$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: vc4N/EKfU0mobFvTScWI9PoEWST0x0xb58KH8RqcBCk= Subject key identifier: 64:0E:47:73:00:EF:D5:9A:38:EB:F7:F7:D1:C1:F6:7A:97:E9:A1:69 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 17264E5D7AA2C855A48DC5CADE23FC08A3BD0EA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0127 Signing time: Sat 06 Sep 2025 02:10:53 +0000 Manifest this update: Sat 06 Sep 2025 02:05:53 +0000 Manifest next update: Tue 09 Sep 2025 09:00:53 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: cbrl6dBckxe27KqOtUNV9s29bXGi1zCIe4QmB1+JlkA=) 2: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: KabZK9WQqRLj5bTFaIsPKkdwB2Zhn1OYqtMrf6Rvx/0=) 3: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: +AkE8lBocYkzQtUK7rxyogDErEqAx6OPKcVzXziAtKI=) 4: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:26:4e:5d:7a:a2:c8:55:a4:8d:c5:ca:de:23:fc:08:a3:bd:0e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Sep 6 02:05:53 2025 GMT Not After : Sep 9 09:00:53 2025 GMT Subject: CN=640E477300EFD59A38EBF7F7D1C1F67A97E9A169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:23:a8:52:de:5d:c2:f8:50:bc:40:42:7b:8c: 72:b8:44:22:d3:9b:f9:bd:e4:75:3b:8e:d5:07:bc: 4d:8b:e5:a3:fb:40:1b:a9:42:60:74:8a:61:79:26: d9:28:c4:62:af:77:57:11:88:56:78:ff:c2:7d:10: 29:3a:22:5b:8d:ee:ed:c9:aa:4c:32:cf:f2:b7:94: eb:d3:24:0d:bf:0e:b0:0e:27:3f:29:0f:fa:0c:1c: 24:4e:0e:18:84:1e:8f:05:17:3c:b3:fa:f1:24:1a: b5:fe:c9:f5:d6:43:75:4a:e0:f5:a6:d5:60:c8:f1: 1f:c5:d8:b2:8d:e0:28:a9:81:f5:ae:cc:19:f9:ee: 99:7b:ae:78:e6:de:68:38:ce:10:61:9d:6f:47:15: 91:6c:04:d1:98:f0:d8:15:8b:b4:a1:51:0c:cd:21: 28:da:22:bb:3a:14:c5:ac:0e:db:d1:28:ea:86:80: 14:84:5b:b2:f4:12:b0:13:ea:bf:88:5b:95:3b:25: 18:2e:a4:f9:a4:e6:f9:9f:a9:4d:63:bf:62:fa:d6: ed:71:85:e4:f3:f6:75:55:41:ee:5a:76:6b:50:cf: 1e:4b:f7:18:ab:8a:99:08:13:fe:dc:ff:c3:f6:c6: 70:23:a7:79:61:1e:33:07:7b:2d:cb:de:23:51:e4: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0E:47:73:00:EF:D5:9A:38:EB:F7:F7:D1:C1:F6:7A:97:E9:A1:69 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:48:ab:60:40:fb:72:e8:1f:83:d4:34:33:09:e3:8b:a7:d1: 4a:b8:99:ab:61:3b:02:d4:e0:80:0b:21:4d:df:3b:16:e4:5d: aa:0b:24:41:2d:3c:51:42:e0:b9:02:5a:bd:59:9f:16:80:5a: 86:83:5b:f7:c8:63:74:52:a5:40:33:01:59:9d:f4:60:71:9f: c0:ad:05:df:79:8e:de:72:c8:30:b1:dc:4c:28:fe:06:cb:4f: 18:7a:36:03:87:4a:bc:ff:d2:36:60:5a:72:e8:a3:9a:06:94: 73:61:71:f4:8b:73:21:c7:30:44:2e:ec:0d:8d:21:0a:d5:a7: 9c:b5:0e:ed:ed:97:02:be:f2:24:3a:d7:f2:26:9d:c6:49:b8: 72:cc:e3:88:35:d4:94:b7:b7:4d:51:81:7d:14:2d:40:c0:15: 85:b1:12:e3:fc:5d:da:db:69:7d:df:3a:e7:d3:6b:e0:a9:41: dd:46:48:19:0f:dc:92:68:5a:72:35:e3:6b:50:5f:09:1a:83: bf:e0:d7:ec:52:24:9d:4b:80:48:9b:b2:ca:76:46:10:df:d5: 32:e9:9e:05:54:99:a8:9a:c7:45:56:1f:1a:2b:ed:3a:76:25: 90:63:a1:58:d1:4f:c0:7d:a3:bf:03:e8:3c:9b:7b:ca:3a:e4: c2:11:76:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyZOXXqiyFWkjcXK3iP8CKO9DqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNTA5MDYwMjA1NTNaFw0yNTA5MDkwOTAwNTNaMDMxMTAvBgNV BAMTKDY0MEU0NzczMDBFRkQ1OUEzOEVCRjdGN0QxQzFGNjdBOTdFOUExNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeI6hS3l3C+FC8QEJ7jHK4RCLT m/m95HU7jtUHvE2L5aP7QBupQmB0imF5JtkoxGKvd1cRiFZ4/8J9ECk6IluN7u3J qkwyz/K3lOvTJA2/DrAOJz8pD/oMHCRODhiEHo8FFzyz+vEkGrX+yfXWQ3VK4PWm 1WDI8R/F2LKN4CipgfWuzBn57pl7rnjm3mg4zhBhnW9HFZFsBNGY8NgVi7ShUQzN ISjaIrs6FMWsDtvRKOqGgBSEW7L0ErAT6r+IW5U7JRgupPmk5vmfqU1jv2L61u1x heTz9nVVQe5admtQzx5L9xiripkIE/7c/8P2xnAjp3lhHjMHey3L3iNR5G4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZA5HcwDv1Zo46/f30cH2epfpoWkwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1Iq2BA+3LoH4PUNDMJ44un0Uq4mathOwLU 4IALIU3fOxbkXaoLJEEtPFFC4LkCWr1ZnxaAWoaDW/fIY3RSpUAzAVmd9GBxn8Ct Bd95jt5yyDCx3Ewo/gbLTxh6NgOHSrz/0jZgWnLoo5oGlHNhcfSLcyHHMEQu7A2N IQrVp5y1Du3tlwK+8iQ61/ImncZJuHLM44g11JS3t01RgX0ULUDAFYWxEuP8Xdrb aX3fOufTa+CpQd1GSBkP3JJoWnI142tQXwkag7/g1+xSJJ1LgEibssp2RhDf1TLp ngVUmaiax0VWHxor7Tp2JZBjoVjRT8B9o78D6Dybe8o65MIRdlY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:48 2025 by rpki-client