$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft File: 32857E62250C763037D1ED291D7937072EB50DC5.mft (raw, json) Hash identifier: RlCeclvqrZeBfB9pvWOaM94Tt3zO/s+DkahjJgXINy4= Subject key identifier: 71:55:99:83:DB:8F:A4:C6:C3:C4:B8:0A:14:F0:1B:24:82:42:B6:D4 Authority key identifier: 32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 Certificate issuer: /CN=32857E62250C763037D1ED291D7937072EB50DC5 Certificate serial: 265FD05BCBACD24BD8F493733F1B17DADB9612A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 11:06:08 +0000 Manifest this update: Sun 02 Aug 2026 11:01:07 +0000 Manifest next update: Mon 03 Aug 2026 12:21:07 +0000 Files and hashes: 1: 32857E62250C763037D1ED291D7937072EB50DC5.crl (hash: v9VwDZKKn6501iuxEgJ+NNoLj61Q/fnNU3jJxx5fj2w=) 2: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: bObGNzkzxqsMtfGussqQMllg3CDeiOkWDE0MTteiGhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5f:d0:5b:cb:ac:d2:4b:d8:f4:93:73:3f:1b:17:da:db:96:12:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32857E62250C763037D1ED291D7937072EB50DC5 Validity Not Before: Aug 2 11:01:07 2026 GMT Not After : Aug 3 12:21:07 2026 GMT Subject: CN=71559983DB8FA4C6C3C4B80A14F01B248242B6D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:81:6b:bf:3f:b7:cc:62:af:98:d9:80:8e: b9:b6:8e:96:ab:7e:10:48:40:93:9f:db:42:d8:40: 00:a9:f1:00:70:5f:c6:7a:cf:bd:25:65:1b:79:23: 4d:9c:30:a8:a3:83:ce:cd:83:48:31:35:22:25:21: a6:43:93:56:df:21:4b:b9:81:af:d1:51:6b:3b:6f: 51:ed:93:e0:44:a4:26:64:9a:99:d9:82:dc:68:0b: 23:5a:ba:69:e6:1e:54:89:82:55:21:53:bf:09:fa: c5:a7:ed:22:65:c3:d1:90:ca:05:e5:d8:10:5d:e1: 14:4c:d5:35:bd:58:51:0d:cc:62:c1:9d:21:62:4e: da:15:63:54:e1:a4:55:ec:f0:36:ba:db:5b:df:24: 69:43:46:4b:a3:1b:79:59:c3:12:a4:ee:71:21:5c: cf:97:e5:06:5c:47:c9:97:bf:d1:1f:91:17:b4:05: 00:7c:9a:2a:12:81:a4:1e:6d:f9:8c:36:20:36:0a: 92:24:44:25:65:ad:24:0b:d2:81:cb:e2:2b:93:53: 76:5b:1a:65:40:37:d1:00:0a:8e:38:88:93:c4:26: 61:30:d9:8d:01:93:98:02:4b:1d:b8:2b:dc:74:28: 0e:a6:87:b7:cd:7e:5c:75:0e:30:16:19:ee:48:f4: 7f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:55:99:83:DB:8F:A4:C6:C3:C4:B8:0A:14:F0:1B:24:82:42:B6:D4 X509v3 Authority Key Identifier: keyid:32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:80:f9:94:76:0d:e3:1d:c0:33:e0:d2:64:c6:54:63:89:81: ce:8f:06:3b:2a:65:ac:8a:d1:42:a8:a8:a8:b9:07:46:ec:40: 28:be:85:f0:61:bf:94:28:05:2b:8f:73:98:fc:c4:25:ed:50: bb:37:43:08:60:db:54:3c:f0:9d:10:5a:c5:8a:a5:ea:73:58: 8c:08:5e:5a:6e:ab:1c:34:0b:f2:03:cc:8f:3b:74:1e:4e:d4: 91:b5:5d:2c:06:a8:a4:e7:c5:dd:1b:87:7d:14:a0:7c:c3:8f: b0:df:3e:75:4e:77:8f:56:49:2e:f2:4c:db:7f:ea:a5:29:39: 0d:36:0d:8f:39:d3:12:99:71:82:4d:e7:0d:f9:56:ad:8c:28: bb:18:97:15:fd:fc:f4:c0:60:3b:be:38:96:a0:ae:57:99:81: ac:4b:dd:e3:d5:f1:fa:4b:fc:f0:94:9e:a4:71:42:23:eb:72: 5a:d9:ff:54:ec:34:09:63:66:3d:23:3a:66:93:8f:2f:a9:c4: d1:20:08:0c:6c:ff:d9:da:80:b3:e8:af:d2:dc:c2:72:e6:04: fa:45:65:6f:3c:0c:df:63:55:c4:98:bf:aa:5c:44:2b:21:9e: de:58:fe:e7:ab:60:12:84:a6:ea:bd:5b:46:56:1a:24:fa:00: 1f:72:7d:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJl/QW8us0kvY9JNzPxsX2tuWEqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcy RUI1MERDNTAeFw0yNjA4MDIxMTAxMDdaFw0yNjA4MDMxMjIxMDdaMDMxMTAvBgNV BAMTKDcxNTU5OTgzREI4RkE0QzZDM0M0QjgwQTE0RjAxQjI0ODI0MkI2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tIFrvz+3zGKvmNmAjrm2jpar fhBIQJOf20LYQACp8QBwX8Z6z70lZRt5I02cMKijg87Ng0gxNSIlIaZDk1bfIUu5 ga/RUWs7b1Htk+BEpCZkmpnZgtxoCyNaumnmHlSJglUhU78J+sWn7SJlw9GQygXl 2BBd4RRM1TW9WFENzGLBnSFiTtoVY1ThpFXs8Da621vfJGlDRkujG3lZwxKk7nEh XM+X5QZcR8mXv9EfkRe0BQB8mioSgaQebfmMNiA2CpIkRCVlrSQL0oHL4iuTU3Zb GmVAN9EACo44iJPEJmEw2Y0Bk5gCSx24K9x0KA6mh7fNflx1DjAWGe5I9H/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcVWZg9uPpMbDxLgKFPAbJIJCttQwHwYDVR0j BBgwFoAUMoV+YiUMdjA30e0pHXk3By61DcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWQwMTItYWZkYi00MmZiLTk3MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIy NTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcyRUI1MERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1N0U2MjI1MEM3NjMwMzdEMUVEMjkxRDc5MzcwNzJFQjUw REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3 MDcyRUI1MERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOA+ZR2DeMdwDPg0mTGVGOJgc6PBjsqZayK 0UKoqKi5B0bsQCi+hfBhv5QoBSuPc5j8xCXtULs3Qwhg21Q88J0QWsWKpepzWIwI Xlpuqxw0C/IDzI87dB5O1JG1XSwGqKTnxd0bh30UoHzDj7DfPnVOd49WSS7yTNt/ 6qUpOQ02DY850xKZcYJN5w35Vq2MKLsYlxX9/PTAYDu+OJagrleZgaxL3ePV8fpL /PCUnqRxQiPrclrZ/1TsNAljZj0jOmaTjy+pxNEgCAxs/9nagLPor9LcwnLmBPpF ZW88DN9jVcSYv6pcRCshnt5Y/uerYBKEpuq9W0ZWGiT6AB9yfQ8= -----END CERTIFICATE-----Generated at Sun Aug 2 22:43:35 2026 by rpki-client