$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft File: 32857E62250C763037D1ED291D7937072EB50DC5.mft (raw, json) Hash identifier: 8467/hk7QRzgBCq+78vM7YN6mxDYDe5yI3ZVnXRhriM= Subject key identifier: 39:F7:63:C4:87:69:7A:7A:34:B7:03:0B:D6:19:88:BF:10:52:72:2F Authority key identifier: 32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 Certificate issuer: /CN=32857E62250C763037D1ED291D7937072EB50DC5 Certificate serial: 5E1FC1CEB8308F443EAB47498A4DB867E4CCEB05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:30:02 +0000 Manifest this update: Thu 23 Jul 2026 16:25:02 +0000 Manifest next update: Fri 24 Jul 2026 20:20:02 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: bObGNzkzxqsMtfGussqQMllg3CDeiOkWDE0MTteiGhQ=) 2: 32857E62250C763037D1ED291D7937072EB50DC5.crl (hash: +x3gBYl6uasqgjn5ygt0/mj+l9w6qGSNA1AUCWgTts8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1f:c1:ce:b8:30:8f:44:3e:ab:47:49:8a:4d:b8:67:e4:cc:eb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32857E62250C763037D1ED291D7937072EB50DC5 Validity Not Before: Jul 23 16:25:02 2026 GMT Not After : Jul 24 20:20:02 2026 GMT Subject: CN=39F763C487697A7A34B7030BD61988BF1052722F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d9:28:18:53:2d:26:b5:54:63:99:3e:44:0d: 30:d5:60:e0:8c:ae:8d:6b:ef:69:d4:92:6e:b2:a2: f3:87:de:32:4e:e7:f5:67:6a:7b:ce:0e:5f:db:d4: 15:4a:fb:12:f1:c2:2f:54:ea:7b:a6:e4:f1:4b:e5: 45:38:34:ed:7d:1e:67:95:6f:83:b9:88:70:f8:71: af:f8:a9:34:a6:20:ba:f8:88:cf:e6:bb:59:31:8b: c5:9e:85:df:37:c3:0d:d1:11:b2:eb:41:05:e2:ad: 3f:18:e8:fa:56:45:c1:05:29:ef:4d:59:49:0c:86: 3f:d4:4c:a1:ae:fe:50:e7:8e:ab:cb:d8:e2:b0:fc: c8:f2:8a:c1:11:45:ff:bc:e1:df:2b:2c:ed:44:da: 34:79:f7:f5:56:57:cb:2a:4d:40:73:7e:39:46:61: e1:b8:ee:c9:13:e2:71:9b:f7:49:a8:c1:69:a6:4d: 8f:f1:94:16:d5:12:51:1a:0b:0e:80:59:8d:2e:a5: aa:6b:3e:7f:37:69:15:34:55:da:90:50:66:e7:d8: 6b:72:bb:c7:b0:2e:3b:a3:69:31:5a:3d:ca:53:5b: 52:31:1b:1d:84:1d:54:17:08:f9:5f:32:29:3a:ff: 69:22:4d:e3:1c:7d:af:b7:7e:85:88:8b:92:80:48: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F7:63:C4:87:69:7A:7A:34:B7:03:0B:D6:19:88:BF:10:52:72:2F X509v3 Authority Key Identifier: keyid:32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7a:1c:5e:8f:6d:f8:35:30:f8:b1:2d:0f:5b:ca:ea:1a:db: 9d:41:9b:b3:11:01:26:6f:1b:8f:53:e3:03:4b:22:dc:c3:5c: dc:29:84:ad:6e:cd:db:13:f8:a6:e2:cb:1b:3e:70:9f:30:75: 53:17:46:c7:f6:6d:d5:ad:9e:d0:16:01:51:1c:a2:90:42:2f: ba:bf:c4:3f:99:fe:b9:9a:3b:46:7f:9f:f5:7a:1c:e8:8e:27: 37:c0:fc:c1:ac:cc:a4:f9:24:05:b9:df:4f:fa:04:29:1c:f7: 10:4e:76:37:88:6a:2f:f1:a3:3d:38:e4:86:17:43:18:5c:1e: 16:89:9c:5c:2c:e8:47:4b:8e:95:33:11:7e:ac:05:44:11:b4: 8c:ca:81:57:ff:0a:8b:32:7f:1a:96:20:9b:6f:4e:33:88:16: ab:5d:6d:4c:47:fd:8a:e3:83:02:55:cb:35:10:fc:70:88:fe: 6d:a5:b2:36:67:b6:40:d1:c0:4e:42:2d:d8:cf:0a:f4:d6:26: 7e:c9:c4:b4:93:b5:c3:ca:89:9b:bf:fa:c0:c3:40:85:1e:29: 6d:55:60:b1:f1:e0:63:4f:18:14:46:95:2f:cd:fb:c7:f6:06: d1:ca:b6:9e:e2:35:3c:04:61:5a:e0:c5:bb:6b:fd:18:26:dc: 6b:ef:25:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXh/Bzrgwj0Q+q0dJik24Z+TM6wUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcy RUI1MERDNTAeFw0yNjA3MjMxNjI1MDJaFw0yNjA3MjQyMDIwMDJaMDMxMTAvBgNV BAMTKDM5Rjc2M0M0ODc2OTdBN0EzNEI3MDMwQkQ2MTk4OEJGMTA1MjcyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO2SgYUy0mtVRjmT5EDTDVYOCM ro1r72nUkm6yovOH3jJO5/VnanvODl/b1BVK+xLxwi9U6num5PFL5UU4NO19HmeV b4O5iHD4ca/4qTSmILr4iM/mu1kxi8Wehd83ww3REbLrQQXirT8Y6PpWRcEFKe9N WUkMhj/UTKGu/lDnjqvL2OKw/MjyisERRf+84d8rLO1E2jR59/VWV8sqTUBzfjlG YeG47skT4nGb90mowWmmTY/xlBbVElEaCw6AWY0upaprPn83aRU0VdqQUGbn2Gty u8ewLjujaTFaPcpTW1IxGx2EHVQXCPlfMik6/2kiTeMcfa+3foWIi5KASIA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfdjxIdpeno0twML1hmIvxBSci8wHwYDVR0j BBgwFoAUMoV+YiUMdjA30e0pHXk3By61DcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWQwMTItYWZkYi00MmZiLTk3MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIy NTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcyRUI1MERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1N0U2MjI1MEM3NjMwMzdEMUVEMjkxRDc5MzcwNzJFQjUw REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3 MDcyRUI1MERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD56HF6Pbfg1MPixLQ9byuoa251Bm7MRASZv G49T4wNLItzDXNwphK1uzdsT+Kbiyxs+cJ8wdVMXRsf2bdWtntAWAVEcopBCL7q/ xD+Z/rmaO0Z/n/V6HOiOJzfA/MGszKT5JAW530/6BCkc9xBOdjeIai/xoz045IYX QxhcHhaJnFws6EdLjpUzEX6sBUQRtIzKgVf/CosyfxqWIJtvTjOIFqtdbUxH/Yrj gwJVyzUQ/HCI/m2lsjZntkDRwE5CLdjPCvTWJn7JxLSTtcPKiZu/+sDDQIUeKW1V YLHx4GNPGBRGlS/N+8f2BtHKtp7iNTwEYVrgxbtr/Rgm3GvvJXU= -----END CERTIFICATE-----Generated at Fri Jul 24 02:40:47 2026 by rpki-client