$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft File: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft (raw, json) Hash identifier: luxN4kIjZa0esZ6VtrBIWl1xnsaseaNf15JekyjkRbM= Subject key identifier: 84:18:57:63:A1:68:35:B7:85:17:A8:D3:A9:E3:7C:44:DB:D7:B0:06 Authority key identifier: 32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 Certificate issuer: /CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Certificate serial: 1547F9270F31C1942A160AC0D04E7F9ADD4CE7C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 05:11:09 +0000 Manifest this update: Sat 20 Jun 2026 05:06:09 +0000 Manifest next update: Sun 21 Jun 2026 08:08:09 +0000 Files and hashes: 1: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl (hash: s52uICJtw7uBfG/XgPeEK4fDcte3D/CUZ+B6B+bvMQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:47:f9:27:0f:31:c1:94:2a:16:0a:c0:d0:4e:7f:9a:dd:4c:e7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Validity Not Before: Jun 20 05:06:09 2026 GMT Not After : Jun 21 08:08:09 2026 GMT Subject: CN=84185763A16835B78517A8D3A9E37C44DBD7B006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f0:21:4a:9f:e8:1a:85:29:b5:e9:59:ce:1a: 09:14:93:4e:b8:47:d2:b2:6e:25:32:1b:ec:d3:25: f9:9f:b0:27:65:dc:93:2a:61:0a:9b:14:66:10:a2: 3f:52:41:2c:7f:5d:35:bf:65:d5:0a:61:b7:a1:b4: a7:e9:ab:cb:01:4f:1f:c7:3a:c7:2f:87:b6:96:bf: ab:8f:bd:a6:bb:6d:d2:e7:43:6a:2b:1d:45:c8:86: 65:14:ea:92:22:5c:32:ac:00:0a:a1:16:2a:5f:3f: 59:18:39:f6:73:53:8e:08:15:8d:45:6f:75:b8:38: 4c:5b:74:6c:0e:ed:ad:8f:45:27:4d:0f:fe:41:b8: 31:68:b0:bd:14:6e:14:0a:28:08:ff:8e:de:33:66: f2:a8:a3:34:14:d6:2f:56:84:c4:10:e0:1c:c9:a7: c0:57:40:8d:31:92:26:53:f0:34:19:b2:9e:18:c2: 32:54:7e:19:d0:e8:69:0e:a3:12:cb:1f:08:40:76: cf:e9:ab:51:dd:dc:9e:38:21:63:e5:83:20:f4:5b: 23:c1:54:98:ba:57:3a:5d:63:d7:e3:ac:a1:f8:7d: 30:e5:73:a0:da:c8:e9:58:f7:71:05:cd:1a:a4:f3: cb:5f:5e:b3:5e:b5:5a:de:1c:3a:e8:20:6b:0d:20: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:18:57:63:A1:68:35:B7:85:17:A8:D3:A9:E3:7C:44:DB:D7:B0:06 X509v3 Authority Key Identifier: keyid:32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:73:a2:bf:fe:ee:69:3c:e7:87:68:33:cb:74:d0:7d:b5:66: 3b:93:0f:ff:55:25:74:1f:65:42:56:ab:d7:f0:9f:22:d1:31: 00:07:36:c1:0f:20:a3:cc:c7:a5:de:e2:26:3c:64:b7:84:17: 76:ea:83:f4:5e:ca:92:be:f8:dd:a0:14:66:7a:4a:1c:77:4c: 69:9e:98:64:a6:7e:01:0c:db:82:09:0e:38:8b:d0:c2:8d:bb: dd:ab:30:b3:9c:bc:ab:10:b6:fe:37:36:77:6d:69:2a:a0:f9: 73:28:65:92:0c:dd:7f:71:73:1a:28:03:5d:64:d1:d5:e5:78: 9f:ff:0c:e1:d3:95:1f:59:5a:07:d6:11:8c:bf:b7:f6:b6:3f: 28:a4:72:ef:b1:8e:e4:99:57:36:ee:b9:35:70:da:78:f8:d2: bb:c7:12:73:6d:cc:c2:e8:e4:c2:02:38:c4:3e:1e:86:10:13: 4d:3b:1d:e3:bc:cf:91:e1:8e:95:5c:2e:d5:c0:64:db:df:c5: c5:67:e3:2f:57:2d:4c:f3:fd:2c:05:5c:2a:a5:75:5b:98:a4: 38:63:a5:14:e4:a8:20:24:33:fc:5d:13:1d:97:4e:9e:aa:3a: 19:42:b9:4e:7b:e1:1e:1f:d2:9b:b6:62:88:6e:bb:73:65:a2: a3:00:58:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUf5Jw8xwZQqFgrA0E5/mt1M58EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVD MEE4OTFDMDAeFw0yNjA2MjAwNTA2MDlaFw0yNjA2MjEwODA4MDlaMDMxMTAvBgNV BAMTKDg0MTg1NzYzQTE2ODM1Qjc4NTE3QThEM0E5RTM3QzQ0REJEN0IwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn8CFKn+gahSm16VnOGgkUk064 R9KybiUyG+zTJfmfsCdl3JMqYQqbFGYQoj9SQSx/XTW/ZdUKYbehtKfpq8sBTx/H Oscvh7aWv6uPvaa7bdLnQ2orHUXIhmUU6pIiXDKsAAqhFipfP1kYOfZzU44IFY1F b3W4OExbdGwO7a2PRSdND/5BuDFosL0UbhQKKAj/jt4zZvKoozQU1i9WhMQQ4BzJ p8BXQI0xkiZT8DQZsp4YwjJUfhnQ6GkOoxLLHwhAds/pq1Hd3J44IWPlgyD0WyPB VJi6VzpdY9fjrKH4fTDlc6DayOlY93EFzRqk88tfXrNetVreHDroIGsNIMRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhBhXY6FoNbeFF6jTqeN8RNvXsAYwHwYDVR0j BBgwFoAUMtda9GAhqth1bWCaHoyLTsCokcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlMDVmY2YtNWYyYS00ZDVlLWEzZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2 MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVDMEE4OTFDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkQ3NUFGNDYwMjFBQUQ4NzU2RDYwOUExRThDOEI0RUMwQTg5 MUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhC NEVDMEE4OTFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRzor/+7mk854doM8t00H21ZjuTD/9VJXQf ZUJWq9fwnyLRMQAHNsEPIKPMx6Xe4iY8ZLeEF3bqg/ReypK++N2gFGZ6Shx3TGme mGSmfgEM24IJDjiL0MKNu92rMLOcvKsQtv43NndtaSqg+XMoZZIM3X9xcxooA11k 0dXleJ//DOHTlR9ZWgfWEYy/t/a2Pyikcu+xjuSZVzbuuTVw2nj40rvHEnNtzMLo 5MICOMQ+HoYQE007HeO8z5HhjpVcLtXAZNvfxcVn4y9XLUzz/SwFXCqldVuYpDhj pRTkqCAkM/xdEx2XTp6qOhlCuU574R4f0pu2Yohuu3NloqMAWIQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:55 2026 by rpki-client