$ rpki-client -vvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft File: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json) Hash identifier: dEFwJscucTaIdLtnk70hBouOoE0+Vf255Ks7F09+nlw= Subject key identifier: 94:D3:EF:49:F5:36:40:D6:55:38:25:48:16:0B:00:74:27:8D:A6:1F Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Certificate serial: 7D00AB00606327CB7F2096D66382FDA26DE014E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 06:22:57 +0000 Manifest this update: Tue 02 Jun 2026 06:17:57 +0000 Manifest next update: Wed 03 Jun 2026 10:01:57 +0000 Files and hashes: 1: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=) 2: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: aKL0dg7LDo1UMWgIvUMGsWL2UBaN04zFBPYSsRhV4ck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:00:ab:00:60:63:27:cb:7f:20:96:d6:63:82:fd:a2:6d:e0:14:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Validity Not Before: Jun 2 06:17:57 2026 GMT Not After : Jun 3 10:01:57 2026 GMT Subject: CN=94D3EF49F53640D655382548160B0074278DA61F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:9b:81:86:c6:c2:76:99:1e:48:3e:e5:05: 5d:f7:d9:2d:aa:77:48:f9:77:5a:66:37:18:4c:c1: 57:26:07:32:67:8e:c0:72:f3:e7:83:8f:cb:07:b3: 82:37:af:54:c8:ae:c3:df:ac:e1:a8:07:e0:7b:5b: 25:ea:6f:4c:de:3f:6f:f3:5a:15:cb:a8:2f:49:ab: ca:1e:ac:0f:b0:01:c1:e5:95:74:70:11:86:0e:31: e7:45:12:b2:55:4f:ab:2c:e1:91:ef:2b:ef:cf:e2: 4e:83:21:be:5d:fc:4a:22:4b:6b:39:9e:ad:e3:80: af:0a:04:91:37:18:64:d8:41:37:69:a7:b3:49:15: 02:13:25:6c:7b:43:23:84:8d:00:53:c5:1e:b1:fa: d7:b0:16:55:99:05:5c:70:3f:ac:90:05:8b:ee:0b: fe:dc:8d:64:85:1f:24:7b:7d:f0:c4:ec:c4:49:b4: 48:f5:90:b1:c7:c1:18:12:e7:62:f0:67:9a:5d:25: 29:db:0a:5e:ad:ff:35:57:d8:8c:5b:68:7c:99:c7: b5:d0:8b:c6:38:ea:0c:10:3b:c3:85:8e:2a:ef:a5: b9:ef:76:bf:7e:9b:7b:56:86:21:4f:d4:20:8c:6b: 2f:f4:8d:ad:dc:7d:e3:19:09:20:75:66:eb:f6:5d: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D3:EF:49:F5:36:40:D6:55:38:25:48:16:0B:00:74:27:8D:A6:1F X509v3 Authority Key Identifier: keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:41:4c:2a:41:50:d0:37:f5:37:1e:5e:85:36:fb:6e:2f:1d: 10:c9:94:73:39:62:3a:93:89:38:a2:89:55:06:2f:5b:31:cf: 3d:e6:7d:bc:5c:25:fc:3f:67:86:14:78:0f:75:3a:d6:ed:a3: da:48:35:cb:44:0e:b6:8c:48:c6:b3:bd:8a:4a:cd:67:28:1b: b5:6e:48:b0:94:b6:8a:f4:91:ca:2c:93:ec:5e:89:ef:56:b9: 61:fd:c7:d8:81:65:25:94:bb:c7:16:e2:2b:49:da:1e:e2:11: c1:5c:85:3b:91:10:66:62:df:ff:4f:67:ab:fa:0c:ca:2b:e9: 0e:17:c5:4d:b9:53:aa:87:2a:a3:52:be:18:a0:a2:1e:84:fb: e1:3b:c1:ca:8d:13:70:62:50:7f:4d:98:6c:0b:e2:81:fd:95: fe:d1:75:3e:d3:ab:1c:58:f1:93:8d:5d:f1:2f:27:08:c4:db: a2:7b:c0:e3:b8:91:43:0c:59:a3:82:19:6f:ac:ef:53:1e:38: 73:1b:b7:83:05:2d:8c:11:af:19:fd:47:c3:10:fc:49:e8:a0: 60:4d:e3:c6:77:13:9e:9c:6c:de:02:34:92:b2:51:f1:2c:b0: 51:92:81:8c:12:10:20:66:a5:7d:1b:0c:a5:a4:5c:91:aa:4c: 13:85:68:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQCrAGBjJ8t/IJbWY4L9om3gFOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYy RjNBOEREMTAeFw0yNjA2MDIwNjE3NTdaFw0yNjA2MDMxMDAxNTdaMDMxMTAvBgNV BAMTKDk0RDNFRjQ5RjUzNjQwRDY1NTM4MjU0ODE2MEIwMDc0Mjc4REE2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ15uBhsbCdpkeSD7lBV332S2q d0j5d1pmNxhMwVcmBzJnjsBy8+eDj8sHs4I3r1TIrsPfrOGoB+B7WyXqb0zeP2/z WhXLqC9Jq8oerA+wAcHllXRwEYYOMedFErJVT6ss4ZHvK+/P4k6DIb5d/EoiS2s5 nq3jgK8KBJE3GGTYQTdpp7NJFQITJWx7QyOEjQBTxR6x+tewFlWZBVxwP6yQBYvu C/7cjWSFHyR7ffDE7MRJtEj1kLHHwRgS52LwZ5pdJSnbCl6t/zVX2IxbaHyZx7XQ i8Y46gwQO8OFjirvpbnvdr9+m3tWhiFP1CCMay/0ja3cfeMZCSB1Zuv2XfCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNPvSfU2QNZVOCVIFgsAdCeNph8wHwYDVR0j BBgwFoAUgy8C4UAkMGwwZVenHgv6Ly86jdEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwZmExNGEtYWFhYy00MGY0LTljODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0 MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYyRjNBOEREMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzJGMDJFMTQwMjQzMDZDMzA2NTU3QTcxRTBCRkEyRjJGM0E4 REQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZB MkYyRjNBOEREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJBTCpBUNA39TceXoU2+24vHRDJlHM5YjqT iTiiiVUGL1sxzz3mfbxcJfw/Z4YUeA91Otbto9pINctEDraMSMazvYpKzWcoG7Vu SLCUtor0kcosk+xeie9WuWH9x9iBZSWUu8cW4itJ2h7iEcFchTuREGZi3/9PZ6v6 DMor6Q4XxU25U6qHKqNSvhigoh6E++E7wcqNE3BiUH9NmGwL4oH9lf7RdT7TqxxY 8ZONXfEvJwjE26J7wOO4kUMMWaOCGW+s71MeOHMbt4MFLYwRrxn9R8MQ/EnooGBN 48Z3E56cbN4CNJKyUfEssFGSgYwSECBmpX0bDKWkXJGqTBOFaGc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:32 2026 by rpki-client