$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: F/in5jxnh4bIMnsrPp5FNLHceo5hCExdKOdOULM+Uuc= Subject key identifier: 72:7F:7E:6A:76:61:50:07:DB:13:4F:50:15:80:5B:A4:23:E9:27:69 Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 49283B390C6983B5D133452F412840F7D689F92E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 017F Signing time: Mon 02 Jun 2025 03:22:56 +0000 Manifest this update: Mon 02 Jun 2025 03:17:56 +0000 Manifest next update: Thu 05 Jun 2025 04:48:56 +0000 Files and hashes: 1: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: UPRB4PsF6TIM5gQt4Oa8RNf/90fBqBwSnDeTKStf0nw=) 2: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: I7K72FRWW1UfkSRAGSMLtTJhoXa5tyYsp4/YKzWAGZQ=) 3: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: yBAPGcHVxs0aor3S/MuiHBVURZkJW5hEfJ+S3PVniFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 04:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:28:3b:39:0c:69:83:b5:d1:33:45:2f:41:28:40:f7:d6:89:f9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Jun 2 03:17:56 2025 GMT Not After : Jun 5 04:48:56 2025 GMT Subject: CN=727F7E6A76615007DB134F5015805BA423E92769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:b4:38:7a:6e:ed:23:69:4d:f1:9c:60:b0: 9d:52:61:e6:87:20:19:54:1a:46:25:b7:f9:11:75: 9c:b7:b3:40:ca:69:2c:14:ca:a4:90:7e:f5:50:2d: aa:c7:52:ad:46:12:30:8c:ae:31:25:f0:62:df:c3: ef:41:19:06:76:06:09:0f:4e:e1:85:1f:6f:fe:8b: eb:63:50:78:95:5f:07:63:66:97:d4:14:21:b3:8b: 77:30:03:c0:95:32:e0:8a:4c:17:49:2a:a9:15:4a: 98:37:d5:04:c7:80:9c:41:bc:f7:7a:dd:1c:37:75: 3e:6a:38:17:1f:9f:fb:91:9a:1d:d3:17:5d:c7:75: 0b:2b:28:b6:82:7f:7c:94:0c:93:03:fd:d0:df:69: 57:e9:29:92:75:fa:d3:d6:d7:00:b9:43:90:bd:fc: 7e:c1:35:0f:6c:bc:dc:33:a0:f0:49:b6:52:ba:3f: bf:e6:4f:06:f7:81:e4:72:52:e8:e7:b6:76:a5:ff: 5c:8c:5d:67:ff:65:1c:c6:65:eb:fe:55:5a:c1:a0: e4:31:36:00:08:e5:64:ec:d3:de:4c:ca:f9:74:66: ca:72:07:f5:fa:71:7a:f5:17:26:cf:a2:78:d6:03: 77:a8:2a:2b:27:96:a1:8f:47:62:2d:ba:fc:0f:e9: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7F:7E:6A:76:61:50:07:DB:13:4F:50:15:80:5B:A4:23:E9:27:69 X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:8e:c8:f6:74:26:8f:ad:fc:85:46:e2:f6:2c:ab:f3:35:45: 0f:99:fb:88:4c:31:ab:a3:c2:77:e5:06:95:7e:07:e5:9d:ba: 30:54:3b:34:63:fb:40:9b:5f:ac:a9:53:8b:04:00:ab:77:03: 84:03:fc:78:02:30:23:96:1f:8f:a8:e7:6b:6b:b4:41:92:6d: 97:0a:60:99:41:16:c7:bd:fb:c2:15:3a:b4:f4:ca:f3:1a:cf: a9:3d:fa:ca:7d:19:e0:41:a7:ab:07:f3:a9:d4:94:0c:18:82: 69:a8:bc:b4:b9:9f:bf:2b:42:69:00:8c:e2:5a:45:31:04:31: 75:30:97:26:76:1e:c3:c8:73:a9:38:85:f7:e0:40:f6:3c:9c: 66:55:72:83:90:34:53:83:d6:cc:60:c3:80:e6:59:41:17:74: 84:0b:6d:dd:a5:04:4b:28:0c:93:68:c8:a8:f2:ff:16:6a:65: 9e:94:73:b4:83:bb:f3:2c:50:3f:95:c7:fa:ba:0f:a7:e5:3f: 50:63:77:7c:09:67:55:b6:df:45:5f:54:cc:ee:dc:f2:b0:f9: 8b:1d:86:49:db:75:8c:c6:cd:f6:49:ab:13:f7:47:5c:cb:dd: 65:ec:06:3b:1d:db:8f:2b:53:68:a4:e9:f2:86:a2:ec:6b:36: d7:08:cf:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSSg7OQxpg7XRM0UvQShA99aJ+S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTA2MDIwMzE3NTZaFw0yNTA2MDUwNDQ4NTZaMDMxMTAvBgNV BAMTKDcyN0Y3RTZBNzY2MTUwMDdEQjEzNEY1MDE1ODA1QkE0MjNFOTI3NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTbQ4em7tI2lN8ZxgsJ1SYeaH IBlUGkYlt/kRdZy3s0DKaSwUyqSQfvVQLarHUq1GEjCMrjEl8GLfw+9BGQZ2BgkP TuGFH2/+i+tjUHiVXwdjZpfUFCGzi3cwA8CVMuCKTBdJKqkVSpg31QTHgJxBvPd6 3Rw3dT5qOBcfn/uRmh3TF13HdQsrKLaCf3yUDJMD/dDfaVfpKZJ1+tPW1wC5Q5C9 /H7BNQ9svNwzoPBJtlK6P7/mTwb3geRyUujntnal/1yMXWf/ZRzGZev+VVrBoOQx NgAI5WTs095Myvl0ZspyB/X6cXr1FybPonjWA3eoKisnlqGPR2ItuvwP6ZQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcn9+anZhUAfbE09QFYBbpCPpJ2kwHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALeOyPZ0Jo+t/IVG4vYsq/M1RQ+Z+4hMMauj wnflBpV+B+WdujBUOzRj+0CbX6ypU4sEAKt3A4QD/HgCMCOWH4+o52trtEGSbZcK YJlBFse9+8IVOrT0yvMaz6k9+sp9GeBBp6sH86nUlAwYgmmovLS5n78rQmkAjOJa RTEEMXUwlyZ2HsPIc6k4hffgQPY8nGZVcoOQNFOD1sxgw4DmWUEXdIQLbd2lBEso DJNoyKjy/xZqZZ6Uc7SDu/MsUD+Vx/q6D6flP1Bjd3wJZ1W230VfVMzu3PKw+Ysd hknbdYzGzfZJqxP3R1zL3WXsBjsd248rU2ik6fKGouxrNtcIz8s= -----END CERTIFICATE-----Generated at Tue Jun 3 23:48:43 2025 by rpki-client