$ rpki-client -vvvf rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft File: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft (raw, json) Hash identifier: fej3ccyaqL6jgMNeixb5K8jR1l/VKwdRvC4KhJFXnds= Subject key identifier: 09:4C:CA:3D:FC:B2:E1:3A:DD:F1:37:5E:88:C4:36:33:A9:80:7C:5C Authority key identifier: 23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 Certificate issuer: /CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Certificate serial: 6CC5AF90088834F68772B125DBF096DF8FE4982E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft Manifest number: EC Signing time: Sat 24 Oct 2026 07:53:47 +0000 Manifest this update: Sat 24 Oct 2026 07:48:47 +0000 Manifest next update: Sun 25 Oct 2026 11:00:47 +0000 Files and hashes: 1: 2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl (hash: tXtfOh0N+iwLmo9DJtxf6P236EldpUuUij+ZwTv+h64=) 2: 3130332e3132392e3135322e302f32342d3234203d3e20313338303635.roa (hash: hrqst1riYBHBOimxTLlvZyjkc9izcyyKFw/2744oA1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c5:af:90:08:88:34:f6:87:72:b1:25:db:f0:96:df:8f:e4:98:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332E8DC602F174A9F632AE61F76D0DCCAD81891 Validity Not Before: Oct 24 07:48:47 2026 GMT Not After : Oct 25 11:00:47 2026 GMT Subject: CN=094CCA3DFCB2E13ADDF1375E88C43633A9807C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8a:4c:1c:1e:13:08:2d:27:24:06:61:6b:97: f4:5e:aa:18:a1:8e:0e:40:79:a2:51:af:da:1c:0c: cd:3e:b6:03:d3:d6:51:0a:16:48:e5:cf:d3:53:0c: ee:2b:67:c9:43:3c:cd:7b:91:f2:24:8b:3f:ec:86: f4:1c:66:5f:8e:34:32:d4:e9:6a:8b:55:ab:34:ad: bb:32:9f:2a:d1:75:ad:c9:14:7c:7b:99:09:9e:c3: 61:b3:b7:56:c1:ee:0a:e6:23:64:21:83:6f:e5:ba: 1b:72:d1:ca:b8:bc:a2:d1:c7:2b:54:b3:e7:eb:be: 02:b9:ea:53:e5:93:fe:0c:28:5b:de:ef:0d:16:c6: 22:18:23:38:30:1b:cf:0c:f2:c2:9c:b2:91:99:80: a9:31:af:a0:20:ce:12:19:81:c9:b7:e5:f3:75:0e: 80:3c:44:73:e4:c5:2a:37:2b:fc:e4:5e:8e:7d:51: 44:1f:09:01:8a:3d:f8:15:7f:c1:01:10:64:6f:41: f2:30:01:c3:4c:a6:d4:81:70:db:b5:6e:91:1a:e2: c9:2c:97:15:fa:ae:3c:23:7e:fa:00:2c:4e:79:f3: 06:43:d7:51:02:de:f1:f9:3b:ea:e2:b9:dd:c1:ba: 64:19:17:37:75:70:8c:0b:6c:56:11:28:c7:b4:9f: 50:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4C:CA:3D:FC:B2:E1:3A:DD:F1:37:5E:88:C4:36:33:A9:80:7C:5C X509v3 Authority Key Identifier: keyid:23:32:E8:DC:60:2F:17:4A:9F:63:2A:E6:1F:76:D0:DC:CA:D8:18:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2332E8DC602F174A9F632AE61F76D0DCCAD81891.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/2332E8DC602F174A9F632AE61F76D0DCCAD81891.