$ rpki-client -vvf rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft File: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft (raw, json) Hash identifier: VsoglF0Sb7R8STVnUlMtIRpYLidKkRWoBmzG3LDGatE= Subject key identifier: 5D:64:96:0F:87:74:E4:5C:A8:69:AF:02:92:B7:B5:22:66:2F:94:C8 Authority key identifier: 32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 Certificate issuer: /CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Certificate serial: 58848BD17AAA1255A457643B4B53D44CA60562C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:27:35 +0000 Manifest this update: Tue 21 Jul 2026 01:22:35 +0000 Manifest next update: Wed 22 Jul 2026 02:07:35 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: Uh5y0YtfY7V2qTdTkRsIfNJf6g7Mb5/NMceYo7geuVc=) 2: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl (hash: WcB4JrjVrT2iVoI6Sy3h9Vmqm+jSu4ZRsUMXArw6Pdc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:84:8b:d1:7a:aa:12:55:a4:57:64:3b:4b:53:d4:4c:a6:05:62:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Validity Not Before: Jul 21 01:22:35 2026 GMT Not After : Jul 22 02:07:35 2026 GMT Subject: CN=5D64960F8774E45CA869AF0292B7B522662F94C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:d3:52:25:72:a3:b0:a4:05:55:9c:80:88: 4b:5d:8f:dc:9f:33:03:7f:7e:ad:01:93:a5:f9:f9: e6:73:b0:f4:05:c5:9f:57:f6:e1:a7:7b:e1:dc:76: 71:be:e5:81:35:4a:cb:42:3e:e1:05:46:04:b4:43: 12:9a:07:49:2c:e0:3d:0a:1d:c0:d4:1c:7a:ca:58: 09:d3:d8:70:d1:78:34:48:37:10:62:47:3c:7c:cd: e1:85:bb:b5:3c:38:99:01:7c:40:cd:d0:ab:bd:d0: fa:fe:6a:60:ec:45:6c:ca:1e:f2:28:b2:b0:6a:86: 03:35:f8:1d:61:9d:14:a1:08:b1:5b:4f:42:4b:a6: 16:c1:0e:13:31:84:a1:8c:a4:98:33:59:e7:ff:ff: 3a:33:78:fe:9a:27:7a:83:1e:13:9e:3a:6d:77:a1: cc:56:d2:8e:7a:5d:7a:6f:48:c9:65:ac:6d:ce:5f: 1a:52:2d:5e:58:81:58:bf:fa:89:fc:8f:08:57:55: 89:1f:12:cc:3a:75:12:06:18:ca:62:c1:6d:69:b2: 0e:5d:bd:1f:ec:74:2e:19:72:7a:bb:10:7d:da:d5: 34:e4:63:9d:e5:e4:b2:bc:7f:a8:c7:cb:e1:85:e1: 3a:a5:8b:7e:9d:8a:ba:df:fd:07:38:e8:4a:44:18: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:64:96:0F:87:74:E4:5C:A8:69:AF:02:92:B7:B5:22:66:2F:94:C8 X509v3 Authority Key Identifier: keyid:32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b5:18:f8:79:ab:ed:ea:d2:ff:30:cb:07:55:e7:c8:7b:2d: 48:e1:2f:20:86:08:8b:5a:ab:45:62:a4:d4:ae:b1:cd:df:a9: 27:3e:70:39:a3:2c:30:71:08:14:8d:f9:e3:69:59:48:e4:05: c7:10:4b:67:03:82:7d:f0:72:5b:26:0d:ed:39:0c:86:2c:66: c7:55:19:e5:05:98:e2:80:69:e8:7b:7c:13:12:84:05:dd:36: 64:66:67:76:0c:35:7b:ee:8f:da:b9:1a:38:46:25:4d:d3:fb: 97:e8:4a:8e:b6:fa:4f:28:30:a0:3b:1d:bb:0c:6e:9a:4e:aa: 02:9b:85:a9:c8:fd:55:8c:61:2a:8f:3e:51:8e:5e:a1:c9:42: 71:14:c1:e2:60:b1:d0:97:d5:89:0f:dd:0f:60:11:1f:6e:a1: 68:17:d5:49:35:31:9d:b1:44:73:f8:a5:94:f4:4c:85:71:bc: 3e:f7:0b:fb:95:6a:d4:5c:b3:0e:45:f0:8e:02:7f:9f:5c:b1: 8f:16:aa:79:85:ea:db:97:12:fc:0c:11:13:1a:5a:b0:e6:2e: ce:c8:d3:cb:96:6d:ff:80:3d:25:f0:8d:fa:64:b1:cc:bb:65: 4d:42:49:a1:8d:2e:00:9c:be:f2:a0:e6:cf:61:2b:2c:d2:a5: 45:5b:57:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWISL0XqqElWkV2Q7S1PUTKYFYsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0 RDcyQjMyNjAeFw0yNjA3MjEwMTIyMzVaFw0yNjA3MjIwMjA3MzVaMDMxMTAvBgNV BAMTKDVENjQ5NjBGODc3NEU0NUNBODY5QUYwMjkyQjdCNTIyNjYyRjk0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJ9NSJXKjsKQFVZyAiEtdj9yf MwN/fq0Bk6X5+eZzsPQFxZ9X9uGne+HcdnG+5YE1SstCPuEFRgS0QxKaB0ks4D0K HcDUHHrKWAnT2HDReDRINxBiRzx8zeGFu7U8OJkBfEDN0Ku90Pr+amDsRWzKHvIo srBqhgM1+B1hnRShCLFbT0JLphbBDhMxhKGMpJgzWef//zozeP6aJ3qDHhOeOm13 ocxW0o56XXpvSMllrG3OXxpSLV5YgVi/+on8jwhXVYkfEsw6dRIGGMpiwW1psg5d vR/sdC4Zcnq7EH3a1TTkY53l5LK8f6jHy+GF4Tqli36dirrf/Qc46EpEGKI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXWSWD4d05Fyoaa8Ckre1ImYvlMgwHwYDVR0j BBgwFoAUMrpq7FHqIUu0t0L64uw/DE1ysyYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODExZDlhYmMtNDk4Ny00ZGJjLTk3NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1 MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0RDcyQjMyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkJBNkFFQzUxRUEyMTRCQjRCNzQyRkFFMkVDM0YwQzRENzJC MzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNG MEM0RDcyQjMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO1GPh5q+3q0v8wywdV58h7LUjhLyCGCIta q0VipNSusc3fqSc+cDmjLDBxCBSN+eNpWUjkBccQS2cDgn3wclsmDe05DIYsZsdV GeUFmOKAaeh7fBMShAXdNmRmZ3YMNXvuj9q5GjhGJU3T+5foSo62+k8oMKA7HbsM bppOqgKbhanI/VWMYSqPPlGOXqHJQnEUweJgsdCX1YkP3Q9gER9uoWgX1Uk1MZ2x RHP4pZT0TIVxvD73C/uVatRcsw5F8I4Cf59csY8WqnmF6tuXEvwMERMaWrDmLs7I 08uWbf+APSXwjfpkscy7ZU1CSaGNLgCcvvKg5s9hKyzSpUVbV1I= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:21 2026 by rpki-client