$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft File: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft (raw, json) Hash identifier: 9TvDdAA45zdtc4k64RUksMMi+bLe0T5FEOzrIxos1ok= Subject key identifier: CE:25:1E:AD:1A:5A:5D:88:A4:5B:A8:0E:ED:3F:9A:37:16:57:8D:01 Authority key identifier: 83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 Certificate issuer: /CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Certificate serial: 1E52EDC8C399669624B20CD0322B1CF688B74A84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft Manifest number: EA Signing time: Sun 25 Oct 2026 07:25:41 +0000 Manifest this update: Sun 25 Oct 2026 07:20:41 +0000 Manifest next update: Mon 26 Oct 2026 08:06:41 +0000 Files and hashes: 1: 832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl (hash: gT6cLZktfv5i9jwBVUzgqdTCzohir9K2vkREsGrsTYk=) 2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: rJ0RuaPqeHdzv0NiG8lmzkirR+rqM1xOWW0dZ1tCox0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:52:ed:c8:c3:99:66:96:24:b2:0c:d0:32:2b:1c:f6:88:b7:4a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832F02E14024306C306557A71E0BFA2F2F3A8DD1 Validity Not Before: Oct 25 07:20:41 2026 GMT Not After : Oct 26 08:06:41 2026 GMT Subject: CN=CE251EAD1A5A5D88A45BA80EED3F9A3716578D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:7a:be:d6:7b:3f:4b:34:35:a8:60:80:52: 7f:26:1a:a2:8c:81:2b:89:16:fe:be:e3:b7:35:d0: 57:45:5c:aa:29:b4:af:9a:57:57:6f:45:1a:28:a5: c8:b0:39:56:0d:7d:ca:88:d3:2f:b2:fb:aa:8e:d9: 34:3e:b3:4c:da:1a:c4:56:9b:10:c1:3f:e5:d3:07: ba:36:ef:9a:ed:e9:15:9a:ff:8d:4d:9d:20:06:b4: 68:14:2f:2f:da:b5:19:25:b2:80:ed:7c:1a:46:43: 2e:31:ef:e9:71:0b:18:b3:8f:71:75:3d:aa:02:b0: 64:68:38:65:ff:2d:dc:ec:9b:82:bf:c7:1c:8c:8b: 58:b9:ac:0e:b9:09:74:76:bb:23:7c:9c:e4:f3:bf: 78:25:cd:5f:a1:bc:1f:e7:a5:38:ca:2f:c3:d7:7f: ef:ce:5e:65:86:13:c6:55:f2:6d:d8:ef:6c:ca:78: da:22:a0:f6:e3:8d:08:ea:2a:ba:7e:49:65:ee:1e: 95:b2:4f:fe:2d:60:74:d1:4d:f1:d1:a9:75:4d:b8: 45:98:32:9d:a6:f1:20:87:61:07:ae:c1:ee:d3:45: ee:51:4f:b1:df:4c:17:bc:e0:ff:6e:19:6e:c4:07: 28:3d:69:d3:47:e1:d2:80:1a:ed:88:f7:0f:b5:54: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:1E:AD:1A:5A:5D:88:A4:5B:A8:0E:ED:3F:9A:37:16:57:8D:01 X509v3 Authority Key Identifier: keyid:83:2F:02:E1:40:24:30:6C:30:65:57:A7:1E:0B:FA:2F:2F:3A:8D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/832F02E14024306C306557A71E0BFA2F2F3A8DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/832F02E14024306C306557A71E0BFA2F2F3A8DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b5:71:9a:fb:96:ed:4f:f6:31:f8:da:2f:59:c0:c6:ff:6f: 