$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft File: 832F3BA2D4A4666720A04785F7440BA744E9066D.mft (raw, json) Hash identifier: YJgO2gJLRQhlQjeciItITHRzP3FJcTRnz9fXUQHJ3Vg= Subject key identifier: 31:33:87:3F:7A:D5:D8:8C:10:F3:4C:75:7F:31:34:66:52:CC:65:2F Authority key identifier: 83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D Certificate issuer: /CN=832F3BA2D4A4666720A04785F7440BA744E9066D Certificate serial: 49BC5D8393B51DE88C0EEE4AA9CB517CA294F90E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:02:29 +0000 Manifest this update: Tue 02 Jun 2026 09:57:29 +0000 Manifest next update: Wed 03 Jun 2026 11:56:29 +0000 Files and hashes: 1: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: rj50c78OZE7EyiE8pv//nMMfuevJo1Qwb9zz5bieBoU=) 2: 832F3BA2D4A4666720A04785F7440BA744E9066D.crl (hash: JxDvuu1l90eeTXe7pCrBolREks2kg0ZyOKcsDBcRYHE=) 3: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: LSsyk3LQXyf/xjsLYb7f1ejhi/raliKL2ndVhfqssnE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bc:5d:83:93:b5:1d:e8:8c:0e:ee:4a:a9:cb:51:7c:a2:94:f9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832F3BA2D4A4666720A04785F7440BA744E9066D Validity Not Before: Jun 2 09:57:29 2026 GMT Not After : Jun 3 11:56:29 2026 GMT Subject: CN=3133873F7AD5D88C10F34C757F31346652CC652F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:0a:10:a3:0d:ed:99:60:99:84:6d:f0:f0: 60:b5:fe:68:15:d1:22:22:55:f6:30:77:fb:df:0a: f5:79:6e:93:5b:63:fc:4d:b3:6e:e6:34:b2:e5:63: 9b:d8:74:1a:d4:f6:93:9e:e6:a7:da:99:95:42:90: ef:09:80:2b:1f:7b:8a:68:e7:7c:01:0e:aa:7f:c0: e2:e3:dd:68:ba:e0:c3:16:83:ba:d7:be:60:9f:85: 8f:ca:40:8a:0d:1e:a5:51:d1:eb:72:82:54:b8:6d: 31:c5:4b:f5:31:79:c1:d0:29:dc:d3:d8:5c:4f:fe: 2c:7b:5e:f0:f7:f2:89:4c:6c:ae:48:71:bd:1e:cc: 41:ae:cb:5e:a5:53:44:1b:ef:56:e2:4d:f0:43:90: ac:c9:f8:b7:47:64:16:70:5d:cc:ee:bb:11:67:14: b2:81:86:53:2b:76:5c:75:1c:18:42:e7:70:d6:83: 59:24:f2:0b:9e:4e:41:d1:a7:f7:db:98:0a:cf:cc: ea:c2:48:c0:72:f1:3e:f8:45:9b:37:3c:ca:8f:8b: df:4e:75:6d:77:71:d4:92:0d:42:ee:74:90:c9:d8: 01:91:5d:f3:2f:c6:2c:aa:16:16:45:f9:31:c3:cc: 46:56:1f:46:1d:69:8e:73:2d:67:fc:22:96:69:90: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:33:87:3F:7A:D5:D8:8C:10:F3:4C:75:7F:31:34:66:52:CC:65:2F X509v3 Authority Key Identifier: keyid:83:2F:3B:A2:D4:A4:66:67:20:A0:47:85:F7:44:0B:A7:44:E9:06:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F3BA2D4A4666720A04785F7440BA744E9066D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/832F3BA2D4A4666720A04785F7440BA744E9066D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:38:86:57:c3:46:64:04:d7:e0:93:1a:0e:f7:2b:e2:77:cc: 