$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft File: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft (raw, json) Hash identifier: WuheGbNEVrnpAZk+Ft72EF85td37mUC8SFAccmwia6w= Subject key identifier: C1:18:B6:FE:34:AC:96:51:03:B1:A6:3E:AB:9A:BF:F3:F2:C6:81:1F Authority key identifier: 32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3 Certificate issuer: /CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3 Certificate serial: 20F762E4AA19A1424713A1E34B50577F9FF43AA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:13:07 +0000 Manifest this update: Mon 21 Sep 2026 05:08:07 +0000 Manifest next update: Tue 22 Sep 2026 08:05:07 +0000 Files and hashes: 1: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: IlwLW0g7keiKYblC08y+Cdk30ZDG31NiX8oDu4ZTBVM=) 2: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl (hash: B/QEJQac/M9cgFAIupzPPkMJpsNzsri+3BOPhy8Mrdk=) 3: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: AerViwEwX6M35LdYkw1W6Rm917nFOVWmFQ/wALZRWuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f7:62:e4:aa:19:a1:42:47:13:a1:e3:4b:50:57:7f:9f:f4:3a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3 Validity Not Before: Sep 21 05:08:07 2026 GMT Not After : Sep 22 08:05:07 2026 GMT Subject: CN=C118B6FE34AC965103B1A63EAB9ABFF3F2C6811F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:86:e5:53:2b:61:df:8b:e4:45:ae:41:54: 15:b9:43:df:6d:11:f7:4f:f1:2d:41:18:78:c9:9d: 83:c6:1a:6a:60:e7:b8:41:78:c8:0c:ec:7f:0e:90: 33:bb:75:7a:a7:a5:46:f8:31:16:cd:5c:38:ca:d1: 75:d5:4f:28:ed:bc:e0:5a:77:c0:38:1d:7c:ff:de: 44:c9:4d:3c:c5:83:75:c3:7f:d8:fd:1c:69:c4:ce: 02:1d:86:d0:9e:57:e3:26:a8:5f:13:76:69:34:1f: 6a:d1:aa:2a:9c:b2:c6:d4:a7:22:0a:ec:e8:40:78: 7c:d5:83:5e:58:68:1a:92:d6:da:a8:46:87:40:df: 2e:03:87:5e:c4:0f:7f:f3:3b:2f:42:13:84:40:94: 3a:f3:2c:d6:77:26:76:0d:78:18:b2:ac:2e:1c:d1: 57:1e:a9:ac:76:35:e2:80:a3:c4:19:bf:93:47:ca: 58:d9:bc:53:31:36:5a:11:d5:db:3c:7d:15:f7:59: 07:37:e4:47:e4:ab:89:07:18:a0:60:ab:75:ef:b8: f6:3c:2b:49:00:09:5e:09:9a:93:0d:b7:84:bb:dd: f8:e4:4b:c1:85:96:c9:fd:45:bc:03:66:d9:e1:69: 28:8f:1c:fc:2d:7a:54:8a:e1:5f:73:2a:43:2f:40: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:18:B6:FE:34:AC:96:51:03:B1:A6:3E:AB:9A:BF:F3:F2:C6:81:1F X509v3 Authority Key Identifier: keyid:32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:98:f5:44:57:f9:c5:fb:23:51:bc:4c:ad:67:53:5c:ed:7c: 24:ad:cd:0c:2d:be:46:6e:cd:9b:81:fe:0d:a8:62:65:71:3f: 23:cd:54:cb:32:89:62:27:06:f7:54:dc:fd:7e:18:c2:cf:ec: 95:54:4e:06:25:6a:87:0f:2d:45:eb:67:4f:de:f1:db:ac:3d: 64:9f:cc:24:82:ae:a7:c4:6b:e5:48:75:51:4f:a1:f9:2d:e4: de:9f:96:de:fd:85:a8:4e:73:e9:7e:97:5a:d5:48:15:47:5a: 48:e4:2d:fb:44:a4:cc:f5:1e:49:c8:da:61:59:d6:85:0b:d2: 85:db:e5:7d:9c:80:19:85:da:4b:ed:16:45:62:ac:0f:55:d3: ea:9e:2b:d7:02:c7:12:38:1b:11:e1:0e:25:8b:e9:f0:b3:25: 04:e8:34:df:ba:cb:fb:b0:58:f9:aa:34:6f:57:82:a1:4b:00: da:ac:d0:8c:10:e4:c5:c3:90:92:cc:e8:5c:29:af:95:43:3c: d1:70:4e:3a:6c:99:2c:d4:a2:50:ac:37:de:70:c5:3f:d6:f6: 39:1a:22:74:e2:0b:d4:d0:ca:ec:e8:f5:45:c9:d5:34:0c:34: e6:f2:d8:99:14:28:11:8f:c8:f1:f1:9c:b3:25:17:85:6f:7e: b5:c0:a3:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIPdi5KoZoUJHE6HjS1BXf5/0OqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRC Q0M3RUVGMzAeFw0yNjA5MjEwNTA4MDdaFw0yNjA5MjIwODA1MDdaMDMxMTAvBgNV BAMTKEMxMThCNkZFMzRBQzk2NTEwM0IxQTYzRUFCOUFCRkYzRjJDNjgxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELIblUyth34vkRa5BVBW5Q99t EfdP8S1BGHjJnYPGGmpg57hBeMgM7H8OkDO7dXqnpUb4MRbNXDjK0XXVTyjtvOBa d8A4HXz/3kTJTTzFg3XDf9j9HGnEzgIdhtCeV+MmqF8Tdmk0H2rRqiqcssbUpyIK 7OhAeHzVg15YaBqS1tqoRodA3y4Dh17ED3/zOy9CE4RAlDrzLNZ3JnYNeBiyrC4c 0Vceqax2NeKAo8QZv5NHyljZvFMxNloR1ds8fRX3WQc35Efkq4kHGKBgq3XvuPY8 K0kACV4JmpMNt4S73fjkS8GFlsn9RbwDZtnhaSiPHPwtelSK4V9zKkMvQKcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwRi2/jSsllEDsaY+q5q/8/LGgR8wHwYDVR0j BBgwFoAUMsQIaSUM6WBuBcFbabIP9LzH7vMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI2MDU4NmQtYjAyNy00NjU2LWI2MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4Njky NTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRCQ0M3RUVGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkM0MDg2OTI1MENFOTYwNkUwNUMxNUI2OUIyMEZGNEJDQzdF RUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI2MDU4NmQtYjAyNy00NjU2LWI2 MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBG RjRCQ0M3RUVGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiY9URX+cX7I1G8TK1nU1ztfCStzQwtvkZu zZuB/g2oYmVxPyPNVMsyiWInBvdU3P1+GMLP7JVUTgYlaocPLUXrZ0/e8dusPWSf zCSCrqfEa+VIdVFPofkt5N6flt79hahOc+l+l1rVSBVHWkjkLftEpMz1HknI2mFZ 1oUL0oXb5X2cgBmF2kvtFkVirA9V0+qeK9cCxxI4GxHhDiWL6fCzJQToNN+6y/uw WPmqNG9XgqFLANqs0IwQ5MXDkJLM6Fwpr5VDPNFwTjpsmSzUolCsN95wxT/W9jka InTiC9TQyuzo9UXJ1TQMNOby2JkUKBGPyPHxnLMlF4VvfrXAo/k= -----END CERTIFICATE-----Generated at Mon Sep 21 20:13:56 2026 by rpki-client