$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft File: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json) Hash identifier: We4siL38s0kT/Y/uPD7GbD9gGSyMc5LdFQP/aYNpbJI= Subject key identifier: 3C:1B:3E:27:56:1A:30:D6:49:9D:F2:C1:3E:7A:C2:4B:CF:E4:69:88 Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Certificate serial: 69E99E43A7FAFCF299DC8CEE0FCA903F468EB5A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 05:03:59 +0000 Manifest this update: Thu 03 Sep 2026 04:58:59 +0000 Manifest next update: Fri 04 Sep 2026 07:19:59 +0000 Files and hashes: 1: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: mN8oQzwKM0u+NWG52cI2PFJDPWfB7xauCKPy7+wlVEc=) 2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 07:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e9:9e:43:a7:fa:fc:f2:99:dc:8c:ee:0f:ca:90:3f:46:8e:b5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Validity Not Before: Sep 3 04:58:59 2026 GMT Not After : Sep 4 07:19:59 2026 GMT Subject: CN=3C1B3E27561A30D6499DF2C13E7AC24BCFE46988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:36:1c:f9:0e:2f:56:e6:03:2d:72:3b:a9: 4f:a8:ef:85:66:a0:94:14:2a:e7:7d:da:f6:eb:f6: cd:f9:de:e1:25:60:24:2c:86:20:a4:a2:bb:03:3b: fc:0c:39:b3:a5:31:d4:f5:1d:6d:f8:0e:9c:e4:b8: b0:60:d8:2d:c5:1a:c3:58:38:95:93:0f:ac:93:6e: 99:a6:5b:e7:44:10:c0:d3:ec:6f:d2:31:f9:aa:3a: 20:3b:64:01:d0:1c:e0:f0:e5:2f:ab:b5:4a:1c:e5: e7:b2:e3:65:43:fd:e2:f1:9a:3e:21:7e:17:0d:8e: 36:e2:2f:ff:5d:11:3b:12:f7:72:74:97:df:22:04: 1b:60:55:91:5d:2a:07:64:c3:03:ba:3c:a8:17:86: 93:b5:41:34:8a:4a:dd:65:ba:a0:90:2f:e6:ce:c5: 8f:9e:1b:c6:1f:ed:86:87:dd:70:61:65:99:f7:1d: 2a:28:e1:bd:50:b6:2d:2f:b0:c6:26:d4:45:1f:77: 85:79:de:58:42:17:5e:de:a3:c4:ca:4b:dc:18:4d: 08:47:2e:6d:25:79:2f:1e:9b:12:ec:2b:46:53:b9: 00:3e:e3:3b:84:90:ef:9f:d6:b3:cf:72:3e:6e:2b: f9:9c:76:d9:38:2e:42:a8:fb:dc:3e:42:67:e2:c2: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1B:3E:27:56:1A:30:D6:49:9D:F2:C1:3E:7A:C2:4B:CF:E4:69:88 X509v3 Authority Key Identifier: keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:22:81:b4:6d:46:2a:0a:84:a1:2d:d8:cc:6b:da:5f:c5:10: 54:4b:90:ac:28:99:07:07:1f:09:50:5f:21:9e:ba:7e:2b:ad: a9:7c:69:31:ab:3d:86:d2:84:28:46:e4:70:14:1d:15:2b:dd: b5:6c:ce:33:c1:23:3c:2c:2f:e5:82:50:3a:18:c7:6b:18:c5: c0:89:e7:98:13:be:99:37:66:e6:28:92:4c:79:5a:87:23:55: 0a:76:93:1d:63:87:b0:8c:0d:d3:16:9f:46:b7:5c:de:31:81: 76:88:a2:b8:d7:e7:74:66:c0:7c:03:0e:13:7c:91:52:4e:f9: 04:e1:26:91:05:93:e9:94:f0:64:a0:ae:68:74:23:72:2a:6a: 07:9c:75:4c:fe:99:52:a7:cb:00:b8:20:73:bd:bc:4a:63:bf: ff:b0:34:fa:fd:40:fa:98:d1:de:0b:ad:21:03:07:25:ea:f5: 0f:b0:97:3f:22:fd:b2:c5:43:fc:a3:df:1d:5c:31:7c:21:e3: 80:11:92:e2:60:f7:a3:46:79:df:d5:03:eb:be:9d:a8:e9:b2: 50:73:ad:11:69:aa:e9:67:57:d8:72:0c:41:65:58:76:93:23: fc:fd:99:16:37:f7:ee:bd:30:7b:f0:66:c0:03:f4:2b:d3:4a: 59:68:88:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaemeQ6f6/PKZ3IzuD8qQP0aOtakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYy RjNBOEREMTAeFw0yNjA5MDMwNDU4NTlaFw0yNjA5MDQwNzE5NTlaMDMxMTAvBgNV BAMTKDNDMUIzRTI3NTYxQTMwRDY0OTlERjJDMTNFN0FDMjRCQ0ZFNDY5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTzYc+Q4vVuYDLXI7qU+o74Vm oJQUKud92vbr9s353uElYCQshiCkorsDO/wMObOlMdT1HW34DpzkuLBg2C3FGsNY OJWTD6yTbpmmW+dEEMDT7G/SMfmqOiA7ZAHQHODw5S+rtUoc5eey42VD/eLxmj4h fhcNjjbiL/9dETsS93J0l98iBBtgVZFdKgdkwwO6PKgXhpO1QTSKSt1luqCQL+bO xY+eG8Yf7YaH3XBhZZn3HSoo4b1Qti0vsMYm1EUfd4V53lhCF17eo8TKS9wYTQhH Lm0leS8emxLsK0ZTuQA+4zuEkO+f1rPPcj5uK/mcdtk4LkKo+9w+QmfiwsffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPBs+J1YaMNZJnfLBPnrCS8/kaYgwHwYDVR0j BBgwFoAUgy8C4UAkMGwwZVenHgv6Ly86jdEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwZmExNGEtYWFhYy00MGY0LTljODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0 MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYyRjNBOEREMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzJGMDJFMTQwMjQzMDZDMzA2NTU3QTcxRTBCRkEyRjJGM0E4 REQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZB MkYyRjNBOEREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0igbRtRioKhKEt2Mxr2l/FEFRLkKwomQcH HwlQXyGeun4rral8aTGrPYbShChG5HAUHRUr3bVszjPBIzwsL+WCUDoYx2sYxcCJ 55gTvpk3ZuYokkx5WocjVQp2kx1jh7CMDdMWn0a3XN4xgXaIorjX53RmwHwDDhN8 kVJO+QThJpEFk+mU8GSgrmh0I3IqagecdUz+mVKnywC4IHO9vEpjv/+wNPr9QPqY 0d4LrSEDByXq9Q+wlz8i/bLFQ/yj3x1cMXwh44ARkuJg96NGed/VA+u+najpslBz rRFpqulnV9hyDEFlWHaTI/z9mRY39+69MHvwZsAD9CvTSlloiJ0= -----END CERTIFICATE-----Generated at Thu Sep 3 20:48:22 2026 by rpki-client