
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
File: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft (raw, json)
Hash identifier: 7HIfrV0Ol2Rs0Dxwgzq9cddDi+EzhYOEM79SbGXNpSM=
Subject key identifier: 4C:94:0E:41:20:33:D2:77:3B:9A:8E:32:26:0F:FC:A4:DB:49:05:66
Authority key identifier: 32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3
Certificate issuer: /CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
Certificate serial: 4C0376345F274D866DDD6D8A5EDDF7796A72E716
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:57:54 +0000
Manifest this update: Thu 23 Jul 2026 22:52:54 +0000
Manifest next update: Sat 25 Jul 2026 02:44:54 +0000
Files and hashes: 1: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: AerViwEwX6M35LdYkw1W6Rm917nFOVWmFQ/wALZRWuI=)
2: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl (hash: COugzKpwP4QiUK3fO2PpUL3GyJ/q9/4etbydVE6EaVQ=)
3: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: IlwLW0g7keiKYblC08y+Cdk30ZDG31NiX8oDu4ZTBVM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl
rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:03:76:34:5f:27:4d:86:6d:dd:6d:8a:5e:dd:f7:79:6a:72:e7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
Validity
Not Before: Jul 23 22:52:54 2026 GMT
Not After : Jul 25 02:44:54 2026 GMT
Subject: CN=4C940E412033D2773B9A8E32260FFCA4DB490566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:8a:88:61:50:3d:f2:b3:37:0b:24:c2:f5:
c4:00:b6:a9:e7:a4:a4:64:6f:99:d9:c3:50:22:6c:
70:09:45:33:d6:81:96:ab:70:bd:a5:bc:e5:44:37:
56:27:52:b1:10:37:94:85:5e:0f:c4:fe:b1:fc:74:
d4:d2:81:1c:94:80:80:d5:fb:4f:a7:0f:51:ca:c6:
d9:69:2c:98:ce:a6:fc:ec:98:97:7f:c8:af:c3:17:
86:37:14:22:df:50:28:a5:7b:68:da:97:31:f6:f5:
04:36:f4:17:76:f1:c3:56:56:75:c2:a4:43:29:8c:
dd:8f:53:37:4d:7f:9c:6b:d0:d1:79:e8:ae:42:32:
cc:3c:d2:be:45:98:23:ba:8f:ec:5d:cb:78:f5:fd:
31:ac:10:dd:99:fc:b6:bf:33:5f:48:90:63:5d:50:
7b:f3:fb:05:62:30:13:85:86:85:db:8d:85:ad:f3:
1d:d0:e4:3f:9a:fe:21:28:81:c1:a8:3c:e0:60:fd:
87:ae:5d:b4:ac:e5:4e:25:02:fb:ac:2b:5b:45:d4:
80:c3:f2:5a:e4:2b:7f:15:2d:b1:94:ae:1a:5b:8c:
cd:bb:d9:41:bf:9d:07:b1:02:bc:0b:e1:cf:6d:67:
3a:4c:3d:ba:d5:e4:e2:a6:bb:53:b0:e2:3f:b3:bd:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:0E:41:20:33:D2:77:3B:9A:8E:32:26:0F:FC:A4:DB:49:05:66
X509v3 Authority Key Identifier:
keyid:32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:30:38:9e:33:38:76:8a:61:64:ea:36:cd:cf:e7:9d:b2:
