$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft File: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft (raw, json) Hash identifier: mlr3j0v54jZ2RfxMYFNLN1n4oCe94KjKbzZ2sC/AgB4= Subject key identifier: 06:38:91:8A:E3:FD:EE:B4:A3:3C:0D:20:58:48:9B:E0:49:48:14:25 Authority key identifier: B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05 Certificate issuer: /CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105 Certificate serial: 3E6B57BE1884928AD1D9C3C644C0F7D413741D05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft Manifest number: FF Signing time: Mon 09 Nov 2026 14:49:24 +0000 Manifest this update: Mon 09 Nov 2026 14:44:24 +0000 Manifest next update: Tue 10 Nov 2026 18:17:24 +0000 Files and hashes: 1: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl (hash: yajjoy7eyodRaoFOIZ8J/2QoIxutT5aFhiOZtBQ1NEE=) 2: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: nGCzx9GztVX9RTrYIz2qrQucEQnhRI7SlGCvxpc25Jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 18:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6b:57:be:18:84:92:8a:d1:d9:c3:c6:44:c0:f7:d4:13:74:1d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105 Validity Not Before: Nov 9 14:44:24 2026 GMT Not After : Nov 10 18:17:24 2026 GMT Subject: CN=0638918AE3FDEEB4A33C0D2058489BE049481425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:28:01:7d:e5:c5:8c:e5:db:b7:ba:67:f4: ee:66:aa:01:d7:56:c1:4b:a9:cb:b6:30:76:b9:7f: b1:1e:4b:dd:c6:bc:c5:46:a5:c4:f3:f6:35:ac:3b: b3:82:92:62:1a:94:21:16:e1:e6:2f:9a:58:c1:d4: 17:94:97:ab:f6:bb:c2:d2:f9:dc:98:fe:7d:41:28: 06:f5:74:ad:d3:fe:73:10:4f:ab:6c:1f:35:11:15: 44:92:85:87:78:bd:05:55:bd:49:c9:34:64:95:28: 90:13:8b:bf:06:64:c6:36:e6:44:4c:70:dc:46:15: a9:e7:0d:37:bf:b9:df:30:13:7c:1f:42:18:71:21: 25:b2:14:01:80:2d:59:8d:83:49:51:d9:a9:a3:5a: 09:35:82:06:70:59:41:00:3b:03:e5:ba:57:16:d5: f5:a9:9d:c0:d6:3d:d5:8a:e5:3b:24:7e:4b:b8:29: 32:1f:b4:57:d6:ef:9b:dc:71:d3:33:09:18:e4:e3: ea:c9:72:49:1f:8d:08:88:66:a1:28:ad:ae:6f:9f: c0:e8:ef:5e:5a:d6:a5:52:81:2b:62:b2:65:3f:88: a5:1f:9e:3c:c3:bb:43:88:17:92:b2:0b:17:c3:f6: 0b:69:7d:a2:d2:42:e2:a5:1d:45:2b:fc:45:3d:26: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:38:91:8A:E3:FD:EE:B4:A3:3C:0D:20:58:48:9B:E0:49:48:14:25 X509v3 Authority Key Identifier: keyid:B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:01:72:b0:6a:39:6e:96:d0:4f:87:68:f3:1e:3a:31:63:a7: 