$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: 6i9Qtsc/Zbr/hQOaSJa9Wyq/KHICp8lMvKbKmKue2+M= Subject key identifier: AE:89:56:6B:63:25:7A:34:98:A1:2A:76:2B:81:C5:C5:10:18:47:52 Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 529F5C3BE49B7EB7DB0734A3A0739093D02D9104 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 017B Signing time: Tue 24 Mar 2026 12:01:47 +0000 Manifest this update: Tue 24 Mar 2026 11:56:47 +0000 Manifest next update: Fri 27 Mar 2026 18:48:47 +0000 Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: lH52HjrQmQV5h/gvE+/HxXRFAB8P638YGcHz5tsrQ5Q=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: dEzIqEvBQoLb4jDZxATrGmBvt2RxQTfgU7Js5Mbni88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9f:5c:3b:e4:9b:7e:b7:db:07:34:a3:a0:73:90:93:d0:2d:91:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Mar 24 11:56:47 2026 GMT Not After : Mar 27 18:48:47 2026 GMT Subject: CN=AE89566B63257A3498A12A762B81C5C510184752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:47:e4:b5:6d:b1:a0:ab:66:a7:6a:40:60:88: 88:3b:d6:e0:e0:53:48:5b:4c:ce:9b:65:d9:f0:66: ce:9f:7c:1a:41:9e:76:3e:cd:f1:b9:e9:4c:91:d1: 52:ff:89:d4:61:1e:54:18:d1:6c:fb:5b:be:99:87: 2c:5f:46:42:47:3c:33:52:88:5b:85:79:26:31:1a: 8e:03:1f:76:24:c6:d8:6f:d6:70:4f:d2:3d:07:e1: f1:5a:77:88:46:14:72:17:5b:40:8e:03:6d:16:dc: e7:06:dc:89:61:fd:22:bd:ff:f5:f0:98:a2:33:da: 55:80:b3:0f:4b:1a:8e:1e:96:7f:0f:28:35:52:71: e1:b6:16:0c:e1:f1:85:41:6e:57:14:f2:ff:37:81: 94:af:3f:b1:14:f5:21:a2:78:05:94:60:20:74:3b: 62:a7:25:da:5d:5c:a2:29:c2:4b:1a:4c:3f:e5:30: 10:27:ad:37:2f:d5:0d:58:c2:25:e8:76:08:59:f8: 31:59:90:f2:e1:cb:6c:73:0b:bb:e9:58:87:28:dd: e0:86:64:03:27:25:bf:e9:86:43:c3:af:2a:fa:c3: c7:d3:fc:55:05:2d:fc:9b:eb:4b:9a:67:59:97:e4: 11:f7:aa:f0:cb:b8:68:03:71:04:1a:4a:d9:6e:bd: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:89:56:6B:63:25:7A:34:98:A1:2A:76:2B:81:C5:C5:10:18:47:52 X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c1:78:3d:19:50:ea:cf:8b:9c:29:93:36:72:df:dd:b2:8a: 54:71:c6:a8:cc:42:be:ce:6f:fe:af:ac:4b:dd:7f:b5:c2:5e: c6:1d:5a:ca:0f:d3:fb:37:39:cc:09:72:78:54:c5:db:05:aa: 46:9f:cb:7d:6f:28:00:19:71:6c:d4:30:e4:dc:88:5a:27:90: 7f:0f:76:24:2a:bb:cb:fc:c0:1e:72:3d:02:87:e5:44:f8:1e: 7e:40:71:db:03:0e:08:ff:38:d7:0a:d7:47:f4:1c:dc:bd:69: 74:67:a8:9c:ca:5a:73:c9:ee:77:9f:f9:7f:d4:98:79:e9:36: 73:23:94:67:88:84:95:a0:58:f9:26:97:ec:f1:16:5c:c3:c7: 88:f7:9c:02:34:62:76:53:e9:47:0e:98:80:b6:01:14:4f:9b: 04:81:34:cf:62:d5:08:93:d0:52:2a:f8:30:0f:a1:1d:fe:fe: a8:28:c6:d3:f1:05:ce:b6:00:45:ef:cf:76:ed:0e:a5:d7:74: e0:1e:b3:07:f0:ee:76:fe:c4:17:e8:da:e3:8f:2f:86:18:9b: 85:84:7e:7b:74:78:e7:8a:78:81:dd:33:53:77:d7:33:05:e2: 9e:a8:e2:23:72:b3:fa:f5:37:87:aa:74:56:4e:a6:58:54:ca: 33:f7:3e:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUp9cO+SbfrfbBzSjoHOQk9AtkQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNjAzMjQxMTU2NDdaFw0yNjAzMjcxODQ4NDdaMDMxMTAvBgNV BAMTKEFFODk1NjZCNjMyNTdBMzQ5OEExMkE3NjJCODFDNUM1MTAxODQ3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6R+S1bbGgq2anakBgiIg71uDg U0hbTM6bZdnwZs6ffBpBnnY+zfG56UyR0VL/idRhHlQY0Wz7W76ZhyxfRkJHPDNS iFuFeSYxGo4DH3Ykxthv1nBP0j0H4fFad4hGFHIXW0COA20W3OcG3Ilh/SK9//Xw mKIz2lWAsw9LGo4eln8PKDVSceG2Fgzh8YVBblcU8v83gZSvP7EU9SGieAWUYCB0 O2KnJdpdXKIpwksaTD/lMBAnrTcv1Q1YwiXodghZ+DFZkPLhy2xzC7vpWIco3eCG ZAMnJb/phkPDryr6w8fT/FUFLfyb60uaZ1mX5BH3qvDLuGgDcQQaStluvRO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrolWa2MlejSYoSp2K4HFxRAYR1IwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXBeD0ZUOrPi5wpkzZy392yilRxxqjMQr7O b/6vrEvdf7XCXsYdWsoP0/s3OcwJcnhUxdsFqkafy31vKAAZcWzUMOTciFonkH8P diQqu8v8wB5yPQKH5UT4Hn5AcdsDDgj/ONcK10f0HNy9aXRnqJzKWnPJ7nef+X/U mHnpNnMjlGeIhJWgWPkml+zxFlzDx4j3nAI0YnZT6UcOmIC2ARRPmwSBNM9i1QiT 0FIq+DAPoR3+/qgoxtPxBc62AEXvz3btDqXXdOAeswfw7nb+xBfo2uOPL4YYm4WE fnt0eOeKeIHdM1N31zMF4p6o4iNys/r1N4eqdFZOplhUyjP3Pu4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:34:59 2026 by rpki-client