63:67:35:30:b4:35:69:0e:ab:08:99:d3:6d:ae:03:22:ab:4b:
0a:0e:71:85:9a:3b:cf:a4:4f:6e:ad:ba:0a:b3:4c:a2:7c:f8:
75:ec:2b:9e:c0:97:fa:5e:e4:e0:26:14:b5:a2:19:72:24:a0:
d3:9b:ff:f2:a5:96:30:18:4c:72:e7:0c:26:94:42:c8:c6:a8:
99:a9:a1:d7:6e:3c:df:a4:61:64:09:dc:30:ba:09:b0:38:6b:
32:e5:4c:5e:72:11:a0:90:f1:29:2a:60:cb:fc:b3:9d:e4:4b:
2f:b6:f9:67:c9:9a:35:a1:a6:a2:4c:6f:41:c6:dc:5e:f8:d0:
3a:34:ce:c0:b6:bf:dc:6a:4d:6f:97:23:9c:92:d3:49:67:44:
05:be:9a:1f:f7:e3:dd:8a:d5:c6:c6:c6:5e:89:c1:43:b0:41:
69:83:99:d1:f2:4c:05:cd:50:88:76:07:dc:68:d1:9c:84:99:
00:2e:5d:a5:e6:5a:5b:ee:c5:51:de:49:23:40:f2:3c:ec:d2:
10:aa:b4:23:e9:8f:e5:ae:c8:02:dc:72:b0:2e:bc:b0:32:d8:
bb:e2:29:50:79:b4:3c:24:4a:cf:22:59:c4:f4:57:72:3b:41:
aa:01:93:f7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTAN2NF8nTYZt3W2KXt33eWpy5xYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRC
Q0M3RUVGMzAeFw0yNjA3MjMyMjUyNTRaFw0yNjA3MjUwMjQ0NTRaMDMxMTAvBgNV
BAMTKDRDOTQwRTQxMjAzM0QyNzczQjlBOEUzMjI2MEZGQ0E0REI0OTA1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWoqIYVA98rM3CyTC9cQAtqnn
pKRkb5nZw1AibHAJRTPWgZarcL2lvOVEN1YnUrEQN5SFXg/E/rH8dNTSgRyUgIDV
+0+nD1HKxtlpLJjOpvzsmJd/yK/DF4Y3FCLfUCile2jalzH29QQ29Bd28cNWVnXC
pEMpjN2PUzdNf5xr0NF56K5CMsw80r5FmCO6j+xdy3j1/TGsEN2Z/La/M19IkGNd
UHvz+wViMBOFhoXbjYWt8x3Q5D+a/iEogcGoPOBg/YeuXbSs5U4lAvusK1tF1IDD
8lrkK38VLbGUrhpbjM272UG/nQexArwL4c9tZzpMPbrV5OKmu1Ow4j+zvQ+dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTJQOQSAz0nc7mo4yJg/8pNtJBWYwHwYDVR0j
BBgwFoAUMsQIaSUM6WBuBcFbabIP9LzH7vMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjI2MDU4NmQtYjAyNy00NjU2LWI2MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4Njky
NTBDRTk2MDZFMDVDMTVCNjlCMjBGRjRCQ0M3RUVGMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMkM0MDg2OTI1MENFOTYwNkUwNUMxNUI2OUIyMEZGNEJDQzdF
RUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI2MDU4NmQtYjAyNy00NjU2LWI2
MzEtMDU4OTZiNTQzNzgyLzAvMzJDNDA4NjkyNTBDRTk2MDZFMDVDMTVCNjlCMjBG
RjRCQ0M3RUVGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFCMMDieMzh2imFk6jbNz+edsmNnNTC0NWkO
qwiZ022uAyKrSwoOcYWaO8+kT26tugqzTKJ8+HXsK57Al/pe5OAmFLWiGXIkoNOb
//KlljAYTHLnDCaUQsjGqJmpodduPN+kYWQJ3DC6CbA4azLlTF5yEaCQ8SkqYMv8
s53kSy+2+WfJmjWhpqJMb0HG3F740Do0zsC2v9xqTW+XI5yS00lnRAW+mh/3492K
1cbGxl6JwUOwQWmDmdHyTAXNUIh2B9xo0ZyEmQAuXaXmWlvuxVHeSSNA8jzs0hCq
tCPpj+WuyALccrAuvLAy2LviKVB5tDwkSs8iWcT0V3I7QaoBk/c=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:25:45 2026 by rpki-client