$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: ihN0GwswZm9tewH3EnHDMkxykENJNMSWoVmVjtL9qm8= Subject key identifier: 10:6D:E3:6A:2B:65:E1:AA:8E:BA:93:BE:32:48:F9:39:30:47:2E:30 Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 13807BB238669A4A51B761F65BDAABD3CC275CF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 0325 Signing time: Wed 03 Sep 2025 18:20:49 +0000 Manifest this update: Wed 03 Sep 2025 18:15:49 +0000 Manifest next update: Sun 07 Sep 2025 03:49:49 +0000 Files and hashes: 1: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pokBZpL5hJ0olRQ6JHoy2AMfLYfeAfsOoOkW3DB0M7g=) 2: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) 3: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: bX5guKbxLUh2gXAfcJFaYJJEUkanfn9WqVtROlCmdVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 03:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:80:7b:b2:38:66:9a:4a:51:b7:61:f6:5b:da:ab:d3:cc:27:5c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Sep 3 18:15:49 2025 GMT Not After : Sep 7 03:49:49 2025 GMT Subject: CN=106DE36A2B65E1AA8EBA93BE3248F93930472E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:0c:cf:0c:fe:9e:15:89:2e:26:83:75:ff: 1d:8b:c4:31:fd:94:93:f7:60:a3:22:82:fd:be:66: e0:47:f5:63:47:8b:19:84:68:3b:0a:e7:e9:10:9c: 38:1a:aa:84:8f:cb:e0:7e:0d:25:23:cb:99:23:2c: cc:7d:66:5c:56:d5:af:d8:d0:f7:19:c0:6c:a5:8c: d0:69:2a:1b:3f:75:57:fd:20:21:b4:b2:28:35:91: 9f:74:e1:74:12:58:b7:e4:51:2a:a1:36:17:23:1b: 73:e4:b0:a0:96:96:5e:31:8d:a7:ad:4c:d7:5d:b6: 78:00:c4:33:c5:90:2e:6a:5c:37:94:de:94:27:74: 3b:bc:70:38:26:66:a9:9c:2f:9d:b1:f4:20:f8:67: b6:84:67:aa:7e:c9:13:b6:99:9f:fc:be:6d:7a:d7: a2:85:e0:63:1b:62:9d:c9:95:b1:49:70:cf:3e:ca: 91:34:23:11:9a:6f:20:f5:23:72:fe:13:87:f5:a5: 39:c2:de:e2:ac:d7:37:1b:47:92:e2:6c:04:06:fb: 76:50:11:81:d7:79:e3:0c:11:38:c5:cb:c2:73:d4: 21:82:0f:d9:b2:ca:be:af:42:79:e4:2e:2c:be:00: 4c:d3:44:90:eb:d9:28:51:28:71:fb:3c:9a:16:7d: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6D:E3:6A:2B:65:E1:AA:8E:BA:93:BE:32:48:F9:39:30:47:2E:30 X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a0:04:e0:2b:f9:1a:27:6c:d1:44:8e:86:d2:ce:2e:00:de: 24:75:df:cd:9e:8a:80:cb:35:6f:47:1a:da:d7:f4:b8:e9:04: 02:10:f9:a3:6f:04:fd:ad:e1:2f:d9:1e:35:1b:6f:a5:17:60: 27:0c:05:27:8d:a7:99:a1:ca:85:a8:7a:70:fe:fb:8e:30:44: e7:7c:0b:8f:5a:f5:c0:cd:12:55:cf:6d:3c:ff:2f:f0:b7:62: 3e:a7:9b:92:ed:88:a2:05:51:34:fc:3c:2b:79:20:c8:61:1d: e6:96:b3:71:0b:c1:c3:47:d1:0f:ab:ae:ed:a7:6c:80:be:0d: 27:58:0a:89:75:0f:de:d4:48:f7:e7:17:94:e4:f5:a0:bc:8f: dd:15:1a:ae:27:10:1d:da:c4:07:c7:a9:80:b1:f0:13:67:4b: 55:95:36:d7:cc:a7:ee:8c:2e:11:70:6a:b9:69:e4:52:26:03: dd:42:f7:57:4a:9d:bd:be:4d:b8:04:54:5d:1c:05:fd:bb:2a: d3:5a:fb:d7:fb:4a:bd:d5:c8:18:ee:f5:ec:3b:3c:1c:44:6a: 83:ca:95:61:eb:46:7c:08:8d:f7:67:d8:8d:50:af:56:23:a5: aa:a4:a8:5a:9f:8f:95:6e:1b:4e:dc:9a:d6:0b:00:f5:f9:f8: 38:77:36:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4B7sjhmmkpRt2H2W9qr08wnXPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNTA5MDMxODE1NDlaFw0yNTA5MDcwMzQ5NDlaMDMxMTAvBgNV BAMTKDEwNkRFMzZBMkI2NUUxQUE4RUJBOTNCRTMyNDhGOTM5MzA0NzJFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTywzPDP6eFYkuJoN1/x2LxDH9 lJP3YKMigv2+ZuBH9WNHixmEaDsK5+kQnDgaqoSPy+B+DSUjy5kjLMx9ZlxW1a/Y 0PcZwGyljNBpKhs/dVf9ICG0sig1kZ904XQSWLfkUSqhNhcjG3PksKCWll4xjaet TNddtngAxDPFkC5qXDeU3pQndDu8cDgmZqmcL52x9CD4Z7aEZ6p+yRO2mZ/8vm16 16KF4GMbYp3JlbFJcM8+ypE0IxGabyD1I3L+E4f1pTnC3uKs1zcbR5LibAQG+3ZQ EYHXeeMMETjFy8Jz1CGCD9myyr6vQnnkLiy+AEzTRJDr2ShRKHH7PJoWfSKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEG3jaitl4aqOupO+Mkj5OTBHLjAwHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2gBOAr+RonbNFEjobSzi4A3iR1382eioDL NW9HGtrX9LjpBAIQ+aNvBP2t4S/ZHjUbb6UXYCcMBSeNp5mhyoWoenD++44wROd8 C49a9cDNElXPbTz/L/C3Yj6nm5LtiKIFUTT8PCt5IMhhHeaWs3ELwcNH0Q+rru2n bIC+DSdYCol1D97USPfnF5Tk9aC8j90VGq4nEB3axAfHqYCx8BNnS1WVNtfMp+6M LhFwarlp5FImA91C91dKnb2+TbgEVF0cBf27KtNa+9f7Sr3VyBju9ew7PBxEaoPK lWHrRnwIjfdn2I1Qr1YjpaqkqFqfj5VuG07cmtYLAPX5+Dh3NgA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:08 2025 by rpki-client