$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft File: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json) Hash identifier: JJAKizmPInUtt+uW6GtDHkl4uZJXg+La94KIHP17+Go= Subject key identifier: 73:D4:0E:30:96:4B:E4:7B:4E:6E:E0:A0:82:00:B8:4C:C3:E3:AF:4F Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Certificate serial: 35FF24F9502E65BDA12CE6ED2601C926DC14764B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft Manifest number: BD Signing time: Mon 21 Sep 2026 11:30:40 +0000 Manifest this update: Mon 21 Sep 2026 11:25:40 +0000 Manifest next update: Tue 22 Sep 2026 15:28:40 +0000 Files and hashes: 1: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: 8IDpGOIIICe+ii7/ChF3/2e9EJvUei38dpbYk+Lw80g=) 2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ff:24:f9:50:2e:65:bd:a1:2c:e6:ed:26:01:c9:26:dc:14:76:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Validity Not Before: Sep 21 11:25:40 2026 GMT Not After : Sep 22 15:28:40 2026 GMT Subject: CN=73D40E30964BE47B4E6EE0A08200B84CC3E3AF4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:40:8c:3d:90:15:dd:00:c8:27:11:99:d0: 58:09:c5:d4:f8:d1:d9:18:77:5e:cd:56:00:ef:04: 99:d8:f0:be:32:94:51:0e:21:55:47:fe:99:3d:db: ef:03:b0:cf:df:a9:61:be:81:75:f9:ac:1a:04:f3: 74:f7:ef:2e:b0:d3:9e:ab:9b:bd:3e:e8:e9:4e:40: 4c:9b:28:d0:df:42:42:71:57:5c:9d:73:9c:76:1a: f2:65:8b:d0:be:bb:dd:56:3f:4d:44:3f:8c:cc:61: 0b:e8:81:53:33:2b:df:00:91:36:ef:18:67:b0:fc: b1:3c:61:20:4f:a0:f5:d0:e9:58:d4:30:8f:79:a0: 12:a8:48:4d:f6:b4:b4:8d:0b:7a:ba:04:23:f2:ca: 41:eb:0f:66:28:60:e7:d7:f9:98:66:d8:ca:92:6f: 6f:9f:f2:69:87:45:71:cf:93:1b:0f:1d:c7:d3:07: ea:93:f5:37:6e:3b:88:6b:84:90:17:5e:5b:fb:a0: 0e:2a:43:5e:2b:4c:34:92:37:10:e9:25:df:e3:5e: e3:60:e2:99:3e:a3:41:00:5c:39:a5:d9:8a:55:81: 6c:05:70:30:e8:0e:4b:ba:1e:78:96:b9:80:f4:2f: 25:ef:f4:68:5d:74:b0:20:6d:a7:04:26:12:96:87: e7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D4:0E:30:96:4B:E4:7B:4E:6E:E0:A0:82:00:B8:4C:C3:E3:AF:4F X509v3 Authority Key Identifier: keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5e:5b:12:9b:e8:28:02:c0:84:d2:2d:b3:74:15:75:f7:ff: 54:8b:fe:f6:ef:db:c3:1f:ea:79:ee:d9:dd:58:62:c0:d2:7c: 1d:9a:65:c2:53:a7:85:c5:b6:bb:a1:a9:2e:1f:31:94:ef:22: 5a:6e:b6:69:86:de:e4:de:ed:87:a1:15:de:32:26:e3:72:22: bf:ff:b4:37:2d:9e:df:00:34:31:b0:f4:0a:26:56:e6:85:64: 83:53:9a:86:43:cf:2c:f9:85:d6:53:71:68:39:33:59:67:d9: 1a:67:b0:ac:39:61:b1:2f:32:ee:ce:42:06:c8:b9:5f:7d:f1: 5a:ba:7a:8d:3c:24:f1:50:45:3e:fc:82:50:76:5d:55:71:99: 88:62:3d:d0:ab:13:89:29:ff:09:64:fc:7b:01:57:a8:35:e3: ae:56:84:ef:55:a6:9c:70:97:00:52:5c:15:d1:95:ad:b9:12: b2:f1:9b:d6:f5:38:75:20:9b:80:05:06:01:22:d3:e9:a0:e7: ce:b0:41:0d:68:18:be:29:58:69:f0:3b:6a:88:ce:21:22:5f: 93:0a:ba:a7:40:31:83:77:3f:17:b8:ee:e1:3c:1e:3e:aa:18: 59:42:cb:ba:75:dc:43:3b:75:02:6b:01:bd:5e:ed:33:ec:3d: 9d:49:03:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNf8k+VAuZb2hLObtJgHJJtwUdkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYy RjNBOEREMTAeFw0yNjA5MjExMTI1NDBaFw0yNjA5MjIxNTI4NDBaMDMxMTAvBgNV BAMTKDczRDQwRTMwOTY0QkU0N0I0RTZFRTBBMDgyMDBCODRDQzNFM0FGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMUCMPZAV3QDIJxGZ0FgJxdT4 0dkYd17NVgDvBJnY8L4ylFEOIVVH/pk92+8DsM/fqWG+gXX5rBoE83T37y6w056r m70+6OlOQEybKNDfQkJxV1ydc5x2GvJli9C+u91WP01EP4zMYQvogVMzK98AkTbv GGew/LE8YSBPoPXQ6VjUMI95oBKoSE32tLSNC3q6BCPyykHrD2YoYOfX+Zhm2MqS b2+f8mmHRXHPkxsPHcfTB+qT9TduO4hrhJAXXlv7oA4qQ14rTDSSNxDpJd/jXuNg 4pk+o0EAXDml2YpVgWwFcDDoDku6HniWuYD0LyXv9GhddLAgbacEJhKWh+c3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc9QOMJZL5HtObuCgggC4TMPjr08wHwYDVR0j BBgwFoAUgy8C4UAkMGwwZVenHgv6Ly86jdEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwZmExNGEtYWFhYy00MGY0LTljODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0 MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYyRjNBOEREMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzJGMDJFMTQwMjQzMDZDMzA2NTU3QTcxRTBCRkEyRjJGM0E4 REQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZB MkYyRjNBOEREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABReWxKb6CgCwITSLbN0FXX3/1SL/vbv28Mf 6nnu2d1YYsDSfB2aZcJTp4XFtruhqS4fMZTvIlputmmG3uTe7YehFd4yJuNyIr// tDctnt8ANDGw9AomVuaFZINTmoZDzyz5hdZTcWg5M1ln2RpnsKw5YbEvMu7OQgbI uV998Vq6eo08JPFQRT78glB2XVVxmYhiPdCrE4kp/wlk/HsBV6g1465WhO9Vppxw lwBSXBXRla25ErLxm9b1OHUgm4AFBgEi0+mg586wQQ1oGL4pWGnwO2qIziEiX5MK uqdAMYN3Pxe47uE8Hj6qGFlCy7p13EM7dQJrAb1e7TPsPZ1JA18= -----END CERTIFICATE-----Generated at Tue Sep 22 01:52:46 2026 by rpki-client