$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: /othPcj3fIUZqF9dHcgqzaIjzv8WV7Pk2Fu13pjSGDs= Subject key identifier: BB:F6:EC:D1:78:32:4D:9B:A0:CE:8E:2B:08:6E:12:F0:B2:6E:E1:B4 Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 674E7AC6CBF853FF4CC9D6F58C8EE657C0AB75AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 16:51:57 +0000 Manifest this update: Wed 23 Sep 2026 16:46:57 +0000 Manifest next update: Thu 24 Sep 2026 18:59:57 +0000 Files and hashes: 1: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) 2: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: 8VTOl7tdmEJR0iEN+aPiOthYjFBKLueoPq8kVpaSM8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4e:7a:c6:cb:f8:53:ff:4c:c9:d6:f5:8c:8e:e6:57:c0:ab:75:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: Sep 23 16:46:57 2026 GMT Not After : Sep 24 18:59:57 2026 GMT Subject: CN=BBF6ECD178324D9BA0CE8E2B086E12F0B26EE1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:94:df:6a:dd:44:8b:6d:ff:e9:56:06:17: e3:dc:42:67:2e:ec:99:41:e6:ab:ff:bb:7a:74:d9: ef:ab:6d:7f:6b:d1:c7:07:a6:82:7b:77:fc:96:b4: c8:39:d1:c7:3d:37:42:55:64:02:be:60:61:14:ec: 3a:42:60:96:af:cb:13:15:f2:c5:b1:20:3a:8c:5d: ab:4b:7e:43:ac:91:40:28:d5:4b:3d:9b:d7:90:2e: 55:c7:ce:d6:d4:00:11:d5:63:f2:02:e9:f6:0b:f8: 66:d4:20:e4:c7:2d:0e:2f:28:a5:3e:bd:e8:3d:cb: fa:2b:ab:a8:bd:68:8a:fb:0f:e7:cb:07:1d:2b:44: 37:76:57:be:54:48:7f:4b:c6:9d:45:39:e7:8d:cf: 79:c7:24:6c:3e:0b:9f:ba:72:24:a3:98:0d:aa:df: da:9f:54:33:fa:a1:66:f7:e4:a8:99:6c:a1:ed:81: b3:08:fe:e2:e0:14:a3:b5:09:24:31:55:21:f8:77: 71:7c:51:bc:46:1a:42:1a:8d:95:3b:b3:19:f2:ea: 85:ee:b4:73:d5:4d:4c:0d:b6:37:18:2e:ef:29:77: b0:3e:d8:8a:2d:3f:44:5c:c4:dd:4d:c8:72:e0:f3: 90:13:f5:dc:50:8c:2b:b1:9e:8a:f5:77:0b:0a:1e: f2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F6:EC:D1:78:32:4D:9B:A0:CE:8E:2B:08:6E:12:F0:B2:6E:E1:B4 X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:98:49:57:28:10:ad:52:36:bb:cd:56:a3:8c:ea:1c:f9:5d: c8:3b:d5:3f:da:7c:72:3e:87:1e:1c:7d:37:81:05:ec:9f:a3: 2b:d6:3a:b4:a9:00:03:13:4e:5d:7c:77:87:4f:8a:53:ea:3a: b7:e7:3e:a4:28:ca:85:85:82:44:0c:31:4c:d3:35:8e:b2:a8: bb:f0:93:90:f2:83:d7:d7:14:23:b2:a2:da:25:bd:ee:44:61: f3:b5:9b:9f:a8:36:64:62:ea:d7:e3:11:d4:6b:13:32:fb:fd: 4b:b6:ab:1f:a1:40:26:e0:5b:fe:26:77:20:77:45:aa:af:c7: 25:13:35:94:b2:d8:61:78:68:ac:6c:ca:30:5d:b4:68:5b:2b: 4f:ff:6f:d8:23:a8:9d:d3:67:9c:13:5e:9f:ec:0a:b9:26:c6: 80:0d:83:91:87:1a:c3:66:3d:53:0f:4b:a5:51:cd:aa:67:19: 1c:96:8c:1d:f0:ce:f9:db:d7:3d:24:52:39:e1:03:8b:b2:c8: 6d:f0:f1:c5:3b:e4:40:8b:d5:45:46:aa:f5:1b:c1:73:0a:52: 5e:3e:45:1f:aa:d2:3e:92:f7:e1:e3:c2:a0:9f:ba:33:64:6b: f7:6c:ac:c3:58:6c:55:33:7e:a1:26:cd:c8:f0:c1:9c:9b:39: 1f:cc:e5:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ056xsv4U/9Mydb1jI7mV8Crda0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjA5MjMxNjQ2NTdaFw0yNjA5MjQxODU5NTdaMDMxMTAvBgNV BAMTKEJCRjZFQ0QxNzgzMjREOUJBMENFOEUyQjA4NkUxMkYwQjI2RUUxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FJTfat1Ei23/6VYGF+PcQmcu 7JlB5qv/u3p02e+rbX9r0ccHpoJ7d/yWtMg50cc9N0JVZAK+YGEU7DpCYJavyxMV 8sWxIDqMXatLfkOskUAo1Us9m9eQLlXHztbUABHVY/IC6fYL+GbUIOTHLQ4vKKU+ veg9y/orq6i9aIr7D+fLBx0rRDd2V75USH9Lxp1FOeeNz3nHJGw+C5+6ciSjmA2q 39qfVDP6oWb35KiZbKHtgbMI/uLgFKO1CSQxVSH4d3F8UbxGGkIajZU7sxny6oXu tHPVTUwNtjcYLu8pd7A+2IotP0RcxN1NyHLg85AT9dxQjCuxnor1dwsKHvKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu/bs0XgyTZugzo4rCG4S8LJu4bQwHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmYSVcoEK1SNrvNVqOM6hz5Xcg71T/afHI+ hx4cfTeBBeyfoyvWOrSpAAMTTl18d4dPilPqOrfnPqQoyoWFgkQMMUzTNY6yqLvw k5Dyg9fXFCOyotolve5EYfO1m5+oNmRi6tfjEdRrEzL7/Uu2qx+hQCbgW/4mdyB3 RaqvxyUTNZSy2GF4aKxsyjBdtGhbK0//b9gjqJ3TZ5wTXp/sCrkmxoANg5GHGsNm PVMPS6VRzapnGRyWjB3wzvnb1z0kUjnhA4uyyG3w8cU75ECL1UVGqvUbwXMKUl4+ RR+q0j6S9+HjwqCfujNka/dsrMNYbFUzfqEmzcjwwZybOR/M5dI= -----END CERTIFICATE-----Generated at Wed Sep 23 23:08:29 2026 by rpki-client