 2026 00:10:50 +0000 Files and hashes: 1: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: nGCzx9GztVX9RTrYIz2qrQucEQnhRI7SlGCvxpc25Jk=) 2: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl (hash: aTuVA7T58nI5yzUbpxdUvFue1m3ZjrOka5Go4zAOhrM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:7d:88:e7:69:2e:29:32:88:02:50:4c:cf:19:fa:04:09:7f:a0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105 Validity Not Before: Sep 20 23:20:50 2026 GMT Not After : Sep 22 00:10:50 2026 GMT Subject: CN=379BA8CF83C075D69E81A487AB06D30A309B3770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:b6:85:82:08:f5:e9:e7:db:8a:6f:47:09: fd:77:9b:9e:a6:fb:c8:f5:46:d3:03:fd:d4:e5:a4: 50:44:58:66:4e:0e:58:37:fb:e6:9f:b2:df:c6:da: 1e:ae:93:f1:02:fb:18:8c:5d:2c:3e:5e:7e:75:9c: a7:d4:c8:48:f0:a0:79:7e:e8:cf:de:c5:a3:f7:32: 34:49:ec:3d:2a:af:79:53:e1:b3:ff:e5:3c:8f:ae: 91:f2:38:5c:c8:1a:34:2c:02:f6:f1:26:cb:2f:ae: 73:cb:dc:54:66:ae:78:eb:f1:a1:dd:cf:92:46:4e: 68:bc:64:f2:d1:83:8d:a5:d1:94:40:d3:93:d3:31: f8:0f:94:0f:4a:0e:9f:b4:8a:d0:5a:91:1b:9d:db: 1e:a4:09:d6:bd:78:cb:ca:d7:9b:6a:f4:43:85:6f: 27:31:55:16:6a:7b:51:7b:77:7b:44:6e:7a:b4:ee: 21:45:ba:1b:cf:54:96:6a:e3:f6:75:19:2d:76:0b: 96:1f:00:97:08:ed:1c:33:83:8c:9f:71:73:95:9e: 6a:8d:5f:62:9c:5a:4e:96:e2:41:59:e8:42:da:05: 5d:ca:8e:22:0d:c3:20:e5:8d:88:ea:4d:cc:aa:a9: ce:78:0a:7e:15:f6:0d:83:f2:7f:97:4d:08:58:16: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9B:A8:CF:83:C0:75:D6:9E:81:A4:87:AB:06:D3:0A:30:9B:37:70 X509v3 Authority Key Identifier: keyid:B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a2:5d:db:22:51:d0:ba:74:97:77:54:1b:ae:19:ac:bb:96: 31:e8:41:2f:0d:60:b8:c3:c0:d9:91:47:91:e8:2c:27:14:48: 0c:cd:11:73:9b:47:16:4b:b7:90:c8:30:07:32:3a:7d:bf:ea: 8a:55:3c:e5:aa:bc:50:7d:ec:b5:57:99:79:dc:ae:fa:01:8e: 67:7a:b9:22:1e:ea:7f:6e:b9:31:9b:ed:f2:8f:5e:e9:71:92: b4:4f:ca:68:fc:ea:36:0d:73:8f:ae:69:74:d6:24:c6:41:14: 72:72:ac:9f:45:dc:fc:9f:8a:21:25:bd:7f:7b:29:1e:e2:60: 2c:48:25:66:4b:86:79:50:6c:b6:7e:33:e9:47:42:9d:21:f8: 25:12:d5:0f:9b:2f:dc:ae:40:33:df:c2:49:27:6b:34:eb:7f: f6:88:6c:d5:89:7c:21:13:88:4e:a6:7e:b3:38:55:6f:6b:2b: b8:b5:52:05:eb:48:5b:8a:d3:92:70:6e:06:87:38:c6:b8:c5: f9:65:78:33:33:c9:ae:37:38:7d:ae:4b:6b:8c:3d:22:46:89: 58:a0:15:81:b4:16:4e:00:65:21:6c:34:ec:db:89:7c:e3:3d: a8:ca:57:2d:b8:96:54:22:5e:db:7f:26:73:ff:d5:b1:a6:32: c8:36:96:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZX2I52kuKTKIAlBMzxn6BAl/oKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjIwQTRERjQxOTZEMkEzQ0VCQTJDQ0M3ODczNTQ5 QUFDNjEwNTAeFw0yNjA5MjAyMzIwNTBaFw0yNjA5MjIwMDEwNTBaMDMxMTAvBgNV BAMTKDM3OUJBOENGODNDMDc1RDY5RTgxQTQ4N0FCMDZEMzBBMzA5QjM3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cbaFggj16efbim9HCf13m56m +8j1RtMD/dTlpFBEWGZODlg3++afst/G2h6uk/EC+xiMXSw+Xn51nKfUyEjwoHl+ 6M/exaP3MjRJ7D0qr3lT4bP/5TyPrpHyOFzIGjQsAvbxJssvrnPL3FRmrnjr8aHd z5JGTmi8ZPLRg42l0ZRA05PTMfgPlA9KDp+0itBakRud2x6kCda9eMvK15tq9EOF bycxVRZqe1F7d3tEbnq07iFFuhvPVJZq4/Z1GS12C5YfAJcI7Rwzg4yfcXOVnmqN X2KcWk6W4kFZ6ELaBV3KjiINwyDljYjqTcyqqc54Cn4V9g2D8n+XTQhYFpy7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN5uoz4PAddaegaSHqwbTCjCbN3AwHwYDVR0j BBgwFoAUsyYgpN9BltKjzroszHhzVJqsYQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNkZThlY2UtOTdhMi00YjBkLWEwNjQtMTdjZWE2MWY0NWNjLzAvQjMyNjIwQTRE RjQxOTZEMkEzQ0VCQTJDQ0M3ODczNTQ5QUFDNjEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzI2MjBBNERGNDE5NkQyQTNDRUJBMkNDQzc4NzM1NDlBQUM2 MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvQjMyNjIwQTRERjQxOTZEMkEzQ0VCQTJDQ0M3ODcz NTQ5QUFDNjEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGiXdsiUdC6dJd3VBuuGay7ljHoQS8NYLjD wNmRR5HoLCcUSAzNEXObRxZLt5DIMAcyOn2/6opVPOWqvFB97LVXmXncrvoBjmd6 uSIe6n9uuTGb7fKPXulxkrRPymj86jYNc4+uaXTWJMZBFHJyrJ9F3PyfiiElvX97 KR7iYCxIJWZLhnlQbLZ+M+lHQp0h+CUS1Q+bL9yuQDPfwkknazTrf/aIbNWJfCET iE6mfrM4VW9rK7i1UgXrSFuK05JwbgaHOMa4xflleDMzya43OH2uS2uMPSJGiVig FYG0Fk4AZSFsNOzbiXzjPajKVy24llQiXtt/JnP/1bGmMsg2lqE= -----END CERTIFICATE-----Generated at Mon Sep 21 16:31:07 2026 by rpki-client