$ rpki-client -vvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft File: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json) Hash identifier: wKMD1gzh9NsGDFlY04cU+pfHDDWUZhyoOYpEujvf4I4= Subject key identifier: 51:B1:3D:A3:1C:11:D1:48:2E:F6:2D:6C:31:95:43:2D:07:E2:8C:F6 Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Certificate serial: 52BC9DCD4C4B957852CD0AAF0BE313B801B3F10B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 16:16:42 +0000 Manifest this update: Tue 28 Jul 2026 16:11:42 +0000 Manifest next update: Wed 29 Jul 2026 17:52:42 +0000 Files and hashes: 1: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: LYQwrOaN5SCn2N0Q9dqw9uHFwAvQnDK4d/ZeReOErYg=) 2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bc:9d:cd:4c:4b:95:78:52:cd:0a:af:0b:e3:13:b8:01:b3:f1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Validity Not Before: Jul 28 16:11:42 2026 GMT Not After : Jul 29 17:52:42 2026 GMT Subject: CN=51B13DA31C11D1482EF62D6C3195432D07E28CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:fc:d3:b7:a8:bf:03:16:43:1d:33:e1:bd: a0:55:ba:39:3f:60:07:f2:86:b5:3d:20:6e:5a:49: e3:fc:4d:2e:c6:db:64:63:51:1f:cd:e7:0b:0e:4d: a9:0b:d6:7a:c8:c8:54:aa:26:a6:df:41:29:0e:8f: a8:89:9c:c9:7a:de:06:48:21:77:2c:b2:f4:cf:e5: 2a:c7:e1:33:92:90:f4:60:7d:81:b5:47:32:c5:41: 64:3b:7f:f4:8b:80:6c:c6:8d:02:87:ac:59:09:18: dd:c1:6e:19:1f:ff:56:a3:cc:06:de:4c:8e:81:f3: 9a:2a:17:e3:92:cc:ce:b2:1c:eb:17:98:96:c9:f3: 49:e5:3b:ce:f9:7c:af:92:df:ff:ea:32:bb:e5:f6: 4e:78:bd:52:b9:e0:2b:e0:55:a3:e3:b3:41:b2:d4: 64:b2:d3:b9:71:0f:e8:07:5b:5f:36:7b:bf:cc:85: 3a:2c:1e:f3:d0:0f:bf:b5:86:d7:96:2b:a6:29:ff: 74:4f:a4:b1:c4:08:2d:88:1b:ee:11:b4:e2:fa:33: 4b:4f:55:a8:6b:02:b4:0e:81:4e:56:45:2d:03:ee: 2b:76:fa:8d:0e:bb:92:bf:2b:a5:30:22:32:c1:76: bb:28:10:8d:47:4d:07:a0:e1:3b:14:12:21:5d:38: ad:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B1:3D:A3:1C:11:D1:48:2E:F6:2D:6C:31:95:43:2D:07:E2:8C:F6 X509v3 Authority Key Identifier: keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cf:ac:17:a4:ed:6c:42:5a:d8:f0:23:0f:e8:9d:ee:30:f0: b4:a3:20:9a:9a:90:f3:99:9a:56:8c:d7:24:68:4b:91:8d:df: 9c:13:0e:3a:7e:30:23:53:2c:af:1e:6c:1e:67:18:1b:35:3a: 69:7d:ed:08:c2:45:d6:67:7d:1c:b4:21:a7:d9:60:7e:3f:f6: 0d:d1:09:e4:34:d9:3d:77:fd:32:bc:b2:62:c6:a4:33:de:97: 3c:42:d5:14:30:44:e5:a6:8a:64:6f:90:dd:0a:69:16:52:b8: 2b:35:03:2b:6e:39:f4:d6:65:e7:39:38:6a:b1:f5:65:99:b5: 3f:24:a0:65:27:06:26:df:ec:76:86:c5:23:0a:87:2c:cc:68: 96:f0:70:04:7d:ca:b6:be:62:d2:2c:48:a6:b3:cb:83:df:b6: 0e:23:49:4e:c3:4a:2f:21:ee:1a:55:3b:aa:3c:88:d2:35:a4: 9e:f8:4a:1c:be:7c:f3:3a:33:60:ba:b7:e5:d4:77:69:35:46: 27:0e:7d:33:52:fe:25:66:11:db:33:8c:6f:22:a8:e4:a0:12: 51:20:d2:26:b6:45:b5:93:2d:7d:3c:4e:f8:07:35:52:92:26: 71:31:a0:92:18:31:82:11:8f:6f:9c:8b:c0:61:0c:bc:29:d8: ed:57:a3:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrydzUxLlXhSzQqvC+MTuAGz8QswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYy RjNBOEREMTAeFw0yNjA3MjgxNjExNDJaFw0yNjA3MjkxNzUyNDJaMDMxMTAvBgNV BAMTKDUxQjEzREEzMUMxMUQxNDgyRUY2MkQ2QzMxOTU0MzJEMDdFMjhDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzy/zTt6i/AxZDHTPhvaBVujk/ YAfyhrU9IG5aSeP8TS7G22RjUR/N5wsOTakL1nrIyFSqJqbfQSkOj6iJnMl63gZI IXcssvTP5SrH4TOSkPRgfYG1RzLFQWQ7f/SLgGzGjQKHrFkJGN3Bbhkf/1ajzAbe TI6B85oqF+OSzM6yHOsXmJbJ80nlO875fK+S3//qMrvl9k54vVK54CvgVaPjs0Gy 1GSy07lxD+gHW182e7/MhTosHvPQD7+1hteWK6Yp/3RPpLHECC2IG+4RtOL6M0tP VahrArQOgU5WRS0D7it2+o0Ou5K/K6UwIjLBdrsoEI1HTQeg4TsUEiFdOK2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUbE9oxwR0Ugu9i1sMZVDLQfijPYwHwYDVR0j BBgwFoAUgy8C4UAkMGwwZVenHgv6Ly86jdEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwZmExNGEtYWFhYy00MGY0LTljODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0 MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYyRjNBOEREMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzJGMDJFMTQwMjQzMDZDMzA2NTU3QTcxRTBCRkEyRjJGM0E4 REQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZB MkYyRjNBOEREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTPrBek7WxCWtjwIw/one4w8LSjIJqakPOZ mlaM1yRoS5GN35wTDjp+MCNTLK8ebB5nGBs1Oml97QjCRdZnfRy0IafZYH4/9g3R CeQ02T13/TK8smLGpDPelzxC1RQwROWmimRvkN0KaRZSuCs1AytuOfTWZec5OGqx 9WWZtT8koGUnBibf7HaGxSMKhyzMaJbwcAR9yra+YtIsSKazy4Pftg4jSU7DSi8h 7hpVO6o8iNI1pJ74Shy+fPM6M2C6t+XUd2k1RicOfTNS/iVmEdszjG8iqOSgElEg 0ia2RbWTLX08TvgHNVKSJnExoJIYMYIRj2+ci8BhDLwp2O1Xo4Q= -----END CERTIFICATE-----Generated at Wed Jul 29 09:19:03 2026 by rpki-client