$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: Dd3JTUUp3cXi1Ork5gT75gamkDrrYzbvyZYMqY1bD+A= Subject key identifier: 6D:99:75:9F:FD:D6:42:21:F4:1A:DF:94:3C:80:86:C4:B6:A3:AE:92 Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 6A60F07BCF46EDC814C1B7FD82F5A9AAD6A0763A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: 72 Signing time: Mon 27 Jul 2026 03:42:22 +0000 Manifest this update: Mon 27 Jul 2026 03:37:22 +0000 Manifest next update: Tue 28 Jul 2026 04:29:22 +0000 Files and hashes: 1: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: rj5bzELnAOT0Ky9ssOU68rQdNPyP6gh1JHhqUHAUWWE=) 2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:60:f0:7b:cf:46:ed:c8:14:c1:b7:fd:82:f5:a9:aa:d6:a0:76:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: Jul 27 03:37:22 2026 GMT Not After : Jul 28 04:29:22 2026 GMT Subject: CN=6D99759FFDD64221F41ADF943C8086C4B6A3AE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:74:6e:f8:c0:99:ec:6c:c3:7a:15:8a:d3:16: 39:fc:71:21:bc:ba:be:fe:43:0c:ca:73:72:ae:b6: be:1b:d8:43:d5:1a:a6:10:32:fe:b2:fc:48:0b:60: fa:23:9c:ac:44:f3:10:de:1f:de:29:60:d2:42:45: 27:6a:8a:e8:d5:d8:07:fd:8c:67:d8:56:a2:d9:b1: ed:a2:d5:49:21:3b:b9:d6:6a:b5:88:04:32:cb:6b: 8b:03:d7:4c:86:23:d5:51:af:c3:72:39:12:74:1e: 85:7d:32:64:e0:cd:c9:9f:5e:a4:9a:f8:aa:0a:33: ba:7e:df:2b:f7:33:8c:01:c7:27:29:1d:8b:01:f4: 50:1e:28:fe:53:87:97:0f:34:27:d8:cc:07:7d:fa: 9a:a7:5d:f0:d1:87:ea:76:cc:23:a4:6e:3d:83:80: 92:34:46:f4:6d:06:8b:8d:81:07:6d:9c:fe:3e:95: 4b:5f:21:fc:9d:b7:0c:83:70:db:b4:8e:bd:38:80: 09:2f:3d:45:bd:cd:ff:4d:6e:66:12:ef:ac:cc:0e: 9d:1a:87:51:25:85:d8:59:09:d8:77:90:f6:c4:cc: 8c:fa:38:44:46:08:e5:51:10:a2:e8:a8:b2:a0:d4: 7d:8b:9f:25:47:32:97:f3:d8:af:7b:14:6b:16:1a: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:99:75:9F:FD:D6:42:21:F4:1A:DF:94:3C:80:86:C4:B6:A3:AE:92 X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ef:21:33:dc:b5:97:98:74:3e:f7:4f:91:49:58:9c:7e:da: 65:e7:6b:e4:44:50:81:b3:5e:ab:ad:c1:4d:79:7f:44:4e:3c: 03:5b:cf:e2:e3:bd:a1:ee:28:c9:58:ae:90:99:e0:c6:18:3c: 3f:12:3d:00:e1:06:65:54:0c:65:22:1e:68:30:20:50:33:94: 8a:e5:27:6f:7c:e5:96:9b:bc:b1:c9:7a:89:5e:29:c0:19:79: aa:81:0a:e1:49:66:f9:48:45:26:e9:66:ba:fd:44:b4:61:5d: a9:d3:97:fb:91:d4:c0:c6:19:de:05:36:72:a0:5c:53:98:0b: 09:42:25:4b:75:c3:ab:b1:36:f2:e2:15:a7:d3:b5:db:6d:f2: 29:db:45:72:4f:f0:f3:fa:54:33:01:79:34:47:b1:ec:7a:28: d8:89:fb:27:05:dc:58:35:b2:e1:35:77:db:99:b9:59:02:0d: 00:21:dc:59:32:68:5d:ca:05:19:c8:39:88:69:01:3f:65:32: b8:0f:d7:e0:da:3a:75:c1:38:c0:fd:c7:be:57:6f:4c:36:73: 15:c8:dd:47:2d:ab:73:fe:de:cc:a6:c8:13:f2:b5:df:bc:93: 98:9d:47:01:f5:cc:80:86:c9:9d:42:a1:e4:a5:c0:81:81:24: 5a:f9:58:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamDwe89G7cgUwbf9gvWpqtagdjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjA3MjcwMzM3MjJaFw0yNjA3MjgwNDI5MjJaMDMxMTAvBgNV BAMTKDZEOTk3NTlGRkRENjQyMjFGNDFBREY5NDNDODA4NkM0QjZBM0FFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndG74wJnsbMN6FYrTFjn8cSG8 ur7+QwzKc3Kutr4b2EPVGqYQMv6y/EgLYPojnKxE8xDeH94pYNJCRSdqiujV2Af9 jGfYVqLZse2i1UkhO7nWarWIBDLLa4sD10yGI9VRr8NyORJ0HoV9MmTgzcmfXqSa +KoKM7p+3yv3M4wBxycpHYsB9FAeKP5Th5cPNCfYzAd9+pqnXfDRh+p2zCOkbj2D gJI0RvRtBouNgQdtnP4+lUtfIfydtwyDcNu0jr04gAkvPUW9zf9NbmYS76zMDp0a h1ElhdhZCdh3kPbEzIz6OERGCOVREKLoqLKg1H2LnyVHMpfz2K97FGsWGtGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbZl1n/3WQiH0Gt+UPICGxLajrpIwHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvvITPctZeYdD73T5FJWJx+2mXna+REUIGz XqutwU15f0ROPANbz+LjvaHuKMlYrpCZ4MYYPD8SPQDhBmVUDGUiHmgwIFAzlIrl J2985ZabvLHJeoleKcAZeaqBCuFJZvlIRSbpZrr9RLRhXanTl/uR1MDGGd4FNnKg XFOYCwlCJUt1w6uxNvLiFafTtdtt8inbRXJP8PP6VDMBeTRHsex6KNiJ+ycF3Fg1 suE1d9uZuVkCDQAh3FkyaF3KBRnIOYhpAT9lMrgP1+DaOnXBOMD9x75Xb0w2cxXI 3Uctq3P+3symyBPytd+8k5idRwH1zICGyZ1CoeSlwIGBJFr5WDA= -----END CERTIFICATE-----Generated at Mon Jul 27 18:54:04 2026 by rpki-client