$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: gKHFi5Vz00Z+NXbetFJOL3Fo+W1ddvV+TwDu5TP2KCI= Subject key identifier: C4:DF:04:86:77:CA:40:4C:35:E1:EA:1F:B1:10:AF:5C:19:A7:98:F5 Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 0F5C03330A6F71F2E222C46FEB4FF369F9159C89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 024A Signing time: Thu 05 Jun 2025 18:00:54 +0000 Manifest this update: Thu 05 Jun 2025 17:55:54 +0000 Manifest next update: Sun 08 Jun 2025 22:05:54 +0000 Files and hashes: 1: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: +I5s9r+fXLsNhM/kGv7mA2/8dSHfmi7D55EuTYWKul4=) 2: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: KqJWQLgXmTHd9H6sRHxBzzsWATc/WnNxAAXTEqHhFsc=) 3: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: OUaHqzH5MUuESyQrAEVUqywPb3+c3nlvFdPyh75nUE0=) 4: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: /POUiN3ADeic24fpnR1S95Kh3i2zF8ppbXpuq/ovLcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5c:03:33:0a:6f:71:f2:e2:22:c4:6f:eb:4f:f3:69:f9:15:9c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Jun 5 17:55:54 2025 GMT Not After : Jun 8 22:05:54 2025 GMT Subject: CN=C4DF048677CA404C35E1EA1FB110AF5C19A798F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:b6:0b:9c:f5:c6:de:ab:f9:c8:b4:8b:21: d4:9b:b6:2b:03:94:16:1c:33:71:08:3f:90:ad:c5: fe:b9:72:62:75:4f:4e:e9:34:10:31:b4:b6:ce:23: 5c:8d:52:4b:d3:0f:50:bf:54:e1:d4:47:0f:51:01: 71:1f:5c:b5:65:33:9a:42:84:5f:f2:4a:d9:de:ef: 4c:6a:90:77:03:b3:c2:57:33:80:3a:f0:3a:00:51: f1:4d:89:83:10:55:ac:1f:b0:71:9c:7e:96:26:d6: 74:d7:4e:b3:ab:d3:63:fc:c7:ed:69:26:52:6e:82: ef:5e:6a:a9:90:cb:d3:c0:fa:d0:87:45:bc:5f:cf: a7:7c:64:6c:f1:0a:a7:df:f2:34:bd:62:de:1e:6a: 18:fb:7d:d0:9c:c4:2a:30:e7:a6:ba:ff:25:75:a0: bd:04:de:ac:3e:32:12:33:eb:1b:07:1f:a0:6c:6e: 69:17:25:4f:dc:85:b7:1d:8e:98:c2:e7:c7:74:18: 0a:18:9f:7c:b2:9f:c4:76:6c:04:87:12:c3:14:9e: 78:ad:d9:21:9b:80:d3:0a:ca:f6:26:6a:b9:01:17: d7:75:e4:b8:bd:78:24:bc:08:b7:64:a1:6f:f7:c6: b9:8c:b6:02:af:1b:35:42:54:37:2a:1c:f1:9e:86: 2a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DF:04:86:77:CA:40:4C:35:E1:EA:1F:B1:10:AF:5C:19:A7:98:F5 X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:5c:f3:24:7e:9d:ad:97:37:d7:e3:1e:93:ba:a7:93:72:c0: e3:55:06:a9:2c:5e:77:3c:82:0d:93:b4:54:ef:95:3d:d7:5b: fd:c2:11:fd:d2:de:69:45:c8:db:c0:2d:37:3b:eb:ab:36:94: ac:68:fe:0f:81:79:3b:78:64:c8:37:78:5a:21:df:29:22:f2: 20:bf:39:77:34:28:ac:98:a6:ae:d0:c8:55:66:6d:65:7a:07: 9a:af:9f:b4:2e:4d:b3:e6:d5:15:30:37:2a:7b:1a:fa:ad:c8: c5:b1:66:df:c6:ab:6f:3d:3f:2d:ff:a1:af:a0:df:08:83:31: e7:32:cd:74:e0:f4:64:29:47:f8:6d:8d:9c:dd:a1:aa:6c:f3: 6f:50:d8:7d:12:9c:f2:a6:be:d5:01:f2:44:38:b6:21:80:fd: 0d:f7:4d:cb:62:3c:0a:eb:c8:0c:00:5c:b8:62:74:62:21:1a: 57:98:88:c5:72:2c:98:09:be:7b:e2:77:f6:36:85:e4:93:82: fa:ef:64:5b:6c:8e:4b:17:cc:de:9e:f6:bb:ce:c0:1f:b3:32: 62:1f:50:51:c6:4e:b7:30:fe:6f:a8:0a:f0:c9:dd:65:e9:bb: 52:ba:d3:0a:61:a5:d0:a7:ee:61:77:36:c5:8e:de:11:93:09: a2:40:5f:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1wDMwpvcfLiIsRv60/zafkVnIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNTA2MDUxNzU1NTRaFw0yNTA2MDgyMjA1NTRaMDMxMTAvBgNV BAMTKEM0REYwNDg2NzdDQTQwNEMzNUUxRUExRkIxMTBBRjVDMTlBNzk4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+77YLnPXG3qv5yLSLIdSbtisD lBYcM3EIP5Ctxf65cmJ1T07pNBAxtLbOI1yNUkvTD1C/VOHURw9RAXEfXLVlM5pC hF/yStne70xqkHcDs8JXM4A68DoAUfFNiYMQVawfsHGcfpYm1nTXTrOr02P8x+1p JlJugu9eaqmQy9PA+tCHRbxfz6d8ZGzxCqff8jS9Yt4eahj7fdCcxCow56a6/yV1 oL0E3qw+MhIz6xsHH6BsbmkXJU/chbcdjpjC58d0GAoYn3yyn8R2bASHEsMUnnit 2SGbgNMKyvYmarkBF9d15Li9eCS8CLdkoW/3xrmMtgKvGzVCVDcqHPGehiofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxN8EhnfKQEw14eofsRCvXBmnmPUwHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBc8yR+na2XN9fjHpO6p5NywONVBqksXnc8 gg2TtFTvlT3XW/3CEf3S3mlFyNvALTc766s2lKxo/g+BeTt4ZMg3eFoh3yki8iC/ OXc0KKyYpq7QyFVmbWV6B5qvn7QuTbPm1RUwNyp7GvqtyMWxZt/Gq289Py3/oa+g 3wiDMecyzXTg9GQpR/htjZzdoaps829Q2H0SnPKmvtUB8kQ4tiGA/Q33TctiPArr yAwAXLhidGIhGleYiMVyLJgJvnvid/Y2heSTgvrvZFtsjksXzN6e9rvOwB+zMmIf UFHGTrcw/m+oCvDJ3WXpu1K60wphpdCn7mF3NsWO3hGTCaJAX5M= -----END CERTIFICATE-----Generated at Fri Jun 6 17:05:27 2025 by rpki-client