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:9c:ae:2f:29:a6:62:00:63:df:ba:eb:8d:af:62:d7:51:51: 8e:56:31:17:9e:9e:2e:6c:23:0f:70:42:02:4a:ea:98:a5:6c: 3d:0f:61:1d:45:18:1e:db:4a:5b:c9:26:05:9b:00:0f:e2:81: a2:09:ae:7e:b5:ac:b1:e5:ed:da:3a:ed:b4:fa:6a:02:8c:a0: 79:91:ff:e5:43:02:0f:26:dd:e3:1e:de:33:f8:1c:3e:a4:ac: f7:a7:2b:0d:ea:97:48:ae:01:9a:fd:79:9e:ff:16:e4:5a:57: 56:d0:3a:c3:96:75:2f:d3:71:40:17:07:94:45:c5:4c:a5:ea: aa:c4:a9:94:0a:7c:f9:39:70:e2:99:5d:f2:dd:80:5d:81:88: 2a:17:9e:b5:8d:bd:4b:69:65:f7:06:6f:a1:5c:ee:2b:4d:55: 89:03:87:8a:fd:bc:4b:ca:19:a7:93:80:c6:02:b4:43:17:1d: c5:a6:b4:21:d5:3d:c6:e2:7e:c8:c8:03:63:ba:fc:de:28:53: af:78:5f:a0:5c:8f:19:f8:f0:a8:96:1b:5f:b2:76:d6:04:8c: 84:7f:7f:f8:f8:2a:0f:b8:62:10:82:3e:6a:24:47:e7:6d:8b: 8e:40:c6:d8:ae:2b:68:f0:6d:27:62:cf:78:e1:50:66:b8:4a: 11:9b:72:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMWvkAiINPaHcrEl2/CW34/kmC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQwREND QUQ4MTg5MTAeFw0yNjEwMjQwNzQ4NDdaFw0yNjEwMjUxMTAwNDdaMDMxMTAvBgNV BAMTKDA5NENDQTNERkNCMkUxM0FEREYxMzc1RTg4QzQzNjMzQTk4MDdDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuikwcHhMILSckBmFrl/Reqhih jg5AeaJRr9ocDM0+tgPT1lEKFkjlz9NTDO4rZ8lDPM17kfIkiz/shvQcZl+ONDLU 6WqLVas0rbsynyrRda3JFHx7mQmew2Gzt1bB7grmI2Qhg2/luhty0cq4vKLRxytU s+frvgK56lPlk/4MKFve7w0WxiIYIzgwG88M8sKcspGZgKkxr6AgzhIZgcm35fN1 DoA8RHPkxSo3K/zkXo59UUQfCQGKPfgVf8EBEGRvQfIwAcNMptSBcNu1bpEa4sks lxX6rjwjfvoALE558wZD11EC3vH5O+riud3BumQZFzd1cIwLbFYRKMe0n1APAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCUzKPfyy4Trd8TdeiMQ2M6mAfFwwHwYDVR0j BBgwFoAUIzLo3GAvF0qfYyrmH3bQ3MrYGJEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ3YzZlY2ItMGJhZS00NWMzLWFhZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2 MDJGMTc0QTlGNjMyQUU2MUY3NkQwRENDQUQ4MTg5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzMyRThEQzYwMkYxNzRBOUY2MzJBRTYxRjc2RDBEQ0NBRDgx ODkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMjMzMkU4REM2MDJGMTc0QTlGNjMyQUU2MUY3NkQw RENDQUQ4MTg5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6cri8ppmIAY9+6642vYtdRUY5WMReeni5s Iw9wQgJK6pilbD0PYR1FGB7bSlvJJgWbAA/igaIJrn61rLHl7do67bT6agKMoHmR /+VDAg8m3eMe3jP4HD6krPenKw3ql0iuAZr9eZ7/FuRaV1bQOsOWdS/TcUAXB5RF xUyl6qrEqZQKfPk5cOKZXfLdgF2BiCoXnrWNvUtpZfcGb6Fc7itNVYkDh4r9vEvK GaeTgMYCtEMXHcWmtCHVPcbifsjIA2O6/N4oU694X6Bcjxn48KiWG1+ydtYEjIR/ f/j4Kg+4YhCCPmokR+dti45AxtiuK2jwbSdiz3jhUGa4ShGbcms= -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:52 2026 by rpki-client