$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: YOOEYvdJ1YMPHNwze1d2mvXExU40LUmhGZR/xOTZpgE= Subject key identifier: 93:E8:4D:F4:E9:98:58:15:86:2C:32:33:6C:85:9B:C1:E2:FC:0A:AB Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 4B03D3FD3960B2D98EC1016026A486F42F47FBF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 010C Signing time: Sat 19 Jul 2025 17:41:30 +0000 Manifest this update: Sat 19 Jul 2025 17:36:30 +0000 Manifest next update: Wed 23 Jul 2025 05:03:30 +0000 Files and hashes: 1: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: wYdcnUFBSuzFDxRLSZQv3tgeXMwvjCP9rVz+PUMirJ4=) 2: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: CGsBU6TSGzJ4PEt8btXJSbXp5X+7HxLdmQzs0k5HnDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:03:d3:fd:39:60:b2:d9:8e:c1:01:60:26:a4:86:f4:2f:47:fb:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Jul 19 17:36:30 2025 GMT Not After : Jul 23 05:03:30 2025 GMT Subject: CN=93E84DF4E9985815862C32336C859BC1E2FC0AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1b:82:0a:60:05:42:74:40:51:19:1f:01:18: 72:53:84:0b:e2:db:42:87:ff:0a:44:cb:fe:fd:8d: c5:4d:08:3c:5e:ac:e6:35:3a:57:5c:99:b6:9b:0c: a5:8d:d3:4e:e5:6e:75:1a:1f:60:08:b5:83:9b:68: d2:94:92:54:7f:eb:70:86:b3:45:a6:e2:56:17:24: 45:05:da:07:3f:73:c8:62:82:be:d6:89:82:db:62: ca:90:43:d8:68:5c:c4:c5:19:0a:d9:5f:00:36:d0: 50:d7:6c:99:74:d7:83:97:9c:d9:15:32:bf:4e:13: 8f:2a:e6:7a:13:eb:94:0a:7f:11:2c:14:e1:16:48: 30:9f:32:ff:7a:00:14:db:e9:25:29:74:7a:ca:e9: b4:d8:d0:81:27:95:05:67:d0:59:76:d9:17:e7:58: f5:0f:da:1d:1f:59:9d:0a:04:da:85:12:d3:f2:e2: 06:66:58:c7:65:f3:6a:2e:b7:6c:d3:2c:be:b1:7b: 6c:7d:51:ed:35:62:7a:19:8a:ca:7e:be:6c:ef:d7: 42:57:54:d2:fe:b5:5b:b4:a7:98:f2:6a:54:d6:28: 5f:0f:2f:37:39:33:3e:c3:ca:75:c0:b9:e6:6e:ac: fc:93:c9:92:da:92:76:8b:f6:3d:84:ab:71:38:6f: 3a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E8:4D:F4:E9:98:58:15:86:2C:32:33:6C:85:9B:C1:E2:FC:0A:AB X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c7:90:0b:36:6a:bf:25:05:4e:e7:f7:71:c7:cf:30:c6:70: 9b:70:c7:94:88:05:c6:5c:6c:36:6b:b5:3a:ed:60:f0:6b:c0: 49:6e:85:fb:17:37:28:0b:2d:08:03:7f:26:67:e5:3c:07:11: 8a:76:75:4f:6d:4b:21:4c:8c:cf:b8:cc:51:42:3b:2d:7b:8c: aa:a1:07:20:53:7d:0c:50:b6:02:a1:f9:17:01:ea:b2:8f:62: ce:90:55:52:ee:05:68:1d:a3:3f:0d:4f:6c:6d:33:6e:41:1d: 5f:76:9f:cb:01:cb:05:b5:5f:43:49:b2:31:51:6a:15:59:02: 70:8e:12:9c:bd:f0:eb:3a:83:f4:91:61:a8:ec:9f:c0:39:b8: cc:21:f5:a3:05:ca:a5:5f:1b:64:3d:f5:9e:72:67:e8:31:96: be:6a:6a:2d:36:6a:88:f6:2a:30:66:33:e2:a5:40:1c:68:3f: 90:18:9f:99:ca:3c:b6:c8:67:9b:71:f7:45:95:2e:f3:25:1e: d2:10:1b:23:21:7e:a4:c9:22:6c:a0:f3:b4:c3:89:00:8b:26: ce:c7:b3:7d:61:e8:ef:87:dd:98:ff:1f:86:5d:a4:85:30:64: 21:3b:f8:8d:dc:47:e0:cc:28:1c:a7:d3:fa:58:7e:ff:0f:7d: 0c:1e:92:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwPT/TlgstmOwQFgJqSG9C9H+/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTA3MTkxNzM2MzBaFw0yNTA3MjMwNTAzMzBaMDMxMTAvBgNV BAMTKDkzRTg0REY0RTk5ODU4MTU4NjJDMzIzMzZDODU5QkMxRTJGQzBBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjG4IKYAVCdEBRGR8BGHJThAvi 20KH/wpEy/79jcVNCDxerOY1OldcmbabDKWN007lbnUaH2AItYObaNKUklR/63CG s0Wm4lYXJEUF2gc/c8higr7WiYLbYsqQQ9hoXMTFGQrZXwA20FDXbJl014OXnNkV Mr9OE48q5noT65QKfxEsFOEWSDCfMv96ABTb6SUpdHrK6bTY0IEnlQVn0Fl22Rfn WPUP2h0fWZ0KBNqFEtPy4gZmWMdl82out2zTLL6xe2x9Ue01YnoZisp+vmzv10JX VNL+tVu0p5jyalTWKF8PLzc5Mz7DynXAueZurPyTyZLaknaL9j2Eq3E4bzr/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk+hN9OmYWBWGLDIzbIWbweL8CqswHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbHkAs2ar8lBU7n93HHzzDGcJtwx5SIBcZc bDZrtTrtYPBrwEluhfsXNygLLQgDfyZn5TwHEYp2dU9tSyFMjM+4zFFCOy17jKqh ByBTfQxQtgKh+RcB6rKPYs6QVVLuBWgdoz8NT2xtM25BHV92n8sBywW1X0NJsjFR ahVZAnCOEpy98Os6g/SRYajsn8A5uMwh9aMFyqVfG2Q99Z5yZ+gxlr5qai02aoj2 KjBmM+KlQBxoP5AYn5nKPLbIZ5tx90WVLvMlHtIQGyMhfqTJImyg87TDiQCLJs7H s31h6O+H3Zj/H4ZdpIUwZCE7+I3cR+DMKByn0/pYfv8PfQwekoE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:30:41 2025 by rpki-client