$ rpki-client -vvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft File: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json) Hash identifier: 5zjKV4JOz6FuQJWcUUpY9EUq74Jr2mFTp+A/bBVq7fw= Subject key identifier: D9:53:DC:84:64:D6:0C:8E:61:0E:D4:2B:B2:A1:8D:3C:71:22:EA:B9 Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Certificate serial: 7A6C584AF3D7499D7C76129B468E67560DBFABDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:27:16 +0000 Manifest this update: Tue 12 May 2026 17:22:16 +0000 Manifest next update: Wed 13 May 2026 19:22:16 +0000 Files and hashes: 1: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: jpb8Z4MonwSUECX/VOsA+hbRvIn/b7+sYrvMg2azy6s=) 2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6c:58:4a:f3:d7:49:9d:7c:76:12:9b:46:8e:67:56:0d:bf:ab:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Validity Not Before: May 12 17:22:16 2026 GMT Not After : May 13 19:22:16 2026 GMT Subject: CN=D953DC8464D60C8E610ED42BB2A18D3C7122EAB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:24:0d:58:2f:74:30:07:78:bf:63:83:da:b0: ba:e0:f2:15:50:27:c3:f6:00:96:7a:ff:3d:f9:a2: 44:2f:9c:db:a6:95:06:08:b7:82:0c:97:e3:57:f7: a2:0a:41:64:5c:ef:dc:89:f7:fa:d9:65:90:68:4d: 44:4c:81:8f:a6:58:50:8c:fe:15:26:64:d2:5c:dc: 4b:8b:cb:eb:25:d8:e7:e5:d6:69:20:cb:44:7b:e8: 92:5d:94:37:d6:e9:c3:7e:3f:ae:f9:da:7d:e8:af: 9a:09:4c:e9:b4:29:ac:48:06:7e:9f:3d:3c:52:36: 99:f0:80:79:ef:43:c5:92:b0:ec:69:52:f4:6a:ea: 55:ce:b9:96:10:4d:7b:6d:37:a0:b7:aa:1e:8f:41: ae:1b:61:ef:de:d5:6b:20:a7:e9:c0:83:23:a4:b3: 00:23:ac:a9:5e:99:86:be:bc:41:8b:7e:2c:d0:e7: 93:3c:75:b6:b3:5f:da:b9:f7:3d:43:14:1f:7d:d4: a8:58:24:dd:91:c3:a3:41:61:29:38:c9:25:48:cc: 12:2f:06:ea:e2:92:27:3d:14:b4:99:3b:7c:b0:9c: 20:c6:93:5b:cf:5b:df:e6:f0:e4:e2:a6:22:67:bc: 05:f4:7a:9d:eb:5a:8b:5f:9c:3d:cc:82:c2:36:b3: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:53:DC:84:64:D6:0C:8E:61:0E:D4:2B:B2:A1:8D:3C:71:22:EA:B9 X509v3 Authority Key Identifier: keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fd:2b:e1:fd:54:d4:a2:1c:a7:58:ac:11:73:d2:2d:65:14: 53:35:32:61:ed:ca:74:2f:3d:a5:f7:a9:28:ee:9e:b6:78:df: 65:b7:d7:9b:f0:6c:3f:ca:43:d3:87:73:d9:c4:5e:f0:f9:d9: 9d:2f:6f:09:7a:2a:d9:87:36:c6:69:d0:1c:e7:eb:fc:17:fd: c0:86:f4:72:9b:e0:fa:66:c0:09:65:cc:85:42:ea:2d:e4:22: 03:54:f3:b2:de:7d:cd:7d:7b:f1:14:f9:d3:2e:35:72:3b:39: 5b:dc:1e:44:9c:af:26:f1:69:73:4b:94:c9:96:5e:49:b0:79: b5:f4:f6:b1:47:d4:23:08:0c:d5:88:73:1b:ee:ce:75:71:f6: 71:e8:6b:45:88:5d:4e:09:96:0a:d4:dc:f2:69:66:3b:1c:a2: 53:22:07:1a:f1:d0:05:71:77:17:2a:16:b9:6b:b3:9d:6b:e9: aa:f8:17:d2:a2:ce:24:cb:27:01:14:e9:6e:f5:be:06:95:37: b8:d0:e8:ff:a7:e3:07:f8:0e:6e:dc:d2:db:27:2d:8f:dc:24: 64:79:ed:c3:7d:a1:86:60:41:df:12:2d:5c:f5:91:71:22:92: 0b:30:cc:65:14:c5:98:95:b2:86:1b:3a:e1:fd:cb:53:54:92: a9:4a:e9:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemxYSvPXSZ18dhKbRo5nVg2/q9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYy RjNBOEREMTAeFw0yNjA1MTIxNzIyMTZaFw0yNjA1MTMxOTIyMTZaMDMxMTAvBgNV BAMTKEQ5NTNEQzg0NjRENjBDOEU2MTBFRDQyQkIyQTE4RDNDNzEyMkVBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVJA1YL3QwB3i/Y4PasLrg8hVQ J8P2AJZ6/z35okQvnNumlQYIt4IMl+NX96IKQWRc79yJ9/rZZZBoTURMgY+mWFCM /hUmZNJc3EuLy+sl2Ofl1mkgy0R76JJdlDfW6cN+P6752n3or5oJTOm0KaxIBn6f PTxSNpnwgHnvQ8WSsOxpUvRq6lXOuZYQTXttN6C3qh6PQa4bYe/e1Wsgp+nAgyOk swAjrKlemYa+vEGLfizQ55M8dbazX9q59z1DFB991KhYJN2Rw6NBYSk4ySVIzBIv Burikic9FLSZO3ywnCDGk1vPW9/m8OTipiJnvAX0ep3rWotfnD3MgsI2s8bVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2VPchGTWDI5hDtQrsqGNPHEi6rkwHwYDVR0j BBgwFoAUgy8C4UAkMGwwZVenHgv6Ly86jdEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwZmExNGEtYWFhYy00MGY0LTljODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0 MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYyRjNBOEREMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzJGMDJFMTQwMjQzMDZDMzA2NTU3QTcxRTBCRkEyRjJGM0E4 REQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZB MkYyRjNBOEREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB79K+H9VNSiHKdYrBFz0i1lFFM1MmHtynQv PaX3qSjunrZ432W315vwbD/KQ9OHc9nEXvD52Z0vbwl6KtmHNsZp0Bzn6/wX/cCG 9HKb4PpmwAllzIVC6i3kIgNU87Lefc19e/EU+dMuNXI7OVvcHkScrybxaXNLlMmW XkmwebX09rFH1CMIDNWIcxvuznVx9nHoa0WIXU4JlgrU3PJpZjscolMiBxrx0AVx dxcqFrlrs51r6ar4F9KiziTLJwEU6W71vgaVN7jQ6P+n4wf4Dm7c0tsnLY/cJGR5 7cN9oYZgQd8SLVz1kXEikgswzGUUxZiVsoYbOuH9y1NUkqlK6bQ= -----END CERTIFICATE-----Generated at Tue May 12 22:19:33 2026 by rpki-client