$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: N1YTa9ekINr9Jjs42hKiRJf8VSWHpNHUJboG1xTUXzs= Subject key identifier: D4:E8:84:91:F4:D9:70:66:89:93:36:83:56:25:2A:83:8A:38:A7:76 Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 7AE3016C471DFE59504DB9CCC890F5C7675BCC77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 10:08:08 +0000 Manifest this update: Wed 29 Jul 2026 10:03:08 +0000 Manifest next update: Thu 30 Jul 2026 12:18:08 +0000 Files and hashes: 1: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: npqZiTkplvCXp5QBIsjac9NuebQhkRX9YDogXihqoB8=) 2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e3:01:6c:47:1d:fe:59:50:4d:b9:cc:c8:90:f5:c7:67:5b:cc:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: Jul 29 10:03:08 2026 GMT Not After : Jul 30 12:18:08 2026 GMT Subject: CN=D4E88491F4D970668993368356252A838A38A776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:4d:84:5b:26:a7:98:39:49:de:5c:21:6c: 2b:c6:3a:55:b6:94:ae:d1:ed:5a:3e:33:d1:a9:ef: d9:38:85:11:1c:64:4e:a0:b1:ea:24:e5:9d:d2:5c: b7:e9:ff:b4:42:7f:61:b5:e5:fb:5c:82:ec:0f:9c: 69:57:a8:be:17:14:0f:c4:c5:a3:73:43:79:ef:0c: 87:08:c9:5a:46:45:65:bb:a1:fc:c8:01:2c:24:6d: 5f:8a:ad:39:eb:d1:72:d2:c6:7b:ce:69:7f:b9:b6: d8:ee:76:52:b1:cc:30:5f:33:8f:dc:57:25:ee:5f: f2:1e:f8:bd:be:8f:ae:51:09:28:20:67:20:a8:60: 23:db:96:59:23:7d:b5:24:a5:d9:f6:45:07:28:14: 52:94:56:4d:04:fb:64:d5:fd:59:54:9c:8f:32:d8: 76:2c:68:56:19:17:92:30:6a:0e:16:77:79:48:f3: b7:f7:ac:45:43:10:31:8b:9d:72:d9:ba:9b:c3:6b: fb:2a:e0:b6:e3:82:da:da:e6:0b:20:1d:d4:a0:9e: 24:02:74:e7:87:d1:3e:cb:97:03:e0:74:98:8b:de: 55:63:6b:81:f3:61:c5:c2:f9:4b:14:cd:08:a1:c3: f8:14:60:0a:00:e2:38:fe:c9:4c:f0:77:90:6c:c1: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E8:84:91:F4:D9:70:66:89:93:36:83:56:25:2A:83:8A:38:A7:76 X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:88:7c:d4:4c:bb:9c:32:e4:6f:c8:8a:07:2d:50:53:b1:a7: c0:c5:35:de:1d:54:ce:fd:ea:9b:2a:a0:5b:db:34:6a:70:4f: b3:f8:32:42:1b:84:22:d1:9f:68:27:45:76:c3:ad:08:b9:87: 00:8e:f3:5f:01:f2:7f:03:24:ca:dc:53:c0:a8:84:d3:12:aa: 4a:ec:b6:a2:70:a7:91:74:27:8a:be:77:11:4b:00:31:f5:ab: 3e:5c:bc:ca:e3:41:50:c9:b1:bf:52:5a:f4:1f:cd:9b:7a:64: cd:aa:5e:a8:10:83:f9:f2:97:b7:ef:bd:90:aa:57:d8:b3:a8: 57:44:c0:a3:1d:62:36:c5:c8:91:35:02:10:e5:ec:bc:44:2d: 73:5f:ce:36:da:11:15:ef:df:50:81:01:09:bb:b8:6a:4b:df: 9f:2a:dc:6c:f0:3e:36:a8:02:79:a1:64:6d:35:2f:46:2f:88: ad:a9:3d:fc:df:6c:48:55:c7:d5:75:7e:fa:42:2b:b2:ce:7d: ac:04:1f:f2:35:69:52:cf:60:a0:8c:a8:52:da:0e:c2:d1:af: 61:f3:b8:cf:37:c5:41:41:65:16:a7:8a:f4:7d:9f:b8:7b:ad: b9:e7:0c:56:6a:a5:02:87:07:48:f3:13:47:10:96:b7:6b:82: e5:31:f1:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuMBbEcd/llQTbnMyJD1x2dbzHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjA3MjkxMDAzMDhaFw0yNjA3MzAxMjE4MDhaMDMxMTAvBgNV BAMTKEQ0RTg4NDkxRjREOTcwNjY4OTkzMzY4MzU2MjUyQTgzOEEzOEE3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPk2EWyanmDlJ3lwhbCvGOlW2 lK7R7Vo+M9Gp79k4hREcZE6gseok5Z3SXLfp/7RCf2G15ftcguwPnGlXqL4XFA/E xaNzQ3nvDIcIyVpGRWW7ofzIASwkbV+KrTnr0XLSxnvOaX+5ttjudlKxzDBfM4/c VyXuX/Ie+L2+j65RCSggZyCoYCPbllkjfbUkpdn2RQcoFFKUVk0E+2TV/VlUnI8y 2HYsaFYZF5Iwag4Wd3lI87f3rEVDEDGLnXLZupvDa/sq4Lbjgtra5gsgHdSgniQC dOeH0T7LlwPgdJiL3lVja4HzYcXC+UsUzQihw/gUYAoA4jj+yUzwd5BswRkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1OiEkfTZcGaJkzaDViUqg4o4p3YwHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGIfNRMu5wy5G/IigctUFOxp8DFNd4dVM79 6psqoFvbNGpwT7P4MkIbhCLRn2gnRXbDrQi5hwCO818B8n8DJMrcU8CohNMSqkrs tqJwp5F0J4q+dxFLADH1qz5cvMrjQVDJsb9SWvQfzZt6ZM2qXqgQg/nyl7fvvZCq V9izqFdEwKMdYjbFyJE1AhDl7LxELXNfzjbaERXv31CBAQm7uGpL358q3GzwPjao AnmhZG01L0YviK2pPfzfbEhVx9V1fvpCK7LOfawEH/I1aVLPYKCMqFLaDsLRr2Hz uM83xUFBZRanivR9n7h7rbnnDFZqpQKHB0jzE0cQlrdrguUx8YY= -----END CERTIFICATE-----Generated at Wed Jul 29 12:02:41 2026 by rpki-client