$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft File: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft (raw, json) Hash identifier: y5ROx2SO+cpzGS8aEmTvoksJQhw1xfbXCuya0mJf1vM= Subject key identifier: 22:3A:BA:1D:96:6D:98:AC:87:5E:C4:AE:E5:C7:39:3C:46:5F:09:46 Authority key identifier: 32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 Certificate issuer: /CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Certificate serial: 646579F73A2CB78E85AC92097684CB568A202C64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:18:17 +0000 Manifest this update: Thu 23 Jul 2026 23:13:17 +0000 Manifest next update: Sat 25 Jul 2026 01:29:17 +0000 Files and hashes: 1: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl (hash: J7NOjXrGeiqgmB9/8tdC78Gy8iuQtEiqHVywKY2CWqo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:65:79:f7:3a:2c:b7:8e:85:ac:92:09:76:84:cb:56:8a:20:2c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Validity Not Before: Jul 23 23:13:17 2026 GMT Not After : Jul 25 01:29:17 2026 GMT Subject: CN=223ABA1D966D98AC875EC4AEE5C7393C465F0946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:53:67:6c:b8:fb:09:e6:21:d7:f5:a4:df:fb: 59:8c:d1:4b:94:a1:24:53:3f:eb:20:90:85:74:ea: 11:4c:7e:af:cf:d7:7d:87:8c:60:9b:0b:fa:4c:e5: 9c:3c:f7:74:f4:7c:6a:8a:f4:17:67:6c:48:9c:16: 31:2b:19:27:61:df:6f:64:de:a3:a4:89:09:f4:fa: 62:d5:8a:cc:f7:14:e2:8f:aa:df:58:a4:67:41:6e: 99:aa:a4:93:6b:82:69:37:90:07:d3:8a:d1:68:ab: 78:a9:de:82:3f:47:64:c0:18:81:f3:d6:89:6d:c1: d6:c7:d6:a2:be:ba:16:31:6e:64:f9:08:75:3a:09: 27:84:33:bf:34:3a:ea:58:5a:35:ab:75:a5:65:9c: df:26:c1:33:79:6f:5b:b0:e3:3c:93:77:3b:12:33: 90:04:e9:8c:8a:85:f2:44:8f:c4:7b:5e:8f:29:9f: a8:bc:43:70:b9:5b:22:74:93:d7:e3:e8:63:7d:80: ac:c4:ba:98:1d:9f:70:39:e9:d6:68:72:fe:8a:04: ae:c2:7f:92:da:9a:99:8c:fc:51:9b:cc:5b:09:a2: 36:02:09:d5:f5:dc:28:78:17:09:98:e5:ef:c3:9f: 3f:1c:64:07:a5:1b:d1:21:fd:f8:b0:32:7f:dd:f6: bd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3A:BA:1D:96:6D:98:AC:87:5E:C4:AE:E5:C7:39:3C:46:5F:09:46 X509v3 Authority Key Identifier: keyid:32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:da:f2:db:32:de:ab:ec:b9:b3:e0:a2:fa:53:39:c3:b3:a4: d4:2c:d9:c3:8c:43:01:94:0a:2f:7a:0e:59:94:4d:d3:dc:e6: f0:70:cf:19:81:c2:89:64:42:7b:ae:ec:bd:2c:5e:56:d1:9f: 02:fd:49:41:bb:0e:8f:b4:f4:e1:6f:45:9b:9d:6a:92:11:f3: b5:8d:4e:02:98:eb:3b:41:60:4d:de:29:e7:55:ef:d7:ca:d9: 3f:dc:60:62:b1:a8:cb:08:24:1e:ee:77:48:93:8d:4b:c2:48: 9b:e8:4d:d8:09:d8:15:6d:bc:88:d9:ab:81:c5:bd:44:5c:75: e8:0b:16:07:8f:e6:8b:51:66:de:3b:48:04:5b:6b:28:49:a5: fb:c2:b8:5f:42:f0:3b:f0:2d:ac:80:cb:28:92:97:04:59:56: 77:2b:65:cc:fd:44:1a:11:b9:7a:a8:8d:2f:78:7c:ce:b5:40: e6:86:1f:63:54:57:3d:d4:c2:b7:a4:06:6e:48:ff:aa:f6:bd: b7:0f:77:68:9c:af:1b:e0:4c:a7:63:60:a0:05:28:e5:09:a9: d5:a3:c0:89:01:01:a8:38:31:f2:53:7e:d0:fe:47:be:fc:b0: 61:3c:a5:d9:36:e8:33:f7:3b:02:f9:ad:36:79:ae:9a:7b:86: 8c:45:27:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGV59zost46FrJIJdoTLVoogLGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVD MEE4OTFDMDAeFw0yNjA3MjMyMzEzMTdaFw0yNjA3MjUwMTI5MTdaMDMxMTAvBgNV BAMTKDIyM0FCQTFEOTY2RDk4QUM4NzVFQzRBRUU1QzczOTNDNDY1RjA5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfU2dsuPsJ5iHX9aTf+1mM0UuU oSRTP+sgkIV06hFMfq/P132HjGCbC/pM5Zw893T0fGqK9BdnbEicFjErGSdh329k 3qOkiQn0+mLVisz3FOKPqt9YpGdBbpmqpJNrgmk3kAfTitFoq3ip3oI/R2TAGIHz 1oltwdbH1qK+uhYxbmT5CHU6CSeEM780OupYWjWrdaVlnN8mwTN5b1uw4zyTdzsS M5AE6YyKhfJEj8R7Xo8pn6i8Q3C5WyJ0k9fj6GN9gKzEupgdn3A56dZocv6KBK7C f5LampmM/FGbzFsJojYCCdX13Ch4FwmY5e/Dnz8cZAelG9Eh/fiwMn/d9r1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIjq6HZZtmKyHXsSu5cc5PEZfCUYwHwYDVR0j BBgwFoAUMtda9GAhqth1bWCaHoyLTsCokcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlMDVmY2YtNWYyYS00ZDVlLWEzZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2 MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVDMEE4OTFDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkQ3NUFGNDYwMjFBQUQ4NzU2RDYwOUExRThDOEI0RUMwQTg5 MUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhC NEVDMEE4OTFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHa8tsy3qvsubPgovpTOcOzpNQs2cOMQwGU Ci96DlmUTdPc5vBwzxmBwolkQnuu7L0sXlbRnwL9SUG7Do+09OFvRZudapIR87WN TgKY6ztBYE3eKedV79fK2T/cYGKxqMsIJB7ud0iTjUvCSJvoTdgJ2BVtvIjZq4HF vURcdegLFgeP5otRZt47SARbayhJpfvCuF9C8DvwLayAyyiSlwRZVncrZcz9RBoR uXqojS94fM61QOaGH2NUVz3UwrekBm5I/6r2vbcPd2icrxvgTKdjYKAFKOUJqdWj wIkBAag4MfJTftD+R778sGE8pdk26DP3OwL5rTZ5rpp7hoxFJ0g= -----END CERTIFICATE-----Generated at Fri Jul 24 06:17:45 2026 by rpki-client