$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft File: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft (raw, json) Hash identifier: u71D1wG5AmwPk4MaSmwi5wpWy+mKjP8bBs05A8+JT/4= Subject key identifier: DB:82:E7:42:E4:BD:62:AA:39:5A:C6:75:E8:A0:2A:F1:BC:F2:D9:A3 Authority key identifier: 32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 Certificate issuer: /CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Certificate serial: 0DB1D4969E9D242208D8859A4359C5D83ADC35E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft Manifest number: 0D Signing time: Tue 12 May 2026 04:44:40 +0000 Manifest this update: Tue 12 May 2026 04:39:40 +0000 Manifest next update: Wed 13 May 2026 05:58:40 +0000 Files and hashes: 1: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl (hash: N67F9BrFsoZhF/kWSBE92jDNkYEbsBtxB1K6ZmhTuhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b1:d4:96:9e:9d:24:22:08:d8:85:9a:43:59:c5:d8:3a:dc:35:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Validity Not Before: May 12 04:39:40 2026 GMT Not After : May 13 05:58:40 2026 GMT Subject: CN=DB82E742E4BD62AA395AC675E8A02AF1BCF2D9A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:35:7a:6a:20:a2:98:ee:ec:43:3a:48:fd:33: 90:07:95:50:66:c5:ae:26:f1:46:22:0c:b6:87:43: 4d:66:80:c5:cc:27:b7:ff:de:55:d4:89:2a:e8:2b: 6c:44:7a:d7:21:70:8f:84:a4:d8:a4:db:e4:11:ad: 5e:a7:48:a9:f5:88:c6:51:12:73:4c:08:77:6b:6f: 37:1a:ac:8b:12:58:1c:92:99:ce:0c:b6:a0:f6:be: 1e:2f:79:7a:2c:be:6f:a6:f3:84:1e:b0:ab:f4:c5: 4d:81:cc:fb:9e:39:60:dc:c4:a5:22:1a:78:2b:c0: c1:19:c2:8d:8e:02:7d:5d:f6:45:e6:5a:7d:13:b0: 38:6a:dd:43:16:fd:3d:66:e0:04:d4:7a:b1:a5:ec: 1a:c8:ec:7a:56:90:21:08:4c:ec:f6:95:f1:1f:78: 27:75:c6:d9:68:34:53:33:b0:90:38:ba:9c:12:f6: 14:3d:38:f8:21:e5:48:26:98:71:b7:b8:81:c5:3f: 42:72:ae:ef:49:ca:1f:46:a9:58:cf:02:e5:21:00: f8:0b:08:26:81:66:b0:38:58:e3:23:45:ca:b4:c4: b1:f7:6e:79:7f:9a:ba:1e:f3:86:9e:b1:e2:38:92: 3d:30:92:95:fd:45:64:3c:e6:6d:d5:1d:89:e8:0a: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:82:E7:42:E4:BD:62:AA:39:5A:C6:75:E8:A0:2A:F1:BC:F2:D9:A3 X509v3 Authority Key Identifier: keyid:32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:67:8c:c1:a8:dd:a9:ec:b1:1d:ab:1a:b1:c5:36:9c:a8:bd: 55:7c:d7:a4:97:78:8a:db:d4:7b:4b:4c:9a:da:02:46:0e:d4: 6f:b6:fa:81:e5:70:e2:d5:38:88:c7:47:2b:d1:70:b8:df:5c: ab:a0:11:47:c3:b5:9d:42:d9:a8:d7:6a:75:c2:62:9b:8b:b9: 6d:48:98:4e:e7:fc:18:8c:5f:4d:67:23:5d:65:9c:ac:28:99: 80:0b:c8:78:d0:53:71:53:1e:db:02:0c:2c:9e:a5:ad:1b:f8: 5f:ad:19:f0:78:68:ab:53:09:a2:9f:6f:a7:f4:3c:b0:6e:26: bd:c7:52:c6:eb:4d:6a:68:a1:b4:05:4d:dd:a3:4d:cd:32:b0: 08:4c:91:e7:55:d1:2c:06:1b:b2:69:57:16:20:dd:d4:ce:c1: 01:57:28:10:3e:6e:f8:de:e4:e4:e4:72:02:5c:72:54:11:32: 45:00:c3:17:6f:ea:e6:e2:a0:5e:b2:c2:eb:a3:bd:76:ca:9d: b4:a1:05:9c:33:f9:5e:9e:24:a8:17:dd:0d:90:68:9c:cb:11: c0:20:ab:b3:59:b1:5b:39:b2:a6:4d:6e:63:f7:77:2e:2e:1e: 10:58:dc:b3:ac:61:8e:74:9b:fe:04:0d:91:4a:fd:6e:16:48: 31:c1:f0:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbHUlp6dJCII2IWaQ1nF2DrcNeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVD MEE4OTFDMDAeFw0yNjA1MTIwNDM5NDBaFw0yNjA1MTMwNTU4NDBaMDMxMTAvBgNV BAMTKERCODJFNzQyRTRCRDYyQUEzOTVBQzY3NUU4QTAyQUYxQkNGMkQ5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeNXpqIKKY7uxDOkj9M5AHlVBm xa4m8UYiDLaHQ01mgMXMJ7f/3lXUiSroK2xEetchcI+EpNik2+QRrV6nSKn1iMZR EnNMCHdrbzcarIsSWBySmc4MtqD2vh4veXosvm+m84QesKv0xU2BzPueOWDcxKUi GngrwMEZwo2OAn1d9kXmWn0TsDhq3UMW/T1m4ATUerGl7BrI7HpWkCEITOz2lfEf eCd1xtloNFMzsJA4upwS9hQ9OPgh5UgmmHG3uIHFP0Jyru9Jyh9GqVjPAuUhAPgL CCaBZrA4WOMjRcq0xLH3bnl/mroe84aeseI4kj0wkpX9RWQ85m3VHYnoCrtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU24LnQuS9Yqo5WsZ16KAq8bzy2aMwHwYDVR0j BBgwFoAUMtda9GAhqth1bWCaHoyLTsCokcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlMDVmY2YtNWYyYS00ZDVlLWEzZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2 MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVDMEE4OTFDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkQ3NUFGNDYwMjFBQUQ4NzU2RDYwOUExRThDOEI0RUMwQTg5 MUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhC NEVDMEE4OTFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJnjMGo3anssR2rGrHFNpyovVV816SXeIrb 1HtLTJraAkYO1G+2+oHlcOLVOIjHRyvRcLjfXKugEUfDtZ1C2ajXanXCYpuLuW1I mE7n/BiMX01nI11lnKwomYALyHjQU3FTHtsCDCyepa0b+F+tGfB4aKtTCaKfb6f0 PLBuJr3HUsbrTWpoobQFTd2jTc0ysAhMkedV0SwGG7JpVxYg3dTOwQFXKBA+bvje 5OTkcgJcclQRMkUAwxdv6ubioF6ywuujvXbKnbShBZwz+V6eJKgX3Q2QaJzLEcAg q7NZsVs5sqZNbmP3dy4uHhBY3LOsYY50m/4EDZFK/W4WSDHB8Es= -----END CERTIFICATE-----Generated at Tue May 12 22:13:33 2026 by rpki-client