$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft File: 32857E62250C763037D1ED291D7937072EB50DC5.mft (raw, json) Hash identifier: 70MmqnYQjhS1D0KNseXatzn03m3pxrLSc7Cji9n4StY= Subject key identifier: B7:FF:C1:A7:C1:A0:E3:92:E0:32:6E:11:E5:62:FC:11:5A:03:D1:24 Authority key identifier: 32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 Certificate issuer: /CN=32857E62250C763037D1ED291D7937072EB50DC5 Certificate serial: 6AB1275E8A7230EBAA10C419FF8DBCBD4BA5B315 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 02:08:20 +0000 Manifest this update: Thu 24 Sep 2026 02:03:20 +0000 Manifest next update: Fri 25 Sep 2026 04:57:20 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: bObGNzkzxqsMtfGussqQMllg3CDeiOkWDE0MTteiGhQ=) 2: 32857E62250C763037D1ED291D7937072EB50DC5.crl (hash: bokwYQ0H5JdgR4NvnkwIJgLLDLXPJ+CLKM3vKPJt3Qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b1:27:5e:8a:72:30:eb:aa:10:c4:19:ff:8d:bc:bd:4b:a5:b3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32857E62250C763037D1ED291D7937072EB50DC5 Validity Not Before: Sep 24 02:03:20 2026 GMT Not After : Sep 25 04:57:20 2026 GMT Subject: CN=B7FFC1A7C1A0E392E0326E11E562FC115A03D124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:a7:b1:cb:74:9a:91:4a:f5:af:10:1a:30: 7f:d5:1a:e2:a4:0a:5b:f4:83:c9:d7:9e:76:09:b4: ed:a0:0b:ad:4e:a1:0b:e4:7d:96:20:14:0c:b5:af: d8:0e:49:a1:99:cc:0a:85:84:67:48:09:61:21:9f: cc:25:21:cb:df:5c:07:d2:ea:76:9d:8f:e6:d7:8a: c5:35:66:77:fa:59:01:bd:da:81:2f:54:4e:b4:37: 87:83:a5:9a:99:30:28:d7:db:00:e5:bc:c7:78:51: bb:56:65:47:3b:f0:7b:e4:70:32:1e:e2:e1:68:7a: a1:f2:38:89:ed:86:d2:b3:fc:e3:2d:d5:24:67:db: 9a:9d:da:d0:ec:1f:9c:35:6f:fa:33:6a:67:31:f8: b5:4f:37:71:be:00:af:53:ea:87:3b:d9:6d:b6:e4: 40:be:cb:96:fe:7e:25:86:86:e2:78:76:fd:7b:4f: 2c:a0:70:48:ab:8a:74:91:d0:ea:4b:a6:c6:1d:a4: 74:f7:e6:1d:88:c5:a8:60:0c:68:39:fa:cc:1c:64: 9c:d2:a4:e4:c2:d8:07:bb:1d:61:76:dc:08:85:79: b9:6c:ca:cf:fe:4c:27:84:6a:30:0c:dd:9b:48:30: 3e:55:99:62:55:99:a9:e5:1c:89:b8:2f:84:59:27: ef:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:C1:A7:C1:A0:E3:92:E0:32:6E:11:E5:62:FC:11:5A:03:D1:24 X509v3 Authority Key Identifier: keyid:32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c0:a8:f8:9d:17:c3:c9:9d:88:1b:c5:03:8b:28:2a:fa:80: 16:26:72:12:f8:f2:00:5a:b3:a8:6c:cf:cb:6b:b3:15:73:92: e5:37:7f:b2:53:d2:c3:48:21:d7:81:f7:62:8f:0e:ff:c0:0f: 1b:c7:a6:55:fb:f9:4d:de:e6:6f:16:bb:54:d8:c2:05:f3:bd: 0e:99:3e:db:1e:93:e5:c7:b2:48:23:e2:d5:f4:12:1e:9b:c1: 6c:25:be:cb:63:6f:4a:21:51:f9:7e:4b:54:b5:5d:9f:2a:67: f1:1d:b7:ab:c4:20:55:21:46:74:5f:3b:c1:2d:02:14:9a:59: aa:58:d9:a9:e4:3e:23:60:aa:79:9e:04:d5:f5:4e:b6:55:e2: f6:43:70:c7:10:c7:2f:05:70:ff:55:d7:65:76:37:80:c7:f5: 3c:be:60:1e:4a:05:e6:4b:4f:e0:d6:84:9c:9a:6a:92:4c:06: 4b:7a:1d:0b:7a:46:1b:34:93:c9:40:b7:e9:3f:84:2d:92:a1: 70:22:df:03:e8:b9:f2:43:b4:b1:24:38:52:85:44:f9:bb:f9: 00:88:42:7f:3e:9a:c7:27:69:7f:e5:bf:15:af:76:aa:26:62: ea:4e:cb:9a:17:c7:3b:a0:d1:a5:fa:31:d3:56:c1:32:68:90: 60:92:cf:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarEnXopyMOuqEMQZ/428vUulsxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcy RUI1MERDNTAeFw0yNjA5MjQwMjAzMjBaFw0yNjA5MjUwNDU3MjBaMDMxMTAvBgNV BAMTKEI3RkZDMUE3QzFBMEUzOTJFMDMyNkUxMUU1NjJGQzExNUEwM0QxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglaexy3SakUr1rxAaMH/VGuKk Clv0g8nXnnYJtO2gC61OoQvkfZYgFAy1r9gOSaGZzAqFhGdICWEhn8wlIcvfXAfS 6nadj+bXisU1Znf6WQG92oEvVE60N4eDpZqZMCjX2wDlvMd4UbtWZUc78HvkcDIe 4uFoeqHyOInthtKz/OMt1SRn25qd2tDsH5w1b/ozamcx+LVPN3G+AK9T6oc72W22 5EC+y5b+fiWGhuJ4dv17TyygcEirinSR0OpLpsYdpHT35h2IxahgDGg5+swcZJzS pOTC2Ae7HWF23AiFeblsys/+TCeEajAM3ZtIMD5VmWJVmanlHIm4L4RZJ++BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt//Bp8Gg45LgMm4R5WL8EVoD0SQwHwYDVR0j BBgwFoAUMoV+YiUMdjA30e0pHXk3By61DcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWQwMTItYWZkYi00MmZiLTk3MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIy NTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcyRUI1MERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1N0U2MjI1MEM3NjMwMzdEMUVEMjkxRDc5MzcwNzJFQjUw REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3 MDcyRUI1MERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzAqPidF8PJnYgbxQOLKCr6gBYmchL48gBa s6hsz8trsxVzkuU3f7JT0sNIIdeB92KPDv/ADxvHplX7+U3e5m8Wu1TYwgXzvQ6Z Ptsek+XHskgj4tX0Eh6bwWwlvstjb0ohUfl+S1S1XZ8qZ/Edt6vEIFUhRnRfO8Et AhSaWapY2ankPiNgqnmeBNX1TrZV4vZDcMcQxy8FcP9V12V2N4DH9Ty+YB5KBeZL T+DWhJyaapJMBkt6HQt6Rhs0k8lAt+k/hC2SoXAi3wPoufJDtLEkOFKFRPm7+QCI Qn8+mscnaX/lvxWvdqomYupOy5oXxzug0aX6MdNWwTJokGCSz6g= -----END CERTIFICATE-----Generated at Thu Sep 24 05:57:05 2026 by rpki-client