$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: p08LzTP6+HZk0lmqLF7P95pjCGE6UibGq0CmvxblCSk= Subject key identifier: 56:92:CC:0C:D9:D9:78:19:E7:99:28:33:A7:7C:3C:19:E5:11:F9:64 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 1D87442D4595C018124F5103057D50669B70A890 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0180 Signing time: Tue 24 Mar 2026 19:31:01 +0000 Manifest this update: Tue 24 Mar 2026 19:26:01 +0000 Manifest next update: Fri 27 Mar 2026 21:20:01 +0000 Files and hashes: 1: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: gJfe2xH4AFp953nStZ+5RnUaFKrKq4RyMuglPIR/nF4=) 2: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: dSVS127lwWi8iK2HhNgRMx5903WtJScz9453drHDtJU=) 3: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: 6xlug0XUa7+3muEc0qZobCHKsLZsnvqmD4DOKyPgW3E=) 4: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: lvsTtW252Ri8zLP6LeQkBWwPzY993cpPilJUNYfFwDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:87:44:2d:45:95:c0:18:12:4f:51:03:05:7d:50:66:9b:70:a8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Mar 24 19:26:01 2026 GMT Not After : Mar 27 21:20:01 2026 GMT Subject: CN=5692CC0CD9D97819E7992833A77C3C19E511F964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ee:7c:af:65:17:9d:df:e6:c4:cd:e5:c1:35: b6:ee:bf:4c:b4:5a:7b:be:65:fa:69:11:52:20:21: 74:43:78:80:d7:0f:18:f8:62:49:85:3a:fc:7b:f2: 52:18:0b:d8:b8:dd:af:05:ad:c7:4a:e6:a8:98:1a: d5:38:2f:0c:59:e1:a5:2a:12:fa:b9:73:42:b4:23: 38:cb:b1:1f:48:b2:39:40:ce:3f:42:28:93:31:1b: bd:df:2f:1e:31:b3:d8:9f:13:e3:fc:04:2c:a7:15: ca:88:aa:1f:ee:5e:a1:36:7e:28:4b:6e:aa:25:9d: 7d:1f:99:5c:69:09:b8:8f:52:df:0d:10:4a:8a:ae: 43:82:3f:8c:8f:65:1c:dc:ab:b9:3d:46:12:cd:6d: 05:2e:a2:2d:96:5a:7f:71:97:39:2a:bf:d2:b5:be: 3a:4b:67:6f:19:63:b0:b7:6b:42:cc:69:55:cc:4f: 46:ca:95:65:75:48:33:39:a1:31:e4:92:c3:5b:aa: 3a:2f:6f:1b:4f:91:11:f0:48:2d:67:dc:d9:7c:58: 22:62:d6:54:3e:4c:78:30:00:6f:b6:3b:66:92:34: 8a:02:f6:08:a8:62:b7:62:27:7a:66:ae:77:ad:fd: 76:ed:27:e5:82:9b:98:22:4f:9e:b2:ff:f9:6f:0f: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:92:CC:0C:D9:D9:78:19:E7:99:28:33:A7:7C:3C:19:E5:11:F9:64 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3c:2e:97:cf:da:4a:de:ca:76:a1:83:01:ad:69:f8:d4:c5: fe:1e:73:1d:57:5c:25:12:d4:ff:39:c2:16:1a:02:a2:2f:8d: 26:ae:f3:c4:8b:4c:8e:e0:9d:41:ac:49:3f:96:12:e8:de:8d: d0:f7:96:66:3b:78:7e:b5:bb:f2:53:47:b9:74:95:b0:20:9f: cf:ec:86:a5:11:d4:d8:01:bb:75:1e:e5:e5:9e:25:f2:83:ab: 19:e0:40:33:ed:77:66:3e:9d:44:bb:fd:f3:61:01:5c:37:e8: 23:7e:e7:c2:10:54:40:39:e6:3a:38:2f:c0:11:4c:a0:41:f2: bb:23:8c:1d:ac:5d:f9:55:f8:f1:25:cb:9a:fd:23:ba:4d:8d: 14:ee:52:32:55:b1:e0:79:60:8d:1a:7b:66:28:d7:e5:ca:e1: a3:8b:24:7c:c8:27:ab:b8:42:71:0d:da:84:73:49:32:ae:8f: de:48:2c:4d:5c:3d:32:49:f1:e2:59:87:23:38:0d:00:51:81: 69:d9:bb:40:2d:44:3f:07:11:d9:da:75:7d:84:29:b8:0e:66: 13:3e:a9:7d:b2:1a:17:41:eb:e4:4c:36:dc:3c:23:e3:e8:76: 31:d5:a3:b6:64:c6:d3:90:96:17:12:be:24:47:b3:d3:2b:78: 33:8d:a2:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHYdELUWVwBgST1EDBX1QZptwqJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNjAzMjQxOTI2MDFaFw0yNjAzMjcyMTIwMDFaMDMxMTAvBgNV BAMTKDU2OTJDQzBDRDlEOTc4MTlFNzk5MjgzM0E3N0MzQzE5RTUxMUY5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7nyvZRed3+bEzeXBNbbuv0y0 Wnu+ZfppEVIgIXRDeIDXDxj4YkmFOvx78lIYC9i43a8FrcdK5qiYGtU4LwxZ4aUq Evq5c0K0IzjLsR9IsjlAzj9CKJMxG73fLx4xs9ifE+P8BCynFcqIqh/uXqE2fihL bqolnX0fmVxpCbiPUt8NEEqKrkOCP4yPZRzcq7k9RhLNbQUuoi2WWn9xlzkqv9K1 vjpLZ28ZY7C3a0LMaVXMT0bKlWV1SDM5oTHkksNbqjovbxtPkRHwSC1n3Nl8WCJi 1lQ+THgwAG+2O2aSNIoC9gioYrdiJ3pmrnet/XbtJ+WCm5giT56y//lvD+xfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVpLMDNnZeBnnmSgzp3w8GeUR+WQwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHk8LpfP2kreynahgwGtafjUxf4ecx1XXCUS 1P85whYaAqIvjSau88SLTI7gnUGsST+WEujejdD3lmY7eH61u/JTR7l0lbAgn8/s hqUR1NgBu3Ue5eWeJfKDqxngQDPtd2Y+nUS7/fNhAVw36CN+58IQVEA55jo4L8AR TKBB8rsjjB2sXflV+PEly5r9I7pNjRTuUjJVseB5YI0ae2Yo1+XK4aOLJHzIJ6u4 QnEN2oRzSTKuj95ILE1cPTJJ8eJZhyM4DQBRgWnZu0AtRD8HEdnadX2EKbgOZhM+ qX2yGhdB6+RMNtw8I+PodjHVo7ZkxtOQlhcSviRHs9MreDONogc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:00:32 2026 by rpki-client