$ rpki-client -vvf rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft File: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft (raw, json) Hash identifier: 8OzOu1BCd+E5kN0SCz7W6zRpHPagTPvmLw8COkE5WZA= Subject key identifier: 61:F0:E4:CE:BB:B6:8A:1C:1B:1F:20:AE:4A:29:41:99:FF:F6:D7:BF Authority key identifier: 32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 Certificate issuer: /CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Certificate serial: 5EC596D60C0D13FC3CA6C883358CF0824A7E2F6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:46:24 +0000 Manifest this update: Tue 12 May 2026 16:41:24 +0000 Manifest next update: Wed 13 May 2026 16:51:24 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: Uh5y0YtfY7V2qTdTkRsIfNJf6g7Mb5/NMceYo7geuVc=) 2: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl (hash: tf4q8afkaaBDuLHMv28ktkWdHCrVzUfC6b7YlAtGFZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c5:96:d6:0c:0d:13:fc:3c:a6:c8:83:35:8c:f0:82:4a:7e:2f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Validity Not Before: May 12 16:41:24 2026 GMT Not After : May 13 16:51:24 2026 GMT Subject: CN=61F0E4CEBBB68A1C1B1F20AE4A294199FFF6D7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:10:c8:b0:16:81:c6:a5:5c:11:29:86:1e: fd:1e:91:8a:73:69:56:90:61:58:59:b2:d6:e1:98: a2:14:a4:b3:82:90:da:cd:d3:d6:3f:ad:7f:1b:ba: c2:df:54:d7:79:70:8d:f3:75:6b:79:c3:68:8f:b8: 18:86:22:6e:c1:a7:15:e0:be:d5:ec:a8:fa:df:23: f8:7e:c6:30:aa:59:4a:f8:77:e4:a5:53:31:eb:24: ce:a2:01:30:11:95:41:e3:99:23:18:5f:61:91:02: 08:13:50:fa:61:31:c3:2e:e4:35:d7:f2:ee:d7:4a: da:ef:bf:64:4e:4e:e9:e3:9c:7b:a1:3f:57:de:0a: c7:8f:f5:be:27:54:7f:d1:03:88:dd:64:ac:44:42: 1d:f5:3d:5e:00:f3:f2:f1:0f:4d:f8:19:7f:9d:44: ed:e0:aa:3b:2a:b7:95:52:ad:02:2a:bb:43:a5:5f: b6:94:6e:70:ca:15:c4:4c:88:9a:64:bd:3b:57:f4: 9f:4d:06:98:55:32:9c:3a:0e:ca:e5:83:53:ea:59: 51:d1:b6:5f:e2:f4:05:f5:ca:f8:da:d8:ab:68:72: fe:11:e5:eb:44:3a:e4:19:ab:1b:55:ee:b4:f7:e9: 49:b7:a8:34:63:9d:c9:30:0d:3b:94:7e:5c:cb:89: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F0:E4:CE:BB:B6:8A:1C:1B:1F:20:AE:4A:29:41:99:FF:F6:D7:BF X509v3 Authority Key Identifier: keyid:32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4f:ba:6d:a8:b2:ce:a5:18:b2:ce:e5:2e:1d:e0:89:a3:c8: 1f:43:cd:6c:cd:26:75:ce:80:f2:2c:d5:7d:76:9d:d4:c6:3b: f8:3f:3d:66:d2:0d:b9:03:84:1b:ec:5f:4c:d2:7f:72:cb:24: 11:ef:eb:df:18:16:95:f1:80:45:6b:dc:45:38:f2:23:d2:63: 59:e5:5f:09:47:e6:4b:dc:6b:1e:eb:19:63:23:56:7c:4d:f1: aa:94:71:e0:5b:7a:7a:0f:a0:07:99:a6:eb:16:ae:94:ef:80: 8a:e7:fa:e8:53:2f:a4:0d:e5:77:ea:1a:32:3f:f3:d6:0c:db: 2b:1b:f3:ff:d8:80:ec:c6:14:41:e3:92:e7:e1:32:80:de:47: e9:6c:03:61:e0:64:5e:55:1d:a8:63:b2:dd:41:83:5b:c9:31: 19:c8:9d:ee:65:4e:2d:7d:82:c1:5f:12:90:11:6e:19:80:58: cb:5c:76:2b:49:6c:f8:1f:c7:5e:ec:50:51:2c:75:9d:0e:a6: 90:68:96:4b:49:2b:b1:b7:0c:09:1d:48:7d:84:5e:00:7b:fa: 59:d9:4c:79:22:41:2d:9b:d8:37:bb:2f:6c:c4:04:b4:75:82: 99:c7:92:11:f9:66:48:6d:ff:2c:b1:08:54:51:d6:91:17:89: b2:cb:09:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsWW1gwNE/w8psiDNYzwgkp+L24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0 RDcyQjMyNjAeFw0yNjA1MTIxNjQxMjRaFw0yNjA1MTMxNjUxMjRaMDMxMTAvBgNV BAMTKDYxRjBFNENFQkJCNjhBMUMxQjFGMjBBRTRBMjk0MTk5RkZGNkQ3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX9hDIsBaBxqVcESmGHv0ekYpz aVaQYVhZstbhmKIUpLOCkNrN09Y/rX8busLfVNd5cI3zdWt5w2iPuBiGIm7BpxXg vtXsqPrfI/h+xjCqWUr4d+SlUzHrJM6iATARlUHjmSMYX2GRAggTUPphMcMu5DXX 8u7XStrvv2ROTunjnHuhP1feCseP9b4nVH/RA4jdZKxEQh31PV4A8/LxD034GX+d RO3gqjsqt5VSrQIqu0OlX7aUbnDKFcRMiJpkvTtX9J9NBphVMpw6Dsrlg1PqWVHR tl/i9AX1yvja2Ktocv4R5etEOuQZqxtV7rT36Um3qDRjnckwDTuUflzLiZy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYfDkzru2ihwbHyCuSilBmf/2178wHwYDVR0j BBgwFoAUMrpq7FHqIUu0t0L64uw/DE1ysyYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODExZDlhYmMtNDk4Ny00ZGJjLTk3NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1 MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0RDcyQjMyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkJBNkFFQzUxRUEyMTRCQjRCNzQyRkFFMkVDM0YwQzRENzJC MzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNG MEM0RDcyQjMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZPum2oss6lGLLO5S4d4ImjyB9DzWzNJnXO gPIs1X12ndTGO/g/PWbSDbkDhBvsX0zSf3LLJBHv698YFpXxgEVr3EU48iPSY1nl XwlH5kvcax7rGWMjVnxN8aqUceBbenoPoAeZpusWrpTvgIrn+uhTL6QN5XfqGjI/ 89YM2ysb8//YgOzGFEHjkufhMoDeR+lsA2HgZF5VHahjst1Bg1vJMRnIne5lTi19 gsFfEpARbhmAWMtcditJbPgfx17sUFEsdZ0OppBolktJK7G3DAkdSH2EXgB7+lnZ THkiQS2b2De7L2zEBLR1gpnHkhH5Zkht/yyxCFRR1pEXibLLCaY= -----END CERTIFICATE-----Generated at Tue May 12 22:19:27 2026 by rpki-client