$ rpki-client -vvvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft File: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft (raw, json) Hash identifier: cUSWQ7CcKpfDvMBUvPbFWf+Skj8x1B66Wl66w+By9Rk= Subject key identifier: 68:B3:66:03:7B:FC:20:EB:62:26:48:83:9E:D8:90:B9:4E:F2:4F:2B Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Certificate serial: 70131B2EBF1B4789CD9647BA3B49E8992C163897 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 05:17:32 +0000 Manifest this update: Wed 23 Sep 2026 05:12:32 +0000 Manifest next update: Thu 24 Sep 2026 06:03:32 +0000 Files and hashes: 1: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl (hash: pCAekLKqmPr70uXULQy8Jblk7zKgx28Tw5Lm+eoMDNs=) 2: 3130332e3132392e3135322e302f32342d3234203d3e20313338303635.roa (hash: hrqst1riYBHBOimxTLlvZyjkc9izcyyKFw/2744oA1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:13:1b:2e:bf:1b:47:89:cd:96:47:ba:3b:49:e8:99:2c:16:38:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Validity Not Before: Sep 23 05:12:32 2026 GMT Not After : Sep 24 06:03:32 2026 GMT Subject: CN=68B366037BFC20EB622648839ED890B94EF24F2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:0f:95:79:e4:bd:bc:e9:0f:52:ca:1c:d5: dc:c3:06:f8:47:9a:f9:56:ea:9a:0d:46:07:e3:a7: c7:3b:5d:65:c1:45:48:78:b8:f0:c4:44:df:ff:4b: 72:b9:b5:06:98:ee:b8:c8:69:d7:69:18:a2:6f:7b: 14:c4:d3:6e:98:71:eb:14:5d:c5:75:97:57:8f:3e: ba:0c:ea:16:70:aa:41:32:31:ee:0f:9f:93:41:b7: d7:0d:d4:08:54:48:da:85:a3:63:a0:71:69:72:de: 0f:90:d1:d1:c2:dd:29:1d:1f:4c:ba:27:2e:c0:f3: e5:20:86:fd:01:58:9e:94:3e:df:8e:5c:83:35:24: 9c:a9:47:d1:d0:9a:b0:de:93:99:db:b3:bb:e8:05: 60:ce:7e:42:4b:38:9a:19:ae:d1:db:ea:c4:c1:56: a8:41:dc:ef:82:89:08:18:f3:df:a6:4d:10:6e:e5: 90:64:69:d4:7b:64:3c:16:5a:04:09:7a:35:b6:2a: 21:0b:8d:6c:f2:eb:7f:04:86:2c:f2:db:f6:85:67: c1:7b:2c:d6:18:e9:74:a5:6e:9d:ec:f5:6f:bd:e2: e0:52:4f:2a:7c:71:35:f2:af:35:82:69:c7:eb:b0: 5e:ae:23:57:ac:24:83:6e:25:56:23:17:5e:30:ad: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B3:66:03:7B:FC:20:EB:62:26:48:83:9E:D8:90:B9:4E:F2:4F:2B X509v3 Authority Key Identifier: keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:29:99:b8:6f:81:d4:4f:2c:53:37:4f:e6:64:31:8b:eb:06: 4c:3b:47:bb:c8:c1:84:81:a8:ce:f9:30:50:fa:6a:05:87:e7: d1:01:df:6b:01:60:da:f8:69:8b:8e:28:98:04:98:a9:e8:4b: 06:b0:43:47:5a:20:d4:2c:bb:4b:88:33:d8:61:5b:5f:8f:5c: 9e:22:db:c4:fa:65:3c:d4:4b:71:80:26:3c:d6:16:c8:85:5c: 36:57:54:a5:68:d4:cc:39:81:e4:ac:2c:85:72:73:ec:fa:e8: f3:ed:5e:fb:1a:21:1f:c0:7f:a0:9f:57:36:2b:67:56:1a:43: fd:4c:e8:79:0f:90:7d:40:24:8a:54:23:7c:2b:23:8a:49:e7: 68:6b:05:9c:07:f7:49:83:5c:35:89:8e:74:d7:2d:67:aa:e9: fb:b7:6d:ee:c0:05:3e:cd:e9:ac:49:5a:02:c3:aa:98:f3:08: 59:81:13:b5:94:c6:75:0e:1c:e8:03:9d:c4:80:0c:18:9e:71: b0:fc:e7:81:b8:83:95:a9:86:54:79:f7:92:a1:fc:cb:60:f4: 4f:99:47:8b:f2:46:3f:bf:56:7e:65:aa:78:59:c5:3f:7c:70: 0b:5b:1a:a0:66:3d:64:49:f2:ec:90:3f:05:0b:c1:07:9e:cb: e4:c7:96:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBMbLr8bR4nNlke6O0nomSwWOJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND QUQ4MTg5MTAeFw0yNjA5MjMwNTEyMzJaFw0yNjA5MjQwNjAzMzJaMDMxMTAvBgNV BAMTKDY4QjM2NjAzN0JGQzIwRUI2MjI2NDg4MzlFRDg5MEI5NEVGMjRGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwA+VeeS9vOkPUsoc1dzDBvhH mvlW6poNRgfjp8c7XWXBRUh4uPDERN//S3K5tQaY7rjIaddpGKJvexTE026YcesU XcV1l1ePProM6hZwqkEyMe4Pn5NBt9cN1AhUSNqFo2OgcWly3g+Q0dHC3SkdH0y6 Jy7A8+Ughv0BWJ6UPt+OXIM1JJypR9HQmrDek5nbs7voBWDOfkJLOJoZrtHb6sTB VqhB3O+CiQgY89+mTRBu5ZBkadR7ZDwWWgQJejW2KiELjWzy638Ehizy2/aFZ8F7 LNYY6XSlbp3s9W+94uBSTyp8cTXyrzWCacfrsF6uI1esJINuJVYjF14wraO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaLNmA3v8IOtiJkiDntiQuU7yTyswHwYDVR0j BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2 MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx ODkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQw RENDQUQ4MTg5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkpmbhvgdRPLFM3T+ZkMYvrBkw7R7vIwYSB qM75MFD6agWH59EB32sBYNr4aYuOKJgEmKnoSwawQ0daINQsu0uIM9hhW1+PXJ4i 28T6ZTzUS3GAJjzWFsiFXDZXVKVo1Mw5geSsLIVyc+z66PPtXvsaIR/Af6CfVzYr Z1YaQ/1M6HkPkH1AJIpUI3wrI4pJ52hrBZwH90mDXDWJjnTXLWeq6fu3be7ABT7N 6axJWgLDqpjzCFmBE7WUxnUOHOgDncSADBiecbD854G4g5WphlR595Kh/Mtg9E+Z R4vyRj+/Vn5lqnhZxT98cAtbGqBmPWRJ8uyQPwULwQeey+THlmo= -----END CERTIFICATE-----Generated at Wed Sep 23 20:19:19 2026 by rpki-client