$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: McKaj+8ssXtpCioplW5DXr66dk5nMp4dIJ5aV4phvCw= Subject key identifier: E1:33:34:09:00:EB:30:15:D9:F9:44:41:2C:1F:A1:48:AE:B0:81:FA Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 5C200ACA701D0BED2BFE5F9E9FA0A6AEFA1807C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 0121 Signing time: Thu 04 Sep 2025 02:41:33 +0000 Manifest this update: Thu 04 Sep 2025 02:36:33 +0000 Manifest next update: Sun 07 Sep 2025 06:27:33 +0000 Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: 8YncHiEEavS3taFElDyZuJdh+w9EyFuDeZKZtdoP/pU=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: wYdcnUFBSuzFDxRLSZQv3tgeXMwvjCP9rVz+PUMirJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 06:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:20:0a:ca:70:1d:0b:ed:2b:fe:5f:9e:9f:a0:a6:ae:fa:18:07:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Sep 4 02:36:33 2025 GMT Not After : Sep 7 06:27:33 2025 GMT Subject: CN=E133340900EB3015D9F944412C1FA148AEB081FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:bb:b6:d4:ca:9c:50:c0:d1:83:27:65:f1: 81:9d:3b:62:9d:b9:e5:b7:9e:44:8f:8d:8c:db:83: 33:27:6b:ec:a4:18:20:30:99:c8:0e:74:86:17:82: db:c2:33:d9:71:da:66:0b:40:18:c5:cd:8a:27:c6: a3:73:9d:e8:ae:1d:39:9b:b6:5b:3d:bc:9c:2b:91: f4:9d:4a:4e:7b:e2:c2:e0:09:2a:0f:0e:b5:42:06: f4:74:a2:d9:a7:c5:96:01:ff:df:a6:39:e9:5d:64: 9f:ca:b5:87:b9:b1:57:7d:05:ff:70:7f:27:77:27: be:1a:79:8a:0f:24:8c:bb:40:d3:12:3d:e5:c9:71: 78:96:0a:fe:65:0a:82:10:59:7c:fb:f1:7b:50:66: 7f:54:a7:9b:de:24:9a:41:48:32:ae:2b:e7:16:2e: 3f:a7:35:00:05:fa:d9:15:ba:bb:ca:6c:f2:be:52: a9:4c:cb:32:e0:1d:b5:ce:12:b9:2e:68:3f:75:83: 11:8d:81:57:77:f5:f4:0f:62:3a:95:c3:df:76:82: 08:83:27:43:a1:fc:78:63:76:0f:5e:69:c7:3d:31: 57:96:37:b1:39:47:8c:86:18:01:32:77:cb:06:e7: ee:84:31:70:9a:3d:f2:c7:47:ea:57:8c:c0:95:30: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:33:34:09:00:EB:30:15:D9:F9:44:41:2C:1F:A1:48:AE:B0:81:FA X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:81:5d:35:9b:ca:76:00:d0:6b:0a:d7:73:4f:4e:c1:48:52: 66:97:d4:2e:e7:2e:ff:1e:f3:b2:99:1a:d7:75:f9:c6:31:91: c0:c9:c8:34:1c:1a:6e:7e:0d:84:b2:9b:75:37:76:86:7f:1f: 78:1d:28:53:7e:d6:1e:4c:31:ed:b0:8f:c7:66:97:e7:f1:5b: b9:0d:62:27:cc:60:b7:e1:05:0d:ab:ab:c4:4c:b2:b5:ed:aa: 15:d2:64:d1:e4:9f:da:10:98:9c:da:aa:b7:37:b3:6a:43:8d: 83:f8:7a:31:c0:53:23:e9:05:e9:5f:a9:49:a9:07:4b:b1:03: 93:a6:31:00:c1:a2:c3:89:f3:30:c2:7f:c2:c5:44:a5:1c:25: c2:47:f9:f2:2b:8f:c1:5c:6d:ae:4c:ff:3b:7f:d6:9c:bd:4d: 7a:5d:68:88:70:ee:21:b7:d1:c3:bd:52:29:e4:4f:6f:52:5c: 2b:7b:94:25:20:ca:71:04:11:7c:63:1d:bc:4e:ee:a0:c8:8d: 3b:13:c1:06:7c:0b:49:92:5e:f3:cc:6c:a9:10:42:54:81:30: 6d:c9:46:e8:51:9a:44:4c:89:7a:b6:b7:96:66:44:e5:4d:f0: f3:37:c4:6e:36:ef:20:98:87:4a:d4:f4:8e:c6:b1:ef:8f:5b: 71:95:26:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCAKynAdC+0r/l+en6CmrvoYB8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTA5MDQwMjM2MzNaFw0yNTA5MDcwNjI3MzNaMDMxMTAvBgNV BAMTKEUxMzMzNDA5MDBFQjMwMTVEOUY5NDQ0MTJDMUZBMTQ4QUVCMDgxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeT7u21MqcUMDRgydl8YGdO2Kd ueW3nkSPjYzbgzMna+ykGCAwmcgOdIYXgtvCM9lx2mYLQBjFzYonxqNzneiuHTmb tls9vJwrkfSdSk574sLgCSoPDrVCBvR0otmnxZYB/9+mOeldZJ/KtYe5sVd9Bf9w fyd3J74aeYoPJIy7QNMSPeXJcXiWCv5lCoIQWXz78XtQZn9Up5veJJpBSDKuK+cW Lj+nNQAF+tkVurvKbPK+UqlMyzLgHbXOErkuaD91gxGNgVd39fQPYjqVw992ggiD J0Oh/Hhjdg9eacc9MVeWN7E5R4yGGAEyd8sG5+6EMXCaPfLHR+pXjMCVMCVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4TM0CQDrMBXZ+URBLB+hSK6wgfowHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeBXTWbynYA0GsK13NPTsFIUmaX1C7nLv8e 87KZGtd1+cYxkcDJyDQcGm5+DYSym3U3doZ/H3gdKFN+1h5MMe2wj8dml+fxW7kN YifMYLfhBQ2rq8RMsrXtqhXSZNHkn9oQmJzaqrc3s2pDjYP4ejHAUyPpBelfqUmp B0uxA5OmMQDBosOJ8zDCf8LFRKUcJcJH+fIrj8Fcba5M/zt/1py9TXpdaIhw7iG3 0cO9UinkT29SXCt7lCUgynEEEXxjHbxO7qDIjTsTwQZ8C0mSXvPMbKkQQlSBMG3J RuhRmkRMiXq2t5ZmROVN8PM3xG427yCYh0rU9I7Gse+PW3GVJr8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:51 2025 by rpki-client