$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft File: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft (raw, json) Hash identifier: 9REtjBsflCNfS8aB5yJK0yBbFL4wRZ5XNaROuYb/k8I= Subject key identifier: DF:D1:F9:81:CB:F5:71:AD:38:EB:C3:99:2D:81:81:FE:5B:63:93:59 Authority key identifier: 32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3 Certificate issuer: /CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3 Certificate serial: 55D0EF8A440D57FAF9252BC7DC2E800BFC85CEE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 07:12:20 +0000 Manifest this update: Wed 04 Nov 2026 07:07:20 +0000 Manifest next update: Thu 05 Nov 2026 09:55:20 +0000 Files and hashes: 1: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: AerViwEwX6M35LdYkw1W6Rm917nFOVWmFQ/wALZRWuI=) 2: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: IlwLW0g7keiKYblC08y+Cdk30ZDG31NiX8oDu4ZTBVM=) 3: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl (hash: 2FQb7IzUcI4i6/Gw3OqAqAin+hfMJkQy3+wKsRPAAUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d0:ef:8a:44:0d:57:fa:f9:25:2b:c7:dc:2e:80:0b:fc:85:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3 Validity Not Before: Nov 4 07:07:20 2026 GMT Not After : Nov 5 09:55:20 2026 GMT Subject: CN=DFD1F981CBF571AD38EBC3992D8181FE5B639359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:57:86:3c:de:38:2b:3d:a2:0d:5e:72:6e:c0: 4f:fe:27:83:90:9d:80:5b:d2:00:a8:3e:8a:59:b5: da:9c:a2:0f:02:41:9d:3d:45:28:e9:88:22:5a:34: 4e:39:9c:c6:7e:34:ea:4a:ed:71:c9:05:cb:1a:7d: 50:97:ed:8c:38:94:ab:e3:92:1d:4f:a5:c4:60:b5: 1d:55:e6:75:27:20:85:af:f1:80:ee:ab:4c:4a:4c: 01:9f:ea:b8:b0:9c:ce:87:1e:2e:76:e3:db:81:b7: bb:c4:75:df:de:50:17:72:c1:84:a9:5b:05:df:13: de:db:13:6e:a8:bc:cd:c0:a8:fc:eb:ca:2c:01:bb: 7b:6c:1d:08:82:c2:d9:3e:30:97:5c:e2:ca:9e:61: f3:50:07:7f:b7:b0:d4:e9:67:00:af:8f:7d:12:8d: a7:8a:df:0d:95:71:b8:4f:f7:cd:48:93:06:e4:75: b4:89:59:09:fd:03:63:b5:21:e8:f3:4b:27:2d:2a: 1a:65:de:88:a4:48:8e:be:7a:7a:3c:6f:db:49:de: b5:99:bc:f3:24:40:3d:e2:c6:00:72:ae:c5:fb:b8: ac:21:e3:1b:b4:ad:90:3e:5a:73:cf:2c:d9:82:38: ef:90:11:04:84:f0:43:81:86:f8:b4:8d:d1:90:26: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D1:F9:81:CB:F5:71:AD:38:EB:C3:99:2D:81:81:FE:5B:63:93:59 X509v3 Authority Key Identifier: keyid:32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a3:fb:0e:d8:d4:d5:b1:8a:81:48:1b:56:37:f3:66:71:50: ae:c5:2c:11:d9:69:64:8b:9b:fd:c7:65:9b:17:92:31:bc:fc: 2a:6d:b6:5b:9e:8a:93:6b:4b:03:56:6d:45:8d:fc:51:53:6c: 4c:bc:ce:44:9e:60:8d:8b:3d:46:2a:29:07:24:99:ce:7a:ad: 17:64:1b:61:2c:0e:4f:59:66:eb:48:70:4e:f6:fc:c1:83:c9: 6f:f4:c5:60:a5:43:9b:90:e9:b6:5d:ab:3d:fa:08:a2:97:25: fd:08:30:de:60:35:30:32:a8:c8:e6:5e:b0:e5:8d:bd:df:df: af:f6:84:20:b7:ce:cd:80:ab:f8:4d:29:60:b5:a2:9f:8b:35: db:36:e4:94:04:8f:29:71:54:24:51:14:9f:a4:e9:96:59:dc: be:78:48:24:96:4c:46:49:5d:ea:a9:65:8c:3f:fd:c2:05:b8: cd:ba:09:ab:63:55:ac:c2:0a:d9:5d:09:2d:99:28:5b:39:91: 8f:fd:b6:60:18:9e:b5:d1:48:49:96:7d:bc:8e:21:13:aa:7c: b7:c2:49:af:aa:9c:61:06:3f:2d:1d:e0:fd:8f:00:69:9a:1d: 5c:be:d5:fd:6f:c8:c6:e2:f2:b8:1e:90:26:a7:a3:22:e8:47: f5:2c:4b:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdDvikQNV/r5JSvH3C6AC/yFzuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRC Q0M3RUVGMzAeFw0yNjExMDQwNzA3MjBaFw0yNjExMDUwOTU1MjBaMDMxMTAvBgNV BAMTKERGRDFGOTgxQ0JGNTcxQUQzOEVCQzM5OTJEODE4MUZFNUI2MzkzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4V4Y83jgrPaINXnJuwE/+J4OQ nYBb0gCoPopZtdqcog8CQZ09RSjpiCJaNE45nMZ+NOpK7XHJBcsafVCX7Yw4lKvj kh1PpcRgtR1V5nUnIIWv8YDuq0xKTAGf6riwnM6HHi5249uBt7vEdd/eUBdywYSp WwXfE97bE26ovM3AqPzryiwBu3tsHQiCwtk+MJdc4sqeYfNQB3+3sNTpZwCvj30S jaeK3w2VcbhP981IkwbkdbSJWQn9A2O1IejzSyctKhpl3oikSI6+eno8b9tJ3rWZ vPMkQD3ixgByrsX7uKwh4xu0rZA+WnPPLNmCOO+QEQSE8EOBhvi0jdGQJjjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU39H5gcv1ca0468OZLYGB/ltjk1kwHwYDVR0j BBgwFoAUMsQIaSUM6WBuBcFbabIP9LzH7vMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI2MDU4NmQtYjAyNy00NjU2LWI2MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4Njky NTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRCQ0M3RUVGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkM0MDg2OTI1MENFOTYwNkUwNUMxNUI2OUIyMEZGNEJDQzdF RUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI2MDU4NmQtYjAyNy00NjU2LWI2 MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBG RjRCQ0M3RUVGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuj+w7Y1NWxioFIG1Y382ZxUK7FLBHZaWSL m/3HZZsXkjG8/CpttlueipNrSwNWbUWN/FFTbEy8zkSeYI2LPUYqKQckmc56rRdk G2EsDk9ZZutIcE72/MGDyW/0xWClQ5uQ6bZdqz36CKKXJf0IMN5gNTAyqMjmXrDl jb3f36/2hCC3zs2Aq/hNKWC1op+LNds25JQEjylxVCRRFJ+k6ZZZ3L54SCSWTEZJ XeqpZYw//cIFuM26CatjVazCCtldCS2ZKFs5kY/9tmAYnrXRSEmWfbyOIROqfLfC Sa+qnGEGPy0d4P2PAGmaHVy+1f1vyMbi8rgekCanoyLoR/UsS8g= -----END CERTIFICATE-----Generated at Thu Nov 5 03:16:27 2026 by rpki-client