$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft File: 032056FFABA06741112BA404900B315C87E35361.mft (raw, json) Hash identifier: 2cLI1h+PSH/Ab2/MOjVrARLbl8iIFHS6dtxrQu8kngE= Subject key identifier: 9B:EE:8A:B7:86:F1:B1:E3:81:54:68:02:61:C2:D3:B7:D4:EE:0C:C5 Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 Certificate issuer: /CN=032056FFABA06741112BA404900B315C87E35361 Certificate serial: 32ABAF64D3DBE669EF866FB9A44A4591962E2EFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft Manifest number: 047D Signing time: Mon 21 Jul 2025 01:01:39 +0000 Manifest this update: Mon 21 Jul 2025 00:56:39 +0000 Manifest next update: Thu 24 Jul 2025 09:41:39 +0000 Files and hashes: 1: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: mSrDIe1nZyY3D0kPgDEMFaoY9Cg4bd3ftAPPtaVMp6U=) 2: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: kOBx2GksvdfRI3aO7Xv7lhebR1wUywN2HETFMEy7na8=) 3: 032056FFABA06741112BA404900B315C87E35361.crl (hash: mC62NdgjbQt02v7h7DdseYc1mjC8nTWIZm7de61Ctfw=) 4: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: YChAquT46Gu9Ju8lh9yWF5k2iDsA6GlC2HfcNGf9Vhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ab:af:64:d3:db:e6:69:ef:86:6f:b9:a4:4a:45:91:96:2e:2e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032056FFABA06741112BA404900B315C87E35361 Validity Not Before: Jul 21 00:56:39 2025 GMT Not After : Jul 24 09:41:39 2025 GMT Subject: CN=9BEE8AB786F1B1E38154680261C2D3B7D4EE0CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0a:4c:f5:91:cd:f7:4b:39:f7:0e:57:33:f8: 18:b8:af:4b:5f:72:e6:42:b3:c5:f4:61:51:29:8b: 30:d9:74:d0:6d:34:5b:f1:23:f5:fa:8a:ff:fe:28: e9:08:70:e3:24:b1:82:42:92:f0:92:7d:a1:a3:b0: d4:3f:f1:3c:35:51:58:e7:42:77:ff:fb:63:7d:1f: 9f:8b:8d:89:5d:d6:72:11:41:d5:cd:31:7a:89:73: cb:79:97:11:7a:cc:a3:4f:05:8a:36:91:60:05:70: d7:cd:b4:e9:0b:af:47:f1:19:d1:ba:90:fb:2c:41: 26:e7:dd:77:0d:0d:15:62:0f:4c:0e:02:c9:b0:3a: 19:3a:c3:97:26:e1:e2:d0:18:44:ac:ad:08:ab:8f: b3:25:16:2f:46:c0:f5:cb:f7:38:2c:34:00:d3:df: f1:48:7e:df:ee:bf:e6:2b:dc:4c:16:f1:36:6e:54: 41:d5:18:3c:cc:c1:f6:62:ba:ea:59:35:11:ee:b6: 76:d5:0a:b9:31:fc:68:0d:d7:44:1b:97:4e:7e:bc: 22:3d:0c:bb:6f:b5:a3:2f:35:64:d2:01:0b:79:8b: 2a:7a:1a:4d:bf:60:8f:0e:68:61:4c:ba:6c:5a:84: c9:8d:5a:e5:2c:42:8a:e8:62:fb:d0:36:b2:21:e0: c2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EE:8A:B7:86:F1:B1:E3:81:54:68:02:61:C2:D3:B7:D4:EE:0C:C5 X509v3 Authority Key Identifier: keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:4f:5f:6d:dc:76:ca:84:66:4b:e9:d5:7f:4f:8b:07:dd:c8: 50:a0:2b:4e:2d:32:5f:8d:2a:ab:12:95:46:7a:c4:93:ca:99: 3f:73:52:e9:5e:eb:39:b1:72:54:6c:26:e9:88:b5:f0:be:0b: 80:81:42:64:0b:20:81:23:66:bb:5e:aa:9c:b3:81:b7:b0:b0: 8c:08:ac:bb:e0:61:90:ee:37:9f:6a:54:29:ed:17:7b:95:8e: d0:f4:e0:d5:dc:3b:49:6b:6b:b7:36:b3:d5:3f:79:56:97:8b: b4:d5:4f:54:5e:d2:3f:44:5e:13:a3:cd:24:b6:dd:cb:cb:87: 8e:e7:92:1e:f2:5a:53:cb:44:0c:08:8e:28:fb:e2:17:c2:9f: 0a:e9:fb:c1:8c:91:88:26:a8:82:01:35:bb:28:d1:f7:61:4e: 81:b7:74:8f:26:ca:f9:08:af:35:d0:44:b8:06:f3:a5:51:70: fe:51:0d:b5:02:5f:1d:80:c3:4f:78:ec:57:c2:23:3a:82:ab: 0e:b2:ad:04:03:92:19:f4:d8:3c:0d:36:02:93:10:98:66:6b: d9:11:3d:da:13:a9:3e:5c:f2:f4:87:9d:90:76:af:94:83:a2: a3:b9:9c:b7:06:0d:7b:54:48:a9:d9:0d:a6:71:3e:02:6f:e9: b7:60:a9:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMquvZNPb5mnvhm+5pEpFkZYuLv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4 N0UzNTM2MTAeFw0yNTA3MjEwMDU2MzlaFw0yNTA3MjQwOTQxMzlaMDMxMTAvBgNV BAMTKDlCRUU4QUI3ODZGMUIxRTM4MTU0NjgwMjYxQzJEM0I3RDRFRTBDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkCkz1kc33Szn3Dlcz+Bi4r0tf cuZCs8X0YVEpizDZdNBtNFvxI/X6iv/+KOkIcOMksYJCkvCSfaGjsNQ/8Tw1UVjn Qnf/+2N9H5+LjYld1nIRQdXNMXqJc8t5lxF6zKNPBYo2kWAFcNfNtOkLr0fxGdG6 kPssQSbn3XcNDRViD0wOAsmwOhk6w5cm4eLQGESsrQirj7MlFi9GwPXL9zgsNADT 3/FIft/uv+Yr3EwW8TZuVEHVGDzMwfZiuupZNRHutnbVCrkx/GgN10Qbl05+vCI9 DLtvtaMvNWTSAQt5iyp6Gk2/YI8OaGFMumxahMmNWuUsQoroYvvQNrIh4MKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+6Kt4bxseOBVGgCYcLTt9TuDMUwHwYDVR0j BBgwFoAUAyBW/6ugZ0ERK6QEkAsxXIfjU2EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE4MjBiNC04MmVmLTQ0MTItYmUyZS01ZDY5MTRiZDQ4NDQvMC8wMzIwNTZGRkFC QTA2NzQxMTEyQkE0MDQ5MDBCMzE1Qzg3RTM1MzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4N0Uz NTM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl MmUtNWQ2OTE0YmQ0ODQ0LzAvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMx NUM4N0UzNTM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFPX23cdsqEZkvp1X9PiwfdyFCgK04tMl+N KqsSlUZ6xJPKmT9zUule6zmxclRsJumItfC+C4CBQmQLIIEjZrteqpyzgbewsIwI rLvgYZDuN59qVCntF3uVjtD04NXcO0lra7c2s9U/eVaXi7TVT1Re0j9EXhOjzSS2 3cvLh47nkh7yWlPLRAwIjij74hfCnwrp+8GMkYgmqIIBNbso0fdhToG3dI8myvkI rzXQRLgG86VRcP5RDbUCXx2Aw0947FfCIzqCqw6yrQQDkhn02DwNNgKTEJhma9kR PdoTqT5c8vSHnZB2r5SDoqO5nLcGDXtUSKnZDaZxPgJv6bdgqTc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:45 2025 by rpki-client