$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft File: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft (raw, json) Hash identifier: OMiMLIY1iuDJ/WskCBnHfLy3DIB8lWAdwN0dRWRj1js= Subject key identifier: 05:F3:A4:6B:84:04:29:C8:48:EB:0D:36:6E:73:76:A2:6D:31:1D:9A Authority key identifier: 32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 Certificate issuer: /CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Certificate serial: 30BA0F5E93A64234AFE05051C778EF610F8523FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 19:53:41 +0000 Manifest this update: Wed 16 Sep 2026 19:48:41 +0000 Manifest next update: Thu 17 Sep 2026 20:38:41 +0000 Files and hashes: 1: 32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl (hash: jgWTAZRGS53zkAuwSb0mVwIL2u09ItA3Baa4x+KnxrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ba:0f:5e:93:a6:42:34:af:e0:50:51:c7:78:ef:61:0f:85:23:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32D75AF46021AAD8756D609A1E8C8B4EC0A891C0 Validity Not Before: Sep 16 19:48:41 2026 GMT Not After : Sep 17 20:38:41 2026 GMT Subject: CN=05F3A46B840429C848EB0D366E7376A26D311D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:42:ba:d0:eb:2d:ed:95:50:10:18:22:27: 94:c4:e4:66:cf:aa:8e:5b:68:98:13:ed:3c:3d:dd: 04:52:ad:ed:f2:2d:33:d7:20:f2:5b:26:48:22:06: 2d:51:f7:94:2f:9f:34:1d:39:41:40:fd:62:bc:ff: f7:d8:eb:36:37:35:fa:e0:7c:8a:42:37:fb:38:74: e8:36:e0:f2:e9:f3:23:85:9f:9b:4f:74:e9:0a:34: ca:13:66:0a:9a:24:10:14:5b:6a:46:8b:20:b8:b0: 81:b7:db:6f:9f:ae:d7:cf:78:2a:9a:de:1c:61:5f: 50:19:c9:22:ac:1b:51:80:98:ab:48:2c:1d:b4:2d: a9:80:af:2d:a4:26:0d:06:17:d8:e2:c3:8c:45:88: 1c:c0:0a:3a:75:f9:34:6b:35:21:cd:bf:17:b0:e1: 62:2f:d1:9f:a3:c3:46:af:81:12:c5:b6:b5:d5:83: 0e:22:02:b0:1c:03:42:00:50:64:29:fd:00:3e:fe: b6:ac:45:1d:52:5d:7f:21:d5:c7:77:f9:34:13:83: 3a:4a:0b:df:bf:94:58:f4:e4:c3:45:a0:5a:7a:9b: 99:9b:3e:e4:80:e2:d7:d3:9f:7b:53:07:44:bb:1c: 09:8f:44:27:86:ab:7f:f8:df:f3:bb:3b:96:d6:f8: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F3:A4:6B:84:04:29:C8:48:EB:0D:36:6E:73:76:A2:6D:31:1D:9A X509v3 Authority Key Identifier: keyid:32:D7:5A:F4:60:21:AA:D8:75:6D:60:9A:1E:8C:8B:4E:C0:A8:91:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/32D75AF46021AAD8756D609A1E8C8B4EC0A891C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dd:9d:82:45:79:24:c9:e0:d7:ab:54:8c:83:d3:71:6d:24: e2:a0:34:3a:bf:ef:1c:2f:83:5d:1f:87:f0:56:3c:bc:6f:65: 37:b0:5f:84:65:d7:38:e2:e6:32:87:6c:1a:ff:5e:5b:84:12: ea:13:45:33:90:3a:21:8b:6e:bf:0b:2d:f9:55:96:33:09:d8: c2:be:1d:28:a7:2e:b4:45:65:76:98:69:c0:95:95:62:d2:5f: ac:4c:d1:db:39:85:1e:6b:51:d1:c7:aa:01:0f:9b:a8:0c:c7: 94:74:2e:40:ab:9f:ff:7c:77:f1:45:2f:c2:70:bb:a2:6d:3f: 43:37:b3:e0:16:05:6e:f7:24:7a:2f:d7:ef:46:aa:42:d8:39: 3f:e6:98:df:c5:aa:87:f7:dc:9f:29:c9:68:20:33:d3:cf:a7: be:d7:5f:fd:11:96:44:5b:27:15:75:39:05:38:23:61:a5:fd: 6d:4e:9c:9c:3b:93:b1:1c:ac:cb:e1:f8:67:8a:d6:c1:e6:78: 1b:e4:fe:e7:0e:26:9b:20:08:fb:be:80:e6:c0:c2:9f:42:d8: 8a:14:78:ad:fc:c5:b2:ff:ad:10:55:56:d2:5d:40:8f:69:ba: 5e:0f:74:8c:7c:10:a8:0f:99:5e:56:0a:a8:14:0b:2b:0b:4e: 6c:37:91:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLoPXpOmQjSv4FBRx3jvYQ+FI/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVD MEE4OTFDMDAeFw0yNjA5MTYxOTQ4NDFaFw0yNjA5MTcyMDM4NDFaMDMxMTAvBgNV BAMTKDA1RjNBNDZCODQwNDI5Qzg0OEVCMEQzNjZFNzM3NkEyNkQzMTFEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWEK60Ost7ZVQEBgiJ5TE5GbP qo5baJgT7Tw93QRSre3yLTPXIPJbJkgiBi1R95QvnzQdOUFA/WK8//fY6zY3Nfrg fIpCN/s4dOg24PLp8yOFn5tPdOkKNMoTZgqaJBAUW2pGiyC4sIG322+frtfPeCqa 3hxhX1AZySKsG1GAmKtILB20LamAry2kJg0GF9jiw4xFiBzACjp1+TRrNSHNvxew 4WIv0Z+jw0avgRLFtrXVgw4iArAcA0IAUGQp/QA+/rasRR1SXX8h1cd3+TQTgzpK C9+/lFj05MNFoFp6m5mbPuSA4tfTn3tTB0S7HAmPRCeGq3/43/O7O5bW+C6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBfOka4QEKchI6w02bnN2om0xHZowHwYDVR0j BBgwFoAUMtda9GAhqth1bWCaHoyLTsCokcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJlMDVmY2YtNWYyYS00ZDVlLWEzZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2 MDIxQUFEODc1NkQ2MDlBMUU4QzhCNEVDMEE4OTFDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMkQ3NUFGNDYwMjFBQUQ4NzU2RDYwOUExRThDOEI0RUMwQTg5 MUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMzJENzVBRjQ2MDIxQUFEODc1NkQ2MDlBMUU4QzhC NEVDMEE4OTFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzdnYJFeSTJ4NerVIyD03FtJOKgNDq/7xwv g10fh/BWPLxvZTewX4Rl1zji5jKHbBr/XluEEuoTRTOQOiGLbr8LLflVljMJ2MK+ HSinLrRFZXaYacCVlWLSX6xM0ds5hR5rUdHHqgEPm6gMx5R0LkCrn/98d/FFL8Jw u6JtP0M3s+AWBW73JHov1+9GqkLYOT/mmN/Fqof33J8pyWggM9PPp77XX/0RlkRb JxV1OQU4I2Gl/W1OnJw7k7EcrMvh+GeK1sHmeBvk/ucOJpsgCPu+gObAwp9C2IoU eK38xbL/rRBVVtJdQI9pul4PdIx8EKgPmV5WCqgUCysLTmw3kcY= -----END CERTIFICATE-----Generated at Thu Sep 17 10:01:48 2026 by rpki-client