
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
File: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft (raw, json)
Hash identifier: 6kXKlgfqPVaMX7RZ37ihSgNZZwRKhhANgNkcyOVLQgw=
Subject key identifier: CA:B1:50:38:0E:6D:1B:37:EE:54:06:D8:DA:32:CE:1D:AF:20:86:EF
Authority key identifier: 32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3
Certificate issuer: /CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
Certificate serial: 283E29DD63DAC1DCAE35CEA03D62D68C6AD4BB34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 20:52:09 +0000
Manifest this update: Mon 20 Jul 2026 20:47:09 +0000
Manifest next update: Tue 21 Jul 2026 22:37:09 +0000
Files and hashes: 1: 32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl (hash: MUnADv/KjMS36qYI/J6rZhm3dfju3oAGeO0797x825w=)
2: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: AerViwEwX6M35LdYkw1W6Rm917nFOVWmFQ/wALZRWuI=)
3: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: IlwLW0g7keiKYblC08y+Cdk30ZDG31NiX8oDu4ZTBVM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl
rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 22:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3e:29:dd:63:da:c1:dc:ae:35:ce:a0:3d:62:d6:8c:6a:d4:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32C40869250CE9606E05C15B69B20FF4BCC7EEF3
Validity
Not Before: Jul 20 20:47:09 2026 GMT
Not After : Jul 21 22:37:09 2026 GMT
Subject: CN=CAB150380E6D1B37EE5406D8DA32CE1DAF2086EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:42:2e:15:75:14:ca:7b:30:9c:88:be:7f:
d8:de:5d:16:35:2a:d0:bf:77:6c:3f:c8:5e:02:0b:
3f:75:cb:2a:d3:29:5f:cf:bd:4e:7c:18:1e:16:68:
0d:bb:6f:5f:6e:75:8a:f5:2f:e1:cf:4f:55:fb:db:
d8:2e:f5:b4:cb:5a:97:23:9d:98:2f:ae:a5:1b:32:
36:fe:f0:f5:c9:1e:1a:f6:c1:e8:de:cc:c3:f2:72:
d2:c7:80:7a:45:46:a3:64:a7:00:8e:a4:ac:4f:83:
1e:38:14:82:d6:70:a0:34:84:6e:50:84:b9:91:2f:
0b:14:6b:ba:0b:c0:45:4d:9e:21:a3:0e:c4:b7:98:
98:49:b8:b8:aa:c4:71:95:df:36:f0:52:43:bc:aa:
ca:f7:83:c4:a4:36:5f:30:96:1a:2b:11:da:51:39:
7c:b8:dc:4f:e3:f2:e9:7f:41:96:3c:91:02:08:fa:
05:b3:60:0b:e4:32:ba:7c:52:45:0d:03:03:10:41:
59:b5:48:36:62:fb:8e:67:16:77:17:db:5b:67:e7:
2e:15:b2:b9:e4:36:33:66:89:2f:36:09:4c:d5:21:
2b:db:fe:12:dc:b1:b8:a5:c5:7e:b8:d8:73:b6:9f:
cb:81:f9:2b:ca:3b:d9:1f:00:74:dd:ad:e4:d4:c5:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:50:38:0E:6D:1B:37:EE:54:06:D8:DA:32:CE:1D:AF:20:86:EF
X509v3 Authority Key Identifier:
keyid:32:C4:08:69:25:0C:E9:60:6E:05:C1:5B:69:B2:0F:F4:BC:C7:EE:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/32C40869250CE9606E05C15B69B20FF4BCC7EEF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cd:7f:dd:2f:f8:32:50:1b:00:99:3e:78:44:13:a3:02:8e:
12:e0:4b:6a:c5:1f:51:48:71:e8:84:62:6a:2c:0c:8f:0c:07:
93:f1:f8:1c:f3:e6:04:ba:9b:dd:13:26:8d:0b:4b:3f:f3:7d:
4c:3d:a2:3d:50:74:1f:7c:d7:2b:d6:89:63:5a:70:05:cb:9c:
86:30:5f:4d:c7:77:87:78:a3:cd:f9:30:38:e8:36:67:a1:a2:
bd:de:f0:b9:f0:95:81:7c:b7:7e:21:0e:48:64:56:e0:66:eb:
f8:d5:27:d0:16:d1:1e:68:0c:dd:ea:cd:4c:fd:18:1b:38:db:
90:d3:f4:97:d6:83:70:61:68:a6:9a:b1:0f:1d:c6:6c:28:5f:
d7:95:01:a2:ef:35:8e:af:7f:4b:3a:ce:f2:62:10:70:0c:ff:
71:8f:4f:23:cb:84:fe:21:2b:67:58:be:bc:5f:f8:a3:98:b8:
40:1d:de:10:d3:66:b3:87:f8:4b:83:97:cb:29:98:5b:31:09:
63:40:51:b2:ea:f7:73:a8:8a:49:be:e5:40:e8:b3:12:38:29:
08:78:69:e3:cf:55:27:3d:87:92:d3:40:e6:a3:0a:e5:89:14:
fb:8f:4b:03:6c:59:d8:fc:05:0c:b4:f8:53:9b:62:2b:35:44:
ef:39:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:26:00 2026 by rpki-client