$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft File: 328533C99D9FDEAA8F1418F15BD32B96BC206058.mft (raw, json) Hash identifier: FwRlwDUsQUKSZPEmNZElB0lZMqul+PbSaI+VGqtbBLU= Subject key identifier: 4B:66:85:33:04:E3:FA:7B:CD:B5:40:BF:3C:2E:85:34:22:8E:D7:D1 Authority key identifier: 32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58 Certificate issuer: /CN=328533C99D9FDEAA8F1418F15BD32B96BC206058 Certificate serial: 701A8CEAC85392B8238144FABC491E699D383BFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 23:14:20 +0000 Manifest this update: Thu 24 Sep 2026 23:09:20 +0000 Manifest next update: Sat 26 Sep 2026 02:46:20 +0000 Files and hashes: 1: 3130332e3231392e362e302f32342d3234203d3e203338313537.roa (hash: WdtifxvKK3KsxSLiwEXLWrNPcTtmbGv7tQrCl/tBPS8=) 2: 328533C99D9FDEAA8F1418F15BD32B96BC206058.crl (hash: /F5wKgr8Zi+vHO0thA9P5y/sfVOvfEbKhX7iOQho3kc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1a:8c:ea:c8:53:92:b8:23:81:44:fa:bc:49:1e:69:9d:38:3b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328533C99D9FDEAA8F1418F15BD32B96BC206058 Validity Not Before: Sep 24 23:09:20 2026 GMT Not After : Sep 26 02:46:20 2026 GMT Subject: CN=4B66853304E3FA7BCDB540BF3C2E8534228ED7D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cc:17:3b:80:e8:60:9a:c9:9a:08:9c:30:4c: 3b:38:3c:64:39:ef:ee:ad:6e:ce:cb:60:74:05:8c: 5b:ab:18:fb:3c:c8:36:d0:3f:bf:05:81:e2:3c:ea: 8e:b8:d8:d2:5c:f2:ef:74:d1:c3:d4:d0:62:1c:91: 00:12:ec:63:27:ff:3d:0f:0c:42:d0:ef:a4:fa:cb: 2d:57:3c:67:26:af:b4:ec:b8:dc:a1:e4:3c:84:e8: c4:cb:97:af:6b:c8:e4:40:e9:df:06:39:de:5c:ae: bf:13:a5:43:de:22:f2:d6:62:f4:cb:08:b6:8e:3f: 4a:81:ab:d2:fc:2f:16:78:c4:ac:16:7c:08:a8:3c: bf:28:4e:84:e4:e6:f7:4e:e2:56:e8:4b:1b:a0:75: 20:0a:f6:13:a4:b4:d1:69:d0:a5:be:5e:5e:88:3e: 20:a1:f0:18:a6:69:7e:97:3f:64:0c:33:90:96:ad: 29:13:ae:dc:86:c9:bd:a1:6c:9e:70:d7:d5:4d:28: 2c:29:3a:80:a3:cb:50:aa:52:b8:8d:29:e8:86:20: 80:56:5a:0e:ca:43:b5:4b:5d:b5:52:5d:76:4c:52: 41:c0:76:6e:55:0b:ab:35:8d:b4:64:46:97:7a:48: 43:be:56:78:7e:a8:52:bc:34:17:52:27:80:aa:cc: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:66:85:33:04:E3:FA:7B:CD:B5:40:BF:3C:2E:85:34:22:8E:D7:D1 X509v3 Authority Key Identifier: keyid:32:85:33:C9:9D:9F:DE:AA:8F:14:18:F1:5B:D3:2B:96:BC:20:60:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/328533C99D9FDEAA8F1418F15BD32B96BC206058.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2021ee76-a9ff-4bfa-8223-946eecccf036/0/328533C99D9FDEAA8F1418F15BD32B96BC206058.