
$ rpki-client -vvf rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft
File: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft (raw, json)
Hash identifier: IQHHmq5SPfOOQGHi2oBRU53dpa83Vg6zQ8wC2i//+TU=
Subject key identifier: 4B:FC:2D:1F:8F:7C:4B:9C:5F:85:80:00:57:3D:22:B2:4E:82:DC:5A
Authority key identifier: 32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26
Certificate issuer: /CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326
Certificate serial: 62C2B12F83871FA92501765B85B849FAD909AC57
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 03:16:48 +0000
Manifest this update: Wed 17 Jun 2026 03:11:48 +0000
Manifest next update: Thu 18 Jun 2026 06:01:48 +0000
Files and hashes: 1: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl (hash: GABPnOPwrzGOsLzVkR7rCftX4YRFaHhMFs9wJ+ehVkE=)
2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: Uh5y0YtfY7V2qTdTkRsIfNJf6g7Mb5/NMceYo7geuVc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl
rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c2:b1:2f:83:87:1f:a9:25:01:76:5b:85:b8:49:fa:d9:09:ac:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326
Validity
Not Before: Jun 17 03:11:48 2026 GMT
Not After : Jun 18 06:01:48 2026 GMT
Subject: CN=4BFC2D1F8F7C4B9C5F858000573D22B24E82DC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:ef:7c:30:40:1e:72:e2:eb:41:1b:29:6f:
68:6a:b1:2c:d1:51:3a:b0:1f:63:63:be:94:1c:14:
78:ae:a3:df:37:5d:3f:b1:8e:61:74:01:cc:36:e1:
e9:70:d5:fe:a1:60:d7:de:0a:d8:17:e1:07:35:41:
e4:8d:02:60:70:bf:64:0d:47:80:c1:02:19:a7:42:
33:af:0a:69:18:d7:2e:21:db:4f:bd:03:b8:63:18:
72:37:f0:af:00:77:6f:bc:f9:16:f7:81:93:c9:e8:
c1:cc:7f:68:cb:ed:c0:f7:77:83:96:f7:30:cf:7e:
a2:23:91:b8:3e:f4:35:72:d9:0b:87:96:61:eb:e1:
4d:58:35:87:d5:8b:cf:25:78:7c:78:4c:52:a2:ab:
83:f3:2f:f1:f3:8c:a3:ac:2c:44:e6:78:c9:72:21:
d3:4b:f9:bf:f1:1d:bd:0d:11:a9:39:2b:5e:2f:62:
e2:da:62:b7:8c:94:86:d9:6b:29:f6:2a:64:2c:0f:
d5:73:8a:f5:6a:03:f8:bd:2b:2e:da:90:5c:7f:0d:
c2:76:ec:f6:14:07:42:4b:94:86:84:b9:e7:1c:17:
7c:de:48:10:d6:62:07:a5:0d:29:15:f1:2e:b7:42:
78:9e:02:45:31:58:9b:74:6d:d1:ec:b7:1e:ae:d3:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FC:2D:1F:8F:7C:4B:9C:5F:85:80:00:57:3D:22:B2:4E:82:DC:5A
X509v3 Authority Key Identifier:
keyid:32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d1:f4:a5:42:13:a8:e4:21:c2:d5:7d:2e:e7:19:55:a4:61:
1e:ef:a9:1b:98:6b:d3:c8:29:be:75:58:d3:0f:b3:86:63:10:
74:34:f3:71:42:8b:9e:65:75:e8:6a:fc:49:7b:53:fb:5f:af:
8d:04:52:cb:4b:1d:e4:3a:f2:06:3e:3e:a5:9e:be:b0:6e:56:
8b:aa:5f:b3:c3:40:49:2c:85:3d:d8:d4:92:24:45:8c:0e:9c:
20:b4:f3:4d:ee:d3:6f:9f:cd:ca:fb:fe:93:0d:48:78:e0:1d:
0d:ca:af:86:2b:cf:24:d3:89:ef:29:30:e4:83:ee:89:75:59:
b9:37:e3:b4:bb:e6:0d:dd:b4:2f:7b:6a:2c:e6:b5:ca:79:eb:
0d:83:4d:6b:93:fe:34:36:98:42:56:d8:b6:12:19:1d:ac:a4:
ae:9b:bc:8d:af:c6:15:5d:b7:40:f9:34:1b:85:54:d4:b9:03:
d6:91:76:9c:87:d2:e0:fd:7b:95:b8:83:85:1e:df:7c:b3:5b:
9e:e7:c4:ca:3b:f6:7d:94:7d:fa:87:b8:c2:c9:85:e6:9f:fb:
a1:e0:a5:3e:50:c8:de:dd:23:40:45:46:1d:65:8e:77:8a:c0:
6b:32:57:f1:94:43:50:0c:c1:de:33:53:6a:a3:74:27:4a:08:
56:e3:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:30 2026 by rpki-client