$ rpki-client -vvf rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft File: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft (raw, json) Hash identifier: cdcpexq0xdn3hW44uQdCveCpvF/bfq5OJIm8IU7CCBo= Subject key identifier: DD:A3:AE:B9:B8:1F:95:B0:03:49:49:A9:B5:85:F0:44:B3:18:B0:91 Authority key identifier: 32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 Certificate issuer: /CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Certificate serial: 762C0C16C326762BFDFD2510FC977E87F4AE53B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:30:03 +0000 Manifest this update: Thu 23 Jul 2026 20:25:03 +0000 Manifest next update: Fri 24 Jul 2026 22:55:03 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: Uh5y0YtfY7V2qTdTkRsIfNJf6g7Mb5/NMceYo7geuVc=) 2: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl (hash: knXyw9ea1SaNSlQIdiP+8Ko44D86/pZImjvj0zgauBM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2c:0c:16:c3:26:76:2b:fd:fd:25:10:fc:97:7e:87:f4:ae:53:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Validity Not Before: Jul 23 20:25:03 2026 GMT Not After : Jul 24 22:55:03 2026 GMT Subject: CN=DDA3AEB9B81F95B0034949A9B585F044B318B091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:f0:56:65:af:49:c9:78:00:b9:61:ab:e1: b4:cf:33:14:99:f2:3a:61:07:65:55:98:21:0f:5c: 8e:21:6c:92:0b:0c:44:59:6e:b6:1e:d5:3b:d1:da: 9d:15:36:10:70:36:6a:e1:f6:5d:5b:87:67:64:bd: 48:b3:fd:ad:33:8b:d4:c4:24:be:a4:d7:2e:03:e0: 65:10:ce:e4:cc:2a:3c:1d:61:cb:35:d3:2d:fe:fe: 3b:d6:bb:a1:7b:8d:a1:30:55:08:a1:d2:bb:09:4c: 56:22:c0:25:3a:b3:71:6e:ea:de:5d:11:a9:c7:b5: 13:22:54:bc:d0:30:ce:fa:b7:d2:7a:ae:b3:76:f5: 1d:3e:9c:03:f7:4e:9e:bb:b2:19:da:7d:c9:6a:c6: 44:ff:3f:27:82:81:8e:a0:f1:8d:0b:38:56:d6:82: 35:bf:e5:53:f2:38:3a:bb:a5:30:f5:3d:b4:06:c3: 63:db:65:63:9e:3a:90:61:da:3f:eb:b3:d8:be:24: 98:c4:0b:8a:ed:bc:55:32:d6:e9:94:81:41:86:3f: d2:f0:1e:be:36:a5:e7:d8:80:5d:74:f6:ac:ca:26: 3c:8c:b0:26:63:39:a7:7f:a9:fa:9a:44:b3:94:af: f0:bb:c2:21:f3:f6:df:c3:b4:ef:77:3f:e8:81:13: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A3:AE:B9:B8:1F:95:B0:03:49:49:A9:B5:85:F0:44:B3:18:B0:91 X509v3 Authority Key Identifier: keyid:32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c2:f0:ee:96:11:0f:a0:67:09:7b:7c:0c:7e:f0:c0:db:b9: 94:13:15:43:f1:7d:dc:c2:eb:b4:1b:33:89:d7:1f:4d:ab:3c: d5:96:a6:38:b3:3a:b9:8a:8a:de:0c:4f:a1:32:58:f5:7c:5a: 6d:cc:01:a5:34:8f:7e:93:06:7c:96:66:0b:55:5e:2f:57:d8: f8:4a:1b:2e:e3:fe:3e:af:b0:04:88:50:6d:96:85:64:a7:fe: 91:f1:c4:d3:1e:62:68:44:d1:3d:d0:6a:e2:24:ae:52:87:76: 38:0a:f1:ac:25:c7:f3:79:32:34:b0:33:77:35:51:c8:e0:bc: 69:0a:85:4e:3d:15:a9:c5:00:71:2d:3e:a2:c9:1e:46:ac:f6: 98:ff:37:3e:57:7b:d6:9e:21:fb:17:90:49:ba:7a:70:98:70: 80:53:d4:6b:7d:df:d3:07:60:ea:01:50:09:26:35:34:b8:4b: ad:97:3a:80:1d:ae:7c:52:96:c0:81:47:68:21:57:ce:4b:72: e3:05:28:0a:13:9b:00:5c:08:4b:82:e0:f5:53:77:e2:3b:bd: c2:68:46:8a:fb:f8:13:1e:05:f2:50:0b:72:e8:83:41:4b:38: d6:37:85:2a:9e:78:25:e3:66:03:3b:16:37:65:ac:e1:14:c4: 43:0d:24:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiwMFsMmdiv9/SUQ/Jd+h/SuU7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0 RDcyQjMyNjAeFw0yNjA3MjMyMDI1MDNaFw0yNjA3MjQyMjU1MDNaMDMxMTAvBgNV BAMTKEREQTNBRUI5QjgxRjk1QjAwMzQ5NDlBOUI1ODVGMDQ0QjMxOEIwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jfBWZa9JyXgAuWGr4bTPMxSZ 8jphB2VVmCEPXI4hbJILDERZbrYe1TvR2p0VNhBwNmrh9l1bh2dkvUiz/a0zi9TE JL6k1y4D4GUQzuTMKjwdYcs10y3+/jvWu6F7jaEwVQih0rsJTFYiwCU6s3Fu6t5d EanHtRMiVLzQMM76t9J6rrN29R0+nAP3Tp67shnafclqxkT/PyeCgY6g8Y0LOFbW gjW/5VPyODq7pTD1PbQGw2PbZWOeOpBh2j/rs9i+JJjEC4rtvFUy1umUgUGGP9Lw Hr42pefYgF109qzKJjyMsCZjOad/qfqaRLOUr/C7wiHz9t/DtO93P+iBE04xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3aOuubgflbADSUmptYXwRLMYsJEwHwYDVR0j BBgwFoAUMrpq7FHqIUu0t0L64uw/DE1ysyYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODExZDlhYmMtNDk4Ny00ZGJjLTk3NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1 MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0RDcyQjMyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkJBNkFFQzUxRUEyMTRCQjRCNzQyRkFFMkVDM0YwQzRENzJC MzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNG MEM0RDcyQjMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3C8O6WEQ+gZwl7fAx+8MDbuZQTFUPxfdzC 67QbM4nXH02rPNWWpjizOrmKit4MT6EyWPV8Wm3MAaU0j36TBnyWZgtVXi9X2PhK Gy7j/j6vsASIUG2WhWSn/pHxxNMeYmhE0T3QauIkrlKHdjgK8awlx/N5MjSwM3c1 UcjgvGkKhU49FanFAHEtPqLJHkas9pj/Nz5Xe9aeIfsXkEm6enCYcIBT1Gt939MH YOoBUAkmNTS4S62XOoAdrnxSlsCBR2ghV85LcuMFKAoTmwBcCEuC4PVTd+I7vcJo Ror7+BMeBfJQC3Log0FLONY3hSqeeCXjZgM7FjdlrOEUxEMNJGA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:16:38 2026 by rpki-client