$ rpki-client -vvvf rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft File: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft (raw, json) Hash identifier: 9jylstLSjdbJ1lnC9DpKDlnmdQWgU0H2KJmTzsfLidM= Subject key identifier: 81:7D:D7:3C:00:C8:16:35:B5:D2:C3:3A:C9:12:BD:4C:60:71:BC:62 Authority key identifier: 32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 Certificate issuer: /CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Certificate serial: 4DB7E62E98529F23BBE02557AFF25358908117E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 13:53:08 +0000 Manifest this update: Thu 24 Sep 2026 13:48:08 +0000 Manifest next update: Fri 25 Sep 2026 14:21:08 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: Uh5y0YtfY7V2qTdTkRsIfNJf6g7Mb5/NMceYo7geuVc=) 2: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl (hash: mYvsFo9315f6qiqSBtm7g9E+XrKhVg6EXf6E+kuRz2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b7:e6:2e:98:52:9f:23:bb:e0:25:57:af:f2:53:58:90:81:17:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Validity Not Before: Sep 24 13:48:08 2026 GMT Not After : Sep 25 14:21:08 2026 GMT Subject: CN=817DD73C00C81635B5D2C33AC912BD4C6071BC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5f:6c:ea:9c:44:d6:7a:44:66:93:ca:9d:47: 76:6d:7b:90:74:b6:39:bd:14:7e:51:1b:72:21:ee: 85:3a:2d:cc:14:b6:4b:f9:2e:6c:69:b2:8f:87:fc: 9e:09:60:c6:57:b3:9a:6e:86:1a:cc:b2:e2:45:32: 10:1e:30:cf:ed:7f:6f:2d:c8:fe:72:03:a4:47:d6: f2:0a:07:3f:fb:74:a4:e2:c7:5d:c7:a0:74:5e:8e: c0:8a:af:a0:b2:b6:a4:2a:e9:66:9c:df:c9:83:4c: d4:39:b1:35:4d:69:9b:50:b4:8a:57:56:51:c9:70: 83:41:5c:01:5d:73:88:93:57:13:3d:58:bd:a2:bd: 55:6a:13:c2:da:90:ce:33:1d:1b:b7:05:62:3f:57: b3:f3:fa:6f:85:04:1b:aa:fc:97:e1:88:b2:0c:c9: b2:dd:03:c8:7e:85:b8:b1:82:af:d3:ed:06:14:7f: cc:3a:54:4a:79:23:60:00:38:7d:22:75:61:4d:e6: a9:56:5f:50:7b:81:5a:9b:cc:98:16:cd:2a:3c:49: bd:64:45:85:6b:ab:08:5a:ae:8a:51:a4:83:64:b8: 52:a4:04:e7:0b:34:1b:98:b8:c5:40:20:bc:b6:ab: 13:65:d6:00:a4:5c:51:3a:c6:61:6a:90:f6:d6:c2: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7D:D7:3C:00:C8:16:35:B5:D2:C3:3A:C9:12:BD:4C:60:71:BC:62 X509v3 Authority Key Identifier: keyid:32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:55:a4:fc:3b:8d:7f:4c:61:29:4f:12:10:f5:da:b5:8d:23: cd:fe:0b:48:84:ee:f6:6b:54:21:ae:d7:b9:78:86:0c:36:61: d6:d4:37:38:e7:ad:53:d2:e1:d5:ad:ea:2c:71:13:fd:3e:5d: c9:47:84:2c:10:b2:92:11:3b:7e:fe:f0:04:7a:db:ef:32:9f: 5d:69:aa:45:90:7b:2f:60:55:dc:ec:bb:f5:f6:a5:a0:62:5a: 53:8f:1b:c4:46:8d:59:bd:05:43:dc:9e:31:0d:78:90:5a:58: bf:8d:cd:55:9d:08:b8:b6:8d:7d:ca:1c:ef:8d:53:28:60:96: 64:a1:55:e1:65:cc:70:5f:21:28:2a:e7:1a:37:68:b1:41:e4: d5:86:fc:6d:25:4d:28:88:e4:f0:94:e4:f9:07:8b:4a:51:22: 5a:2f:4a:11:02:93:83:d5:ca:d3:2d:b3:0d:50:2e:61:bc:af: ad:d5:b3:05:2b:ec:d0:bf:ab:bb:62:65:f2:75:c1:73:60:82: 76:f5:d8:44:99:cb:a4:c5:dc:b8:c4:08:5f:01:23:40:df:50: 0a:b2:90:44:1b:1b:b5:17:d0:08:55:30:62:fe:a9:80:d1:62: c9:be:77:c3:bb:ab:54:f0:6c:83:47:1f:39:3e:53:39:58:0a: 25:0e:a0:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbfmLphSnyO74CVXr/JTWJCBF+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0 RDcyQjMyNjAeFw0yNjA5MjQxMzQ4MDhaFw0yNjA5MjUxNDIxMDhaMDMxMTAvBgNV BAMTKDgxN0RENzNDMDBDODE2MzVCNUQyQzMzQUM5MTJCRDRDNjA3MUJDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrX2zqnETWekRmk8qdR3Zte5B0 tjm9FH5RG3Ih7oU6LcwUtkv5Lmxpso+H/J4JYMZXs5puhhrMsuJFMhAeMM/tf28t yP5yA6RH1vIKBz/7dKTix13HoHRejsCKr6CytqQq6Wac38mDTNQ5sTVNaZtQtIpX VlHJcINBXAFdc4iTVxM9WL2ivVVqE8LakM4zHRu3BWI/V7Pz+m+FBBuq/JfhiLIM ybLdA8h+hbixgq/T7QYUf8w6VEp5I2AAOH0idWFN5qlWX1B7gVqbzJgWzSo8Sb1k RYVrqwharopRpINkuFKkBOcLNBuYuMVAILy2qxNl1gCkXFE6xmFqkPbWwjrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgX3XPADIFjW10sM6yRK9TGBxvGIwHwYDVR0j BBgwFoAUMrpq7FHqIUu0t0L64uw/DE1ysyYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODExZDlhYmMtNDk4Ny00ZGJjLTk3NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1 MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0RDcyQjMyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkJBNkFFQzUxRUEyMTRCQjRCNzQyRkFFMkVDM0YwQzRENzJC MzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNG MEM0RDcyQjMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNVpPw7jX9MYSlPEhD12rWNI83+C0iE7vZr VCGu17l4hgw2YdbUNzjnrVPS4dWt6ixxE/0+XclHhCwQspIRO37+8AR62+8yn11p qkWQey9gVdzsu/X2paBiWlOPG8RGjVm9BUPcnjENeJBaWL+NzVWdCLi2jX3KHO+N UyhglmShVeFlzHBfISgq5xo3aLFB5NWG/G0lTSiI5PCU5PkHi0pRIlovShECk4PV ytMtsw1QLmG8r63VswUr7NC/q7tiZfJ1wXNggnb12ESZy6TF3LjECF8BI0DfUAqy kEQbG7UX0AhVMGL+qYDRYsm+d8O7q1TwbINHHzk+UzlYCiUOoL8= -----END CERTIFICATE-----Generated at Fri Sep 25 04:49:50 2026 by rpki-client