$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: vhl+wRp5V3f9gzAaM4QMAE2T+rrPGAdITwPJAWn1Jl8= Subject key identifier: EB:EE:7B:09:74:49:07:0A:5A:D2:FC:03:95:07:F7:88:08:56:3D:13 Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 5CF61447CC31F2F2DBD178AD642ADC1384C79594 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 17:35:47 +0000 Manifest this update: Wed 04 Nov 2026 17:30:47 +0000 Manifest next update: Thu 05 Nov 2026 17:40:47 +0000 Files and hashes: 1: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: GJKDGprWzE+hKD7xM/Sfil3T6mlABMwAON8ObSRl5aY=) 2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f6:14:47:cc:31:f2:f2:db:d1:78:ad:64:2a:dc:13:84:c7:95:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: Nov 4 17:30:47 2026 GMT Not After : Nov 5 17:40:47 2026 GMT Subject: CN=EBEE7B097449070A5AD2FC039507F78808563D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:5d:92:a2:63:c5:40:cf:3b:11:96:68:fb: b8:9d:a1:6e:bc:df:3c:4d:e2:68:e0:80:6f:ab:e0: bd:f9:af:c8:2c:9f:24:0c:5b:c4:bb:30:04:61:f5: bf:cb:63:06:f4:87:38:25:08:cd:48:a9:6f:6c:4a: 25:08:68:2d:6e:67:55:4a:03:d2:f6:46:32:f7:25: 77:ad:4c:83:37:85:a1:12:7c:e4:99:fd:72:62:e0: 02:93:af:40:00:85:f0:92:8d:e3:cf:a6:87:2a:ef: d4:27:13:58:f2:37:3e:9e:4e:a4:f2:50:e5:85:e2: 4b:43:64:cd:f4:cc:95:43:b7:1e:f3:8c:ec:f4:9d: c1:52:b4:0a:67:bd:ab:c8:71:d8:d8:a3:6f:75:76: fd:ca:cd:57:97:ed:44:1b:13:b6:9f:01:2f:34:55: d6:0d:29:bb:aa:b6:79:5d:80:a6:8c:f2:49:0c:2b: 13:10:14:8e:59:e6:fe:f8:36:40:2d:3f:a1:4d:3d: 9e:8b:a3:4e:22:e2:e4:b7:6f:7f:cd:94:66:89:00: 11:ff:dd:70:ca:36:ef:dc:4a:65:30:24:43:53:bd: 4d:86:fc:c3:7e:f0:5d:e6:de:2c:80:15:8a:ea:13: 73:74:01:c7:50:e6:a9:7a:7d:06:a4:01:65:d7:38: 19:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EE:7B:09:74:49:07:0A:5A:D2:FC:03:95:07:F7:88:08:56:3D:13 X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c7:fb:a6:c4:37:52:c0:c4:e8:24:ec:d8:ba:b5:83:81:6f: dd:36:c0:3c:72:c6:11:0c:53:5a:2c:10:bc:a4:70:a6:26:e1: fd:8c:ad:f4:ee:3e:c1:6d:b8:20:52:67:9b:04:0f:de:90:e8: ae:b3:2b:60:23:f8:f5:01:bb:4a:85:23:ed:73:1a:d7:52:44: 44:fb:92:e6:81:ec:07:ae:cd:6c:98:21:45:5a:87:37:79:aa: 4e:81:c3:2f:d6:99:be:0b:25:2f:35:8c:16:72:b1:61:c7:dd: 42:1f:4a:a8:0e:75:fc:c9:99:4d:4c:ac:37:18:62:db:df:64: ae:fb:89:b2:ce:67:da:f1:9e:d9:76:3c:d9:dc:fc:ee:f0:48: 0b:20:e0:af:50:9a:86:60:7b:01:19:4a:b7:22:f6:6d:fa:24: ee:e9:76:62:53:cc:a4:a0:2e:f5:b6:26:51:c6:bf:58:36:90: 85:71:c6:4f:6f:0a:9d:36:ca:d2:87:d2:10:d0:74:20:2e:e6: 5c:81:3b:56:1e:63:eb:69:33:32:13:c3:01:e4:fc:62:20:d7: 16:ca:ba:13:6f:e7:b9:f1:69:49:6f:6c:ce:03:bc:92:f7:a3: c9:43:2c:40:eb:2b:1a:ef:4b:3e:1f:97:a8:7b:8c:a0:5c:d6: 48:b4:e5:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPYUR8wx8vLb0XitZCrcE4THlZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjExMDQxNzMwNDdaFw0yNjExMDUxNzQwNDdaMDMxMTAvBgNV BAMTKEVCRUU3QjA5NzQ0OTA3MEE1QUQyRkMwMzk1MDdGNzg4MDg1NjNEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/l2SomPFQM87EZZo+7idoW68 3zxN4mjggG+r4L35r8gsnyQMW8S7MARh9b/LYwb0hzglCM1IqW9sSiUIaC1uZ1VK A9L2RjL3JXetTIM3haESfOSZ/XJi4AKTr0AAhfCSjePPpocq79QnE1jyNz6eTqTy UOWF4ktDZM30zJVDtx7zjOz0ncFStApnvavIcdjYo291dv3KzVeX7UQbE7afAS80 VdYNKbuqtnldgKaM8kkMKxMQFI5Z5v74NkAtP6FNPZ6Lo04i4uS3b3/NlGaJABH/ 3XDKNu/cSmUwJENTvU2G/MN+8F3m3iyAFYrqE3N0AcdQ5ql6fQakAWXXOBltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6+57CXRJBwpa0vwDlQf3iAhWPRMwHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnH+6bEN1LAxOgk7Ni6tYOBb902wDxyxhEM U1osELykcKYm4f2MrfTuPsFtuCBSZ5sED96Q6K6zK2Aj+PUBu0qFI+1zGtdSRET7 kuaB7AeuzWyYIUVahzd5qk6Bwy/Wmb4LJS81jBZysWHH3UIfSqgOdfzJmU1MrDcY YtvfZK77ibLOZ9rxntl2PNnc/O7wSAsg4K9QmoZgewEZSrci9m36JO7pdmJTzKSg LvW2JlHGv1g2kIVxxk9vCp02ytKH0hDQdCAu5lyBO1YeY+tpMzITwwHk/GIg1xbK uhNv57nxaUlvbM4DvJL3o8lDLEDrKxrvSz4fl6h7jKBc1ki05eA= -----END CERTIFICATE-----Generated at Thu Nov 5 02:05:20 2026 by rpki-client