$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: oMcL8iI3S/lBKplMrQD5RAJDqe1B0o0WpHfF026t1n4= Subject key identifier: C5:62:BD:77:E7:87:82:DD:D8:E2:E1:EE:7B:2A:36:72:05:F0:75:C6 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 43BF1C3DA900582F808DE9C8A261BBB8B0C70F56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: FC Signing time: Sun 01 Jun 2025 13:10:52 +0000 Manifest this update: Sun 01 Jun 2025 13:05:52 +0000 Manifest next update: Thu 05 Jun 2025 00:47:52 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: cbrl6dBckxe27KqOtUNV9s29bXGi1zCIe4QmB1+JlkA=) 2: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: +AkE8lBocYkzQtUK7rxyogDErEqAx6OPKcVzXziAtKI=) 3: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: UkzTv7aJA6/Re0uiGLgt9GIocsEnuOiLpeuutGVSK7I=) 4: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 00:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bf:1c:3d:a9:00:58:2f:80:8d:e9:c8:a2:61:bb:b8:b0:c7:0f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Jun 1 13:05:52 2025 GMT Not After : Jun 5 00:47:52 2025 GMT Subject: CN=C562BD77E78782DDD8E2E1EE7B2A367205F075C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:9c:45:e0:60:51:3e:5d:e6:82:ce:d5:a4: 35:e9:ad:e8:01:9f:71:52:03:83:1c:ac:e3:c4:e0: 16:dc:c2:93:73:47:25:2b:8f:50:14:97:c7:79:47: d4:fb:4d:ba:97:7d:2c:0d:05:ed:9e:49:c5:95:f5: c1:4f:76:a2:62:5a:bc:0e:59:0b:f0:c6:43:b6:ef: 76:56:b6:ff:a7:a8:4d:9a:a5:49:40:71:ca:d8:8d: e2:41:1b:27:60:f9:e2:89:76:d9:06:7c:e9:a8:65: 89:70:c2:1a:26:32:f7:9c:25:01:6c:e8:44:14:ca: ea:37:31:c9:3b:91:ef:e8:0d:1e:de:3a:25:f8:23: 5a:d9:ff:7f:9c:ac:e7:ee:56:ec:d9:40:6c:ce:e6: f7:5e:24:ee:3e:53:7b:ac:ce:50:3e:3c:26:dd:83: 85:f3:53:89:54:0a:60:11:71:ea:e4:b5:7e:f5:8a: 2a:8e:61:fd:48:a9:e5:60:ee:a8:13:22:b2:81:0d: 46:15:ac:4b:01:3c:22:e3:9f:59:e4:33:3c:f7:41: b7:98:38:da:f2:00:b4:79:93:6a:75:04:5f:84:31: 97:77:dc:8c:71:f0:d3:f9:b1:dc:91:bd:42:f2:0c: 6b:11:89:9d:22:dc:6a:df:8b:54:72:f3:f6:3e:72: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:62:BD:77:E7:87:82:DD:D8:E2:E1:EE:7B:2A:36:72:05:F0:75:C6 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:cf:12:02:15:12:a9:dd:c1:4d:6f:ff:9e:b1:90:da:4b:a7: 34:29:88:9c:0f:f4:06:d9:08:16:f6:e4:82:0c:00:5d:57:a7: b8:49:8a:ee:d8:e8:35:c6:ed:10:37:80:62:19:f9:2a:9f:07: 41:e1:56:6a:a1:74:5a:cf:09:1b:e8:84:c3:51:61:87:d1:6e: 98:b0:da:f1:f2:86:f3:ca:2d:c1:65:ba:3c:bb:fc:b2:88:a5: 6b:9b:da:3e:72:ef:ed:3f:e0:ff:e1:da:f6:9d:c4:97:69:93: fc:4f:a3:35:f2:45:23:ae:59:12:b1:4f:9e:56:96:ba:ee:2a: 3c:f0:32:36:63:60:ed:7c:72:46:4c:1d:f4:16:a2:80:68:47: ca:4b:04:fa:be:73:ad:1a:7b:1c:3d:c7:e1:89:49:cc:59:c4: 7e:e2:e1:be:07:53:9d:58:55:61:b1:ae:f4:c1:2a:13:f8:5b: d0:67:7c:f7:bb:5e:7f:ce:09:93:94:4b:ea:19:15:29:ff:3f: 68:3c:6a:f3:68:39:d7:b7:47:5e:6e:c5:db:f6:01:17:b3:f3: 0f:11:dd:b2:e1:73:95:9f:48:84:af:9f:2b:73:b1:7c:bf:e0: 85:aa:46:a9:eb:fd:5e:9d:c4:41:da:67:82:41:46:54:7f:e4: 60:22:b8:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ78cPakAWC+AjenIomG7uLDHD1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNTA2MDExMzA1NTJaFw0yNTA2MDUwMDQ3NTJaMDMxMTAvBgNV BAMTKEM1NjJCRDc3RTc4NzgyREREOEUyRTFFRTdCMkEzNjcyMDVGMDc1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfr5xF4GBRPl3mgs7VpDXpregB n3FSA4McrOPE4BbcwpNzRyUrj1AUl8d5R9T7TbqXfSwNBe2eScWV9cFPdqJiWrwO WQvwxkO273ZWtv+nqE2apUlAccrYjeJBGydg+eKJdtkGfOmoZYlwwhomMvecJQFs 6EQUyuo3Mck7ke/oDR7eOiX4I1rZ/3+crOfuVuzZQGzO5vdeJO4+U3uszlA+PCbd g4XzU4lUCmARcerktX71iiqOYf1IqeVg7qgTIrKBDUYVrEsBPCLjn1nkMzz3QbeY ONryALR5k2p1BF+EMZd33Ixx8NP5sdyRvULyDGsRiZ0i3Grfi1Ry8/Y+cpCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWK9d+eHgt3Y4uHueyo2cgXwdcYwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHPEgIVEqndwU1v/56xkNpLpzQpiJwP9AbZ CBb25IIMAF1Xp7hJiu7Y6DXG7RA3gGIZ+SqfB0HhVmqhdFrPCRvohMNRYYfRbpiw 2vHyhvPKLcFlujy7/LKIpWub2j5y7+0/4P/h2vadxJdpk/xPozXyRSOuWRKxT55W lrruKjzwMjZjYO18ckZMHfQWooBoR8pLBPq+c60aexw9x+GJScxZxH7i4b4HU51Y VWGxrvTBKhP4W9BnfPe7Xn/OCZOUS+oZFSn/P2g8avNoOde3R15uxdv2ARez8w8R 3bLhc5WfSISvnytzsXy/4IWqRqnr/V6dxEHaZ4JBRlR/5GAiuNc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:23 2025 by rpki-client