$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft File: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft (raw, json) Hash identifier: Od6ejIZrocd9cC48kFH8iWeaOYthT54UQSrh5PP2B8k= Subject key identifier: DC:D1:88:11:D9:F8:D5:8B:18:F3:29:E3:12:CB:09:55:6C:F7:A0:44 Authority key identifier: 32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 Certificate issuer: /CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Certificate serial: 393F8513E0FDBF39EC985C249EB5B992E26E3339 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 05:49:55 +0000 Manifest this update: Wed 17 Jun 2026 05:44:55 +0000 Manifest next update: Thu 18 Jun 2026 06:58:55 +0000 Files and hashes: 1: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl (hash: YNGZV77l0wfRDUxjF9X3QmB4qt+k+ZUT2gBs2fd3PS4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3f:85:13:e0:fd:bf:39:ec:98:5c:24:9e:b5:b9:92:e2:6e:33:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Validity Not Before: Jun 17 05:44:55 2026 GMT Not After : Jun 18 06:58:55 2026 GMT Subject: CN=DCD18811D9F8D58B18F329E312CB09556CF7A044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:25:10:80:a1:7a:1e:e2:6f:eb:34:8b:5c: 97:ba:3b:32:c4:cb:51:67:86:b2:10:85:5f:bc:87: eb:a7:f6:2e:1b:b9:6a:b2:39:e9:74:17:ac:6b:c1: 77:3f:b7:3e:41:1e:36:f8:52:d0:db:9f:92:d2:f5: 28:db:6e:e3:45:5a:7d:ab:20:be:18:64:e3:d3:e7: 54:2c:3c:1a:df:36:76:7c:36:5e:b0:cc:9a:4f:04: da:88:eb:55:f7:8a:51:3d:57:af:b0:0c:3a:c5:41: 05:aa:62:78:61:0e:14:5b:22:e0:71:a0:61:c2:b8: cb:42:fe:fc:0b:4d:59:b3:4e:e8:8f:23:52:2d:6f: 01:ff:b8:af:5e:d7:9a:77:4a:cc:40:1d:ad:0f:c8: a8:a5:89:12:9d:72:5d:28:f3:86:a6:8b:7f:2a:c0: 7a:b3:54:ee:fd:18:63:b5:9d:b5:c4:8a:e3:92:10: 76:22:d1:72:df:8d:59:4f:8b:79:95:57:7a:64:77: 3c:74:c0:b4:2c:d6:70:9e:e7:31:f1:1d:78:62:cd: 2e:77:57:fc:a5:d6:25:e4:23:72:c5:be:cc:9c:4c: e6:2d:15:b5:e2:53:67:84:ea:b0:2b:c3:85:fa:e8: 3d:a0:90:0e:35:18:f8:35:bb:fd:8d:7a:01:a1:ac: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D1:88:11:D9:F8:D5:8B:18:F3:29:E3:12:CB:09:55:6C:F7:A0:44 X509v3 Authority Key Identifier: keyid:32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e3:5a:1a:f9:ab:ac:61:9f:29:fd:a6:c8:bc:33:bd:12:9e: 79:cf:e7:6f:91:35:71:ea:cc:59:f1:6c:a6:e3:18:3c:5d:42: b1:29:68:57:16:47:38:c5:53:1f:64:b2:ac:d9:8c:0e:a3:25: 24:76:cd:83:df:3b:81:63:1e:43:f4:66:81:12:39:b0:c7:8b: 73:10:14:6f:70:c8:b8:85:47:39:e7:e4:e6:1c:4e:a9:7d:db: e9:06:86:3c:0f:fb:fb:56:66:42:37:4d:a4:c8:e6:be:2b:45: 5f:8e:a2:db:92:d9:af:ef:cb:13:0d:77:59:3d:b0:34:55:48: 38:f2:cc:61:f4:51:4a:db:28:21:3c:a8:fb:9a:4a:b9:0e:c0: 23:b8:8f:08:f4:f5:04:ee:0f:f4:4b:c5:a4:93:de:a1:69:fe: 31:65:d7:df:18:a0:fd:b7:35:22:45:3f:0c:9e:4b:e6:df:a8: 09:02:1a:30:69:f5:86:33:3c:4e:c3:f4:91:00:68:52:a2:c6: 73:bf:f8:c3:b1:8f:e8:f9:1c:ff:d5:f9:31:fd:25:2e:73:d7: f4:60:ef:f1:ab:4a:2c:8a:43:5a:ca:9b:5c:0b:7c:fb:68:89: 86:03:c5:a2:d9:0c:c9:01:8e:f8:96:da:82:b4:9f:b7:58:e0: 90:b7:7e:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOT+FE+D9vznsmFwknrW5kuJuMzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVD MEE4OTFDMDAeFw0yNjA2MTcwNTQ0NTVaFw0yNjA2MTgwNjU4NTVaMDMxMTAvBgNV BAMTKERDRDE4ODExRDlGOEQ1OEIxOEYzMjlFMzEyQ0IwOTU1NkNGN0EwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tiUQgKF6HuJv6zSLXJe6OzLE y1FnhrIQhV+8h+un9i4buWqyOel0F6xrwXc/tz5BHjb4UtDbn5LS9SjbbuNFWn2r IL4YZOPT51QsPBrfNnZ8Nl6wzJpPBNqI61X3ilE9V6+wDDrFQQWqYnhhDhRbIuBx oGHCuMtC/vwLTVmzTuiPI1ItbwH/uK9e15p3SsxAHa0PyKiliRKdcl0o84ami38q wHqzVO79GGO1nbXEiuOSEHYi0XLfjVlPi3mVV3pkdzx0wLQs1nCe5zHxHXhizS53 V/yl1iXkI3LFvsycTOYtFbXiU2eE6rArw4X66D2gkA41GPg1u/2NegGhrO5pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NGIEdn41YsY8ynjEssJVWz3oEQwHwYDVR0j BBgwFoAUMtda9GAhqth1bWCaHoyLTsCokcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlMDVmY2YtNWYyYS00ZDVlLWEzZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2 MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVDMEE4OTFDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkQ3NUFGNDYwMjFBQUQ4NzU2RDYwOUExRThDOEI0RUMwQTg5 MUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhC NEVDMEE4OTFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnjWhr5q6xhnyn9psi8M70SnnnP52+RNXHq zFnxbKbjGDxdQrEpaFcWRzjFUx9ksqzZjA6jJSR2zYPfO4FjHkP0ZoESObDHi3MQ FG9wyLiFRznn5OYcTql92+kGhjwP+/tWZkI3TaTI5r4rRV+OotuS2a/vyxMNd1k9 sDRVSDjyzGH0UUrbKCE8qPuaSrkOwCO4jwj09QTuD/RLxaST3qFp/jFl198YoP23 NSJFPwyeS+bfqAkCGjBp9YYzPE7D9JEAaFKixnO/+MOxj+j5HP/V+TH9JS5z1/Rg 7/GrSiyKQ1rKm1wLfPtoiYYDxaLZDMkBjviW2oK0n7dY4JC3fgA= -----END CERTIFICATE-----Generated at Wed Jun 17 11:11:34 2026 by rpki-client