$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: kERgwmgd1/KyG37aSPYLM4875Ju/gneWR7rb/HDRIJQ= Subject key identifier: DA:F0:D8:6D:D6:DB:00:1A:C9:D4:5C:29:FA:FE:E6:FF:E4:52:19:B1 Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 7599E898B7C75855555C6C6BEBA1AEC5FD43372D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:44:08 +0000 Manifest this update: Tue 12 May 2026 07:39:08 +0000 Manifest next update: Wed 13 May 2026 08:16:08 +0000 Files and hashes: 1: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) 2: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: CGwVwoNKqT+jA8GOVGG4dCsz8TyIWnEl8Ujz+wVwSNo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:99:e8:98:b7:c7:58:55:55:5c:6c:6b:eb:a1:ae:c5:fd:43:37:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: May 12 07:39:08 2026 GMT Not After : May 13 08:16:08 2026 GMT Subject: CN=DAF0D86DD6DB001AC9D45C29FAFEE6FFE45219B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:8c:ce:31:5d:91:01:dd:f8:e1:49:fd:c9: ec:f3:35:9e:48:b9:9f:52:f1:38:38:9a:f9:8d:86: de:e6:39:25:3a:f4:f6:97:d4:fc:2c:35:7d:3b:46: b1:89:48:13:af:0c:94:9f:4b:fe:72:35:7f:e8:e4: c4:5f:8e:ba:3f:34:0f:3e:5b:21:80:b9:86:7c:a9: 04:85:a5:72:1c:44:0a:c1:88:52:c8:cb:3c:82:95: cc:6d:8b:f8:e2:34:02:38:6b:f4:3a:9c:da:d2:68: 4f:67:f1:59:15:88:ec:ba:4c:13:1e:03:51:10:7f: 13:c5:a9:e3:a6:d0:04:3b:49:b5:c2:1d:b5:0c:b2: f8:bf:be:35:a7:fc:ae:93:d6:c8:06:33:49:56:17: 78:aa:1d:3e:53:f4:8a:bd:95:0e:b8:69:33:a5:bd: e9:85:24:81:7c:06:ef:35:3a:a9:70:04:00:85:9e: 59:75:b5:6a:50:ae:84:23:9f:e2:dd:8a:1f:f3:0a: 1a:b3:17:9c:89:c8:27:ed:48:83:75:67:9f:a6:da: f2:22:61:f9:c7:c5:5f:e9:f7:51:12:1f:a4:4b:9f: 03:74:f2:6c:02:3c:00:d4:fe:ab:7b:b8:07:04:e9: 3b:9b:a9:1c:4f:a5:b1:a0:1b:60:5c:6c:2e:e0:52: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F0:D8:6D:D6:DB:00:1A:C9:D4:5C:29:FA:FE:E6:FF:E4:52:19:B1 X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:48:95:85:dc:d8:d5:0e:9a:56:83:2a:43:5c:4a:b1:26:11: 9e:12:82:82:60:e2:49:34:f3:25:52:be:48:18:df:9f:c1:36: f4:fa:f4:81:0c:3a:3f:c0:95:66:1b:a6:9c:09:35:3d:09:a0: c4:e1:1d:f7:e8:e7:ed:ac:eb:5a:a1:1a:fc:8c:21:ce:02:1e: 90:9b:72:06:58:88:45:1d:b9:6d:10:32:97:f3:a9:aa:be:fa: c1:9b:0b:eb:58:c6:96:8c:5d:a3:51:f1:7a:66:7c:9a:bf:dd: 9c:76:92:e6:20:d4:de:fa:e0:cb:a0:b4:b9:48:a6:37:3f:12: 0a:3c:14:d0:14:9e:d8:0f:6c:9f:5d:9b:b1:76:05:e6:60:85: 87:e1:a4:48:e5:1c:da:f6:0d:17:ad:8a:89:ec:d4:77:2c:81: 65:1a:09:43:7e:b0:43:ef:70:9c:0f:14:3e:37:4d:ba:13:54: 9f:40:2c:15:c0:93:de:d5:f2:27:47:e1:71:33:db:2e:94:3b: 00:fc:eb:84:ba:54:70:b1:a2:7c:0b:2f:1e:b9:81:1b:16:8a: 45:cf:a7:88:b4:0d:b5:67:61:e0:7f:1b:89:58:7f:b9:ec:59: fe:0f:c7:81:69:4a:a2:df:9f:45:cd:a0:8f:00:0f:6d:d4:79: 1c:aa:d5:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZnomLfHWFVVXGxr66Guxf1DNy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjA1MTIwNzM5MDhaFw0yNjA1MTMwODE2MDhaMDMxMTAvBgNV BAMTKERBRjBEODZERDZEQjAwMUFDOUQ0NUMyOUZBRkVFNkZGRTQ1MjE5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD44zOMV2RAd344Un9yezzNZ5I uZ9S8Tg4mvmNht7mOSU69PaX1PwsNX07RrGJSBOvDJSfS/5yNX/o5MRfjro/NA8+ WyGAuYZ8qQSFpXIcRArBiFLIyzyClcxti/jiNAI4a/Q6nNrSaE9n8VkViOy6TBMe A1EQfxPFqeOm0AQ7SbXCHbUMsvi/vjWn/K6T1sgGM0lWF3iqHT5T9Iq9lQ64aTOl vemFJIF8Bu81OqlwBACFnll1tWpQroQjn+Ldih/zChqzF5yJyCftSIN1Z5+m2vIi YfnHxV/p91ESH6RLnwN08mwCPADU/qt7uAcE6TubqRxPpbGgG2BcbC7gUhuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2vDYbdbbABrJ1Fwp+v7m/+RSGbEwHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdIlYXc2NUOmlaDKkNcSrEmEZ4SgoJg4kk0 8yVSvkgY35/BNvT69IEMOj/AlWYbppwJNT0JoMThHffo5+2s61qhGvyMIc4CHpCb cgZYiEUduW0QMpfzqaq++sGbC+tYxpaMXaNR8XpmfJq/3Zx2kuYg1N764MugtLlI pjc/Ego8FNAUntgPbJ9dm7F2BeZghYfhpEjlHNr2DRetions1HcsgWUaCUN+sEPv cJwPFD43TboTVJ9ALBXAk97V8idH4XEz2y6UOwD864S6VHCxonwLLx65gRsWikXP p4i0DbVnYeB/G4lYf7nsWf4Px4FpSqLfn0XNoI8AD23UeRyq1TU= -----END CERTIFICATE-----Generated at Wed May 13 01:07:18 2026 by rpki-client