8e:a8:04:f5:8b:ef:b0:a0:86:14:f1:06:49:a5:61:4c:e4:20: a5:c7:00:e8:8a:24:13:1b:de:97:5f:ee:63:67:e4:65:6f:81: 8e:63:97:87:12:85:2a:79:9f:af:c8:71:a8:a3:3c:9a:c7:e3: 47:87:02:85:cd:df:6f:a9:3e:32:ad:2c:05:04:24:ba:fb:45: 84:c1:3b:0b:e4:0f:28:a1:b7:4d:17:cf:76:7d:4f:83:06:af: 62:22:1f:ff:a8:9e:4d:95:9a:4b:c5:1b:e5:c8:70:fc:cc:7c: c4:02:4d:72:fe:bf:ec:70:89:51:0d:77:71:74:e5:e2:c1:aa: 62:5a:f3:98:c3:3c:89:dc:e4:50:00:81:96:e6:05:3e:72:03: 1c:01:13:3c:aa:fb:a9:fe:03:c1:b2:78:5b:e5:2c:10:41:c0: 0a:41:4d:09:47:ae:a1:70:6d:4f:c7:00:39:46:18:7b:0e:48: 59:09:42:c8:0f:72:2d:27:7c:57:42:91:3b:77:c8:c9:42:61: e8:e4:d6:75:e1:fa:87:c6:03:87:31:54:80:b6:74:18:ff:8a: 9a:86:8f:2f:77:fb:50:94:89:72:f1:52:43:75:2d:10:cb:f0: 97:bc:2c:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbxdg5O1HeiMDu5KqctRfKKU+Q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMyRjNCQTJENEE0NjY2NzIwQTA0Nzg1Rjc0NDBCQTc0 NEU5MDY2RDAeFw0yNjA2MDIwOTU3MjlaFw0yNjA2MDMxMTU2MjlaMDMxMTAvBgNV BAMTKDMxMzM4NzNGN0FENUQ4OEMxMEYzNEM3NTdGMzEzNDY2NTJDQzY1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudAoQow3tmWCZhG3w8GC1/mgV 0SIiVfYwd/vfCvV5bpNbY/xNs27mNLLlY5vYdBrU9pOe5qfamZVCkO8JgCsfe4po 53wBDqp/wOLj3Wi64MMWg7rXvmCfhY/KQIoNHqVR0etyglS4bTHFS/UxecHQKdzT 2FxP/ix7XvD38olMbK5Icb0ezEGuy16lU0Qb71biTfBDkKzJ+LdHZBZwXczuuxFn FLKBhlMrdlx1HBhC53DWg1kk8gueTkHRp/fbmArPzOrCSMBy8T74RZs3PMqPi99O dW13cdSSDULudJDJ2AGRXfMvxiyqFhZF+THDzEZWH0YdaY5zLWf8IpZpkAi5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMTOHP3rV2IwQ80x1fzE0ZlLMZS8wHwYDVR0j BBgwFoAUgy87otSkZmcgoEeF90QLp0TpBm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBlNGNhNTQtODU3Yi00ZjY4LWFiNWYtMGQ4YzQ3MmU2YzkyLzAvODMyRjNCQTJE NEE0NjY2NzIwQTA0Nzg1Rjc0NDBCQTc0NEU5MDY2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzJGM0JBMkQ0QTQ2NjY3MjBBMDQ3ODVGNzQ0MEJBNzQ0RTkw NjZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBlNGNhNTQtODU3Yi00ZjY4LWFi NWYtMGQ4YzQ3MmU2YzkyLzAvODMyRjNCQTJENEE0NjY2NzIwQTA0Nzg1Rjc0NDBC QTc0NEU5MDY2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF04hlfDRmQE1+CTGg73K+J3zI6oBPWL77Cg hhTxBkmlYUzkIKXHAOiKJBMb3pdf7mNn5GVvgY5jl4cShSp5n6/IcaijPJrH40eH AoXN32+pPjKtLAUEJLr7RYTBOwvkDyiht00Xz3Z9T4MGr2IiH/+onk2VmkvFG+XI cPzMfMQCTXL+v+xwiVENd3F05eLBqmJa85jDPInc5FAAgZbmBT5yAxwBEzyq+6n+ A8GyeFvlLBBBwApBTQlHrqFwbU/HADlGGHsOSFkJQsgPci0nfFdCkTt3yMlCYejk 1nXh+ofGA4cxVIC2dBj/ipqGjy93+1CUiXLxUkN1LRDL8Je8LE8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:38 2026 by rpki-client