$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: hnuIRVSpYEomiVhJsAu36WbydnPYXY+TGx/IflMWSGQ= Subject key identifier: 6A:33:BA:03:5D:A9:CE:37:FB:17:2F:DD:36:C2:54:4E:70:6A:6A:76 Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 13888264720E6BE358653576ABD340FA8E4AF5C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 025F Signing time: Wed 23 Jul 2025 03:20:55 +0000 Manifest this update: Wed 23 Jul 2025 03:15:55 +0000 Manifest next update: Sat 26 Jul 2025 08:24:55 +0000 Files and hashes: 1: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: /POUiN3ADeic24fpnR1S95Kh3i2zF8ppbXpuq/ovLcI=) 2: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: OUaHqzH5MUuESyQrAEVUqywPb3+c3nlvFdPyh75nUE0=) 3: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: KqJWQLgXmTHd9H6sRHxBzzsWATc/WnNxAAXTEqHhFsc=) 4: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: WGjv+milOjl9rAalgzjgztWPyX2aaRVXr1UyUJeqY0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:88:82:64:72:0e:6b:e3:58:65:35:76:ab:d3:40:fa:8e:4a:f5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Jul 23 03:15:55 2025 GMT Not After : Jul 26 08:24:55 2025 GMT Subject: CN=6A33BA035DA9CE37FB172FDD36C2544E706A6A76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:31:95:cc:62:bc:67:db:d1:bc:6f:3c:54: 08:4e:70:4b:9b:ae:20:57:1b:a8:ac:85:32:15:2e: bc:27:0e:7d:16:76:d2:ec:02:eb:93:0d:f9:d1:43: 88:75:df:3b:fb:42:31:15:cf:cd:10:ea:89:d8:65: 24:62:3f:92:5a:4e:61:58:cb:2b:a3:35:41:f0:ae: 2c:64:37:a0:a7:e8:44:17:c2:c7:6e:14:70:ee:e6: 27:58:c6:9b:a7:04:8a:59:ae:f5:28:de:ca:e9:21: c7:a5:52:23:d9:44:a2:a4:39:74:ae:81:e6:c5:8e: 6a:45:21:f8:77:94:6b:5f:6b:25:7b:89:e1:36:47: 96:d2:e4:6c:4f:9f:bc:70:41:55:9d:89:ca:f4:d1: 7d:be:ab:6f:3a:b3:c4:47:a9:6d:64:48:2c:02:81: 73:b7:c8:40:c0:7b:c9:98:66:09:5a:88:ab:f5:7b: 68:fc:30:ce:27:91:c2:ab:c1:7d:aa:b7:90:cd:16: b4:01:69:d7:0f:b0:88:b2:0e:9f:c1:35:a8:72:b9: 37:8c:81:12:df:5f:4b:41:02:6c:4f:56:6a:02:a4: 44:89:dd:d0:5c:56:75:85:56:a9:a5:41:d3:97:ec: ef:46:ad:ec:df:5a:dd:31:a2:f6:fc:0b:e7:9b:15: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:BA:03:5D:A9:CE:37:FB:17:2F:DD:36:C2:54:4E:70:6A:6A:76 X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:28:70:3f:54:df:7a:92:f1:ca:86:ae:e8:39:20:0a:ff:e3: 47:b0:59:c1:c1:9d:66:02:34:c8:27:c8:ab:ce:c9:61:55:77: d0:2e:fa:0b:17:73:09:18:b1:9a:74:f2:b7:a2:c2:3a:67:0a: 31:f0:61:ad:28:82:62:2f:f3:12:39:bb:66:7d:c8:26:2b:a8: 40:c7:47:4a:29:c3:7f:56:da:4a:3e:da:e3:9e:47:05:a2:f8: 38:2a:28:ca:96:54:8f:71:ff:b0:1a:ba:66:60:42:6c:b6:35: e2:65:c3:45:dd:ce:23:22:12:91:56:64:58:b1:ab:c7:b3:d9: d5:b7:65:b1:15:dd:20:18:c0:5d:ba:fa:27:a8:42:97:db:ee: a2:31:01:37:1c:c4:f0:a3:a2:f2:48:a0:cb:75:92:ca:58:55: 84:b1:6d:f9:6e:3b:c8:14:f6:8f:16:f7:ac:e5:2b:98:f5:d3: 86:11:08:7f:e8:d0:ef:02:f7:fd:dd:29:13:30:08:61:da:51: 7d:c2:84:b1:f5:aa:ae:47:4a:c4:1d:9a:ae:1c:f6:2e:27:28: a1:5a:4f:42:a6:37:47:19:f5:20:3d:3f:3f:a2:43:65:58:7c: 39:81:22:d4:fc:28:de:46:3f:87:e7:14:c9:87:cc:e6:b1:e1: 6c:63:3d:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4iCZHIOa+NYZTV2q9NA+o5K9cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNTA3MjMwMzE1NTVaFw0yNTA3MjYwODI0NTVaMDMxMTAvBgNV BAMTKDZBMzNCQTAzNURBOUNFMzdGQjE3MkZERDM2QzI1NDRFNzA2QTZBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTTGVzGK8Z9vRvG88VAhOcEub riBXG6ishTIVLrwnDn0WdtLsAuuTDfnRQ4h13zv7QjEVz80Q6onYZSRiP5JaTmFY yyujNUHwrixkN6Cn6EQXwsduFHDu5idYxpunBIpZrvUo3srpIcelUiPZRKKkOXSu gebFjmpFIfh3lGtfayV7ieE2R5bS5GxPn7xwQVWdicr00X2+q286s8RHqW1kSCwC gXO3yEDAe8mYZglaiKv1e2j8MM4nkcKrwX2qt5DNFrQBadcPsIiyDp/BNahyuTeM gRLfX0tBAmxPVmoCpESJ3dBcVnWFVqmlQdOX7O9GrezfWt0xovb8C+ebFTkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUajO6A12pzjf7Fy/dNsJUTnBqanYwHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgocD9U33qS8cqGrug5IAr/40ewWcHBnWYC NMgnyKvOyWFVd9Au+gsXcwkYsZp08reiwjpnCjHwYa0ogmIv8xI5u2Z9yCYrqEDH R0opw39W2ko+2uOeRwWi+DgqKMqWVI9x/7AaumZgQmy2NeJlw0XdziMiEpFWZFix q8ez2dW3ZbEV3SAYwF26+ieoQpfb7qIxATccxPCjovJIoMt1kspYVYSxbfluO8gU 9o8W96zlK5j104YRCH/o0O8C9/3dKRMwCGHaUX3ChLH1qq5HSsQdmq4c9i4nKKFa T0KmN0cZ9SA9Pz+iQ2VYfDmBItT8KN5GP4fnFMmHzOax4WxjPc4= -----END CERTIFICATE-----Generated at Thu Jul 24 04:57:46 2025 by rpki-client