$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: sEVEMbILFvfT0UslEdJXtSxpRsESl5B9BReoIdHrQKw= Subject key identifier: D6:EB:4E:F3:E4:24:78:D9:0D:C0:16:AE:CB:8F:68:0A:C8:A5:B2:12 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 597833EA66767B127BD78FC820A6B76D7506C768 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0112 Signing time: Mon 21 Jul 2025 07:10:53 +0000 Manifest this update: Mon 21 Jul 2025 07:05:53 +0000 Manifest next update: Thu 24 Jul 2025 17:51:53 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI=) 2: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: cbrl6dBckxe27KqOtUNV9s29bXGi1zCIe4QmB1+JlkA=) 3: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: DRdG8o964t0UysToPA1Bj2aQ2UZauk2avpgchbRuDXE=) 4: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: +AkE8lBocYkzQtUK7rxyogDErEqAx6OPKcVzXziAtKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:78:33:ea:66:76:7b:12:7b:d7:8f:c8:20:a6:b7:6d:75:06:c7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Jul 21 07:05:53 2025 GMT Not After : Jul 24 17:51:53 2025 GMT Subject: CN=D6EB4EF3E42478D90DC016AECB8F680AC8A5B212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:5f:91:f3:eb:eb:ad:0e:e4:ff:8f:8e:71: 0e:2f:54:f1:ba:ed:b3:ed:aa:c7:fa:b2:01:21:0a: e8:74:53:8a:32:6d:f8:c1:fe:ae:86:bb:7a:1c:3e: 85:fe:02:18:64:30:3f:1d:22:c6:32:7f:03:b7:0b: c1:5a:0a:dc:ac:7d:53:e4:d2:db:83:01:94:3c:40: 38:8c:02:5b:82:7f:77:e7:f6:23:80:3d:9c:dc:4a: ef:e3:53:01:57:13:39:4a:6c:f5:8b:c9:57:3c:2e: 74:38:a7:f6:fb:b5:01:26:94:8a:e0:47:fa:b4:c9: 8b:83:01:bc:c4:e9:85:be:b8:0d:42:dd:a4:95:c7: 41:0a:ec:dc:65:b4:78:3d:d8:7a:86:dc:90:b5:c9: d5:88:49:66:f6:71:b1:78:28:43:52:56:a2:73:f6: b1:f7:56:a7:46:3d:7a:4d:7c:bf:a2:ba:40:21:f7: d5:9d:42:eb:d0:d7:12:0a:66:c5:cc:93:a4:1c:9e: 1a:22:a6:c0:80:c6:b6:50:0f:37:fa:fa:08:aa:3e: 29:1e:7f:c1:cf:c3:84:b3:5c:74:76:9b:78:54:8b: a1:dd:cb:a9:90:5b:ab:2b:b7:5b:ea:8b:3c:ca:5a: 35:b5:b3:30:5b:bf:fd:83:43:bd:4a:88:79:01:0b: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EB:4E:F3:E4:24:78:D9:0D:C0:16:AE:CB:8F:68:0A:C8:A5:B2:12 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:35:1a:00:76:65:b3:f7:cc:36:b4:ca:b9:69:11:49:73:79: 76:94:73:01:c6:fc:2e:84:05:a9:8b:bc:47:6c:f4:31:25:6b: 8b:77:57:1c:2f:fe:d3:cd:46:fe:c6:a6:1e:d3:74:58:13:fd: ad:40:c1:c4:1c:92:e0:3f:a9:b6:cf:3b:4c:ae:66:74:4d:51: 6b:78:94:0a:20:20:4c:e6:97:63:71:29:6e:d3:1d:0d:96:e6: 0f:57:8b:2f:be:a1:aa:90:52:51:81:61:fc:32:09:bb:57:81: cf:82:39:87:99:65:c6:2a:b5:63:27:ff:dd:aa:b0:00:e2:1c: ab:64:19:37:72:a9:07:10:a5:73:8d:32:9c:bd:34:a1:06:8b: 6a:d4:0c:d1:4d:32:15:82:7e:3c:90:c9:61:34:a7:03:0b:74: 34:5e:84:d4:e9:3b:b3:1c:11:6b:8b:1d:76:91:96:63:e8:08: 8e:50:a2:82:72:8a:2d:5e:29:0a:28:5b:ac:9f:9d:14:21:f4: c1:2d:fc:d5:72:7c:9b:62:d3:12:68:49:5e:f8:6e:68:94:a2: 90:6f:81:ff:93:ad:f2:7f:91:82:56:cf:fa:37:6e:79:51:82: 8a:ad:2f:8f:c0:4c:0c:f8:ff:5e:1a:28:da:7d:70:78:87:03: 86:74:70:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXgz6mZ2exJ714/IIKa3bXUGx2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNTA3MjEwNzA1NTNaFw0yNTA3MjQxNzUxNTNaMDMxMTAvBgNV BAMTKEQ2RUI0RUYzRTQyNDc4RDkwREMwMTZBRUNCOEY2ODBBQzhBNUIyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKl+R8+vrrQ7k/4+OcQ4vVPG6 7bPtqsf6sgEhCuh0U4oybfjB/q6Gu3ocPoX+AhhkMD8dIsYyfwO3C8FaCtysfVPk 0tuDAZQ8QDiMAluCf3fn9iOAPZzcSu/jUwFXEzlKbPWLyVc8LnQ4p/b7tQEmlIrg R/q0yYuDAbzE6YW+uA1C3aSVx0EK7NxltHg92HqG3JC1ydWISWb2cbF4KENSVqJz 9rH3VqdGPXpNfL+iukAh99WdQuvQ1xIKZsXMk6QcnhoipsCAxrZQDzf6+giqPike f8HPw4SzXHR2m3hUi6Hdy6mQW6srt1vqizzKWjW1szBbv/2DQ71KiHkBCzN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1utO8+QkeNkNwBauy49oCsilshIwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJA1GgB2ZbP3zDa0yrlpEUlzeXaUcwHG/C6E BamLvEds9DEla4t3Vxwv/tPNRv7Gph7TdFgT/a1AwcQckuA/qbbPO0yuZnRNUWt4 lAogIEzml2NxKW7THQ2W5g9Xiy++oaqQUlGBYfwyCbtXgc+COYeZZcYqtWMn/92q sADiHKtkGTdyqQcQpXONMpy9NKEGi2rUDNFNMhWCfjyQyWE0pwMLdDRehNTpO7Mc EWuLHXaRlmPoCI5QooJyii1eKQooW6yfnRQh9MEt/NVyfJti0xJoSV74bmiUopBv gf+TrfJ/kYJWz/o3bnlRgoqtL4/ATAz4/14aKNp9cHiHA4Z0cG8= -----END CERTIFICATE-----Generated at Mon Jul 21 08:32:12 2025 by rpki-client