$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft File: 032056FFABA06741112BA404900B315C87E35361.mft (raw, json) Hash identifier: lAob+LmmZCVBLZjB6NuJeJon17RUJgoyy0Mp8vI7G1c= Subject key identifier: F9:A7:2F:3E:14:A0:DD:6A:A0:AC:47:DE:72:8D:FB:A1:86:13:88:45 Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 Certificate issuer: /CN=032056FFABA06741112BA404900B315C87E35361 Certificate serial: 4EAB961D0122CD3E4716E2CCB9D248CA35A9E179 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft Manifest number: 0468 Signing time: Tue 03 Jun 2025 12:52:38 +0000 Manifest this update: Tue 03 Jun 2025 12:47:38 +0000 Manifest next update: Sat 07 Jun 2025 00:02:38 +0000 Files and hashes: 1: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: YChAquT46Gu9Ju8lh9yWF5k2iDsA6GlC2HfcNGf9Vhg=) 2: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: mSrDIe1nZyY3D0kPgDEMFaoY9Cg4bd3ftAPPtaVMp6U=) 3: 032056FFABA06741112BA404900B315C87E35361.crl (hash: c9wJi5N3rINb9JMpsfxge9MccxmkVZ67PQaXfDmJ7AA=) 4: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: kOBx2GksvdfRI3aO7Xv7lhebR1wUywN2HETFMEy7na8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ab:96:1d:01:22:cd:3e:47:16:e2:cc:b9:d2:48:ca:35:a9:e1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032056FFABA06741112BA404900B315C87E35361 Validity Not Before: Jun 3 12:47:38 2025 GMT Not After : Jun 7 00:02:38 2025 GMT Subject: CN=F9A72F3E14A0DD6AA0AC47DE728DFBA186138845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:2d:3a:b9:95:25:32:eb:05:46:cf:5e:1f: 06:14:81:17:9f:1c:59:bc:f8:e2:b4:51:f0:a1:a1: 1c:2a:8f:f0:8e:db:5a:4c:6a:64:be:7f:bb:33:b2: 55:96:b8:fc:ea:60:37:9b:40:01:18:64:a1:0c:42: 44:0d:7a:6e:2a:22:ee:96:f4:bf:c3:10:6c:b3:bd: cb:3d:ff:29:b2:7b:3f:b1:a0:e6:f1:92:4d:f8:06: a2:6b:c1:fd:b8:cf:3c:80:34:04:b5:4f:fb:7b:18: 38:a0:38:37:0b:91:ed:b8:64:c8:fb:e7:70:f4:f2: fb:89:4e:9b:00:0e:72:92:60:66:02:d8:f1:e6:9e: 31:8e:c3:03:af:9d:82:e3:31:c6:6d:04:1b:85:0d: 0e:53:d2:3d:2c:2d:7c:a2:91:1b:82:b3:88:a4:05: 89:14:05:76:1b:68:0d:26:56:b6:e1:b6:d9:62:9a: c0:6f:cf:4d:90:b9:f1:c9:f2:37:4f:4c:b9:0d:bb: 82:7a:ad:0a:ae:71:91:65:52:3e:90:90:e9:fb:35: 40:69:01:69:00:70:25:ad:80:d5:6f:2a:4a:3c:8c: 4c:95:26:38:3a:e0:d6:80:77:14:69:2c:75:94:0d: 0a:b7:47:da:43:5d:ed:6a:e3:21:0d:5c:d1:d3:61: 1b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A7:2F:3E:14:A0:DD:6A:A0:AC:47:DE:72:8D:FB:A1:86:13:88:45 X509v3 Authority Key Identifier: keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e6:74:86:6d:43:98:82:9d:d7:af:84:10:0e:5a:6c:6a:f6: 33:98:66:30:32:e7:a4:48:d7:c4:15:6f:12:2d:53:a9:52:02: a0:33:43:46:73:9b:79:3b:75:db:40:e7:a5:6c:15:ca:02:8c: 86:15:a7:f2:73:e7:4c:7d:89:6c:e3:c6:04:71:a4:05:d7:d1: 1f:de:43:7e:28:9e:ca:07:82:47:2e:26:b1:ff:e7:8f:78:bc: 4d:b5:57:1c:9c:7d:8f:43:9e:6c:20:9d:5e:e9:57:f2:b7:0c: b4:5e:3e:b1:3a:35:ac:a4:dc:dc:5a:6d:49:27:1e:47:3b:6c: f4:f3:c6:f2:f0:eb:18:fe:e2:00:26:49:cb:e3:1a:2c:7d:9a: 4b:8c:ed:7a:d5:f0:63:54:e3:2f:5e:3a:7c:20:e3:31:9e:a6: 81:41:f3:62:46:2b:90:c0:e7:10:a2:41:e3:8f:b8:77:ce:7e: 6a:72:ee:46:a9:0b:8b:30:90:84:c1:88:5c:18:eb:47:32:35: 35:3b:79:be:8e:9f:fb:21:a4:1a:18:e6:4d:a0:bf:36:22:46: 3b:aa:0e:39:b0:97:02:32:7d:5c:1a:ab:e3:46:65:fc:c0:b3: 4a:e5:9b:81:cb:c7:b6:3f:7f:7f:97:a9:1f:29:d3:93:3d:86: 33:2f:05:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTquWHQEizT5HFuLMudJIyjWp4XkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4 N0UzNTM2MTAeFw0yNTA2MDMxMjQ3MzhaFw0yNTA2MDcwMDAyMzhaMDMxMTAvBgNV BAMTKEY5QTcyRjNFMTRBMERENkFBMEFDNDdERTcyOERGQkExODYxMzg4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVy06uZUlMusFRs9eHwYUgRef HFm8+OK0UfChoRwqj/CO21pMamS+f7szslWWuPzqYDebQAEYZKEMQkQNem4qIu6W 9L/DEGyzvcs9/ymyez+xoObxkk34BqJrwf24zzyANAS1T/t7GDigODcLke24ZMj7 53D08vuJTpsADnKSYGYC2PHmnjGOwwOvnYLjMcZtBBuFDQ5T0j0sLXyikRuCs4ik BYkUBXYbaA0mVrbhttlimsBvz02QufHJ8jdPTLkNu4J6rQqucZFlUj6QkOn7NUBp AWkAcCWtgNVvKko8jEyVJjg64NaAdxRpLHWUDQq3R9pDXe1q4yENXNHTYRsNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+acvPhSg3WqgrEfeco37oYYTiEUwHwYDVR0j BBgwFoAUAyBW/6ugZ0ERK6QEkAsxXIfjU2EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE4MjBiNC04MmVmLTQ0MTItYmUyZS01ZDY5MTRiZDQ4NDQvMC8wMzIwNTZGRkFC QTA2NzQxMTEyQkE0MDQ5MDBCMzE1Qzg3RTM1MzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4N0Uz NTM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl MmUtNWQ2OTE0YmQ0ODQ0LzAvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMx NUM4N0UzNTM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTmdIZtQ5iCndevhBAOWmxq9jOYZjAy56RI 18QVbxItU6lSAqAzQ0Zzm3k7ddtA56VsFcoCjIYVp/Jz50x9iWzjxgRxpAXX0R/e Q34onsoHgkcuJrH/5494vE21VxycfY9DnmwgnV7pV/K3DLRePrE6Nayk3NxabUkn Hkc7bPTzxvLw6xj+4gAmScvjGix9mkuM7XrV8GNU4y9eOnwg4zGepoFB82JGK5DA 5xCiQeOPuHfOfmpy7kapC4swkITBiFwY60cyNTU7eb6On/shpBoY5k2gvzYiRjuq DjmwlwIyfVwaq+NGZfzAs0rlm4HLx7Y/f3+XqR8p05M9hjMvBUQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:56 2025 by rpki-client