$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft File: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft (raw, json) Hash identifier: kzWJSDDHCGMhaweDTi0w76a/8v6oyHZPPlWRy4+NQdk= Subject key identifier: 87:5D:7A:A1:11:3B:AA:67:8D:CF:8E:61:3B:D0:85:65:03:EA:24:2D Authority key identifier: 32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3 Certificate issuer: /CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3 Certificate serial: 7A1730B7716F1F06F017EADA85E116AD80704CFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:36:24 +0000 Manifest this update: Thu 24 Sep 2026 08:31:24 +0000 Manifest next update: Fri 25 Sep 2026 09:43:24 +0000 Files and hashes: 1: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: AerViwEwX6M35LdYkw1W6Rm917nFOVWmFQ/wALZRWuI=) 2: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl (hash: 6mmMbliqxegsVtXrLUumw2q2IQltSDGsDQX4H7OfboY=) 3: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: IlwLW0g7keiKYblC08y+Cdk30ZDG31NiX8oDu4ZTBVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:17:30:b7:71:6f:1f:06:f0:17:ea:da:85:e1:16:ad:80:70:4c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3 Validity Not Before: Sep 24 08:31:24 2026 GMT Not After : Sep 25 09:43:24 2026 GMT Subject: CN=875D7AA1113BAA678DCF8E613BD0856503EA242D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fa:6f:a4:e6:1a:65:fb:41:2a:ba:43:8e:7a: 37:97:0f:51:bf:99:1c:b8:a7:02:02:1b:cb:7e:5d: df:3b:4d:bb:52:8b:6a:de:32:65:4a:24:69:0e:18: 9c:1c:67:5e:96:d2:b9:f3:54:2a:42:1d:c9:d2:c0: d3:b5:f0:74:7e:c2:77:2c:d1:d3:f4:5c:99:4e:5e: ae:ff:d6:62:9d:97:5b:15:5a:47:0f:da:6d:7c:a1: f2:ea:9e:bf:f1:95:b7:6c:20:b7:bd:8c:5b:fc:f6: 71:c5:c6:f6:af:ac:4e:e9:24:3f:6d:99:33:1a:2d: 5c:c6:68:66:0e:35:66:2d:97:64:85:f7:8b:5d:83: 9d:cc:aa:5d:30:da:20:dc:52:58:96:87:89:2e:52: 87:c4:b4:27:d4:09:4b:41:50:98:98:0c:20:5a:2e: b6:c3:c2:d2:4e:fd:2e:eb:62:84:42:00:5e:be:d7: 9a:60:29:cf:1d:eb:2f:26:b9:da:33:ac:8a:a5:54: a0:0e:f5:bc:a6:e5:80:09:f4:9e:35:64:78:8e:df: 45:0f:5f:8b:78:e8:27:7e:14:5e:48:e6:ab:96:39: 8b:54:34:75:87:8b:e3:bf:83:ba:e4:76:7c:36:d9: b0:6d:4e:54:c6:a6:5c:d8:c4:40:8a:57:6d:45:ac: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:7A:A1:11:3B:AA:67:8D:CF:8E:61:3B:D0:85:65:03:EA:24:2D X509v3 Authority Key Identifier: keyid:32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a5:36:5a:cb:ed:4e:62:34:b0:22:4f:79:1b:13:fa:f5:75: 11:06:30:84:ee:3d:22:e4:17:0e:0b:34:29:18:ac:c5:6c:a9: 4f:99:13:db:93:e1:24:f4:8f:4f:4a:1a:3a:25:67:21:f9:a4: 38:9c:d1:a5:eb:48:69:13:77:c4:da:09:ae:3a:ac:70:49:a2: 1d:39:fb:3b:48:d3:f0:a2:91:ef:0d:b8:a5:35:46:7a:53:35: da:30:58:cb:af:22:71:76:66:8f:70:69:10:29:2e:e7:9a:86: dd:5f:6a:90:60:30:1a:10:69:0a:83:ae:39:c8:c9:2a:84:12: 1a:bf:ab:97:bc:da:fb:4c:61:04:54:57:7b:e2:14:13:a3:ac: 67:4c:d6:dc:08:d2:dc:f4:ba:a5:1b:2f:36:2c:e6:eb:9d:82: d7:0a:27:0a:73:ea:35:06:7e:01:cd:0b:22:72:02:ac:5f:09: b9:88:43:75:2d:db:b5:b1:60:d3:01:fd:4e:91:20:cc:df:07: fd:c9:36:d6:1f:37:19:ce:f1:0f:7f:99:f0:16:58:49:d1:fe: 4b:c0:6e:aa:ad:e8:66:ef:c3:cd:c4:97:78:54:ce:2b:c1:34: 9a:93:a1:73:ef:1d:71:51:a3:db:a9:fb:ec:52:a0:97:b6:27: 03:61:99:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUehcwt3FvHwbwF+raheEWrYBwTPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRC Q0M3RUVGMzAeFw0yNjA5MjQwODMxMjRaFw0yNjA5MjUwOTQzMjRaMDMxMTAvBgNV BAMTKDg3NUQ3QUExMTEzQkFBNjc4RENGOEU2MTNCRDA4NTY1MDNFQTI0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX+m+k5hpl+0EqukOOejeXD1G/ mRy4pwICG8t+Xd87TbtSi2reMmVKJGkOGJwcZ16W0rnzVCpCHcnSwNO18HR+wncs 0dP0XJlOXq7/1mKdl1sVWkcP2m18ofLqnr/xlbdsILe9jFv89nHFxvavrE7pJD9t mTMaLVzGaGYONWYtl2SF94tdg53Mql0w2iDcUliWh4kuUofEtCfUCUtBUJiYDCBa LrbDwtJO/S7rYoRCAF6+15pgKc8d6y8mudozrIqlVKAO9bym5YAJ9J41ZHiO30UP X4t46Cd+FF5I5quWOYtUNHWHi+O/g7rkdnw22bBtTlTGplzYxECKV21FrPj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh116oRE7qmeNz45hO9CFZQPqJC0wHwYDVR0j BBgwFoAUMsQIaSUM6WBuBcFbabIP9LzH7vMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI2MDU4NmQtYjAyNy00NjU2LWI2MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4Njky NTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRCQ0M3RUVGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkM0MDg2OTI1MENFOTYwNkUwNUMxNUI2OUIyMEZGNEJDQzdF RUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI2MDU4NmQtYjAyNy00NjU2LWI2 MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBG RjRCQ0M3RUVGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2lNlrL7U5iNLAiT3kbE/r1dREGMITuPSLk Fw4LNCkYrMVsqU+ZE9uT4ST0j09KGjolZyH5pDic0aXrSGkTd8TaCa46rHBJoh05 +ztI0/Cike8NuKU1RnpTNdowWMuvInF2Zo9waRApLueaht1fapBgMBoQaQqDrjnI ySqEEhq/q5e82vtMYQRUV3viFBOjrGdM1twI0tz0uqUbLzYs5uudgtcKJwpz6jUG fgHNCyJyAqxfCbmIQ3Ut27WxYNMB/U6RIMzfB/3JNtYfNxnO8Q9/mfAWWEnR/kvA bqqt6Gbvw83El3hUzivBNJqToXPvHXFRo9up++xSoJe2JwNhmXA= -----END CERTIFICATE-----Generated at Thu Sep 24 12:28:36 2026 by rpki-client