$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: /XOm2UNwYwgN+4NYFbYqQ6uuU7dL8q5d6xPaU4hTFXc= Subject key identifier: EE:20:49:19:4E:61:06:EB:D1:FC:18:D9:AA:5A:76:40:99:D4:EA:AD Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 2F9FCED297E201AD848A30660FDF542B0D521536 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: 36 Signing time: Thu 11 Jun 2026 18:08:24 +0000 Manifest this update: Thu 11 Jun 2026 18:03:24 +0000 Manifest next update: Fri 12 Jun 2026 21:24:24 +0000 Files and hashes: 1: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) 2: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: 0qkPpN1EvoytmOkkE9BGCQAf+Z34EY54cFXnWf2adaw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 21:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9f:ce:d2:97:e2:01:ad:84:8a:30:66:0f:df:54:2b:0d:52:15:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: Jun 11 18:03:24 2026 GMT Not After : Jun 12 21:24:24 2026 GMT Subject: CN=EE2049194E6106EBD1FC18D9AA5A764099D4EAAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:e6:41:cf:78:0c:4e:a2:27:d0:26:23:cd: 79:ea:f7:a3:a5:9a:99:5d:c5:fb:cb:ca:0f:37:24: 5a:a2:b4:7e:99:45:9f:37:61:71:b1:45:11:c8:80: bf:04:4d:48:24:72:6a:0e:8c:08:d1:41:6e:2c:8b: be:9e:0b:4d:14:05:11:83:4d:d7:d2:2f:02:89:d0: 5f:f1:21:9d:1b:4d:ec:e9:b9:21:a9:4b:4b:6d:d1: ad:5c:60:74:d0:e9:d7:51:79:3e:8d:90:2d:79:6d: e3:ed:97:fd:e6:d1:d8:a2:2c:7d:e4:c3:fa:15:a0: 92:d9:13:ad:97:15:ea:a4:02:0c:9e:89:a0:16:e7: 1d:08:63:b8:e7:81:39:32:48:d8:92:f7:ec:2b:89: 04:0c:c9:98:f6:6f:35:3f:8f:c2:e7:64:c8:15:95: 6c:70:6f:72:80:45:8b:26:70:40:d1:9b:6f:31:f4: 1c:3c:14:93:12:70:f2:37:09:36:f3:68:80:4c:d0: f4:ad:1e:53:21:d3:b9:9c:66:10:cb:82:f5:91:70: eb:01:63:00:77:81:2a:ec:46:80:00:48:a6:0f:29: 4c:02:af:9b:b6:ee:28:9f:7b:36:88:5f:89:37:89: e3:8c:f9:8b:1d:49:04:b5:da:08:a2:4d:93:44:81: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:20:49:19:4E:61:06:EB:D1:FC:18:D9:AA:5A:76:40:99:D4:EA:AD X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2c:3e:06:33:76:71:39:8c:3c:e1:6b:92:ee:89:bf:a6:02: 07:04:10:95:78:97:fc:3f:00:c1:4b:53:36:8e:b6:4f:88:74: c9:93:2e:88:45:95:79:4e:65:37:6b:01:39:97:26:a9:45:91: 55:e4:13:e6:d4:74:fe:7d:25:9e:8c:c6:62:84:82:cb:17:b5: b1:17:aa:9b:b6:a1:92:cf:77:b9:27:64:a6:87:49:54:3b:7d: e6:d0:23:ff:e8:42:8a:e7:a1:10:22:ee:26:10:1b:da:77:3a: 64:51:4d:68:90:01:3f:5a:94:d6:e3:d8:41:b2:50:6e:ea:47: 81:85:11:5b:cf:61:3e:5c:9c:9d:80:5a:31:2e:b3:99:27:64: 06:f0:39:fa:46:5a:31:7e:b6:b4:54:90:72:54:bf:2b:79:63: d5:a6:3a:52:39:28:ed:83:4b:9e:9c:e9:fe:49:75:2d:ee:bc: 6e:52:f3:e3:e5:50:76:2e:70:6e:6b:2e:88:6d:e0:4e:ab:2d: 56:47:d5:ac:07:b7:7c:ad:5f:83:f7:f7:86:57:34:d0:0e:b5: 55:7c:e1:81:86:d3:4a:bd:27:3a:53:e1:e4:9d:5b:6b:2f:da: ca:9d:e2:41:01:0c:04:92:6b:2f:87:67:f8:24:e0:5d:5e:1f: 02:8a:03:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5/O0pfiAa2EijBmD99UKw1SFTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjA2MTExODAzMjRaFw0yNjA2MTIyMTI0MjRaMDMxMTAvBgNV BAMTKEVFMjA0OTE5NEU2MTA2RUJEMUZDMThEOUFBNUE3NjQwOTlENEVBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocOZBz3gMTqIn0CYjzXnq96Ol mpldxfvLyg83JFqitH6ZRZ83YXGxRRHIgL8ETUgkcmoOjAjRQW4si76eC00UBRGD TdfSLwKJ0F/xIZ0bTezpuSGpS0tt0a1cYHTQ6ddReT6NkC15bePtl/3m0diiLH3k w/oVoJLZE62XFeqkAgyeiaAW5x0IY7jngTkySNiS9+wriQQMyZj2bzU/j8LnZMgV lWxwb3KARYsmcEDRm28x9Bw8FJMScPI3CTbzaIBM0PStHlMh07mcZhDLgvWRcOsB YwB3gSrsRoAASKYPKUwCr5u27iifezaIX4k3ieOM+YsdSQS12giiTZNEgdXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7iBJGU5hBuvR/BjZqlp2QJnU6q0wHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAsPgYzdnE5jDzha5Luib+mAgcEEJV4l/w/ AMFLUzaOtk+IdMmTLohFlXlOZTdrATmXJqlFkVXkE+bUdP59JZ6MxmKEgssXtbEX qpu2oZLPd7knZKaHSVQ7febQI//oQornoRAi7iYQG9p3OmRRTWiQAT9alNbj2EGy UG7qR4GFEVvPYT5cnJ2AWjEus5knZAbwOfpGWjF+trRUkHJUvyt5Y9WmOlI5KO2D S56c6f5JdS3uvG5S8+PlUHYucG5rLoht4E6rLVZH1awHt3ytX4P394ZXNNAOtVV8 4YGG00q9JzpT4eSdW2sv2sqd4kEBDASSay+HZ/gk4F1eHwKKA9E= -----END CERTIFICATE-----Generated at Fri Jun 12 10:54:43 2026 by rpki-client