$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: oZXGXenEuPPr7WeG9379O+eAh2CBH0DxrnS7Pbzzp4o= Subject key identifier: D3:C4:4B:26:29:2A:F9:0B:A0:0D:81:FB:4E:12:FE:B7:65:1B:72:46 Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 4B70855AC9A23DDFB2FE035F9759432AC9C702B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: FF Signing time: Mon 09 Nov 2026 21:58:10 +0000 Manifest this update: Mon 09 Nov 2026 21:53:10 +0000 Manifest next update: Wed 11 Nov 2026 00:06:10 +0000 Files and hashes: 1: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) 2: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: h5KKmyxzjPhw9p6bYS5n23Kk+ADUa4MI5POCBVm2uj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:70:85:5a:c9:a2:3d:df:b2:fe:03:5f:97:59:43:2a:c9:c7:02:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: Nov 9 21:53:10 2026 GMT Not After : Nov 11 00:06:10 2026 GMT Subject: CN=D3C44B26292AF90BA00D81FB4E12FEB7651B7246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9b:4d:4e:fd:f2:7f:49:51:e6:c7:10:16:18: 0a:9f:59:69:40:4b:6a:fe:8a:4d:2d:b0:58:01:b1: 44:bc:b6:56:3b:c6:1b:2c:81:b7:10:f6:be:cb:ac: 59:e3:55:9d:44:4a:f0:8d:9f:8c:5e:eb:dd:f7:c3: 81:d6:28:4d:e8:bf:ca:f2:06:26:79:f7:a2:0b:06: d2:e8:d2:d0:bf:0d:31:83:b2:3c:7a:fd:ab:b0:c6: c8:8e:df:fa:36:48:ef:c3:b8:fe:97:7d:63:97:76: c5:fd:a7:62:9b:6d:56:b6:00:ee:cf:b4:e8:a6:fe: 72:ee:b8:a9:f7:86:27:17:04:23:a0:af:41:7f:aa: 34:14:07:11:ab:f9:e4:42:3c:1f:9d:ad:cb:20:fa: b5:a8:fa:11:a7:c0:37:35:4f:8c:df:83:78:24:86: cb:94:09:eb:dd:09:80:5c:a8:0c:37:3f:a6:27:87: e7:cd:43:68:21:07:4a:64:63:84:85:13:a1:0d:12: bc:12:7a:21:d9:50:d5:27:da:cd:1d:64:6d:25:4e: a8:be:8c:e3:2e:a2:56:8e:43:2e:03:e2:ed:2f:96: f2:14:e1:14:bf:3e:f7:27:a3:3c:10:b5:53:3b:4f: e1:8e:6a:24:c9:ab:61:fe:0a:d3:db:cd:4f:32:aa: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C4:4B:26:29:2A:F9:0B:A0:0D:81:FB:4E:12:FE:B7:65:1B:72:46 X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:e3:9c:ba:a1:c2:6e:92:8a:8b:e6:7b:47:3e:f5:e7:2b:9f: ad:34:d1:d3:fd:cf:69:64:a3:7a:9c:64:96:e2:70:dc:8e:8f: dc:72:76:1a:6f:b6:c5:d8:ec:93:d4:ea:2d:51:39:47:d0:fd: e4:28:14:45:38:40:ad:1d:8d:97:48:ea:95:66:6d:7d:03:aa: e2:83:2c:4a:67:c2:fa:c6:cd:f8:99:59:18:6e:4f:62:b6:54: 5d:fe:ad:d3:67:71:3a:4b:cd:d4:4f:76:47:c6:17:84:6d:9b: 81:ed:a5:ff:91:ab:d6:9c:9b:13:f7:2d:fb:85:3a:f7:3c:50: 06:3b:40:e7:02:2a:b6:25:f2:91:9b:e7:c8:fa:ec:b8:a3:ca: 5b:2e:da:94:89:8e:0a:de:b9:b9:4e:98:72:99:36:45:b6:30: cc:e4:04:98:88:46:7c:0d:7c:6c:35:65:98:3e:a0:41:f0:6a: 66:49:68:57:77:de:4b:68:16:ab:6e:59:c3:18:f5:e4:45:c3: f7:85:18:a5:bf:d6:07:8f:f4:47:f7:72:3e:0c:81:20:25:07: fa:e9:29:1d:9a:bd:d5:9e:07:4e:c5:8f:b7:d9:d6:0b:a7:fb: 0e:b9:3c:86:51:e4:77:b9:50:87:6b:fe:e5:5a:38:90:77:05: b7:cb:a0:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3CFWsmiPd+y/gNfl1lDKsnHArEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjExMDkyMTUzMTBaFw0yNjExMTEwMDA2MTBaMDMxMTAvBgNV BAMTKEQzQzQ0QjI2MjkyQUY5MEJBMDBEODFGQjRFMTJGRUI3NjUxQjcyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDim01O/fJ/SVHmxxAWGAqfWWlA S2r+ik0tsFgBsUS8tlY7xhssgbcQ9r7LrFnjVZ1ESvCNn4xe6933w4HWKE3ov8ry BiZ596ILBtLo0tC/DTGDsjx6/auwxsiO3/o2SO/DuP6XfWOXdsX9p2KbbVa2AO7P tOim/nLuuKn3hicXBCOgr0F/qjQUBxGr+eRCPB+drcsg+rWo+hGnwDc1T4zfg3gk hsuUCevdCYBcqAw3P6Ynh+fNQ2ghB0pkY4SFE6ENErwSeiHZUNUn2s0dZG0lTqi+ jOMuolaOQy4D4u0vlvIU4RS/PvcnozwQtVM7T+GOaiTJq2H+CtPbzU8yqrd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08RLJikq+QugDYH7ThL+t2UbckYwHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPjnLqhwm6Siovme0c+9ecrn6000dP9z2lk o3qcZJbicNyOj9xydhpvtsXY7JPU6i1ROUfQ/eQoFEU4QK0djZdI6pVmbX0DquKD LEpnwvrGzfiZWRhuT2K2VF3+rdNncTpLzdRPdkfGF4Rtm4Htpf+Rq9acmxP3LfuF Ovc8UAY7QOcCKrYl8pGb58j67Lijylsu2pSJjgreublOmHKZNkW2MMzkBJiIRnwN fGw1ZZg+oEHwamZJaFd33ktoFqtuWcMY9eRFw/eFGKW/1geP9Ef3cj4MgSAlB/rp KR2avdWeB07Fj7fZ1gun+w65PIZR5He5UIdr/uVaOJB3BbfLoAc= -----END CERTIFICATE-----Generated at Tue Nov 10 01:46:14 2026 by rpki-client