$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft File: 32857E62250C763037D1ED291D7937072EB50DC5.mft (raw, json) Hash identifier: /lQgFr0km2GH02jkoKKcprNuippaMX/NETgIuzBOej4= Subject key identifier: 2B:97:90:3F:53:9C:10:03:AA:05:6E:1F:0B:87:1C:15:1A:EE:A8:0B Authority key identifier: 32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 Certificate issuer: /CN=32857E62250C763037D1ED291D7937072EB50DC5 Certificate serial: 69763E090144EF9D3871934EF0F59E6DEF2DF8D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 14:31:09 +0000 Manifest this update: Mon 02 Nov 2026 14:26:09 +0000 Manifest next update: Tue 03 Nov 2026 15:13:09 +0000 Files and hashes: 1: 32857E62250C763037D1ED291D7937072EB50DC5.crl (hash: Zf05SkwWJqnZ3fpxNlHRDNM9JzgWxJGRHX2JaaCC2LM=) 2: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: bObGNzkzxqsMtfGussqQMllg3CDeiOkWDE0MTteiGhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:76:3e:09:01:44:ef:9d:38:71:93:4e:f0:f5:9e:6d:ef:2d:f8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32857E62250C763037D1ED291D7937072EB50DC5 Validity Not Before: Nov 2 14:26:09 2026 GMT Not After : Nov 3 15:13:09 2026 GMT Subject: CN=2B97903F539C1003AA056E1F0B871C151AEEA80B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:f7:de:7c:29:60:9d:93:c7:b2:62:1b:1b: 0f:1a:c5:71:11:6d:32:de:ed:7a:e2:ac:3c:70:fe: c1:cb:df:08:60:38:68:c8:64:e2:ff:42:57:fa:4b: e3:0d:e5:13:96:e8:fe:e3:6f:32:4b:98:09:4b:f7: 7d:99:9f:06:bc:ae:dd:6d:e5:70:18:d1:e0:43:30: 3c:41:73:50:02:99:81:1b:cd:b8:88:11:ab:1a:a6: 5a:c6:fb:9d:38:4f:68:09:70:2d:20:7f:8b:bb:c5: 0b:ca:a1:45:91:ab:66:50:c8:a5:25:c6:36:1b:fb: ee:24:11:2e:a8:ee:78:1c:5a:09:52:5f:3b:ee:18: 82:76:54:b5:46:d2:94:c4:ee:df:b8:b3:28:ff:69: a5:b7:69:97:05:82:19:88:98:69:9b:c8:7d:1d:55: 94:bd:1b:b9:dd:ce:f5:6f:88:cf:94:eb:a9:ba:50: 28:ee:15:cb:b4:4b:aa:9b:6a:0d:f8:99:73:08:76: d9:9a:80:d8:ab:07:69:bc:90:de:4e:e0:1d:31:15: 1a:c0:20:4d:38:40:58:1d:ca:be:65:2f:61:24:56: 5d:b2:4e:d1:0e:29:19:e9:f3:50:ed:7d:4e:a9:63: 9b:db:9e:4e:30:01:a9:58:57:03:cc:e0:0f:73:29: 0b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:97:90:3F:53:9C:10:03:AA:05:6E:1F:0B:87:1C:15:1A:EE:A8:0B X509v3 Authority Key Identifier: keyid:32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:97:86:31:4e:28:6b:d1:2a:2f:c9:58:3b:a6:12:eb:b0:f7: fc:40:fc:32:4d:40:6b:5d:6f:15:81:11:41:f2:2b:ac:39:e8: 8a:4f:a0:0a:d6:d5:b4:69:63:e0:9b:1d:2b:c6:b1:40:c6:14: b6:c7:62:63:5e:55:c8:86:07:a9:29:dd:8c:e2:62:d0:c2:2f: 27:51:9f:1d:94:f7:f2:d6:eb:72:5c:b3:56:c9:7a:86:57:5c: 93:e0:3f:a0:34:92:e5:e9:77:95:f4:ed:38:d6:84:10:a5:a0: 01:dc:3e:ae:a8:a4:1c:f9:ea:c7:7a:f5:18:db:55:bc:63:dc: f1:fa:17:bf:e6:76:d4:bc:cf:48:67:f1:ba:64:d7:b4:de:cd: c5:8d:bc:44:f0:d3:eb:a7:f3:af:4c:4e:aa:4b:74:78:00:17: 77:2a:23:8f:f6:9d:dd:41:9a:ef:5d:07:0c:81:ff:c8:94:f4: 48:e6:51:aa:9b:f3:ff:f5:91:95:1d:b5:6e:3e:a2:3f:7b:91: 2e:30:10:09:6a:d2:60:98:95:e0:2d:53:02:e8:20:97:60:ff: fb:6c:37:8e:87:5a:b4:95:d7:27:1e:87:b3:76:2f:69:5a:a6: 29:02:a2:57:ac:9d:cf:28:4d:b9:ef:31:d1:a3:38:88:92:0d: 32:0b:06:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXY+CQFE7504cZNO8PWebe8t+NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcy RUI1MERDNTAeFw0yNjExMDIxNDI2MDlaFw0yNjExMDMxNTEzMDlaMDMxMTAvBgNV BAMTKDJCOTc5MDNGNTM5QzEwMDNBQTA1NkUxRjBCODcxQzE1MUFFRUE4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDasvfefClgnZPHsmIbGw8axXER bTLe7XrirDxw/sHL3whgOGjIZOL/Qlf6S+MN5ROW6P7jbzJLmAlL932Znwa8rt1t 5XAY0eBDMDxBc1ACmYEbzbiIEasaplrG+504T2gJcC0gf4u7xQvKoUWRq2ZQyKUl xjYb++4kES6o7ngcWglSXzvuGIJ2VLVG0pTE7t+4syj/aaW3aZcFghmImGmbyH0d VZS9G7ndzvVviM+U66m6UCjuFcu0S6qbag34mXMIdtmagNirB2m8kN5O4B0xFRrA IE04QFgdyr5lL2EkVl2yTtEOKRnp81DtfU6pY5vbnk4wAalYVwPM4A9zKQt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK5eQP1OcEAOqBW4fC4ccFRruqAswHwYDVR0j BBgwFoAUMoV+YiUMdjA30e0pHXk3By61DcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWQwMTItYWZkYi00MmZiLTk3MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIy NTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcyRUI1MERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1N0U2MjI1MEM3NjMwMzdEMUVEMjkxRDc5MzcwNzJFQjUw REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3 MDcyRUI1MERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWXhjFOKGvRKi/JWDumEuuw9/xA/DJNQGtd bxWBEUHyK6w56IpPoArW1bRpY+CbHSvGsUDGFLbHYmNeVciGB6kp3YziYtDCLydR nx2U9/LW63Jcs1bJeoZXXJPgP6A0kuXpd5X07TjWhBCloAHcPq6opBz56sd69Rjb Vbxj3PH6F7/mdtS8z0hn8bpk17TezcWNvETw0+un869MTqpLdHgAF3cqI4/2nd1B mu9dBwyB/8iU9EjmUaqb8//1kZUdtW4+oj97kS4wEAlq0mCYleAtUwLoIJdg//ts N46HWrSV1yceh7N2L2lapikColesnc8oTbnvMdGjOIiSDTILBrc= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:38 2026 by rpki-client