$ rpki-client -vvvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft File: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft (raw, json) Hash identifier: e5zbgnICOAhMZz/pkjicyUpb3mMtvU5y/CgxNSdZVh4= Subject key identifier: AF:12:17:42:16:95:09:F9:BA:9F:D9:F2:2E:F5:D0:BC:D6:47:E2:E4 Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Certificate serial: 216738B8C176D12103049BF422249B7F3A99F8F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft Manifest number: C1 Signing time: Mon 21 Sep 2026 14:55:02 +0000 Manifest this update: Mon 21 Sep 2026 14:50:02 +0000 Manifest next update: Tue 22 Sep 2026 17:16:02 +0000 Files and hashes: 1: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl (hash: hsfFpnPhxt6KDsNuB3iEvUG3WGjgAwMwdBpdLoZqEmI=) 2: 3130332e3132392e3135322e302f32342d3234203d3e20313338303635.roa (hash: hrqst1riYBHBOimxTLlvZyjkc9izcyyKFw/2744oA1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:67:38:b8:c1:76:d1:21:03:04:9b:f4:22:24:9b:7f:3a:99:f8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Validity Not Before: Sep 21 14:50:02 2026 GMT Not After : Sep 22 17:16:02 2026 GMT Subject: CN=AF121742169509F9BA9FD9F22EF5D0BCD647E2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:06:5f:38:b2:83:c7:99:f3:ca:41:66:22: ac:ae:73:5a:df:c2:22:e0:f1:48:ea:41:b9:69:31: bb:82:8a:4b:e0:83:fc:b2:11:f9:8e:48:d1:ea:ee: 88:01:9b:49:82:0a:45:ef:1b:37:04:b1:0f:51:09: 9e:c8:fa:c5:c8:4a:69:80:26:34:c8:9a:06:b8:6f: 6f:54:2e:94:eb:e2:33:be:e3:5d:91:8c:fb:ab:92: f4:a6:cb:67:2a:34:f0:d3:b2:85:ee:35:91:98:31: 4a:18:f9:ae:d8:83:d9:ba:13:b0:26:21:83:64:19: e5:31:2c:28:2b:bc:65:e0:3d:67:ad:8d:5c:65:ca: 93:4c:ab:7a:a4:98:50:ed:81:51:c9:19:a6:c0:f8: 15:79:f5:9c:e5:09:9d:33:21:23:80:d1:29:b5:3e: a2:0b:d5:5f:c0:2e:f7:98:af:55:33:91:41:ad:95: ba:3d:c8:74:83:5e:5d:84:ac:bc:b7:be:f4:91:84: 47:b4:fa:9e:91:9b:ac:df:37:a3:cf:88:fd:5e:6f: e8:51:0b:bc:63:37:76:c1:e9:9a:96:be:5b:d2:58: 6e:d2:fc:b6:17:85:ae:32:f3:45:d2:18:5e:71:3d: 8d:63:58:30:92:41:1a:84:1d:c5:1c:39:20:2b:1a: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:17:42:16:95:09:F9:BA:9F:D9:F2:2E:F5:D0:BC:D6:47:E2:E4 X509v3 Authority Key Identifier: keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:64:ad:b2:0e:9c:c9:4e:d4:4b:4c:a1:3a:42:86:85:d6:5a: b9:d5:07:ab:85:ab:84:2b:64:88:86:fd:d0:f2:ab:5f:8b:d7: d9:fc:59:9f:56:10:be:a2:77:9f:be:68:43:f8:47:49:e7:7d: 76:fc:6c:23:d1:fc:1e:d7:3b:ab:7f:3d:d4:cf:91:3f:5a:cd: 4e:b7:18:bd:b6:46:8b:e8:00:74:13:a8:07:87:3b:37:ed:06: 34:20:82:f4:29:3c:33:fa:a0:e8:9a:c7:60:fd:38:09:92:c5: 66:30:b6:14:99:0a:11:83:9c:30:9c:e9:1a:51:04:1b:bd:2f: af:93:3e:d5:64:ca:e2:2d:38:69:ea:66:60:0d:95:ab:02:96: 23:7d:bb:55:a4:76:46:62:b0:21:54:ab:3f:12:fe:8b:cc:17: c6:40:5b:a8:d5:7e:18:16:d2:20:7e:ee:37:67:c9:a2:b4:f1: 8d:f8:03:85:f5:af:7c:87:75:6b:1f:e1:5a:73:11:6a:00:2c: 0a:77:0b:6c:8e:a4:71:6d:8a:1e:aa:c6:5d:6b:67:31:35:0a: 78:db:b3:94:05:e2:11:f4:2b:50:9d:08:be:ef:31:ff:2e:37: 4b:44:94:82:24:cc:b5:97:1b:ac:59:7f:30:38:53:b9:25:23: 0f:9f:d9:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWc4uMF20SEDBJv0IiSbfzqZ+PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND QUQ4MTg5MTAeFw0yNjA5MjExNDUwMDJaFw0yNjA5MjIxNzE2MDJaMDMxMTAvBgNV BAMTKEFGMTIxNzQyMTY5NTA5RjlCQTlGRDlGMjJFRjVEMEJDRDY0N0UyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYwZfOLKDx5nzykFmIqyuc1rf wiLg8UjqQblpMbuCikvgg/yyEfmOSNHq7ogBm0mCCkXvGzcEsQ9RCZ7I+sXISmmA JjTImga4b29ULpTr4jO+412RjPurkvSmy2cqNPDTsoXuNZGYMUoY+a7Yg9m6E7Am IYNkGeUxLCgrvGXgPWetjVxlypNMq3qkmFDtgVHJGabA+BV59ZzlCZ0zISOA0Sm1 PqIL1V/ALveYr1UzkUGtlbo9yHSDXl2ErLy3vvSRhEe0+p6Rm6zfN6PPiP1eb+hR C7xjN3bB6ZqWvlvSWG7S/LYXha4y80XSGF5xPY1jWDCSQRqEHcUcOSArGjjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrxIXQhaVCfm6n9nyLvXQvNZH4uQwHwYDVR0j BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2 MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx ODkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQw RENDQUQ4MTg5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpkrbIOnMlO1EtMoTpChoXWWrnVB6uFq4Qr ZIiG/dDyq1+L19n8WZ9WEL6id5++aEP4R0nnfXb8bCPR/B7XO6t/PdTPkT9azU63 GL22RovoAHQTqAeHOzftBjQggvQpPDP6oOiax2D9OAmSxWYwthSZChGDnDCc6RpR BBu9L6+TPtVkyuItOGnqZmANlasCliN9u1WkdkZisCFUqz8S/ovMF8ZAW6jVfhgW 0iB+7jdnyaK08Y34A4X1r3yHdWsf4VpzEWoALAp3C2yOpHFtih6qxl1rZzE1Cnjb s5QF4hH0K1CdCL7vMf8uN0tElIIkzLWXG6xZfzA4U7klIw+f2fM= -----END CERTIFICATE-----Generated at Mon Sep 21 19:48:08 2026 by rpki-client