$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: gM0dZJ+sOPCYR6bFH+TOugS1P8lY9D3srQKocTttmzk= Subject key identifier: 67:97:95:5E:98:94:9F:1D:04:8B:70:30:34:72:06:53:45:73:D6:D3 Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 734B2474D7057A17D8ABCF7435C046C04239B733 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 0239 Signing time: Mon 28 Apr 2025 06:40:53 +0000 Manifest this update: Mon 28 Apr 2025 06:35:53 +0000 Manifest next update: Thu 01 May 2025 17:29:53 +0000 Files and hashes: 1: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: l8Yf1lzWl00D0jmJD5UwO/+3cYT/75KueadOaFWmHi0=) 2: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: dMacY9S7F/v+fXzkeIqex2/g0sfRiBh8tFHeg15T++k=) 3: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: KqJWQLgXmTHd9H6sRHxBzzsWATc/WnNxAAXTEqHhFsc=) 4: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: OUaHqzH5MUuESyQrAEVUqywPb3+c3nlvFdPyh75nUE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4b:24:74:d7:05:7a:17:d8:ab:cf:74:35:c0:46:c0:42:39:b7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Apr 28 06:35:53 2025 GMT Not After : May 1 17:29:53 2025 GMT Subject: CN=6797955E98949F1D048B7030347206534573D6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:b2:c3:70:c3:26:c0:9b:e9:97:ad:fc:1a: 6e:40:8e:6e:e5:25:96:61:13:ef:96:2c:7b:7a:3f: 16:b8:0b:1c:ca:cf:65:51:50:67:12:f3:b0:ad:59: db:10:64:0f:14:9b:50:64:db:c4:28:08:97:fa:31: 27:2c:21:0a:4d:16:1e:ae:04:f1:ed:04:6b:1a:8c: 44:1a:fa:d9:a1:ee:4a:1b:11:95:7a:a7:f1:5f:03: be:bb:15:e6:c3:48:33:85:7c:a4:16:13:c2:7f:c2: dc:2e:c4:88:1f:32:c9:10:9e:2b:bf:e2:58:43:99: 29:c3:b7:15:51:81:9b:81:8b:48:b9:54:86:61:de: ac:a9:d9:bf:48:ac:26:21:10:88:96:25:b2:76:82: bf:1f:58:df:2f:69:c0:4a:46:c2:71:73:03:d4:33: b0:9c:e6:55:19:5a:40:2b:15:26:fe:2e:78:79:ee: de:8a:ba:3c:a3:b8:55:1c:a1:bb:f8:6f:b7:2d:73: d7:f5:d7:d2:0f:79:57:91:02:06:5f:8e:d7:f0:97: 1d:bd:a4:a3:b6:a4:f6:f2:f3:b7:dd:73:73:f5:23: 79:ad:db:a2:2d:51:b8:80:08:2a:02:0a:c7:b8:e6: fe:fa:f5:8d:97:aa:3f:72:04:ad:22:23:c6:05:53: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:97:95:5E:98:94:9F:1D:04:8B:70:30:34:72:06:53:45:73:D6:D3 X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:67:5b:f3:d9:8c:ee:48:2b:83:a8:6b:75:31:16:5d:75:e9: 1b:12:39:4d:a0:1e:6b:51:a6:5f:fd:c3:80:94:be:5b:32:39: 72:07:be:57:91:05:a8:47:66:79:26:e6:d5:2b:a4:5e:f9:f2: e8:69:51:4d:8a:12:7c:f2:74:60:fd:29:07:ce:6e:a0:ca:83: de:2f:f0:82:86:6a:18:e9:0d:91:08:1a:78:bd:28:36:cd:e3: f3:ba:f3:58:54:f4:85:87:46:a1:80:03:5b:6d:26:45:ff:43: 7a:0a:e5:77:78:6b:c0:e4:16:4e:7b:5e:14:cb:00:4a:99:07: b2:51:a7:c7:ba:03:58:1d:03:7e:6d:d3:93:86:b1:53:52:3b: ec:f5:4b:1f:3c:ea:f3:f5:5c:1e:db:3e:3b:53:31:97:9f:03: 23:a8:7a:3a:54:fd:6c:00:9c:51:6c:1b:56:ae:3f:36:5a:42: 1e:8b:5a:83:05:23:d0:82:7e:ff:bf:7b:22:61:f1:1f:3a:10: fb:a6:83:75:3b:13:e0:0d:aa:c0:5c:e9:f1:70:bc:83:ec:95: 99:95:46:a1:94:7f:66:f8:db:e1:77:45:a0:f8:3f:d1:ce:02: 73:44:af:9f:86:61:c0:4b:21:20:59:0c:d0:0c:2f:6c:39:0b: ca:3e:ec:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0skdNcFehfYq890NcBGwEI5tzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNTA0MjgwNjM1NTNaFw0yNTA1MDExNzI5NTNaMDMxMTAvBgNV BAMTKDY3OTc5NTVFOTg5NDlGMUQwNDhCNzAzMDM0NzIwNjUzNDU3M0Q2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZbLDcMMmwJvpl638Gm5Ajm7l JZZhE++WLHt6Pxa4CxzKz2VRUGcS87CtWdsQZA8Um1Bk28QoCJf6MScsIQpNFh6u BPHtBGsajEQa+tmh7kobEZV6p/FfA767FebDSDOFfKQWE8J/wtwuxIgfMskQniu/ 4lhDmSnDtxVRgZuBi0i5VIZh3qyp2b9IrCYhEIiWJbJ2gr8fWN8vacBKRsJxcwPU M7Cc5lUZWkArFSb+Lnh57t6KujyjuFUcobv4b7ctc9f119IPeVeRAgZfjtfwlx29 pKO2pPby87fdc3P1I3mt26ItUbiACCoCCse45v769Y2Xqj9yBK0iI8YFU7OtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ5eVXpiUnx0Ei3AwNHIGU0Vz1tMwHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5nW/PZjO5IK4Ooa3UxFl116RsSOU2gHmtR pl/9w4CUvlsyOXIHvleRBahHZnkm5tUrpF758uhpUU2KEnzydGD9KQfObqDKg94v 8IKGahjpDZEIGni9KDbN4/O681hU9IWHRqGAA1ttJkX/Q3oK5Xd4a8DkFk57XhTL AEqZB7JRp8e6A1gdA35t05OGsVNSO+z1Sx886vP1XB7bPjtTMZefAyOoejpU/WwA nFFsG1auPzZaQh6LWoMFI9CCfv+/eyJh8R86EPumg3U7E+ANqsBc6fFwvIPslZmV RqGUf2b42+F3RaD4P9HOAnNEr5+GYcBLISBZDNAML2w5C8o+7JQ= -----END CERTIFICATE-----Generated at Wed Apr 30 10:58:25 2025 by rpki-client