$ rpki-client -vvvf rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft File: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft (raw, json) Hash identifier: lUVHYUGJlLikv0YqgilOLtszWeDuORSVuCMCWAKo8ZM= Subject key identifier: 26:25:09:32:29:4B:96:01:F8:F6:AB:D4:42:A2:AA:31:70:53:5D:7B Authority key identifier: 32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 Certificate issuer: /CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Certificate serial: 2895212690F59FAA5399CC376AE6A02356E43510 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:32:09 +0000 Manifest this update: Wed 16 Sep 2026 18:27:09 +0000 Manifest next update: Thu 17 Sep 2026 21:13:09 +0000 Files and hashes: 1: 32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl (hash: UBP/g59BGPQ7Bl1SQaixbwhEqCFBkZVDPXWCUO8PKOE=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: Uh5y0YtfY7V2qTdTkRsIfNJf6g7Mb5/NMceYo7geuVc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:95:21:26:90:f5:9f:aa:53:99:cc:37:6a:e6:a0:23:56:e4:35:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326 Validity Not Before: Sep 16 18:27:09 2026 GMT Not After : Sep 17 21:13:09 2026 GMT Subject: CN=26250932294B9601F8F6ABD442A2AA3170535D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:03:c8:5d:c5:48:80:d5:cc:ca:87:49:6e: 0f:2b:8f:e6:b7:e0:ab:02:c5:78:2d:2b:4f:e0:01: b2:7b:5f:a9:b5:69:61:bd:b4:ea:f5:60:4a:fc:aa: 05:15:36:ed:4a:a9:e9:75:f6:11:23:0d:e8:36:84: 0b:88:bf:48:09:e2:bb:83:78:e8:f3:fc:9e:01:ac: df:fa:7d:6c:c6:ca:02:95:9d:af:53:d9:fe:90:10: 55:e7:1c:49:cf:da:25:e7:f8:14:c3:24:c4:0d:34: bc:15:1c:27:19:38:66:7c:3f:d2:9a:2a:ae:26:ec: 4e:85:1b:eb:74:65:35:ce:7d:2a:06:06:b5:fc:ae: 78:67:e6:a1:35:e0:51:f6:75:9e:42:88:46:33:85: 22:3e:c9:7a:9d:bc:dd:e0:d6:13:56:a7:a1:76:d1: 17:34:4e:ee:71:1c:cb:bf:0f:cd:f7:5c:38:f9:0e: 14:88:bc:20:a6:ac:ec:38:b7:74:8c:c8:5e:b7:a6: 45:5d:42:da:48:23:e8:00:a1:0f:ac:14:51:ed:53: 2b:dd:05:65:76:0d:1b:1c:ae:aa:49:35:bb:60:a7: ef:10:f4:96:be:2e:5a:aa:bf:46:b1:5d:5b:3f:e3: ba:65:93:cc:3b:bd:f6:a1:50:cb:30:a9:4c:0d:94: 54:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:25:09:32:29:4B:96:01:F8:F6:AB:D4:42:A2:AA:31:70:53:5D:7B X509v3 Authority Key Identifier: keyid:32:BA:6A:EC:51:EA:21:4B:B4:B7:42:FA:E2:EC:3F:0C:4D:72:B3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/32BA6AEC51EA214BB4B742FAE2EC3F0C4D72B326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:78:b3:6c:34:7f:b1:29:76:56:f7:c9:73:ba:b0:e7:0f:da: 2b:d2:d8:7e:78:eb:19:cc:97:26:70:aa:e8:94:40:09:29:c8: 4c:f7:9a:6d:33:85:00:fe:28:2a:33:2e:09:bf:ab:97:fd:a1: 5a:cf:2c:15:fc:03:63:70:a6:26:37:a4:06:d4:4e:8c:c2:17: e3:59:d2:1e:cf:15:86:ca:58:96:bb:48:90:39:0a:d3:c4:82: ab:1e:49:49:ac:5c:e2:eb:9c:d0:56:c3:4c:23:b8:f2:f8:1d: b4:89:78:d1:d9:1d:de:b8:72:c7:4a:8f:29:e3:ff:69:93:55: a7:f3:99:63:e2:c5:73:05:8b:c8:de:bc:13:d6:3f:f9:4d:7e: c4:e1:be:83:7c:07:cb:96:22:82:d5:fa:11:82:53:59:6a:14: d4:4b:3e:9b:55:26:4a:9f:dd:a7:5f:14:eb:87:3b:31:3b:51: de:d3:4d:d0:95:54:00:74:e0:54:47:0e:9c:e8:37:3c:9e:c7: e4:e1:86:01:e7:51:0c:5c:66:1d:78:55:6b:fd:28:5b:bd:f8: a4:2c:e8:34:aa:30:fb:9b:56:c1:86:21:f2:fe:2d:b2:1e:07: ef:78:c1:00:b2:55:01:78:f5:7f:5a:39:9d:4c:cb:f9:04:f5: cd:57:4a:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJUhJpD1n6pTmcw3auagI1bkNRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0 RDcyQjMyNjAeFw0yNjA5MTYxODI3MDlaFw0yNjA5MTcyMTEzMDlaMDMxMTAvBgNV BAMTKDI2MjUwOTMyMjk0Qjk2MDFGOEY2QUJENDQyQTJBQTMxNzA1MzVEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAQPIXcVIgNXMyodJbg8rj+a3 4KsCxXgtK0/gAbJ7X6m1aWG9tOr1YEr8qgUVNu1Kqel19hEjDeg2hAuIv0gJ4ruD eOjz/J4BrN/6fWzGygKVna9T2f6QEFXnHEnP2iXn+BTDJMQNNLwVHCcZOGZ8P9Ka Kq4m7E6FG+t0ZTXOfSoGBrX8rnhn5qE14FH2dZ5CiEYzhSI+yXqdvN3g1hNWp6F2 0Rc0Tu5xHMu/D833XDj5DhSIvCCmrOw4t3SMyF63pkVdQtpII+gAoQ+sFFHtUyvd BWV2DRscrqpJNbtgp+8Q9Ja+Llqqv0axXVs/47plk8w7vfahUMswqUwNlFQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJiUJMilLlgH49qvUQqKqMXBTXXswHwYDVR0j BBgwFoAUMrpq7FHqIUu0t0L64uw/DE1ysyYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODExZDlhYmMtNDk4Ny00ZGJjLTk3NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1 MUVBMjE0QkI0Qjc0MkZBRTJFQzNGMEM0RDcyQjMyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkJBNkFFQzUxRUEyMTRCQjRCNzQyRkFFMkVDM0YwQzRENzJC MzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvMzJCQTZBRUM1MUVBMjE0QkI0Qjc0MkZBRTJFQzNG MEM0RDcyQjMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJt4s2w0f7Epdlb3yXO6sOcP2ivS2H546xnM lyZwquiUQAkpyEz3mm0zhQD+KCozLgm/q5f9oVrPLBX8A2NwpiY3pAbUTozCF+NZ 0h7PFYbKWJa7SJA5CtPEgqseSUmsXOLrnNBWw0wjuPL4HbSJeNHZHd64csdKjynj /2mTVafzmWPixXMFi8jevBPWP/lNfsThvoN8B8uWIoLV+hGCU1lqFNRLPptVJkqf 3adfFOuHOzE7Ud7TTdCVVAB04FRHDpzoNzyex+ThhgHnUQxcZh14VWv9KFu9+KQs 6DSqMPubVsGGIfL+LbIeB+94wQCyVQF49X9aOZ1My/kE9c1XShE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:51 2026 by rpki-client