
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft
File: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft (raw, json)
Hash identifier: 0rBBgkLYLqy5hinxMJ2SJr5Y7XOTATTb9tsl5IFR7wk=
Subject key identifier: F0:27:16:59:F4:6B:A3:9E:BA:57:C2:D1:96:BD:5E:5A:09:25:28:AD
Authority key identifier: 32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0
Certificate issuer: /CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0
Certificate serial: 1C7F4483F288259D2B7288E217B25C8657C7C09E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 05:43:44 +0000
Manifest this update: Mon 21 Sep 2026 05:38:44 +0000
Manifest next update: Tue 22 Sep 2026 08:37:44 +0000
Files and hashes: 1: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl (hash: 1utlO2K26eKOA6haAZbixqgash4r2TkJxOBnvVuwU2U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl
rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7f:44:83:f2:88:25:9d:2b:72:88:e2:17:b2:5c:86:57:c7:c0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0
Validity
Not Before: Sep 21 05:38:44 2026 GMT
Not After : Sep 22 08:37:44 2026 GMT
Subject: CN=F0271659F46BA39EBA57C2D196BD5E5A092528AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:8a:4a:d7:a8:d7:79:90:35:d4:fb:c0:4b:
26:c5:d8:ce:27:ca:c4:5e:19:1c:d4:09:08:79:61:
41:db:86:22:ff:8c:79:e3:da:03:fe:a9:e1:f2:af:
c3:06:91:90:ac:dc:83:4b:11:bd:cb:5f:0d:e1:7e:
b6:60:c2:5f:41:da:5d:f5:57:a7:ce:3b:f4:a7:03:
c7:05:de:09:87:07:52:d0:e4:21:73:a7:f6:1b:7a:
bb:d1:df:de:4c:69:39:59:21:e0:1d:47:9e:2c:73:
86:9c:38:6d:df:fd:6d:2c:77:ba:14:b2:f7:8e:af:
8a:9a:4e:86:2b:39:f8:ef:82:35:a3:b8:d5:5a:38:
5d:7b:f8:96:5f:1f:d0:f9:f6:f7:0c:3f:39:eb:03:
02:99:e6:e6:e5:ec:2e:91:f9:80:6f:7b:8b:8a:fc:
15:30:94:4e:94:45:85:07:32:d7:49:aa:a2:dc:f5:
12:05:1b:28:56:ea:85:96:94:22:0e:42:a4:54:42:
b7:1f:df:49:42:78:de:ea:37:3e:43:f6:72:82:70:
f2:c7:63:d0:07:4c:5f:05:19:cf:0e:c1:35:95:57:
bf:af:72:0e:43:21:e0:4d:b1:7a:94:58:9d:13:ce:
d2:b1:7f:8b:9d:bc:90:eb:b9:f2:ac:bf:0a:c5:b0:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:27:16:59:F4:6B:A3:9E:BA:57:C2:D1:96:BD:5E:5A:09:25:28:AD
X509v3 Authority Key Identifier:
keyid:32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:be:dc:1e:6f:06:f9:c1:ed:31:2b:b9:21:6c:c6:fd:72:e4:
45:4b:5c:16:e5:7a:4f:88:8a:3f:ee:7c:5c:05:72:01:48:be:
9d:e3:1f:0f:02:59:05:55:45:47:b1:a3:f5:0d:4f:f8:e7:f2:
8a:0b:82:4d:e1:2c:6e:67:f0:cd:5a:87:ce:88:a8:ee:78:7d:
d0:c9:4c:cb:fa:90:e0:a7:02:13:c2:e3:4d:ea:15:08:26:4c:
18:05:37:f5:c3:a9:ff:49:82:2c:19:91:21:94:1e:07:24:08:
cf:4a:23:f8:9f:b7:cc:50:84:06:64:b4:fb:40:73:85:74:87:
a4:15:e3:83:cd:28:66:88:9c:b8:ce:94:f4:79:ff:53:d0:fd:
e0:db:15:83:a9:cb:08:07:48:7f:d7:8c:78:c3:e0:07:9f:d0:
cc:9c:22:89:a1:77:55:26:37:1f:83:0f:23:c7:e4:d0:22:7a:
96:f1:8a:7d:a2:4b:e2:f8:26:93:d1:fe:1e:3b:37:77:45:7b:
84:cb:c7:88:b5:9a:9b:7f:46:54:3e:32:a2:27:17:7e:41:4a:
9a:27:88:fa:e7:56:14:20:36:fe:29:89:84:b3:db:a7:d8:33:
55:82:1e:8e:82:4a:3b:08:e7:74:56:4a:de:47:32:3b:4a:06:
89:e8:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:40:37 2026 by rpki-client