$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft File: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json) Hash identifier: 1TKlBHtWwwFSs+lz0ucC+Oi2pn7OckiDFablGM2RXs4= Subject key identifier: C3:37:EF:02:88:9D:24:ED:46:A1:D6:41:97:0E:51:95:B5:2F:59:13 Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Certificate serial: 208DEA3EEAE1FC4F2A985CE93475CF0A8EA32FE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 15:29:56 +0000 Manifest this update: Thu 24 Sep 2026 15:24:56 +0000 Manifest next update: Fri 25 Sep 2026 16:46:56 +0000 Files and hashes: 1: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: Qkf2Ng1F78t/m59CsBV+J9HhL2zOv4oggPFcgSUOH9A=) 2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8d:ea:3e:ea:e1:fc:4f:2a:98:5c:e9:34:75:cf:0a:8e:a3:2f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Validity Not Before: Sep 24 15:24:56 2026 GMT Not After : Sep 25 16:46:56 2026 GMT Subject: CN=C337EF02889D24ED46A1D641970E5195B52F5913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1f:61:cf:4d:f2:e9:8e:a8:8b:51:4a:5d:96: 49:d1:18:0a:d3:0a:f3:89:52:86:95:25:42:f0:5c: 54:0b:3a:19:a5:c4:04:62:fd:ab:97:82:3d:45:ac: 86:6d:5d:da:6d:18:0d:c2:27:53:41:16:6f:d6:33: f4:c0:08:14:44:3c:f6:67:22:75:9c:1c:88:97:4f: d9:41:85:59:07:0c:76:63:9a:e2:be:87:ba:43:a5: e2:1c:26:82:6c:83:98:7e:5b:fc:0c:0a:56:a4:4b: 9c:58:2e:8b:4f:79:c0:38:08:58:e3:f8:a9:e8:a1: 43:c3:ce:62:f6:c4:f3:5f:6d:0f:ad:22:ed:7e:2b: f1:4e:d9:60:62:0f:c2:4a:ae:43:a5:96:3e:9a:de: 59:f2:7a:1f:1a:5e:34:5f:36:ef:aa:08:79:65:1a: ee:10:af:b0:21:7f:d3:0f:a4:3f:b3:f5:be:9f:23: 02:ae:99:0f:7b:64:58:d2:9b:67:20:cd:a6:cd:b2: 56:22:db:cc:dc:46:06:76:50:92:cb:10:f5:43:36: 41:d7:93:e5:3d:87:e7:9a:ac:03:4f:c6:54:7d:74: 49:73:31:f1:d0:87:e4:52:c2:3d:96:e0:6f:27:3e: 91:b8:cc:28:6e:e1:f0:3a:e8:a5:cf:4b:a9:50:98: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:37:EF:02:88:9D:24:ED:46:A1:D6:41:97:0E:51:95:B5:2F:59:13 X509v3 Authority Key Identifier: keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:eb:63:2a:51:93:8f:90:46:e4:9e:ad:79:98:b2:52:79:f7: ee:51:98:6d:71:ca:63:7e:f9:ff:8a:62:80:21:b5:d4:7c:11: 4e:20:7d:f9:09:46:ac:58:84:bb:96:1e:92:de:37:d8:97:69: df:cb:b8:89:2c:a6:9a:00:df:f6:68:5a:b6:b1:af:fa:c2:32: 5c:5e:86:6b:60:24:5a:f4:67:29:ab:b8:e9:97:1c:64:9e:a9: 9a:c0:aa:cb:52:4f:7b:f2:a8:27:4f:38:e7:4c:cc:47:d8:a3: d0:ed:9e:b9:17:f9:80:b8:f6:86:38:15:47:36:a7:bf:ac:f2: 9e:a0:f9:5e:ef:73:73:45:82:24:d7:c6:c1:05:38:ab:35:b4: 04:38:59:cf:43:2d:ee:33:08:5b:04:5b:03:05:c9:35:45:01: a3:97:c7:11:90:0a:2d:b3:c2:48:a1:5b:e6:b3:e3:2a:b3:db: 1f:f0:f3:08:92:d3:cc:bc:e5:f0:8a:37:2a:bc:43:e0:8a:bf: b7:f0:93:6f:f7:37:80:fe:7b:69:34:3d:14:70:f3:40:1a:40: f9:e7:26:03:19:1a:e2:1a:bd:e1:96:49:df:e0:6a:32:1a:f6: b1:87:5d:b9:42:fe:17:1f:46:d5:95:e6:09:2f:4f:df:08:7b: 4f:94:ea:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUII3qPurh/E8qmFzpNHXPCo6jL+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYy RjNBOEREMTAeFw0yNjA5MjQxNTI0NTZaFw0yNjA5MjUxNjQ2NTZaMDMxMTAvBgNV BAMTKEMzMzdFRjAyODg5RDI0RUQ0NkExRDY0MTk3MEU1MTk1QjUyRjU5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOH2HPTfLpjqiLUUpdlknRGArT CvOJUoaVJULwXFQLOhmlxARi/auXgj1FrIZtXdptGA3CJ1NBFm/WM/TACBREPPZn InWcHIiXT9lBhVkHDHZjmuK+h7pDpeIcJoJsg5h+W/wMClakS5xYLotPecA4CFjj +KnooUPDzmL2xPNfbQ+tIu1+K/FO2WBiD8JKrkOllj6a3lnyeh8aXjRfNu+qCHll Gu4Qr7Ahf9MPpD+z9b6fIwKumQ97ZFjSm2cgzabNslYi28zcRgZ2UJLLEPVDNkHX k+U9h+earANPxlR9dElzMfHQh+RSwj2W4G8nPpG4zChu4fA66KXPS6lQmMh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwzfvAoidJO1GodZBlw5RlbUvWRMwHwYDVR0j BBgwFoAUgy8C4UAkMGwwZVenHgv6Ly86jdEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwZmExNGEtYWFhYy00MGY0LTljODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0 MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYyRjNBOEREMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzJGMDJFMTQwMjQzMDZDMzA2NTU3QTcxRTBCRkEyRjJGM0E4 REQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZB MkYyRjNBOEREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/rYypRk4+QRuSerXmYslJ59+5RmG1xymN+ +f+KYoAhtdR8EU4gffkJRqxYhLuWHpLeN9iXad/LuIksppoA3/ZoWraxr/rCMlxe hmtgJFr0ZymruOmXHGSeqZrAqstST3vyqCdPOOdMzEfYo9DtnrkX+YC49oY4FUc2 p7+s8p6g+V7vc3NFgiTXxsEFOKs1tAQ4Wc9DLe4zCFsEWwMFyTVFAaOXxxGQCi2z wkihW+az4yqz2x/w8wiS08y85fCKNyq8Q+CKv7fwk2/3N4D+e2k0PRRw80AaQPnn JgMZGuIaveGWSd/gajIa9rGHXblC/hcfRtWV5gkvT98Ie0+U6jA= -----END CERTIFICATE-----Generated at Thu Sep 24 20:09:03 2026 by rpki-client