$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: XtnGS2d/MOMxiKi/2GTR9yy2AQd0FcIW+onRCuLdl7M= Subject key identifier: FF:F0:FE:12:C3:B1:F5:F4:55:BD:EA:AD:59:2A:59:D6:C2:A4:D3:B6 Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 261045E7A29B3BE1A5DC8906236D03384D06F9B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 01A8 Signing time: Wed 03 Sep 2025 16:21:07 +0000 Manifest this update: Wed 03 Sep 2025 16:16:07 +0000 Manifest next update: Sat 06 Sep 2025 18:20:07 +0000 Files and hashes: 1: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: UPRB4PsF6TIM5gQt4Oa8RNf/90fBqBwSnDeTKStf0nw=) 2: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: LT42M4n1stQUOVrOCTfSt90jPp/oRxyuGhoLd8ws46I=) 3: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: yBAPGcHVxs0aor3S/MuiHBVURZkJW5hEfJ+S3PVniFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:10:45:e7:a2:9b:3b:e1:a5:dc:89:06:23:6d:03:38:4d:06:f9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Sep 3 16:16:07 2025 GMT Not After : Sep 6 18:20:07 2025 GMT Subject: CN=FFF0FE12C3B1F5F455BDEAAD592A59D6C2A4D3B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:8b:af:5b:6a:29:1d:60:7b:54:03:5c:3a: 0d:99:6e:53:7b:6b:96:1a:ce:d3:89:17:1e:cc:03: be:cb:bf:7d:4e:18:c0:02:0d:c6:fe:ff:fb:60:65: 9d:f7:7c:1d:68:94:c4:84:85:7d:cc:79:27:b9:84: a4:ce:0f:7b:f6:8a:56:8d:08:ed:21:e8:be:4d:05: 09:6a:64:ca:7d:11:7a:88:58:0d:a2:d6:09:0c:85: ce:a4:1a:67:11:61:64:a4:e9:60:e4:ac:78:c9:2e: ef:ee:f4:00:bd:e2:62:95:2e:65:07:a8:0d:32:02: e2:c3:fb:7f:ba:8f:b1:11:f2:53:52:81:f8:38:d9: ab:d8:17:65:a4:19:55:75:89:09:8e:bc:76:4a:47: 35:bf:f6:31:db:d1:bc:77:12:a2:f7:b1:ea:07:69: 8c:2a:65:33:d8:8c:3c:4b:85:c9:69:be:02:9c:9f: cb:7f:60:58:68:fd:06:bc:88:ef:14:2c:ee:fc:b0: 09:23:17:51:88:83:ee:4d:af:5b:ac:9d:3e:ad:f9: 07:0d:fc:90:c5:0d:f2:2d:2d:db:3e:5d:b7:dd:53: 7f:91:72:5f:9a:5b:16:84:cd:1e:16:ca:d3:51:27: 63:3d:13:37:87:85:c8:0c:b4:60:3d:2c:68:e9:d1: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F0:FE:12:C3:B1:F5:F4:55:BD:EA:AD:59:2A:59:D6:C2:A4:D3:B6 X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:68:2b:1f:cf:05:db:0d:2d:a0:a4:be:03:e8:6b:7f:2c:6e: 74:cc:67:ee:41:1e:3b:33:f6:b3:2f:1f:56:4b:1e:ec:e9:c2: 8e:db:e7:00:79:03:b6:90:2d:af:88:5e:36:12:d9:7c:e1:19: bd:a2:c8:d3:e4:83:98:f1:b4:17:6f:5b:a6:e1:74:36:80:aa: 7c:4a:d3:70:d7:dd:ec:30:b5:89:54:20:09:7c:a3:6f:40:ab: e2:56:76:0c:24:27:2c:d6:d8:bb:4f:75:21:a3:70:a5:2f:90: 84:1c:b4:43:2d:30:a3:f1:13:f9:4e:e2:e6:76:55:c2:5e:39: dc:d0:4b:77:ae:33:93:c3:df:f2:c6:af:f4:5b:ed:cc:d1:c2: 9d:98:c7:c2:56:21:94:0f:d3:03:88:5a:a9:75:f5:5d:3a:97: e1:04:bb:15:b6:9e:50:24:af:39:f2:be:86:10:de:f0:d1:bb: 68:4f:7d:75:d1:87:92:5b:c3:2a:53:54:8f:4b:a1:24:e5:3a: b5:ae:10:02:10:c7:85:52:c7:6b:3d:25:a1:b1:fb:fc:4d:90: 70:a4:d6:5a:0f:8d:42:c4:63:bc:8d:eb:56:d7:19:64:d5:d9: 24:89:3f:23:9b:a9:61:f6:5e:c3:d4:26:1c:7a:06:c1:d5:b5: 26:f4:38:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhBF56KbO+Gl3IkGI20DOE0G+bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTA5MDMxNjE2MDdaFw0yNTA5MDYxODIwMDdaMDMxMTAvBgNV BAMTKEZGRjBGRTEyQzNCMUY1RjQ1NUJERUFBRDU5MkE1OUQ2QzJBNEQzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7YuvW2opHWB7VANcOg2ZblN7 a5YaztOJFx7MA77Lv31OGMACDcb+//tgZZ33fB1olMSEhX3MeSe5hKTOD3v2ilaN CO0h6L5NBQlqZMp9EXqIWA2i1gkMhc6kGmcRYWSk6WDkrHjJLu/u9AC94mKVLmUH qA0yAuLD+3+6j7ER8lNSgfg42avYF2WkGVV1iQmOvHZKRzW/9jHb0bx3EqL3seoH aYwqZTPYjDxLhclpvgKcn8t/YFho/Qa8iO8ULO78sAkjF1GIg+5Nr1usnT6t+QcN /JDFDfItLds+XbfdU3+Rcl+aWxaEzR4WytNRJ2M9EzeHhcgMtGA9LGjp0WGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//D+EsOx9fRVveqtWSpZ1sKk07YwHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdoKx/PBdsNLaCkvgPoa38sbnTMZ+5BHjsz 9rMvH1ZLHuzpwo7b5wB5A7aQLa+IXjYS2XzhGb2iyNPkg5jxtBdvW6bhdDaAqnxK 03DX3ewwtYlUIAl8o29Aq+JWdgwkJyzW2LtPdSGjcKUvkIQctEMtMKPxE/lO4uZ2 VcJeOdzQS3euM5PD3/LGr/Rb7czRwp2Yx8JWIZQP0wOIWql19V06l+EEuxW2nlAk rznyvoYQ3vDRu2hPfXXRh5JbwypTVI9LoSTlOrWuEAIQx4VSx2s9JaGx+/xNkHCk 1loPjULEY7yN61bXGWTV2SSJPyObqWH2XsPUJhx6BsHVtSb0ONM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:17 2025 by rpki-client