$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: fg54s7q9+kQKkU6EZkxInNNNhYukvQ+87OP/R5U8WD0= Subject key identifier: 28:05:0A:89:7F:A2:70:A7:C0:E3:DD:D1:9F:6D:57:E0:CF:AC:29:96 Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 74A7C289E9724BE6DAAC70CE86CDC327170FA197 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 0265 Signing time: Tue 05 Aug 2025 20:50:55 +0000 Manifest this update: Tue 05 Aug 2025 20:45:54 +0000 Manifest next update: Sat 09 Aug 2025 05:57:54 +0000 Files and hashes: 1: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: r5oxdZcxxyL8YX2OqX3rgHFJmQUWJZzFFGzi4ydu2HU=) 2: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: KqJWQLgXmTHd9H6sRHxBzzsWATc/WnNxAAXTEqHhFsc=) 3: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: OUaHqzH5MUuESyQrAEVUqywPb3+c3nlvFdPyh75nUE0=) 4: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: /POUiN3ADeic24fpnR1S95Kh3i2zF8ppbXpuq/ovLcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a7:c2:89:e9:72:4b:e6:da:ac:70:ce:86:cd:c3:27:17:0f:a1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Aug 5 20:45:54 2025 GMT Not After : Aug 9 05:57:54 2025 GMT Subject: CN=28050A897FA270A7C0E3DDD19F6D57E0CFAC2996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:ba:75:0d:9f:64:1f:e2:fa:37:55:e8:62: e2:78:9a:f9:67:b0:ba:cc:ce:fc:53:e8:05:46:8c: 18:44:0a:55:0e:b8:18:15:d5:70:d0:52:ad:0a:2b: f7:f7:e0:a7:b1:02:20:b1:4a:49:05:d4:54:78:31: 79:b3:12:b1:84:6b:3a:0a:99:51:8d:ab:27:d6:03: b0:66:be:60:36:e2:1a:69:08:05:fa:4c:cd:b0:d5: 98:8a:12:bf:13:6b:98:45:75:f6:4e:5e:12:59:32: 6f:40:44:b7:03:05:e9:4c:93:40:3d:e0:ac:d6:00: 68:bf:5d:35:df:b4:26:67:f0:15:3c:d3:56:5a:cf: fd:cc:52:0c:e7:6a:ed:d4:32:e5:99:4f:58:cb:a5: 95:48:ba:11:05:25:a4:c5:3d:e2:84:82:7c:3c:33: ff:39:64:cb:3e:18:a3:28:bd:a8:d8:0c:63:61:98: 7e:c7:27:87:89:0e:d3:40:45:e2:a9:8e:bf:5c:75: 52:53:a4:5d:5b:df:8f:d2:60:b3:83:48:05:91:11: 6a:33:9c:f4:51:01:6e:ba:22:63:80:dd:c2:f5:10: 8f:a2:4c:9f:c0:e0:d9:3c:99:41:96:b1:e7:cf:61: 23:0c:48:cb:0d:9a:16:dc:fb:f9:ae:9c:93:62:f9: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:05:0A:89:7F:A2:70:A7:C0:E3:DD:D1:9F:6D:57:E0:CF:AC:29:96 X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:01:ad:dd:a7:74:f7:4f:57:ce:58:13:f2:cc:ad:e0:59:b6: 9b:09:5a:6f:39:76:e0:fe:cd:c0:8e:8a:22:60:cb:cf:3f:b0: 29:b8:6c:98:e7:d4:8c:0c:5a:1e:33:2e:d8:7b:11:c3:6a:48: 17:a6:69:4d:97:24:e4:12:0a:e7:08:5b:84:c5:2b:05:55:de: ea:0d:30:d7:63:0b:28:a3:2a:b4:88:30:c1:0e:94:66:8f:49: 51:f5:1f:7d:e8:b0:89:67:b5:d2:4a:ec:db:94:e0:00:71:ad: f7:d6:ba:f5:6f:46:c1:93:3c:39:48:01:fd:f9:d1:7d:41:f5: 86:6e:4a:1e:ea:47:36:6a:a0:d4:ab:ae:e1:9f:ed:77:c9:f5: b5:eb:8d:c4:1a:37:df:ac:c3:ce:15:33:a8:5a:62:5c:e3:45: 40:4f:f1:5b:89:1b:d7:43:92:eb:a7:5d:31:22:d7:9a:5c:b5: b3:91:51:e8:91:61:48:aa:60:b7:7a:ed:72:c5:8f:e2:1d:41: 4d:16:73:b0:b2:f8:fe:6e:dc:f4:4e:39:3b:2b:3a:c8:fd:d0: 0d:ec:1c:92:c8:74:10:d6:a6:2b:da:e2:fa:39:30:7c:bc:36: 54:fe:e5:db:c0:62:17:0f:ca:0f:39:06:05:33:0b:e9:78:5b: af:45:71:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKfCielyS+barHDOhs3DJxcPoZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNTA4MDUyMDQ1NTRaFw0yNTA4MDkwNTU3NTRaMDMxMTAvBgNV BAMTKDI4MDUwQTg5N0ZBMjcwQTdDMEUzREREMTlGNkQ1N0UwQ0ZBQzI5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyrp1DZ9kH+L6N1XoYuJ4mvln sLrMzvxT6AVGjBhEClUOuBgV1XDQUq0KK/f34KexAiCxSkkF1FR4MXmzErGEazoK mVGNqyfWA7BmvmA24hppCAX6TM2w1ZiKEr8Ta5hFdfZOXhJZMm9ARLcDBelMk0A9 4KzWAGi/XTXftCZn8BU801Zaz/3MUgznau3UMuWZT1jLpZVIuhEFJaTFPeKEgnw8 M/85ZMs+GKMovajYDGNhmH7HJ4eJDtNAReKpjr9cdVJTpF1b34/SYLODSAWREWoz nPRRAW66ImOA3cL1EI+iTJ/A4Nk8mUGWsefPYSMMSMsNmhbc+/munJNi+RMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKAUKiX+icKfA493Rn21X4M+sKZYwHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALsBrd2ndPdPV85YE/LMreBZtpsJWm85duD+ zcCOiiJgy88/sCm4bJjn1IwMWh4zLth7EcNqSBemaU2XJOQSCucIW4TFKwVV3uoN MNdjCyijKrSIMMEOlGaPSVH1H33osIlntdJK7NuU4ABxrffWuvVvRsGTPDlIAf35 0X1B9YZuSh7qRzZqoNSrruGf7XfJ9bXrjcQaN9+sw84VM6haYlzjRUBP8VuJG9dD kuunXTEi15pctbORUeiRYUiqYLd67XLFj+IdQU0Wc7Cy+P5u3PROOTsrOsj90A3s HJLIdBDWpiva4vo5MHy8NlT+5dvAYhcPyg85BgUzC+l4W69FcW4= -----END CERTIFICATE-----Generated at Fri Aug 8 00:36:59 2025 by rpki-client