$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft File: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft (raw, json) Hash identifier: jaR2RVnrUyLdR7hhBXEMESu+KBfSUlhuijd9hYXpMs8= Subject key identifier: 01:D5:C4:35:9E:43:B1:A6:C8:1F:EA:4E:0F:69:4D:05:A6:36:FF:6C Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 Certificate issuer: /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Certificate serial: 6522E4EFBCD4883D9AF4899AE17DB80306385C8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft Manifest number: 024E Signing time: Sun 15 Jun 2025 00:00:53 +0000 Manifest this update: Sat 14 Jun 2025 23:55:53 +0000 Manifest next update: Wed 18 Jun 2025 00:06:53 +0000 Files and hashes: 1: 032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl (hash: OPT0vuU4hdf65Jup+nBMv6wgv+MpND8GDEjMMHmZ9g0=) 2: 3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (hash: OUaHqzH5MUuESyQrAEVUqywPb3+c3nlvFdPyh75nUE0=) 3: 3130332e3137382e31332e302f32342d3234203d3e20313437313635.roa (hash: /POUiN3ADeic24fpnR1S95Kh3i2zF8ppbXpuq/ovLcI=) 4: 3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (hash: KqJWQLgXmTHd9H6sRHxBzzsWATc/WnNxAAXTEqHhFsc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:22:e4:ef:bc:d4:88:3d:9a:f4:89:9a:e1:7d:b8:03:06:38:5c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8 Validity Not Before: Jun 14 23:55:53 2025 GMT Not After : Jun 18 00:06:53 2025 GMT Subject: CN=01D5C4359E43B1A6C81FEA4E0F694D05A636FF6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b5:a6:c7:b2:53:52:d9:37:cf:14:97:39:0f: 59:60:8c:4a:bd:e4:e1:7f:c4:0a:3e:83:2d:10:6b: b4:84:24:12:91:ef:ba:5b:f5:8b:3c:d7:75:cf:7e: c0:01:74:af:f0:4b:fc:fa:8c:0b:2c:4f:34:07:44: 77:40:32:7e:f9:71:86:41:bb:2b:d4:83:f5:60:8b: 45:14:9d:6f:3e:ac:09:b7:f9:f7:b6:e2:df:85:15: 23:39:a9:53:66:09:b4:50:34:03:b2:de:9d:30:3b: e9:21:4f:95:f1:eb:ea:df:a8:ab:02:e2:76:17:cc: 3f:9f:fc:a2:93:e6:02:cc:87:80:2f:6e:62:c7:28: d9:2f:88:83:d2:ac:fe:6a:22:72:6f:66:22:c9:0f: be:7e:ef:44:a6:24:5f:2d:45:d6:1d:19:bf:bf:63: bd:a5:f6:c0:86:fd:a7:a9:3d:3b:4a:c1:d7:97:45: f9:03:8d:af:31:1a:09:9d:49:22:77:81:59:99:49: f6:13:5c:c7:24:a7:22:76:fe:31:36:1a:46:93:4f: b4:0f:0d:97:42:4a:72:73:e7:0b:78:b9:a4:9b:f6: 6f:cd:66:5e:83:70:66:21:ee:36:0b:1f:28:2f:41: d6:1d:7f:5f:b8:8f:e5:74:93:e4:9e:69:46:27:d3: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D5:C4:35:9E:43:B1:A6:C8:1F:EA:4E:0F:69:4D:05:A6:36:FF:6C X509v3 Authority Key Identifier: keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:48:a2:c8:a7:f3:15:b6:3b:0a:28:48:66:fb:33:cf:8a:17: ce:99:79:4e:86:69:0f:fd:f7:23:88:92:fd:c2:bc:6f:0e:d3: bd:dd:f9:2e:65:60:4e:c4:e8:99:35:8e:95:dc:e6:43:da:aa: 2b:9c:c4:bb:7f:19:3a:a2:c8:a1:9e:95:f6:95:c7:bb:b0:7b: ce:96:1b:67:7e:bf:a3:e1:a4:41:a8:bf:8a:b8:65:12:4b:e6: 4a:54:a1:2c:ae:b1:5c:cd:6c:8a:33:b0:7f:1d:d7:5e:ca:05: af:05:a9:36:e5:aa:6c:33:63:7c:ae:14:03:23:b4:dd:9d:58: 3e:01:8b:10:45:7b:4d:e0:57:3e:59:03:65:02:1e:b4:c8:b2: 9c:5a:db:02:a6:d8:67:23:d0:a8:d4:00:68:9c:d5:f9:97:aa: bd:23:9e:e2:91:b2:65:ff:0c:f1:ab:0d:a1:c7:e2:8e:0e:21: d2:8e:e7:b7:c6:7c:c9:73:2b:d2:d1:1f:4c:0c:bb:73:4c:cb: 3e:3f:12:34:d2:ed:5f:be:8f:02:74:f3:08:6c:e1:c0:5b:ec: 19:f4:1a:68:37:4c:8a:e4:c6:56:3d:43:db:69:93:14:1f:78: 6f:ef:bb:17:59:c2:00:ab:ea:96:b6:3c:6c:45:84:90:20:de: 27:78:8b:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZSLk77zUiD2a9Ima4X24AwY4XI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFB RTkyNUFFODAeFw0yNTA2MTQyMzU1NTNaFw0yNTA2MTgwMDA2NTNaMDMxMTAvBgNV BAMTKDAxRDVDNDM1OUU0M0IxQTZDODFGRUE0RTBGNjk0RDA1QTYzNkZGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgtabHslNS2TfPFJc5D1lgjEq9 5OF/xAo+gy0Qa7SEJBKR77pb9Ys813XPfsABdK/wS/z6jAssTzQHRHdAMn75cYZB uyvUg/Vgi0UUnW8+rAm3+fe24t+FFSM5qVNmCbRQNAOy3p0wO+khT5Xx6+rfqKsC 4nYXzD+f/KKT5gLMh4AvbmLHKNkviIPSrP5qInJvZiLJD75+70SmJF8tRdYdGb+/ Y72l9sCG/aepPTtKwdeXRfkDja8xGgmdSSJ3gVmZSfYTXMckpyJ2/jE2GkaTT7QP DZdCSnJz5wt4uaSb9m/NZl6DcGYh7jYLHygvQdYdf1+4j+V0k+SeaUYn0z05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAdXENZ5DsabIH+pOD2lNBaY2/2wwHwYDVR0j BBgwFoAUAy+o8MbHD00nbvSi6chfaq6SWugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2E3OWQ5NS02NGE5LTQ4MDktOTRiMi02MmRlMjQxOTIyNDUvMC8wMzJGQThGMEM2 QzcwRjREMjc2RUY0QTJFOUM4NUY2QUFFOTI1QUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVGNkFBRTky NUFFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhNzlkOTUtNjRhOS00ODA5LTk0 YjItNjJkZTI0MTkyMjQ1LzAvMDMyRkE4RjBDNkM3MEY0RDI3NkVGNEEyRTlDODVG NkFBRTkyNUFFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOtIosin8xW2OwooSGb7M8+KF86ZeU6GaQ/9 9yOIkv3CvG8O073d+S5lYE7E6Jk1jpXc5kPaqiucxLt/GTqiyKGelfaVx7uwe86W G2d+v6PhpEGov4q4ZRJL5kpUoSyusVzNbIozsH8d117KBa8FqTblqmwzY3yuFAMj tN2dWD4BixBFe03gVz5ZA2UCHrTIspxa2wKm2Gcj0KjUAGic1fmXqr0jnuKRsmX/ DPGrDaHH4o4OIdKO57fGfMlzK9LRH0wMu3NMyz4/EjTS7V++jwJ08whs4cBb7Bn0 Gmg3TIrkxlY9Q9tpkxQfeG/vuxdZwgCr6pa2PGxFhJAg3id4iwc= -----END CERTIFICATE-----Generated at Mon Jun 16 23:59:34 2025 by rpki-client