$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: rtc2SBzFJn0IOU2ASzJfDYwqNj0SzYrm+YTB5oWCQ+A= Subject key identifier: 83:EF:E8:96:C4:7C:56:71:00:93:47:5C:F7:20:CB:0B:9B:7E:AC:AB Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 19AE692D2A5AEFCE26F1D2BFD59F66EEE67D9718 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 025E Signing time: Mon 21 Jul 2025 00:20:54 +0000 Manifest this update: Mon 21 Jul 2025 00:15:54 +0000 Manifest next update: Thu 24 Jul 2025 03:13:54 +0000 Files and hashes: 1: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: /POUiN3ADeic24fpnR1S95Kh3i2zF8ppbXpuq/ovLcI=) 2: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: OUaHqzH5MUuESyQrAEVUqywPb3+c3nlvFdPyh75nUE0=) 3: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: KqJWQLgXmTHd9H6sRHxBzzsWATc/WnNxAAXTEqHhFsc=) 4: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: txmdQiNUCVlngS9ohlA8OQeLcugNY7PFt/XSXsxnQA8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ae:69:2d:2a:5a:ef:ce:26:f1:d2:bf:d5:9f:66:ee:e6:7d:97:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Jul 21 00:15:54 2025 GMT Not After : Jul 24 03:13:54 2025 GMT Subject: CN=83EFE896C47C56710093475CF720CB0B9B7EACAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:16:9a:48:0a:9c:cd:75:49:8d:81:6b:51: 89:e5:16:cf:ff:d5:c9:5f:35:7c:3c:0e:4d:b5:7b: 88:c2:64:49:0f:05:f7:8b:40:f4:83:6f:82:2b:a3: 04:62:67:cd:68:36:3c:4b:a0:8b:54:c1:01:4c:ed: e5:9b:b5:5e:0a:39:4a:ca:5a:46:61:ce:e8:1b:f5: d9:ba:e2:64:d1:d6:80:cc:08:99:38:08:75:72:49: 5d:52:6c:41:03:43:02:28:7c:00:f5:1f:99:bf:9e: 9d:9c:99:49:b3:1c:06:d2:39:ef:24:ee:ce:67:e2: 9c:07:cf:ca:dc:43:95:a8:b8:8d:7d:43:5c:ac:b9: e7:54:a6:12:3b:50:78:0b:47:35:95:42:31:e2:80: 9d:31:72:3d:69:2b:62:16:1d:1e:46:1c:a9:0f:60: d1:be:83:9f:3d:6c:03:4e:e1:93:33:7d:e8:41:1f: 35:a1:ee:9b:a3:e5:a4:dc:70:39:0c:f9:44:42:e2: 7d:02:af:9a:c9:2c:05:1c:ff:cc:01:8f:ef:04:29: f1:34:c4:6d:a1:7a:78:85:d4:c7:e0:5a:be:36:75: c5:b7:f3:a8:bd:a5:72:80:59:44:ef:dc:52:b1:68: 17:15:f8:79:37:25:86:30:35:e8:11:98:c0:69:96: 05:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EF:E8:96:C4:7C:56:71:00:93:47:5C:F7:20:CB:0B:9B:7E:AC:AB X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b9:89:4e:60:dc:58:ee:80:bb:e5:ea:da:7b:9b:6e:97:6a: cb:f6:9b:40:1e:5c:f6:7e:fc:46:a1:01:af:65:03:43:02:fc: 2d:83:62:87:68:54:01:4a:cb:32:66:28:c5:8b:08:85:85:94: 26:53:ba:f6:b4:97:13:4f:3a:19:fb:e3:72:11:95:a9:31:87: 06:fb:6a:05:25:08:bf:32:04:59:f2:3d:cc:6c:8e:49:26:83: df:17:6f:b0:48:5b:58:be:d5:c7:97:ee:7e:53:ac:f8:90:0b: bd:80:8a:cc:d8:8b:a2:c8:e4:0f:9a:c5:21:fa:b5:25:e6:19: 17:6f:50:db:f6:52:ab:9f:87:c2:a7:1a:ac:fc:e6:b5:1d:75: c9:7a:0d:82:71:14:46:b4:04:bf:8b:17:25:7b:27:d5:cc:58: 13:4c:74:6d:ac:a3:bb:9c:96:dd:0f:6c:5c:5c:0e:f9:36:b8: 54:aa:19:75:12:71:92:bf:b9:3b:dc:f1:83:dc:e1:20:62:1b: d3:15:e4:f0:21:60:34:e1:43:3e:90:60:fb:b6:6c:c9:72:48: ea:c4:bd:a8:e8:32:bd:c7:b8:0a:68:90:4c:99:fe:40:32:fd: d7:5f:1b:de:74:10:b7:1e:f9:7a:00:a1:ba:78:1e:6e:9b:3e: aa:e8:66:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGa5pLSpa784m8dK/1Z9m7uZ9lxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNTA3MjEwMDE1NTRaFw0yNTA3MjQwMzEzNTRaMDMxMTAvBgNV BAMTKDgzRUZFODk2QzQ3QzU2NzEwMDkzNDc1Q0Y3MjBDQjBCOUI3RUFDQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CBaaSAqczXVJjYFrUYnlFs// 1clfNXw8Dk21e4jCZEkPBfeLQPSDb4IrowRiZ81oNjxLoItUwQFM7eWbtV4KOUrK WkZhzugb9dm64mTR1oDMCJk4CHVySV1SbEEDQwIofAD1H5m/np2cmUmzHAbSOe8k 7s5n4pwHz8rcQ5WouI19Q1ysuedUphI7UHgLRzWVQjHigJ0xcj1pK2IWHR5GHKkP YNG+g589bANO4ZMzfehBHzWh7puj5aTccDkM+URC4n0Cr5rJLAUc/8wBj+8EKfE0 xG2heniF1MfgWr42dcW386i9pXKAWUTv3FKxaBcV+Hk3JYYwNegRmMBplgVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg+/olsR8VnEAk0dc9yDLC5t+rKswHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+5iU5g3FjugLvl6tp7m26Xasv2m0AeXPZ+ /EahAa9lA0MC/C2DYodoVAFKyzJmKMWLCIWFlCZTuva0lxNPOhn743IRlakxhwb7 agUlCL8yBFnyPcxsjkkmg98Xb7BIW1i+1ceX7n5TrPiQC72AiszYi6LI5A+axSH6 tSXmGRdvUNv2Uqufh8KnGqz85rUddcl6DYJxFEa0BL+LFyV7J9XMWBNMdG2so7uc lt0PbFxcDvk2uFSqGXUScZK/uTvc8YPc4SBiG9MV5PAhYDThQz6QYPu2bMlySOrE vajoMr3HuApokEyZ/kAy/ddfG950ELce+XoAobp4Hm6bPqroZr4= -----END CERTIFICATE-----Generated at Tue Jul 22 11:57:20 2025 by rpki-client