37:73:d6:b9:63:22:3c:b8:67:b3:18:4f:55:05:d6:d7:4b:f4: f8:d8:6b:20:0a:26:21:e6:87:e0:a8:cd:9c:f3:d9:e2:0b:6b: 58:f3:27:b7:7c:bf:6c:c6:1e:bd:08:80:b9:9d:66:a5:d4:82: aa:5d:d1:e4:0f:de:22:e1:8e:91:c4:2b:a7:97:89:2c:15:56: d4:85:1b:36:2c:9b:cd:d0:f0:8f:2d:dc:aa:9c:0d:b1:86:c3: 6d:8d:0e:6a:4c:8c:7e:f9:9a:4f:69:e8:14:07:a9:0f:66:3a: bd:04:33:b3:2c:5b:a8:71:ec:a1:c8:e0:97:29:b1:57:54:58: b5:d4:cf:6d:52:a1:10:af:43:44:e1:93:02:90:d1:75:3b:2e: 62:6a:4a:55:58:4d:f8:20:74:72:60:3f:fb:62:e7:99:f4:45: 56:1c:b1:60:a5:4a:5f:f8:20:a5:d7:b4:71:91:e4:6d:07:1a: 64:80:2a:1a:39:00:00:14:00:78:58:38:04:8d:cc:c4:34:81: 11:7f:56:60:0b:f3:e9:20:75:10:77:d2:f8:b9:c5:04:03:70: 24:c7:06:b8:4f:d2:5a:10:ab:c4:d7:cc:52:c9:08:51:a1:4c: bc:22:da:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlLtyMOZZpYksgzQMisc9oi3SoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYy RjNBOEREMTAeFw0yNjEwMjUwNzIwNDFaFw0yNjEwMjYwODA2NDFaMDMxMTAvBgNV BAMTKENFMjUxRUFEMUE1QTVEODhBNDVCQTgwRUVEM0Y5QTM3MTY1NzhEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo13q+1ns/SzQ1qGCAUn8mGqKM gSuJFv6+47c10FdFXKoptK+aV1dvRRoopciwOVYNfcqI0y+y+6qO2TQ+s0zaGsRW mxDBP+XTB7o275rt6RWa/41NnSAGtGgULy/atRklsoDtfBpGQy4x7+lxCxizj3F1 PaoCsGRoOGX/Ldzsm4K/xxyMi1i5rA65CXR2uyN8nOTzv3glzV+hvB/npTjKL8PX f+/OXmWGE8ZV8m3Y72zKeNoioPbjjQjqKrp+SWXuHpWyT/4tYHTRTfHRqXVNuEWY Mp2m8SCHYQeuwe7TRe5RT7HfTBe84P9uGW7EByg9adNH4dKAGu2I9w+1VN55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUziUerRpaXYikW6gO7T+aNxZXjQEwHwYDVR0j BBgwFoAUgy8C4UAkMGwwZVenHgv6Ly86jdEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwZmExNGEtYWFhYy00MGY0LTljODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0 MDI0MzA2QzMwNjU1N0E3MUUwQkZBMkYyRjNBOEREMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzJGMDJFMTQwMjQzMDZDMzA2NTU3QTcxRTBCRkEyRjJGM0E4 REQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvODMyRjAyRTE0MDI0MzA2QzMwNjU1N0E3MUUwQkZB MkYyRjNBOEREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe1cZr7lu1P9jH42i9ZwMb/bzdz1rljIjy4 Z7MYT1UF1tdL9PjYayAKJiHmh+CozZzz2eILa1jzJ7d8v2zGHr0IgLmdZqXUgqpd 0eQP3iLhjpHEK6eXiSwVVtSFGzYsm83Q8I8t3KqcDbGGw22NDmpMjH75mk9p6BQH qQ9mOr0EM7MsW6hx7KHI4JcpsVdUWLXUz21SoRCvQ0ThkwKQ0XU7LmJqSlVYTfgg dHJgP/ti55n0RVYcsWClSl/4IKXXtHGR5G0HGmSAKho5AAAUAHhYOASNzMQ0gRF/ VmAL8+kgdRB30vi5xQQDcCTHBrhP0loQq8TXzFLJCFGhTLwi2nc= -----END CERTIFICATE-----Generated at Sun Oct 25 20:04:52 2026 by rpki-client