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:17:a1:77:bd:ae:27:f5:3b:ff:15:47:26:ee:40:ab:52:df: 8a:e5:fc:58:38:d0:9a:6d:bc:6d:ae:d4:6a:2b:14:82:5c:b3: ad:59:2f:72:11:9d:e4:10:d6:0b:c9:59:0b:8a:5d:0c:a3:da: da:5e:68:53:9d:ae:5e:ee:7c:c6:00:80:cb:f1:9c:66:7b:6e: d3:9e:9b:b8:03:4f:a0:cd:8c:ef:db:a4:10:2d:fd:fc:bf:f5: 29:3d:3f:ab:ce:c9:2a:34:1b:58:f2:01:b8:fb:fc:2a:c2:11: 60:3f:bc:95:31:29:f3:aa:8e:83:fa:f6:7c:4c:45:79:fc:93: 84:ba:e1:4c:6a:ff:67:12:a7:e2:51:da:3b:0f:f1:f2:0e:5c: 1b:84:ed:6c:3c:ff:f7:87:18:99:98:6b:09:ae:7c:47:40:7b: 8e:88:2e:c0:8d:a9:e1:48:a0:6e:dc:4a:f5:90:be:ff:b1:9b: a1:c1:4b:d3:35:5d:7d:ad:0e:e7:7e:6a:b2:e6:c7:be:57:8e: a3:81:c6:6c:3d:43:fc:e8:f7:3f:23:d3:9e:1f:d4:0a:45:51: 4d:ea:8b:17:fa:c8:3d:b6:50:42:e6:f5:b0:16:0f:9c:61:73: a1:4a:d0:b0:21:4f:ba:11:d0:6c:7c:10:8e:89:3a:ac:c2:d5: 32:e4:e2:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBqM6shTkrgjgUT6vEkeaZ04O/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJCOTZC QzIwNjA1ODAeFw0yNjA5MjQyMzA5MjBaFw0yNjA5MjYwMjQ2MjBaMDMxMTAvBgNV BAMTKDRCNjY4NTMzMDRFM0ZBN0JDREI1NDBCRjNDMkU4NTM0MjI4RUQ3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGzBc7gOhgmsmaCJwwTDs4PGQ5 7+6tbs7LYHQFjFurGPs8yDbQP78FgeI86o642NJc8u900cPU0GIckQAS7GMn/z0P DELQ76T6yy1XPGcmr7TsuNyh5DyE6MTLl69ryORA6d8GOd5crr8TpUPeIvLWYvTL CLaOP0qBq9L8LxZ4xKwWfAioPL8oToTk5vdO4lboSxugdSAK9hOktNFp0KW+Xl6I PiCh8BimaX6XP2QMM5CWrSkTrtyGyb2hbJ5w19VNKCwpOoCjy1CqUriNKeiGIIBW Wg7KQ7VLXbVSXXZMUkHAdm5VC6s1jbRkRpd6SEO+Vnh+qFK8NBdSJ4CqzEOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2aFMwTj+nvNtUC/PC6FNCKO19EwHwYDVR0j BBgwFoAUMoUzyZ2f3qqPFBjxW9MrlrwgYFgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAyMWVlNzYtYTlmZi00YmZhLTgyMjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5 RDlGREVBQThGMTQxOEYxNUJEMzJCOTZCQzIwNjA1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1MzNDOTlEOUZERUFBOEYxNDE4RjE1QkQzMkI5NkJDMjA2 MDU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAyMWVlNzYtYTlmZi00YmZhLTgy MjMtOTQ2ZWVjY2NmMDM2LzAvMzI4NTMzQzk5RDlGREVBQThGMTQxOEYxNUJEMzJC OTZCQzIwNjA1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4XoXe9rif1O/8VRybuQKtS34rl/Fg40Jpt vG2u1GorFIJcs61ZL3IRneQQ1gvJWQuKXQyj2tpeaFOdrl7ufMYAgMvxnGZ7btOe m7gDT6DNjO/bpBAt/fy/9Sk9P6vOySo0G1jyAbj7/CrCEWA/vJUxKfOqjoP69nxM RXn8k4S64Uxq/2cSp+JR2jsP8fIOXBuE7Ww8//eHGJmYawmufEdAe46ILsCNqeFI oG7cSvWQvv+xm6HBS9M1XX2tDud+arLmx75XjqOBxmw9Q/zo9z8j054f1ApFUU3q ixf6yD22UELm9bAWD5xhc6FK0LAhT7oR0Gx8EI6JOqzC1TLk4mo= -----END CERTIFICATE-----Generated at Fri Sep 25 13:32:45 2026 by rpki-client