$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft File: 32857E62250C763037D1ED291D7937072EB50DC5.mft (raw, json) Hash identifier: qL2lGL6trdJV5VzXEm5fiWReU8nA19jwswBn05fAOU0= Subject key identifier: 11:6F:CD:AC:6C:5E:D2:8F:23:9C:AE:5F:83:CC:57:A7:86:1A:B2:D6 Authority key identifier: 32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 Certificate issuer: /CN=32857E62250C763037D1ED291D7937072EB50DC5 Certificate serial: 7DE39358C9185CB439F9F423EC3189F3308A75FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 15:10:07 +0000 Manifest this update: Thu 18 Jun 2026 15:05:07 +0000 Manifest next update: Fri 19 Jun 2026 17:35:07 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: bObGNzkzxqsMtfGussqQMllg3CDeiOkWDE0MTteiGhQ=) 2: 32857E62250C763037D1ED291D7937072EB50DC5.crl (hash: FbiAYNPtcfXlWr8ukuzVV/O/L0LN8xiUb8pyFMgVzzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e3:93:58:c9:18:5c:b4:39:f9:f4:23:ec:31:89:f3:30:8a:75:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32857E62250C763037D1ED291D7937072EB50DC5 Validity Not Before: Jun 18 15:05:07 2026 GMT Not After : Jun 19 17:35:07 2026 GMT Subject: CN=116FCDAC6C5ED28F239CAE5F83CC57A7861AB2D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:bb:c0:f4:cc:61:06:9c:0b:ad:ea:49:39: 93:a9:a3:b3:04:d7:96:75:2f:ae:b2:64:27:74:55: 39:29:e1:4e:a2:de:12:92:f2:79:de:d8:1c:cb:7e: 11:d2:fa:ec:94:5d:d4:a4:ec:74:9a:ad:f6:ff:8f: f0:77:bb:ce:98:e4:9e:ef:20:82:55:fc:16:88:ee: a7:51:b3:3f:44:08:30:ff:ab:f4:98:f1:f5:a7:f7: c1:3a:95:65:00:ee:2e:d5:d3:21:9a:70:5c:e0:a5: 85:e0:5d:e5:2c:fa:07:c9:65:8b:ce:87:7b:56:6b: 5e:78:39:2b:cf:f8:7f:6d:a7:93:bc:f6:2a:03:5d: 91:aa:d8:da:d8:a7:f7:67:f7:78:5d:01:78:b5:4a: 5c:3f:d6:ed:e9:bd:cf:9c:10:b0:99:b0:66:89:2e: 1e:a6:bd:2e:83:be:ec:1c:59:3d:e8:d9:51:5b:44: 4b:1b:55:6e:93:f1:e7:e4:74:06:e2:73:8e:e0:1b: e0:6c:d6:a1:4c:91:82:ab:58:82:6d:2a:51:ce:b0: d8:64:72:22:c3:5b:8e:7a:4a:86:4f:63:48:d9:4f: 09:50:84:0c:7a:bf:66:f9:2e:00:1c:89:f4:cf:69: 36:d9:ce:07:17:36:49:a5:33:fd:be:73:e8:c7:29: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6F:CD:AC:6C:5E:D2:8F:23:9C:AE:5F:83:CC:57:A7:86:1A:B2:D6 X509v3 Authority Key Identifier: keyid:32:85:7E:62:25:0C:76:30:37:D1:ED:29:1D:79:37:07:2E:B5:0D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32857E62250C763037D1ED291D7937072EB50DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/32857E62250C763037D1ED291D7937072EB50DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c4:e5:6c:e1:a1:2a:4d:43:b6:78:f9:3c:bf:d2:25:ab:b8: 