$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: LbQhUep9DZ8oMpyEG0+fpErxdBhqXXwjVqIswPdQYs8= Subject key identifier: 15:49:50:9F:A7:A1:15:E4:72:C9:BE:FF:B3:37:3F:64:1B:D7:26:A4 Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 0D3DE2A93158DC4F922CE262076A5E7CC1CD98DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 06:07:28 +0000 Manifest this update: Thu 23 Jul 2026 06:02:28 +0000 Manifest next update: Fri 24 Jul 2026 08:56:28 +0000 Files and hashes: 1: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) 2: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: ym6abk2jv0QAq9YdTXuJAxVa8VrGJYalhyHZfY9cRwo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3d:e2:a9:31:58:dc:4f:92:2c:e2:62:07:6a:5e:7c:c1:cd:98:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: Jul 23 06:02:28 2026 GMT Not After : Jul 24 08:56:28 2026 GMT Subject: CN=1549509FA7A115E472C9BEFFB3373F641BD726A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:86:6b:9c:eb:d6:24:27:ab:30:35:80:5e: ff:ac:2f:bc:09:f8:79:71:ed:77:f7:46:f2:f7:e3: fc:7a:d1:be:fb:92:1b:41:ac:d9:3b:61:f4:79:ff: 54:85:15:a2:a2:92:e6:2e:97:98:fc:f1:6d:86:5f: 07:88:42:3e:d9:83:97:20:6d:54:aa:4b:e7:fb:0e: 00:87:45:90:c4:70:cd:c2:b8:79:ae:b0:a2:6b:01: 28:97:27:73:69:74:ea:30:3a:8e:61:1e:38:da:c2: 3e:9b:12:97:72:2c:cc:14:bb:c6:bc:98:75:61:6c: c3:70:64:da:f4:7b:93:f5:df:6b:90:3a:1b:00:3d: cb:fc:1c:a2:9e:b6:b9:30:cc:b9:bb:ae:29:c0:a1: c9:b3:ee:11:cd:24:6c:86:f7:22:4c:c2:95:41:8e: 99:87:a2:c0:60:b4:d6:83:cf:a8:9c:5c:0d:e7:f2: f2:4b:94:b9:26:0f:90:62:b4:e1:bc:f3:94:a0:7f: 4f:2b:34:99:bb:d7:ca:e9:54:40:45:87:8e:e4:66: b3:c2:ba:ce:50:0f:f8:4f:08:77:74:9c:ba:4d:ed: 9a:32:73:fe:62:ef:2c:7a:3f:ec:f1:e3:02:5a:72: 88:72:a2:52:01:1b:0d:be:f8:7a:57:15:e8:87:be: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:49:50:9F:A7:A1:15:E4:72:C9:BE:FF:B3:37:3F:64:1B:D7:26:A4 X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:e3:2f:cd:94:7a:b3:17:35:5c:f2:2f:26:db:27:a3:4c:f8: f7:f3:0a:95:58:66:b2:81:ef:8f:cb:a4:c7:07:9e:62:d5:f5: a1:e0:10:98:7c:51:4d:d3:7c:06:8e:e9:b8:8e:98:0d:a4:05: be:a8:5c:f0:ed:cf:5b:4e:80:3f:bc:45:c7:06:8d:d9:e3:64: 04:50:5c:fe:c6:a5:25:19:a0:d9:05:9f:cc:e3:8e:e9:a3:92: 19:99:44:5e:f1:21:ef:26:cf:23:f2:3b:99:06:cf:bd:19:ac: de:99:2a:9f:58:a1:ad:c6:f1:a2:40:75:a9:50:84:5b:d1:bc: f1:f2:04:3f:05:66:df:f8:2a:05:1c:c4:ab:ef:b3:96:68:17: 43:6d:3d:a1:a4:a8:45:6b:70:35:ac:25:dc:94:de:91:a1:3b: d4:f2:6b:78:b1:82:4d:95:41:3e:da:4a:5b:7f:4d:8c:54:a1: 91:e8:a8:34:68:5f:ac:4e:38:aa:b4:69:86:fa:3e:c2:d1:73: e7:66:eb:11:ac:0f:24:40:5f:9d:6b:ea:e6:c3:7a:d6:70:57: d2:c3:93:c2:46:8c:9b:ab:aa:eb:cb:54:1b:8a:75:9f:7e:db: 2e:1b:4b:a9:f1:cc:86:42:90:07:fb:d0:68:3e:c6:e2:7d:11: 47:4e:b2:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDT3iqTFY3E+SLOJiB2pefMHNmNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjA3MjMwNjAyMjhaFw0yNjA3MjQwODU2MjhaMDMxMTAvBgNV BAMTKDE1NDk1MDlGQTdBMTE1RTQ3MkM5QkVGRkIzMzczRjY0MUJENzI2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHn4ZrnOvWJCerMDWAXv+sL7wJ +Hlx7Xf3RvL34/x60b77khtBrNk7YfR5/1SFFaKikuYul5j88W2GXweIQj7Zg5cg bVSqS+f7DgCHRZDEcM3CuHmusKJrASiXJ3NpdOowOo5hHjjawj6bEpdyLMwUu8a8 mHVhbMNwZNr0e5P132uQOhsAPcv8HKKetrkwzLm7rinAocmz7hHNJGyG9yJMwpVB jpmHosBgtNaDz6icXA3n8vJLlLkmD5BitOG885Sgf08rNJm718rpVEBFh47kZrPC us5QD/hPCHd0nLpN7Zoyc/5i7yx6P+zx4wJacohyolIBGw2++HpXFeiHvoUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUlQn6ehFeRyyb7/szc/ZBvXJqQwHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN/jL82UerMXNVzyLybbJ6NM+PfzCpVYZrKB 74/LpMcHnmLV9aHgEJh8UU3TfAaO6biOmA2kBb6oXPDtz1tOgD+8RccGjdnjZARQ XP7GpSUZoNkFn8zjjumjkhmZRF7xIe8mzyPyO5kGz70ZrN6ZKp9Yoa3G8aJAdalQ hFvRvPHyBD8FZt/4KgUcxKvvs5ZoF0NtPaGkqEVrcDWsJdyU3pGhO9Tya3ixgk2V QT7aSlt/TYxUoZHoqDRoX6xOOKq0aYb6PsLRc+dm6xGsDyRAX51r6ubDetZwV9LD k8JGjJurquvLVBuKdZ9+2y4bS6nxzIZCkAf70Gg+xuJ9EUdOstw= -----END CERTIFICATE-----Generated at Fri Jul 24 02:32:54 2026 by rpki-client