2e:6d:49:94:aa:37:c4:72:ac:41:24:46:e4:84:2b:3c:ee:af: b3:a6:aa:88:1b:aa:e1:84:da:85:96:39:73:b0:27:0a:e2:fe: 1f:6c:47:92:d9:06:97:1f:85:1e:a7:53:b2:f9:77:12:95:06: 39:8c:3e:8a:74:cc:4a:7b:c5:eb:f8:5a:ed:b0:15:4b:0d:68: f8:7f:c0:9d:f9:9c:be:46:7a:83:d0:0e:14:b9:c5:77:eb:68: f1:74:e5:7e:cc:16:62:ce:16:c3:e2:c2:37:1b:2f:47:ae:b7: 06:b3:35:51:8f:00:f6:7c:b6:cb:ce:76:45:4e:6f:ec:bf:26: d7:8b:20:d1:c0:a3:76:7e:06:ff:ce:b9:ed:ff:c6:60:13:ad: e2:66:e4:87:9c:c3:8d:e1:b0:72:0d:79:ea:74:56:68:05:30: 74:2c:db:04:67:e5:4c:ce:96:22:aa:b4:72:62:45:fd:a9:ec: af:e4:9f:da:7f:9c:49:7d:27:61:7b:4b:f8:c2:d4:42:f5:31: ae:47:ae:1c:a6:e3:b3:ce:4e:2d:9b:48:8b:bb:68:74:75:bc: 43:ca:65:e5:e2:c5:1e:02:30:7e:31:f3:fa:49:e8:80:cd:e4: 84:7c:8e:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmtXvhiEkorR2cPGRMD31BN0HQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjIwQTRERjQxOTZEMkEzQ0VCQTJDQ0M3ODczNTQ5 QUFDNjEwNTAeFw0yNjExMDkxNDQ0MjRaFw0yNjExMTAxODE3MjRaMDMxMTAvBgNV BAMTKDA2Mzg5MThBRTNGREVFQjRBMzNDMEQyMDU4NDg5QkUwNDk0ODE0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWigBfeXFjOXbt7pn9O5mqgHX VsFLqcu2MHa5f7EeS93GvMVGpcTz9jWsO7OCkmIalCEW4eYvmljB1BeUl6v2u8LS +dyY/n1BKAb1dK3T/nMQT6tsHzURFUSShYd4vQVVvUnJNGSVKJATi78GZMY25kRM cNxGFannDTe/ud8wE3wfQhhxISWyFAGALVmNg0lR2amjWgk1ggZwWUEAOwPlulcW 1fWpncDWPdWK5Tskfku4KTIftFfW75vccdMzCRjk4+rJckkfjQiIZqEora5vn8Do 715a1qVSgStismU/iKUfnjzDu0OIF5KyCxfD9gtpfaLSQuKlHUUr/EU9JpKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBjiRiuP97rSjPA0gWEib4ElIFCUwHwYDVR0j BBgwFoAUsyYgpN9BltKjzroszHhzVJqsYQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWNkZThlY2UtOTdhMi00YjBkLWEwNjQtMTdjZWE2MWY0NWNjLzAvQjMyNjIwQTRE RjQxOTZEMkEzQ0VCQTJDQ0M3ODczNTQ5QUFDNjEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzI2MjBBNERGNDE5NkQyQTNDRUJBMkNDQzc4NzM1NDlBQUM2 MTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWNkZThlY2UtOTdhMi00YjBkLWEw NjQtMTdjZWE2MWY0NWNjLzAvQjMyNjIwQTRERjQxOTZEMkEzQ0VCQTJDQ0M3ODcz NTQ5QUFDNjEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoBcrBqOW6W0E+HaPMeOjFjpy5tSZSqN8Ry rEEkRuSEKzzur7OmqogbquGE2oWWOXOwJwri/h9sR5LZBpcfhR6nU7L5dxKVBjmM Pop0zEp7xev4Wu2wFUsNaPh/wJ35nL5GeoPQDhS5xXfraPF05X7MFmLOFsPiwjcb L0eutwazNVGPAPZ8tsvOdkVOb+y/JteLINHAo3Z+Bv/Oue3/xmATreJm5Iecw43h sHINeep0VmgFMHQs2wRn5UzOliKqtHJiRf2p7K/kn9p/nEl9J2F7S/jC1EL1Ma5H rhym47POTi2bSIu7aHR1vEPKZeXixR4CMH4x8/pJ6IDN5IR8jkE= -----END CERTIFICATE-----Generated at Tue Nov 10 08:01:57 2026 by rpki-client