$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft File: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft (raw, json) Hash identifier: CqLQ30HUM0l/H5ujY2qXd4YOF3O5wfRiLs3J5u4tCZ8= Subject key identifier: 59:85:F5:FD:22:5C:8E:61:0E:58:BB:65:B9:4D:75:03:25:19:11:F1 Authority key identifier: 32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 Certificate issuer: /CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Certificate serial: 0B3F5540B0890B8AF5101650059BEEE668527BAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:16:53 +0000 Manifest this update: Thu 24 Sep 2026 21:11:53 +0000 Manifest next update: Sat 26 Sep 2026 00:09:53 +0000 Files and hashes: 1: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl (hash: vMySaiBB57r6zpJyGiqhLAlruIdjeYxxn5BrCDWetIA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3f:55:40:b0:89:0b:8a:f5:10:16:50:05:9b:ee:e6:68:52:7b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Validity Not Before: Sep 24 21:11:53 2026 GMT Not After : Sep 26 00:09:53 2026 GMT Subject: CN=5985F5FD225C8E610E58BB65B94D7503251911F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:c2:10:db:a9:a7:a6:5d:c1:fe:99:8d:05: 4b:c4:d2:f6:be:71:81:ec:d3:e2:a4:98:6f:db:11: b7:6a:ff:01:e7:5d:4b:36:e3:d4:91:7a:2f:77:4e: 67:4e:33:aa:0d:3f:d4:84:1a:7e:1b:c5:8e:20:75: 12:da:8e:32:98:82:26:9a:ae:8d:3c:2b:1b:ba:73: 42:07:e7:db:09:00:0f:9e:a2:16:cc:61:65:98:49: 10:66:a7:0e:13:19:d1:49:6b:df:d4:c5:79:1f:ae: 71:38:9e:da:6c:7e:8a:6d:03:99:c9:d9:6a:7b:39: 9c:72:24:94:d9:ca:35:21:1a:77:84:54:fa:c0:30: 0a:45:f5:08:7a:ef:92:62:1e:62:6e:c9:f3:fe:ad: ff:1d:20:c7:d6:17:5e:78:1e:97:11:9b:85:53:e5: b7:d6:28:2e:c8:29:b3:ac:85:e7:2f:01:18:97:39: b6:c0:3f:a1:96:b7:3d:d1:d3:86:4e:35:18:7f:10: b8:14:76:67:ec:e7:fc:a5:fa:36:e1:93:0d:22:6f: 6f:c2:01:a9:d0:18:db:93:ba:95:6e:75:25:7e:2a: a9:41:77:21:29:7d:12:af:a3:79:35:17:cf:4d:59: 6a:f3:b0:d0:0c:08:9a:3c:a0:d3:36:59:ce:2d:70: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:85:F5:FD:22:5C:8E:61:0E:58:BB:65:B9:4D:75:03:25:19:11:F1 X509v3 Authority Key Identifier: keyid:32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:51:47:14:0a:af:27:b9:fb:12:a6:ff:16:92:78:9e:b8:16: fb:8a:c8:7f:de:88:08:3e:4b:dd:99:57:51:69:c1:93:0d:06: 47:56:4b:f5:d3:2f:74:76:90:b9:a5:ed:1f:51:d9:e0:e9:99: d0:9a:43:5e:8e:b4:a1:56:3a:bb:29:4a:69:62:9f:53:38:66: 2d:c9:f5:f8:d3:ff:21:6c:ee:20:cd:f3:95:1a:53:8d:24:68: 64:77:78:59:b8:ce:d8:0b:92:c3:75:87:67:21:e0:8b:46:a8: 6a:c3:58:8d:48:c4:85:c1:bc:be:68:45:30:2a:0b:76:f0:df: c2:0f:d4:f6:d4:38:58:74:a0:9c:53:aa:4a:86:d3:4d:62:d4: ee:ca:8f:12:35:25:e9:9a:00:e5:d2:72:cd:50:fa:9f:1b:db: 67:b2:b5:d7:90:a4:8f:66:68:fd:d9:38:fd:be:a1:3f:30:1d: cc:84:e5:34:dc:a7:ce:f5:fa:5b:97:92:6f:84:ad:7c:6c:8a: 6c:aa:c4:e9:8c:01:ee:4f:44:e9:2a:38:4b:d3:3f:a8:aa:05: 2f:f7:5e:d8:7c:7e:48:81:89:c1:b2:42:95:a6:46:a5:56:ac: 7a:5f:f6:db:dd:d9:16:54:ea:74:bb:2e:36:8c:e8:fd:ae:8a: 68:90:ab:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCz9VQLCJC4r1EBZQBZvu5mhSe6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVD MEE4OTFDMDAeFw0yNjA5MjQyMTExNTNaFw0yNjA5MjYwMDA5NTNaMDMxMTAvBgNV BAMTKDU5ODVGNUZEMjI1QzhFNjEwRTU4QkI2NUI5NEQ3NTAzMjUxOTExRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4cIQ26mnpl3B/pmNBUvE0va+ cYHs0+KkmG/bEbdq/wHnXUs249SRei93TmdOM6oNP9SEGn4bxY4gdRLajjKYgiaa ro08Kxu6c0IH59sJAA+eohbMYWWYSRBmpw4TGdFJa9/UxXkfrnE4ntpsfoptA5nJ 2Wp7OZxyJJTZyjUhGneEVPrAMApF9Qh675JiHmJuyfP+rf8dIMfWF154HpcRm4VT 5bfWKC7IKbOshecvARiXObbAP6GWtz3R04ZONRh/ELgUdmfs5/yl+jbhkw0ib2/C AanQGNuTupVudSV+KqlBdyEpfRKvo3k1F89NWWrzsNAMCJo8oNM2Wc4tcIaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWYX1/SJcjmEOWLtluU11AyUZEfEwHwYDVR0j BBgwFoAUMtda9GAhqth1bWCaHoyLTsCokcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlMDVmY2YtNWYyYS00ZDVlLWEzZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2 MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVDMEE4OTFDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkQ3NUFGNDYwMjFBQUQ4NzU2RDYwOUExRThDOEI0RUMwQTg5 MUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhC NEVDMEE4OTFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJRRxQKrye5+xKm/xaSeJ64FvuKyH/eiAg+ S92ZV1FpwZMNBkdWS/XTL3R2kLml7R9R2eDpmdCaQ16OtKFWOrspSmlin1M4Zi3J 9fjT/yFs7iDN85UaU40kaGR3eFm4ztgLksN1h2ch4ItGqGrDWI1IxIXBvL5oRTAq C3bw38IP1PbUOFh0oJxTqkqG001i1O7KjxI1JemaAOXScs1Q+p8b22eytdeQpI9m aP3ZOP2+oT8wHcyE5TTcp871+luXkm+ErXxsimyqxOmMAe5PROkqOEvTP6iqBS/3 Xth8fkiBicGyQpWmRqVWrHpf9tvd2RZU6nS7LjaM6P2uimiQq2k= -----END CERTIFICATE-----Generated at Fri Sep 25 01:01:15 2026 by rpki-client