
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft
File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json)
Hash identifier: i0Lgt6x83hwdCtjmns04Nwuh3tMo0WPSzFVgKJ5ItJ4=
Subject key identifier: C6:81:21:AB:50:6F:76:60:C3:03:1E:09:4F:34:3C:A9:17:6A:C9:79
Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D
Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D
Certificate serial: 32986DBB58BABECA1FAAF4F7E9B2C0DE606A4C41
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft
Manifest number: 39
Signing time: Sun 14 Jun 2026 01:19:30 +0000
Manifest this update: Sun 14 Jun 2026 01:14:30 +0000
Manifest next update: Mon 15 Jun 2026 03:32:30 +0000
Files and hashes: 1: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: 0IHNjSTmwzF6X0Ox+CBdjgC8F2lAjF+jdRUnvGt+7ls=)
2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl
rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:98:6d:bb:58:ba:be:ca:1f:aa:f4:f7:e9:b2:c0:de:60:6a:4c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D
Validity
Not Before: Jun 14 01:14:30 2026 GMT
Not After : Jun 15 03:32:30 2026 GMT
Subject: CN=C68121AB506F7660C3031E094F343CA9176AC979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:17:15:1f:4f:d8:dc:1e:f6:d6:07:81:8c:
84:ff:b5:22:43:d0:7b:81:77:f9:af:57:ea:d2:61:
de:d2:73:7f:6c:2f:c4:a1:e3:ab:78:b2:8f:fb:f2:
36:de:d6:40:30:9c:6d:e1:e1:31:18:3d:20:5b:3f:
34:e0:89:29:a3:9f:50:c7:60:2e:02:eb:2d:a0:6f:
36:50:19:ef:03:ec:ef:29:db:40:83:71:35:1a:6c:
ee:b9:1f:44:de:99:5b:a4:80:df:db:a2:0e:1b:cb:
af:64:59:85:a5:b3:31:17:cf:2c:c2:5e:36:9e:0c:
b4:ad:f6:5a:ab:cc:0d:df:9c:c6:55:f1:f5:99:df:
5d:6e:1e:d0:eb:e8:ee:6e:04:21:07:9e:b5:22:bf:
da:2f:b3:55:1a:4b:ea:9d:ea:47:c7:46:f8:c2:8b:
cc:f6:a9:38:c8:3a:15:83:d1:b0:85:16:9f:3f:87:
58:10:14:a6:2e:e5:0b:d1:de:6c:01:da:8c:9d:e2:
d3:ca:29:01:26:0f:28:c9:2b:d5:6d:17:ca:a9:6e:
e6:43:a4:9d:20:76:b8:b2:0b:dd:d9:5a:ad:8d:83:
4a:69:a4:91:30:cd:d0:71:a8:43:a3:42:9a:5d:e7:
ec:9a:98:60:54:8d:93:97:08:1f:b6:2a:31:46:3c:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:81:21:AB:50:6F:76:60:C3:03:1E:09:4F:34:3C:A9:17:6A:C9:79
X509v3 Authority Key Identifier:
keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:63:e1:1e:fe:b1:3a:23:fc:38:59:52:8b:e4:c2:f3:e3:1d:
fb:d0:89:a9:58:06:00:6c:49:c4:aa:6a:85:30:86:03:56:35:
1d:cc:f0:2a:89:b4:d9:fd:08:66:50:a9:df:39:ec:53:61:e8:
9a:85:d8:ac:cd:00:f8:7c:f8:c2:31:7f:1c:54:21:1e:16:8c:
78:7f:c0:bc:bd:8a:60:34:8f:f0:7c:35:33:d2:51:2c:b6:6a:
03:05:af:78:c7:8f:9b:6e:b2:8b:77:5e:bf:77:ff:db:9a:84:
f0:73:5d:27:d8:5f:ab:30:0b:e8:f8:fa:12:db:60:d9:30:a7:
d9:a5:ac:8c:ab:d8:3e:93:ab:f7:fb:8d:bb:ae:09:ca:9c:70:
8f:f1:65:64:53:45:59:92:76:25:7a:08:6d:bf:66:da:20:ca:
26:66:7b:d4:91:c8:8f:83:b7:36:7d:6b:e9:31:b9:03:11:22:
e8:35:8f:4d:77:7f:b5:99:98:a5:8c:11:f5:d6:58:1b:d8:28:
c8:25:be:6c:d2:a7:eb:22:31:b4:21:15:9f:51:b9:b5:74:0f:
32:61:6f:cf:f6:e7:e8:6f:39:87:fd:16:08:b8:8f:7f:cf:98:
b3:52:33:29:79:e2:64:62:bf:0c:1b:39:9a:77:54:8f:6d:d2:
27:78:8c:e1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMphtu1i6vsofqvT36bLA3mBqTEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2
ODg4M0UyRDAeFw0yNjA2MTQwMTE0MzBaFw0yNjA2MTUwMzMyMzBaMDMxMTAvBgNV
BAMTKEM2ODEyMUFCNTA2Rjc2NjBDMzAzMUUwOTRGMzQzQ0E5MTc2QUM5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQxcVH0/Y3B721geBjIT/tSJD
0HuBd/mvV+rSYd7Sc39sL8Sh46t4so/78jbe1kAwnG3h4TEYPSBbPzTgiSmjn1DH
YC4C6y2gbzZQGe8D7O8p20CDcTUabO65H0TemVukgN/bog4by69kWYWlszEXzyzC
XjaeDLSt9lqrzA3fnMZV8fWZ311uHtDr6O5uBCEHnrUiv9ovs1UaS+qd6kfHRvjC
i8z2qTjIOhWD0bCFFp8/h1gQFKYu5QvR3mwB2oyd4tPKKQEmDyjJK9VtF8qpbuZD
pJ0gdriyC93ZWq2Ng0pppJEwzdBxqEOjQppd5+yamGBUjZOXCB+2KjFGPIMxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxoEhq1BvdmDDAx4JTzQ8qRdqyXkwHwYDVR0j
BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG
QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz
RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky
YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux
QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGBj4R7+sToj/DhZUovkwvPjHfvQialYBgBs
ScSqaoUwhgNWNR3M8CqJtNn9CGZQqd857FNh6JqF2KzNAPh8+MIxfxxUIR4WjHh/
wLy9imA0j/B8NTPSUSy2agMFr3jHj5tusot3Xr93/9uahPBzXSfYX6swC+j4+hLb
YNkwp9mlrIyr2D6Tq/f7jbuuCcqccI/xZWRTRVmSdiV6CG2/ZtogyiZme9SRyI+D
tzZ9a+kxuQMRIug1j013f7WZmKWMEfXWWBvYKMglvmzSp+siMbQhFZ9RubV0DzJh
b8/25+hvOYf9Fgi4j3/PmLNSMyl54mRivwwbOZp3VI9t0id4jOE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:46:01 2026 by rpki-client