$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft File: 32857E62250C763037D1ED291D7937072EB50DC5.mft (raw, json) Hash identifier: 8bew8L4NqHh6EIQdWAdflOuSLj11Zc81lOxJXjJsTAY= Subject key identifier: 42:6C:DD:CD:5F:47:E2:44:AA:33:3B:05:1B:20:25:A1:F9:DD:DF:CA Authority key identifier: 32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 Certificate issuer: /CN=32857E62250C763037D1ED291D7937072EB50DC5 Certificate serial: 73DC5F44A635C5D80E39004D767E7D93789ECA3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:25:17 +0000 Manifest this update: Thu 17 Sep 2026 01:20:17 +0000 Manifest next update: Fri 18 Sep 2026 03:58:17 +0000 Files and hashes: 1: 32857E62250C763037D1ED291D7937072EB50DC5.crl (hash: NfTGrtblbxvYddQPz1fM9gqhsa7tCIwOJlibHTuyReE=) 2: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: bObGNzkzxqsMtfGussqQMllg3CDeiOkWDE0MTteiGhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:dc:5f:44:a6:35:c5:d8:0e:39:00:4d:76:7e:7d:93:78:9e:ca:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32857E62250C763037D1ED291D7937072EB50DC5 Validity Not Before: Sep 17 01:20:17 2026 GMT Not After : Sep 18 03:58:17 2026 GMT Subject: CN=426CDDCD5F47E244AA333B051B2025A1F9DDDFCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:a4:4f:ef:4a:7a:f8:b9:7c:cc:9f:02:18: f9:01:f3:2d:1b:f7:db:70:7c:42:d1:09:9a:75:6e: f5:63:d0:3b:30:49:33:f1:38:d9:8f:b7:30:63:23: 41:87:95:0b:90:58:f9:8d:77:31:67:e8:05:db:45: a9:f0:e0:5e:51:7a:14:dd:56:e9:b8:46:6a:46:81: a0:fc:61:71:f1:06:76:99:bf:bf:0c:07:72:25:26: 90:11:1f:f9:82:ec:e9:d7:50:74:d9:89:6d:78:45: b9:dd:7a:ff:28:a9:80:7a:6e:7e:a1:78:5b:3e:a0: e4:8d:fc:ac:87:a7:b4:30:8f:89:10:07:df:fc:e4: 4f:e0:70:4c:1e:93:64:60:5f:f7:23:5f:18:9a:04: e2:56:97:72:f9:71:7d:38:9f:2e:d6:75:ee:64:3a: db:95:20:13:92:36:90:96:05:3f:f0:28:8f:25:b9: 7f:55:cb:1c:67:d1:4a:05:c2:4b:03:df:51:20:32: bc:17:93:5a:b5:6c:45:bf:da:da:c4:2e:b3:bf:f3: bd:db:66:de:11:16:d9:8c:a4:87:25:96:1b:16:8d: 18:d4:ea:a8:06:53:c5:97:ab:c3:2e:a9:30:ee:97: d2:39:d1:8d:e7:d0:75:f7:61:4d:77:5c:69:a7:c9: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6C:DD:CD:5F:47:E2:44:AA:33:3B:05:1B:20:25:A1:F9:DD:DF:CA X509v3 Authority Key Identifier: keyid:32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c4:75:20:76:91:4e:19:33:e6:ee:e3:d3:3a:fa:4e:c1:49: b2:81:2c:69:94:dc:7e:a6:d5:9c:93:67:5c:c8:c4:45:e7:39: 09:0a:5d:c6:ca:42:8b:0c:83:63:d0:f6:d3:58:8f:22:94:f3: f9:f7:ab:ea:fb:91:57:b9:ea:25:b5:6c:30:25:b1:32:2e:eb: 5d:78:69:8b:20:76:38:b9:66:be:15:bb:df:b5:9c:5d:2a:39: 0a:79:1f:b5:3e:41:d8:8e:c0:84:15:25:22:75:57:66:06:1e: cb:cf:e8:ab:97:3b:e8:de:c1:a9:54:37:0c:87:31:e5:e3:a4: 5e:7c:3a:f1:d2:9e:6e:8c:11:2b:55:68:44:c0:dc:a6:a5:30: 08:bd:6d:d0:c7:6f:35:21:21:86:c3:4b:14:d4:70:b2:51:24: 1f:5f:5f:d2:46:c7:8f:c8:41:17:59:fe:28:f9:9a:ed:bc:02: ff:16:dd:c3:e0:82:0f:61:9b:0f:7e:bd:df:63:99:6b:af:a9: 6d:e2:aa:36:39:97:f3:b9:8e:61:70:a4:c5:74:af:9e:91:fb: b5:47:f2:95:31:ba:ea:6a:b3:3c:11:a2:ab:ab:d5:80:9e:09: c9:69:b6:57:ce:54:4c:9b:0d:b8:c5:b7:2e:85:21:72:7e:e0: 54:30:6f:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9xfRKY1xdgOOQBNdn59k3ieyj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcy RUI1MERDNTAeFw0yNjA5MTcwMTIwMTdaFw0yNjA5MTgwMzU4MTdaMDMxMTAvBgNV BAMTKDQyNkNERENENUY0N0UyNDRBQTMzM0IwNTFCMjAyNUExRjlERERGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtqRP70p6+Ll8zJ8CGPkB8y0b 99twfELRCZp1bvVj0DswSTPxONmPtzBjI0GHlQuQWPmNdzFn6AXbRanw4F5RehTd Vum4RmpGgaD8YXHxBnaZv78MB3IlJpARH/mC7OnXUHTZiW14Rbndev8oqYB6bn6h eFs+oOSN/KyHp7Qwj4kQB9/85E/gcEwek2RgX/cjXxiaBOJWl3L5cX04ny7Wde5k OtuVIBOSNpCWBT/wKI8luX9Vyxxn0UoFwksD31EgMrwXk1q1bEW/2trELrO/873b Zt4RFtmMpIcllhsWjRjU6qgGU8WXq8MuqTDul9I50Y3n0HX3YU13XGmnyRQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmzdzV9H4kSqMzsFGyAlofnd38owHwYDVR0j BBgwFoAUMoV+YiUMdjA30e0pHXk3By61DcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWQwMTItYWZkYi00MmZiLTk3MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIy NTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcyRUI1MERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1N0U2MjI1MEM3NjMwMzdEMUVEMjkxRDc5MzcwNzJFQjUw REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3 MDcyRUI1MERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLEdSB2kU4ZM+bu49M6+k7BSbKBLGmU3H6m 1ZyTZ1zIxEXnOQkKXcbKQosMg2PQ9tNYjyKU8/n3q+r7kVe56iW1bDAlsTIu6114 aYsgdji5Zr4Vu9+1nF0qOQp5H7U+QdiOwIQVJSJ1V2YGHsvP6KuXO+jewalUNwyH MeXjpF58OvHSnm6MEStVaETA3KalMAi9bdDHbzUhIYbDSxTUcLJRJB9fX9JGx4/I QRdZ/ij5mu28Av8W3cPggg9hmw9+vd9jmWuvqW3iqjY5l/O5jmFwpMV0r56R+7VH 8pUxuupqszwRoqur1YCeCclptlfOVEybDbjFty6FIXJ+4FQwb6U= -----END CERTIFICATE-----Generated at Thu Sep 17 15:06:38 2026 by rpki-client