$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft File: 32857E62250C763037D1ED291D7937072EB50DC5.mft (raw, json) Hash identifier: zDr4+AH5cDStOOnSvnbxRJzaEUIGoBaMsZDZNeK78Nc= Subject key identifier: 1D:2A:B8:4C:2B:3B:68:84:E2:41:4B:9E:68:40:8F:15:C1:CA:41:F0 Authority key identifier: 32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 Certificate issuer: /CN=32857E62250C763037D1ED291D7937072EB50DC5 Certificate serial: 339085ABE663524C3817B1C69E00971AD16C7E60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:39:04 +0000 Manifest this update: Tue 12 May 2026 01:34:04 +0000 Manifest next update: Wed 13 May 2026 05:28:04 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: bObGNzkzxqsMtfGussqQMllg3CDeiOkWDE0MTteiGhQ=) 2: 32857E62250C763037D1ED291D7937072EB50DC5.crl (hash: m58Lv/GTGdFCJaex4qvDFdnvk6cAmh9vBiln6AFadIc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:90:85:ab:e6:63:52:4c:38:17:b1:c6:9e:00:97:1a:d1:6c:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32857E62250C763037D1ED291D7937072EB50DC5 Validity Not Before: May 12 01:34:04 2026 GMT Not After : May 13 05:28:04 2026 GMT Subject: CN=1D2AB84C2B3B6884E2414B9E68408F15C1CA41F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:ad:c6:c5:36:45:c3:75:f2:c9:2a:4b:49: 11:9d:f1:25:1a:4d:4d:cf:f7:cb:11:07:c6:4b:65: ed:1a:10:68:61:d6:7c:0f:b5:32:87:17:15:75:ff: 14:8b:ac:51:1c:42:42:18:42:5d:3f:10:22:ce:9f: 92:b5:d6:bc:19:bf:c5:29:6c:4d:29:d9:da:2d:e9: 15:19:8b:70:db:13:f6:a2:7e:27:cd:0d:5d:8c:18: d7:3e:ed:f5:46:74:1e:72:f4:84:20:31:c5:01:83: bf:9e:9f:d3:00:68:59:43:ba:33:2f:c3:48:bd:4f: e0:53:94:47:0c:67:99:d5:f5:31:88:62:b7:86:7a: 5e:22:f7:fe:b6:c7:a7:74:b0:be:f0:9d:9b:99:3c: 59:b5:0e:d6:ea:a6:f8:53:5c:f4:68:8a:74:fc:bb: ac:f4:95:5b:c5:c1:8c:b1:f6:d3:6c:b2:27:59:5a: bf:6e:c9:1e:91:44:d4:43:59:d6:08:ba:81:d7:7f: f6:c7:14:7b:08:e1:45:9f:3c:2f:a3:e1:01:12:57: c5:3c:1d:25:3b:0b:8d:11:7f:77:d5:c6:74:fa:28: ab:38:4d:d1:85:e9:ee:ae:48:84:f7:5f:74:12:d8: 74:2d:a8:ee:13:12:8e:06:03:8e:9e:48:f4:14:c6: 43:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2A:B8:4C:2B:3B:68:84:E2:41:4B:9E:68:40:8F:15:C1:CA:41:F0 X509v3 Authority Key Identifier: keyid:32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:17:a2:59:fe:6e:fa:4f:4a:25:3f:ae:32:c3:a6:42:a7:65: 1e:3f:3d:22:dc:1d:db:b1:7a:e5:8d:99:d7:08:ca:54:da:70: 6a:89:12:a4:10:f3:91:e5:0a:9b:43:0e:a1:92:7d:fe:b2:9e: e7:de:80:29:16:ca:43:fd:33:5d:41:fc:9a:b8:7d:c2:e3:81: 99:ce:80:ee:4e:c2:a7:93:43:c8:bf:5f:b9:ce:3d:74:cf:45: 5c:ed:ae:50:6c:b6:cd:0a:ce:2a:1d:0d:ea:a0:d3:58:9d:23: 6a:d2:4b:a3:cd:43:59:22:4d:80:4b:7c:47:9b:dc:1e:6d:82: 5e:a1:10:d3:f7:53:4b:b6:ae:ab:b0:66:b0:f0:71:78:fb:c7: 82:5f:a4:c2:9a:ab:cd:97:01:6c:2f:a9:ca:da:c0:4f:a2:13: f2:b4:13:7a:29:3f:48:45:31:c7:08:a4:0d:5f:39:b9:1f:6a: a1:1e:f3:b5:c0:55:5c:6b:5c:1c:5c:e7:a5:f5:73:5f:b0:d6: aa:c0:6e:1a:d5:b0:04:c6:00:fe:63:e8:90:6a:22:de:f4:a1: fc:78:5a:07:e6:c7:ce:94:7d:46:25:20:56:3e:a9:6c:5d:a1: 86:69:28:32:75:cb:e9:40:8e:8b:51:d5:fc:78:0f:93:cd:c7: 0b:77:a7:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5CFq+ZjUkw4F7HGngCXGtFsfmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcy RUI1MERDNTAeFw0yNjA1MTIwMTM0MDRaFw0yNjA1MTMwNTI4MDRaMDMxMTAvBgNV BAMTKDFEMkFCODRDMkIzQjY4ODRFMjQxNEI5RTY4NDA4RjE1QzFDQTQxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhcq3GxTZFw3XyySpLSRGd8SUa TU3P98sRB8ZLZe0aEGhh1nwPtTKHFxV1/xSLrFEcQkIYQl0/ECLOn5K11rwZv8Up bE0p2dot6RUZi3DbE/aififNDV2MGNc+7fVGdB5y9IQgMcUBg7+en9MAaFlDujMv w0i9T+BTlEcMZ5nV9TGIYreGel4i9/62x6d0sL7wnZuZPFm1DtbqpvhTXPRoinT8 u6z0lVvFwYyx9tNssidZWr9uyR6RRNRDWdYIuoHXf/bHFHsI4UWfPC+j4QESV8U8 HSU7C40Rf3fVxnT6KKs4TdGF6e6uSIT3X3QS2HQtqO4TEo4GA46eSPQUxkOlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHSq4TCs7aITiQUueaECPFcHKQfAwHwYDVR0j BBgwFoAUMoV+YiUMdjA30e0pHXk3By61DcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWQwMTItYWZkYi00MmZiLTk3MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIy NTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcyRUI1MERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1N0U2MjI1MEM3NjMwMzdEMUVEMjkxRDc5MzcwNzJFQjUw REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3 MDcyRUI1MERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYXoln+bvpPSiU/rjLDpkKnZR4/PSLcHdux euWNmdcIylTacGqJEqQQ85HlCptDDqGSff6ynufegCkWykP9M11B/Jq4fcLjgZnO gO5OwqeTQ8i/X7nOPXTPRVztrlBsts0KziodDeqg01idI2rSS6PNQ1kiTYBLfEeb 3B5tgl6hENP3U0u2rquwZrDwcXj7x4JfpMKaq82XAWwvqcrawE+iE/K0E3opP0hF MccIpA1fObkfaqEe87XAVVxrXBxc56X1c1+w1qrAbhrVsATGAP5j6JBqIt70ofx4 Wgfmx86UfUYlIFY+qWxdoYZpKDJ1y+lAjotR1fx4D5PNxwt3p+s= -----END CERTIFICATE-----Generated at Tue May 12 22:47:02 2026 by rpki-client