$ rpki-client -vvvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft File: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft (raw, json) Hash identifier: 6EyZ5ufzeUh8Hh8a4r5xVySFFGQUlqv+yE/4G01FpnU= Subject key identifier: 43:95:98:46:EC:47:25:D1:EB:EB:74:6A:B9:41:98:7A:FA:19:DD:6F Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Certificate serial: 2BD139A5050C0B9DEB18FF3B6436E3D528BB94C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft Manifest number: A9 Signing time: Thu 03 Sep 2026 03:37:15 +0000 Manifest this update: Thu 03 Sep 2026 03:32:15 +0000 Manifest next update: Fri 04 Sep 2026 06:52:15 +0000 Files and hashes: 1: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl (hash: X9V2TFnAj5Q/Ec5nBMjjGsFJCsKmnUemLGa3MEameoM=) 2: 3130332e3132392e3135322e302f32342d3234203d3e20313338303635.roa (hash: hrqst1riYBHBOimxTLlvZyjkc9izcyyKFw/2744oA1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d1:39:a5:05:0c:0b:9d:eb:18:ff:3b:64:36:e3:d5:28:bb:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Validity Not Before: Sep 3 03:32:15 2026 GMT Not After : Sep 4 06:52:15 2026 GMT Subject: CN=43959846EC4725D1EBEB746AB941987AFA19DD6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:81:d8:96:ec:a9:d5:4c:7a:20:58:30:9f: 11:65:22:b4:dd:25:a9:da:cd:db:38:fb:91:ce:9c: 42:cd:45:b4:43:e2:0c:c4:77:0c:66:08:32:c0:d8: f5:54:97:71:4a:be:91:1f:d5:b6:5e:e3:ee:81:95: 1f:d9:f3:7f:ca:e2:8e:07:64:ca:d7:7b:54:18:b8: df:6d:dc:93:0a:de:ad:92:f2:49:b4:ca:eb:a7:70: 3e:21:05:b5:06:1c:0a:ce:09:e4:60:a1:56:ee:26: 57:22:da:73:69:28:a8:43:e6:c2:03:0f:b8:ce:cc: a8:80:d1:66:68:7b:0c:34:9a:3a:54:18:98:ad:38: 6f:96:a4:21:31:e2:bb:0f:58:63:20:02:fe:56:18: d7:2f:4f:63:cd:fe:f3:77:e2:9d:d4:d4:9e:40:de: 8b:27:3f:6b:f7:96:01:21:90:93:ef:6b:cb:06:1c: 08:5d:ac:e3:ad:ca:bc:99:ef:0a:51:d8:d4:90:b5: 85:0d:cd:c9:d0:67:79:fb:01:9c:69:90:a0:6e:78: dc:f5:93:18:1b:29:4b:35:4d:4a:2a:5a:42:c5:b5: 44:39:6f:35:0c:fe:41:f1:8d:97:b0:bf:ce:e5:96: b8:50:9b:28:d1:e5:2d:4f:b3:3f:a9:b4:d7:87:6e: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:95:98:46:EC:47:25:D1:EB:EB:74:6A:B9:41:98:7A:FA:19:DD:6F X509v3 Authority Key Identifier: keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ff:c9:4c:36:d2:e0:b4:02:43:e6:68:57:73:fe:df:3d:17: 87:47:b5:23:3b:ef:a4:7e:cd:96:63:d5:c2:c8:11:cb:0f:d7: e7:8b:d2:91:73:d8:3d:f5:28:c5:da:4e:50:73:a8:95:08:20: 7d:69:fe:4b:0e:05:15:78:86:b9:ef:5a:e0:86:a3:21:94:84: 82:f6:29:31:7b:d0:3d:0e:86:f5:4b:f7:e4:00:20:ef:b8:68: ad:f3:0e:f2:b3:c3:a0:a6:57:c8:4e:5e:ed:50:30:84:83:9f: 43:71:a9:38:d7:b3:d5:58:bc:68:0d:19:b9:71:e7:71:5a:6f: 79:ad:90:d0:3d:5a:72:3f:4a:11:66:3b:f6:e6:2f:6b:d8:c3: 8e:de:02:11:f6:0b:ed:5f:e6:b6:00:10:bb:b1:44:32:d4:9b: 02:e4:62:86:d6:6e:cb:97:b4:bf:58:13:76:a6:3a:d9:f5:1a: 55:8f:8b:69:98:25:d3:8a:bd:d8:ce:2c:99:7a:86:75:17:5b: 25:b1:1f:aa:08:58:67:e8:f1:80:2b:5e:3a:1f:4e:ae:06:4f: d6:5a:21:71:a4:e4:63:cf:c0:91:bd:01:ad:00:d4:6c:e5:bd: 94:5d:a7:bd:a1:2b:1b:6a:f3:f1:3b:8f:00:f2:b3:80:d9:54: 5f:50:a2:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9E5pQUMC53rGP87ZDbj1Si7lMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND QUQ4MTg5MTAeFw0yNjA5MDMwMzMyMTVaFw0yNjA5MDQwNjUyMTVaMDMxMTAvBgNV BAMTKDQzOTU5ODQ2RUM0NzI1RDFFQkVCNzQ2QUI5NDE5ODdBRkExOURENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOIHYluyp1Ux6IFgwnxFlIrTd Janazds4+5HOnELNRbRD4gzEdwxmCDLA2PVUl3FKvpEf1bZe4+6BlR/Z83/K4o4H ZMrXe1QYuN9t3JMK3q2S8km0yuuncD4hBbUGHArOCeRgoVbuJlci2nNpKKhD5sID D7jOzKiA0WZoeww0mjpUGJitOG+WpCEx4rsPWGMgAv5WGNcvT2PN/vN34p3U1J5A 3osnP2v3lgEhkJPva8sGHAhdrOOtyryZ7wpR2NSQtYUNzcnQZ3n7AZxpkKBueNz1 kxgbKUs1TUoqWkLFtUQ5bzUM/kHxjZewv87llrhQmyjR5S1Psz+ptNeHbvrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ5WYRuxHJdHr63RquUGYevoZ3W8wHwYDVR0j BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2 MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx ODkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQw RENDQUQ4MTg5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC//yUw20uC0AkPmaFdz/t89F4dHtSM776R+ zZZj1cLIEcsP1+eL0pFz2D31KMXaTlBzqJUIIH1p/ksOBRV4hrnvWuCGoyGUhIL2 KTF70D0OhvVL9+QAIO+4aK3zDvKzw6CmV8hOXu1QMISDn0NxqTjXs9VYvGgNGblx 53Fab3mtkNA9WnI/ShFmO/bmL2vYw47eAhH2C+1f5rYAELuxRDLUmwLkYobWbsuX tL9YE3amOtn1GlWPi2mYJdOKvdjOLJl6hnUXWyWxH6oIWGfo8YArXjofTq4GT9Za IXGk5GPPwJG9Aa0A1GzlvZRdp72hKxtq8/E7jwDys4DZVF9Qojc= -----END CERTIFICATE-----Generated at Thu Sep 3 09:47:28 2026 by rpki-client