89:f6:0c:0a:c5:77:95:2d:2c:f4:70:08:3f:fc:87:28:93:39: 10:fd:a7:4b:8d:54:0f:a3:61:2d:85:bd:02:78:3f:59:fd:b8: 4d:4b:31:b9:71:71:98:86:02:dd:10:a5:de:0c:cb:b5:de:ae: 7d:70:97:ba:c0:cf:8d:dc:76:ca:27:c6:63:4c:4f:45:c8:bc: ed:54:02:02:0e:5a:e5:08:11:8e:85:1e:c0:68:38:1a:4c:cc: 93:f8:ea:df:cc:c6:d9:70:a9:e7:e7:e5:3f:ce:16:76:29:71: 11:d6:6e:f5:7b:b4:1d:48:cb:9b:c8:53:81:9f:9b:b6:99:dd: 6c:d4:d0:f0:a6:9b:49:e7:37:f1:27:95:74:d2:c0:9d:7f:de: 70:6f:f4:3e:3d:f0:fb:84:b0:88:38:e1:9c:b5:63:e6:2d:2c: 61:30:c7:7f:26:ca:91:96:f5:91:b4:87:b8:08:97:3a:61:0a: 18:20:c9:fa:98:e6:5f:e8:fe:10:fb:30:85:80:de:f4:25:fc: 07:d5:48:57:a6:90:56:0c:39:62:69:6a:a5:2f:3c:4c:7d:e6: be:38:31:67:49:7a:b3:0e:63:8f:ba:39:13:55:6b:e5:fe:a4: ee:20:c7:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeOTWMkYXLQ5+fQj7DGJ8zCKdfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcy RUI1MERDNTAeFw0yNjA2MTgxNTA1MDdaFw0yNjA2MTkxNzM1MDdaMDMxMTAvBgNV BAMTKDExNkZDREFDNkM1RUQyOEYyMzlDQUU1RjgzQ0M1N0E3ODYxQUIyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPh7vA9MxhBpwLrepJOZOpo7ME 15Z1L66yZCd0VTkp4U6i3hKS8nne2BzLfhHS+uyUXdSk7HSarfb/j/B3u86Y5J7v IIJV/BaI7qdRsz9ECDD/q/SY8fWn98E6lWUA7i7V0yGacFzgpYXgXeUs+gfJZYvO h3tWa154OSvP+H9tp5O89ioDXZGq2NrYp/dn93hdAXi1Slw/1u3pvc+cELCZsGaJ Lh6mvS6DvuwcWT3o2VFbREsbVW6T8efkdAbic47gG+Bs1qFMkYKrWIJtKlHOsNhk ciLDW456SoZPY0jZTwlQhAx6v2b5LgAcifTPaTbZzgcXNkmlM/2+c+jHKU6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEW/NrGxe0o8jnK5fg8xXp4YastYwHwYDVR0j BBgwFoAUMoV+YiUMdjA30e0pHXk3By61DcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWQwMTItYWZkYi00MmZiLTk3MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIy NTBDNzYzMDM3RDFFRDI5MUQ3OTM3MDcyRUI1MERDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjg1N0U2MjI1MEM3NjMwMzdEMUVEMjkxRDc5MzcwNzJFQjUw REM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvMzI4NTdFNjIyNTBDNzYzMDM3RDFFRDI5MUQ3OTM3 MDcyRUI1MERDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrE5WzhoSpNQ7Z4+Ty/0iWruIn2DArFd5Ut LPRwCD/8hyiTORD9p0uNVA+jYS2FvQJ4P1n9uE1LMblxcZiGAt0Qpd4My7Xern1w l7rAz43cdsonxmNMT0XIvO1UAgIOWuUIEY6FHsBoOBpMzJP46t/Mxtlwqefn5T/O FnYpcRHWbvV7tB1Iy5vIU4Gfm7aZ3WzU0PCmm0nnN/EnlXTSwJ1/3nBv9D498PuE sIg44Zy1Y+YtLGEwx38mypGW9ZG0h7gIlzphChggyfqY5l/o/hD7MIWA3vQl/AfV SFemkFYMOWJpaqUvPEx95r44MWdJerMOY4+6ORNVa+X+pO4gxwY= -----END CERTIFICATE-----Generated at Thu Jun 18 19:03:01 2026 by rpki-client