$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: o1ImFToQ8vGGFNkR2rXfUUbJzhl8rCtWXc1A+mdIkLs= Subject key identifier: 94:E8:1A:79:9B:D4:DD:53:50:2C:9B:09:45:90:8E:47:0A:48:0C:52 Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 7A013371D1578B08DEF7B4E280A2A306BB609982 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: BD Signing time: Mon 21 Sep 2026 06:55:08 +0000 Manifest this update: Mon 21 Sep 2026 06:50:08 +0000 Manifest next update: Tue 22 Sep 2026 10:12:08 +0000 Files and hashes: 1: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: 81TUMT1hI1nrhtq0IZdQv4iUIsiczwEQ7lRzPporGRU=) 2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:01:33:71:d1:57:8b:08:de:f7:b4:e2:80:a2:a3:06:bb:60:99:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: Sep 21 06:50:08 2026 GMT Not After : Sep 22 10:12:08 2026 GMT Subject: CN=94E81A799BD4DD53502C9B0945908E470A480C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d5:8c:b7:06:75:c1:2b:d4:83:37:8f:06:9a: 23:bb:03:b8:6a:73:82:d5:da:ac:50:04:9c:8e:15: ea:6d:43:86:57:c4:38:05:dc:14:1d:f5:1b:55:20: b1:89:3e:67:98:48:42:5b:af:f8:aa:40:9c:37:b2: 41:37:e0:93:35:49:98:22:b2:f4:35:22:0b:2a:5b: d3:98:ff:89:85:ee:21:ee:fd:53:3a:92:50:bc:8d: 7c:4a:60:38:e0:5d:1d:e0:f7:a9:fc:3a:32:88:e4: 24:a9:e2:be:d0:1b:86:ee:4e:3b:f9:de:c4:3f:eb: 8b:2b:11:bf:e0:16:11:0e:a8:4a:03:0f:0d:67:fb: 19:f3:d1:29:d2:3f:30:ff:3f:f3:e5:df:f8:e5:51: 8d:50:07:d1:03:67:b7:2e:90:43:a4:af:cb:a8:c6: 46:a1:4a:77:0e:86:09:9a:6b:73:4f:af:8c:7f:88: 7e:b7:60:e3:0a:96:73:32:14:10:4c:29:5c:2f:3c: ea:1a:c5:cc:4f:0f:70:4f:42:ec:b5:3d:f8:2a:7d: d6:43:cd:10:8c:b8:b9:64:ce:ad:06:4c:a6:eb:27: b7:ce:74:1b:f8:58:8c:87:85:41:38:5f:b9:71:2b: fb:99:5c:49:dc:ef:2e:09:d5:fe:c3:2b:11:eb:1e: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E8:1A:79:9B:D4:DD:53:50:2C:9B:09:45:90:8E:47:0A:48:0C:52 X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d6:f7:23:f8:f1:10:52:c8:ab:9d:31:5d:46:95:e0:d8:c7: 2e:c9:e4:0a:05:dd:f2:6a:e5:97:53:48:a4:e7:15:43:00:99: f9:a6:9b:5b:c7:e4:ad:5e:a5:4a:5e:1a:33:68:05:8a:0c:eb: 83:b7:23:4f:db:24:f7:eb:86:49:80:8f:f9:17:95:5d:dc:ee: 23:d5:d8:38:39:ad:4a:33:5d:07:26:cb:98:34:44:c2:ed:2a: ff:79:2b:af:0a:36:e3:96:65:ac:4d:15:3b:85:ae:03:7e:42: db:12:7b:1a:61:df:77:91:af:e3:3b:fd:f4:2f:7e:93:ea:0b: 44:47:09:74:a9:21:4e:b1:b5:08:68:8a:a7:2a:e6:7d:c1:21: a2:7f:34:98:c7:30:e3:aa:65:a7:a5:2d:c6:43:5e:92:93:41: ea:3e:10:f3:6d:8b:e8:cf:5c:06:b2:c0:46:ca:e9:7b:64:60: 46:63:15:e4:e1:85:35:9a:fa:bb:91:ef:df:3c:c8:14:3b:d2: b2:c8:bc:2f:46:db:0f:a3:36:ce:2e:03:e6:71:bf:b5:34:3a: 6d:68:67:2c:4f:56:04:3e:de:f3:0a:16:b7:d1:39:9c:6c:54: 4d:e0:36:df:0b:0d:24:d2:46:e4:4e:7f:7c:05:83:07:d4:1d: 19:71:b1:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegEzcdFXiwje97TigKKjBrtgmYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjA5MjEwNjUwMDhaFw0yNjA5MjIxMDEyMDhaMDMxMTAvBgNV BAMTKDk0RTgxQTc5OUJENERENTM1MDJDOUIwOTQ1OTA4RTQ3MEE0ODBDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj1Yy3BnXBK9SDN48GmiO7A7hq c4LV2qxQBJyOFeptQ4ZXxDgF3BQd9RtVILGJPmeYSEJbr/iqQJw3skE34JM1SZgi svQ1IgsqW9OY/4mF7iHu/VM6klC8jXxKYDjgXR3g96n8OjKI5CSp4r7QG4buTjv5 3sQ/64srEb/gFhEOqEoDDw1n+xnz0SnSPzD/P/Pl3/jlUY1QB9EDZ7cukEOkr8uo xkahSncOhgmaa3NPr4x/iH63YOMKlnMyFBBMKVwvPOoaxcxPD3BPQuy1PfgqfdZD zRCMuLlkzq0GTKbrJ7fOdBv4WIyHhUE4X7lxK/uZXEnc7y4J1f7DKxHrHsLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlOgaeZvU3VNQLJsJRZCORwpIDFIwHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3W9yP48RBSyKudMV1GleDYxy7J5AoF3fJq 5ZdTSKTnFUMAmfmmm1vH5K1epUpeGjNoBYoM64O3I0/bJPfrhkmAj/kXlV3c7iPV 2Dg5rUozXQcmy5g0RMLtKv95K68KNuOWZaxNFTuFrgN+QtsSexph33eRr+M7/fQv fpPqC0RHCXSpIU6xtQhoiqcq5n3BIaJ/NJjHMOOqZaelLcZDXpKTQeo+EPNti+jP XAaywEbK6XtkYEZjFeThhTWa+ruR7988yBQ70rLIvC9G2w+jNs4uA+Zxv7U0Om1o ZyxPVgQ+3vMKFrfROZxsVE3gNt8LDSTSRuROf3wFgwfUHRlxseA= -----END CERTIFICATE-----Generated at Mon Sep 21 16:20:07 2026 by rpki-client