$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: lRfzQq8iY8rxffP9MhMjJ23FrPulY6PttURX3mRp+dM= Subject key identifier: BD:04:FA:72:73:39:4F:8B:96:9E:17:08:DA:E5:B4:FA:EE:28:06:5C Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 0D7F55CBBB67223E2B3590B75F150D27A6CE7836 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: F7 Signing time: Mon 02 Jun 2025 16:01:31 +0000 Manifest this update: Mon 02 Jun 2025 15:56:31 +0000 Manifest next update: Thu 05 Jun 2025 18:28:31 +0000 Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: TmleXU4JhLn9DkfEJJJ/5k1z+SUofnFu96gXoRbq93Y=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: wYdcnUFBSuzFDxRLSZQv3tgeXMwvjCP9rVz+PUMirJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7f:55:cb:bb:67:22:3e:2b:35:90:b7:5f:15:0d:27:a6:ce:78:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Jun 2 15:56:31 2025 GMT Not After : Jun 5 18:28:31 2025 GMT Subject: CN=BD04FA7273394F8B969E1708DAE5B4FAEE28065C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:19:b9:50:40:dd:f6:25:29:55:61:e7:5f: 37:71:2c:4c:03:4a:84:59:56:fa:0b:ed:2c:80:6c: fe:90:24:4c:32:9a:06:ad:68:a6:75:d6:02:ad:31: cd:a8:55:ca:52:d7:3e:81:41:cb:ef:1b:92:51:90: 68:6b:0a:ca:3f:92:84:9a:e2:11:b1:e5:56:dc:92: 2e:a7:de:e6:48:5c:d8:ef:77:90:fc:22:81:98:c3: 3b:80:b5:75:e2:4c:26:94:cb:e0:af:f6:bd:01:7a: 00:61:c1:56:67:04:2b:f8:35:c2:0b:01:9a:8d:d9: 57:a7:0e:5f:24:04:52:33:bc:85:ca:8d:4b:2f:ca: ab:96:0b:6f:6e:7e:0a:a8:81:1a:73:c0:16:39:9b: 79:43:d4:bb:8c:7c:41:2d:ad:2f:77:c9:61:c7:4f: c4:f5:40:ed:0c:4b:af:58:dc:1c:f8:44:63:1a:6c: 33:72:a0:eb:52:e5:93:e9:49:f1:9f:3c:ac:f4:7d: ad:e1:c4:9f:18:ff:17:63:fd:19:11:de:d0:b8:ad: f4:35:7d:0f:6e:7a:30:5e:bb:0d:2e:80:aa:90:97: 99:87:89:ca:9b:89:81:15:0a:1c:79:da:4a:87:e7: 0b:b0:52:2e:4a:59:f0:81:cf:a1:00:d0:ce:ce:2f: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:04:FA:72:73:39:4F:8B:96:9E:17:08:DA:E5:B4:FA:EE:28:06:5C X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bd:75:5f:ec:52:86:86:bf:5f:30:87:5d:9c:80:16:5f:4b: fd:63:ce:83:36:ce:df:5d:6b:2f:c3:92:5f:a8:5a:f2:18:30: 33:3d:5c:b1:35:19:84:ec:09:68:48:c3:60:44:f7:d5:96:50: 89:c2:d1:2b:97:c5:e2:d3:74:a5:01:4b:01:d0:16:f7:f5:10: e5:50:29:c3:a3:18:52:fc:61:0c:74:9e:22:6d:e4:b1:7d:c0: 79:e1:bc:16:25:42:59:96:c1:fa:9b:85:c0:02:a3:e5:0d:2b: 34:f5:0a:1c:2c:2c:f6:be:a6:76:87:c7:73:c5:ac:50:b6:a4: 21:84:bf:4b:3a:d4:d0:41:ee:5c:f7:48:5f:3e:d8:16:75:75: e4:37:a1:da:aa:2d:90:cd:43:97:d8:12:bc:b8:32:64:76:2c: f3:1d:e5:b4:b8:29:10:c5:4c:a6:1c:6e:fe:71:2e:33:70:f5: f6:fb:9e:a6:02:97:43:64:6c:87:7c:82:e9:09:c5:06:bd:6c: f7:dc:f7:86:c2:88:75:24:2c:1c:ef:2d:57:12:f1:97:03:3b: b2:a2:b6:7f:c1:b0:fd:83:34:8c:0d:58:b7:60:33:70:1b:44: 53:0f:67:bf:d1:6d:c9:14:1d:15:89:32:40:98:f2:d5:26:e8: e1:b7:c9:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDX9Vy7tnIj4rNZC3XxUNJ6bOeDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTA2MDIxNTU2MzFaFw0yNTA2MDUxODI4MzFaMDMxMTAvBgNV BAMTKEJEMDRGQTcyNzMzOTRGOEI5NjlFMTcwOERBRTVCNEZBRUUyODA2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIRm5UEDd9iUpVWHnXzdxLEwD SoRZVvoL7SyAbP6QJEwymgataKZ11gKtMc2oVcpS1z6BQcvvG5JRkGhrCso/koSa 4hGx5Vbcki6n3uZIXNjvd5D8IoGYwzuAtXXiTCaUy+Cv9r0BegBhwVZnBCv4NcIL AZqN2VenDl8kBFIzvIXKjUsvyquWC29ufgqogRpzwBY5m3lD1LuMfEEtrS93yWHH T8T1QO0MS69Y3Bz4RGMabDNyoOtS5ZPpSfGfPKz0fa3hxJ8Y/xdj/RkR3tC4rfQ1 fQ9uejBeuw0ugKqQl5mHicqbiYEVChx52kqH5wuwUi5KWfCBz6EA0M7OL6WVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvQT6cnM5T4uWnhcI2uW0+u4oBlwwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu9dV/sUoaGv18wh12cgBZfS/1jzoM2zt9d ay/Dkl+oWvIYMDM9XLE1GYTsCWhIw2BE99WWUInC0SuXxeLTdKUBSwHQFvf1EOVQ KcOjGFL8YQx0niJt5LF9wHnhvBYlQlmWwfqbhcACo+UNKzT1ChwsLPa+pnaHx3PF rFC2pCGEv0s61NBB7lz3SF8+2BZ1deQ3odqqLZDNQ5fYEry4MmR2LPMd5bS4KRDF TKYcbv5xLjNw9fb7nqYCl0NkbId8gukJxQa9bPfc94bCiHUkLBzvLVcS8ZcDO7Ki tn/BsP2DNIwNWLdgM3AbRFMPZ7/RbckUHRWJMkCY8tUm6OG3ySc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:05 2025 by rpki-client