$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: nH1vmh/OZXLu+6WWB7gU6mpNhGybkh55OLPxsJQolGM= Subject key identifier: 72:C7:58:56:58:7D:CA:7C:12:24:5E:58:2E:45:7A:BA:20:FB:3C:63 Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 5EC265356E2141C2C8CF0682489E71497B4E6268 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 022F Signing time: Sat 05 Apr 2025 10:30:52 +0000 Manifest this update: Sat 05 Apr 2025 10:25:52 +0000 Manifest next update: Tue 08 Apr 2025 12:32:52 +0000 Files and hashes: 1: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: KqJWQLgXmTHd9H6sRHxBzzsWATc/WnNxAAXTEqHhFsc=) 2: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: l8Yf1lzWl00D0jmJD5UwO/+3cYT/75KueadOaFWmHi0=) 3: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: 7ckq9/F2ao8xZo0OiXF87uegm56zVwu92AI1Wgljyk4=) 4: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: OUaHqzH5MUuESyQrAEVUqywPb3+c3nlvFdPyh75nUE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 12:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c2:65:35:6e:21:41:c2:c8:cf:06:82:48:9e:71:49:7b:4e:62:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Apr 5 10:25:52 2025 GMT Not After : Apr 8 12:32:52 2025 GMT Subject: CN=72C75856587DCA7C12245E582E457ABA20FB3C63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:c1:d3:a1:36:0b:cd:f5:05:75:8d:3c:99: 74:dd:3a:fe:8f:59:1b:af:d9:93:d5:68:16:ee:af: a2:fe:e9:70:29:20:5f:4e:b5:81:58:58:a5:7f:66: ce:9b:44:db:53:af:d2:ab:1b:fe:86:f7:d0:90:d9: 30:f3:8b:b1:90:c8:f6:f2:2e:a7:cc:e6:78:57:be: 7b:bd:fa:e9:75:78:e0:51:70:3f:0a:5a:56:b0:cb: 97:10:90:3e:01:41:c7:89:10:03:42:16:b9:27:1e: 6c:f1:8e:a6:c1:5b:f3:ee:ed:d0:94:ad:55:58:82: be:06:aa:a3:da:4b:1a:f7:55:b4:df:19:5a:34:db: 97:5b:22:77:46:0f:74:ca:24:fb:dd:9d:4c:5a:00: f1:30:e7:e0:d9:64:97:8f:6f:12:9d:f1:ab:f0:df: 38:fa:bf:c1:fa:63:b5:b5:e9:3c:dd:24:43:62:b9: b7:ea:e0:0b:f9:a1:e0:89:67:08:73:9b:8c:86:22: 53:ee:a0:d4:67:73:76:f0:8d:dd:f1:a7:3c:bc:34: ea:33:b1:27:d7:71:3a:de:57:30:f8:b9:70:9a:67: a0:e5:da:d7:a3:6b:54:76:2c:4f:68:b0:a9:85:a2: c1:de:2e:7b:33:d9:ab:8c:87:f5:47:83:5a:ed:2b: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C7:58:56:58:7D:CA:7C:12:24:5E:58:2E:45:7A:BA:20:FB:3C:63 X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ee:86:bf:51:da:02:7e:da:93:0d:bc:ec:df:0a:18:bc:05: 71:65:d2:a9:d6:b8:28:cc:7d:64:31:03:73:78:14:0b:73:e3: b1:21:bc:41:f8:30:91:f8:eb:33:64:24:bb:32:94:28:e9:0f: 61:9d:b0:67:ce:51:75:15:ea:05:55:97:25:2c:3d:bd:4f:b9: 49:0e:3f:7d:90:b6:02:78:85:6b:e3:2e:a8:12:2e:8b:31:62: bd:f3:b3:8f:e5:e7:f2:2b:07:af:d0:0d:3b:6e:d3:a0:6b:c4: 74:19:f7:c2:08:dd:cd:89:67:32:e7:9b:91:a4:2e:07:f2:55: f1:d2:31:c4:80:ec:7f:10:cd:ab:63:27:45:f2:3b:52:bc:36: 18:31:51:71:7c:63:aa:ef:3c:fe:e5:da:0a:e7:d9:eb:63:a0: 13:04:e4:f6:84:13:bf:0f:3e:28:95:4c:f4:64:e0:c4:19:40: f0:0e:08:aa:6a:ee:11:53:c8:0b:eb:3f:42:f4:66:c5:6d:ee: 81:18:d8:7f:ab:82:ae:1d:80:5a:7e:0d:ca:6a:68:58:72:93: 56:b4:8e:3c:23:85:d0:04:69:26:a5:74:5f:bf:7d:5c:4b:a5: 40:66:2a:51:d3:cb:2b:22:4c:83:ba:07:af:ce:3e:6f:5d:30: f9:ee:86:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsJlNW4hQcLIzwaCSJ5xSXtOYmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNTA0MDUxMDI1NTJaFw0yNTA0MDgxMjMyNTJaMDMxMTAvBgNV BAMTKDcyQzc1ODU2NTg3RENBN0MxMjI0NUU1ODJFNDU3QUJBMjBGQjNDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BMHToTYLzfUFdY08mXTdOv6P WRuv2ZPVaBbur6L+6XApIF9OtYFYWKV/Zs6bRNtTr9KrG/6G99CQ2TDzi7GQyPby LqfM5nhXvnu9+ul1eOBRcD8KWlawy5cQkD4BQceJEANCFrknHmzxjqbBW/Pu7dCU rVVYgr4GqqPaSxr3VbTfGVo025dbIndGD3TKJPvdnUxaAPEw5+DZZJePbxKd8avw 3zj6v8H6Y7W16TzdJENiubfq4Av5oeCJZwhzm4yGIlPuoNRnc3bwjd3xpzy8NOoz sSfXcTreVzD4uXCaZ6Dl2teja1R2LE9osKmFosHeLnsz2auMh/VHg1rtKyZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcsdYVlh9ynwSJF5YLkV6uiD7PGMwHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3uhr9R2gJ+2pMNvOzfChi8BXFl0qnWuCjM fWQxA3N4FAtz47EhvEH4MJH46zNkJLsylCjpD2GdsGfOUXUV6gVVlyUsPb1PuUkO P32QtgJ4hWvjLqgSLosxYr3zs4/l5/IrB6/QDTtu06BrxHQZ98II3c2JZzLnm5Gk LgfyVfHSMcSA7H8QzatjJ0XyO1K8NhgxUXF8Y6rvPP7l2grn2etjoBME5PaEE78P PiiVTPRk4MQZQPAOCKpq7hFTyAvrP0L0ZsVt7oEY2H+rgq4dgFp+DcpqaFhyk1a0 jjwjhdAEaSaldF+/fVxLpUBmKlHTyysiTIO6B6/OPm9dMPnuhlo= -----END CERTIFICATE-----Generated at Sun Apr 6 11:13:29 2025 by rpki-client