$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft File: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft (raw, json) Hash identifier: ZYUxs7nRPYXwKXayubaMCqXX1/kGWSwYjtVLvCcStho= Subject key identifier: 68:D8:F9:9F:B4:6D:73:DF:48:74:B1:37:11:B0:85:0A:48:F0:B0:29 Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D Certificate issuer: /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Certificate serial: 3FCAFA55D0BB1F1EDC71E4B93A966DBC2BB05EC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:56:21 +0000 Manifest this update: Wed 16 Sep 2026 17:51:21 +0000 Manifest next update: Thu 17 Sep 2026 20:56:21 +0000 Files and hashes: 1: 32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl (hash: 3q1fZbTDW/SdlysoBNYhQMGLbrqG3lDnGebd52R5Op8=) 2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ca:fa:55:d0:bb:1f:1e:dc:71:e4:b9:3a:96:6d:bc:2b:b0:5e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D Validity Not Before: Sep 16 17:51:21 2026 GMT Not After : Sep 17 20:56:21 2026 GMT Subject: CN=68D8F99FB46D73DF4874B13711B0850A48F0B029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:c4:6a:9f:95:e1:1a:06:33:26:7f:3c:e2: 16:4f:dd:06:5c:5a:4a:21:a7:c0:b9:08:bd:45:59: e7:9e:5d:40:06:8f:bc:d3:61:f9:30:c8:8b:bd:a1: 85:be:54:47:fc:b3:78:7f:b4:68:b6:d6:1e:01:05: db:c3:fb:5f:92:e6:a8:dc:03:be:bc:07:37:0f:9a: 53:08:55:ca:91:ac:55:8e:bb:9c:c3:c6:36:11:d0: 30:48:58:f7:2a:1b:f0:1c:13:d9:f1:08:2c:1f:e3: 09:f5:c8:6b:4f:35:4a:ba:75:e1:83:fd:f8:9a:e3: f0:c9:9e:7f:88:e4:2c:ff:e0:44:f7:af:32:2c:fc: 77:29:87:06:37:d1:4e:b8:3c:3f:c5:ae:d5:c1:5c: 5f:2a:fe:b6:13:f4:38:72:28:32:d4:cd:67:96:e4: 53:7e:e9:8d:b9:49:7e:09:d0:c4:7b:c6:c5:05:f5: 0c:f7:a0:d8:3a:f8:6c:f4:c4:92:72:84:6b:98:79: b0:5f:9c:73:16:88:46:bc:12:9a:91:e4:f2:37:7d: 33:5a:0e:98:b5:a9:ae:f0:49:5c:3f:b2:88:fc:cb: 4f:f8:2a:2d:af:b2:82:10:49:8a:e9:b8:da:11:f7: 2e:01:aa:ea:5b:fa:df:35:24:18:c2:57:fe:06:4d: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D8:F9:9F:B4:6D:73:DF:48:74:B1:37:11:B0:85:0A:48:F0:B0:29 X509v3 Authority Key Identifier: keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:89:bd:1d:44:e4:d8:c2:18:99:45:44:6b:7e:6e:e3:89:73: 28:b4:b7:fb:b9:ac:ab:52:76:aa:20:e2:90:4d:75:23:f3:3d: 74:60:32:bc:e3:e9:d8:d2:fa:ee:b3:f2:86:0d:80:b4:b4:22: 1e:26:f6:c5:1d:15:ce:70:7a:96:b9:9d:d8:ef:ae:d9:6d:c3: a9:04:15:fa:d2:0e:bb:9e:68:e2:bf:02:2d:c7:37:ef:41:00: 99:0f:91:a0:02:33:ef:21:0c:91:db:01:1d:8b:b0:18:ed:6d: 08:f1:05:da:64:62:60:9e:b4:46:40:96:f7:c5:bb:4a:e1:7b: 56:1c:32:14:2a:53:25:8e:b8:6e:aa:e0:a1:1a:18:9f:a8:6f: 79:1c:a1:67:35:bf:52:6a:f7:1d:f8:53:57:39:48:a8:66:53: 14:2d:63:3c:aa:95:ce:31:bd:ac:cb:c0:f3:f8:1b:25:fc:2f: 8f:c1:f3:2b:58:d1:a0:05:28:21:99:b9:db:a3:d4:55:f1:31: 1c:8d:46:02:fb:2d:40:8f:b3:73:d1:d8:f1:24:50:6a:e8:0a: 31:18:ef:30:63:3e:d0:11:9d:80:97:c2:68:39:df:3f:3a:fe: 8b:c9:ac:a6:53:9c:cb:11:b2:2c:44:46:26:a9:13:be:85:f9: 75:be:7c:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8r6VdC7Hx7cceS5OpZtvCuwXsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2 ODg4M0UyRDAeFw0yNjA5MTYxNzUxMjFaFw0yNjA5MTcyMDU2MjFaMDMxMTAvBgNV BAMTKDY4RDhGOTlGQjQ2RDczREY0ODc0QjEzNzExQjA4NTBBNDhGMEIwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL38Rqn5XhGgYzJn884hZP3QZc Wkohp8C5CL1FWeeeXUAGj7zTYfkwyIu9oYW+VEf8s3h/tGi21h4BBdvD+1+S5qjc A768BzcPmlMIVcqRrFWOu5zDxjYR0DBIWPcqG/AcE9nxCCwf4wn1yGtPNUq6deGD /fia4/DJnn+I5Cz/4ET3rzIs/HcphwY30U64PD/FrtXBXF8q/rYT9DhyKDLUzWeW 5FN+6Y25SX4J0MR7xsUF9Qz3oNg6+Gz0xJJyhGuYebBfnHMWiEa8EpqR5PI3fTNa Dpi1qa7wSVw/soj8y0/4Ki2vsoIQSYrpuNoR9y4Bqupb+t81JBjCV/4GTfRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNj5n7Rtc99IdLE3EbCFCkjwsCkwHwYDVR0j BBgwFoAUMrK8b/xWENIdYHzS7lzhwWiIPi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MGIwOWUtZTlmOC00ODI2LTkyYjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZG QzU2MTBEMjFENjA3Q0QyRUU1Q0UxQzE2ODg4M0UyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkIyQkM2RkZDNTYxMEQyMUQ2MDdDRDJFRTVDRTFDMTY4ODgz RTJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvMzJCMkJDNkZGQzU2MTBEMjFENjA3Q0QyRUU1Q0Ux QzE2ODg4M0UyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeJvR1E5NjCGJlFRGt+buOJcyi0t/u5rKtS dqog4pBNdSPzPXRgMrzj6djS+u6z8oYNgLS0Ih4m9sUdFc5wepa5ndjvrtltw6kE FfrSDrueaOK/Ai3HN+9BAJkPkaACM+8hDJHbAR2LsBjtbQjxBdpkYmCetEZAlvfF u0rhe1YcMhQqUyWOuG6q4KEaGJ+ob3kcoWc1v1Jq9x34U1c5SKhmUxQtYzyqlc4x vazLwPP4GyX8L4/B8ytY0aAFKCGZuduj1FXxMRyNRgL7LUCPs3PR2PEkUGroCjEY 7zBjPtARnYCXwmg53z86/ovJrKZTnMsRsixERiapE76F+XW+fIw= -----END CERTIFICATE-----Generated at Thu Sep 17 11:27:11 2026 by rpki-client