$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: YNZrry5qQI8j8Nr5IWbEDowdvhg8Q4nKi4N7nmR+A4U= Subject key identifier: DA:B6:61:B0:EE:41:1F:78:FF:75:74:00:E3:18:20:DD:66:8D:7E:78 Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 750BB55DD6B72B777CC7879BD94BFE576FD2D554 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 01C3 Signing time: Mon 03 Nov 2025 10:51:07 +0000 Manifest this update: Mon 03 Nov 2025 10:46:07 +0000 Manifest next update: Thu 06 Nov 2025 18:17:07 +0000 Files and hashes: 1: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: yBAPGcHVxs0aor3S/MuiHBVURZkJW5hEfJ+S3PVniFQ=) 2: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: fGEieNQfTLdbvV3q7Dac3sxw2I/DgExkI93mxtmxiJg=) 3: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: UPRB4PsF6TIM5gQt4Oa8RNf/90fBqBwSnDeTKStf0nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0b:b5:5d:d6:b7:2b:77:7c:c7:87:9b:d9:4b:fe:57:6f:d2:d5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Nov 3 10:46:07 2025 GMT Not After : Nov 6 18:17:07 2025 GMT Subject: CN=DAB661B0EE411F78FF757400E31820DD668D7E78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:93:22:74:2e:ef:ad:d5:2f:92:c8:49:83:05: 2a:3e:74:73:67:fc:ca:93:7e:16:d1:ef:03:b3:65: 99:e2:71:65:e4:0f:11:14:3c:14:43:c8:eb:de:4a: b3:a5:b1:a7:09:75:99:eb:ff:36:1f:6c:0f:0a:9b: a1:ef:f9:cc:d2:7c:54:9b:aa:56:55:a7:34:e3:54: 78:c9:58:7d:bb:77:bd:da:d8:3b:22:bf:4d:9d:73: e9:e9:31:dc:43:1a:90:cd:ef:f4:4b:ee:84:05:7c: d0:09:be:c2:6c:69:db:cc:39:59:30:80:cc:38:c9: cb:65:4e:2f:87:87:f0:38:0e:b4:27:45:30:25:25: 1e:68:c5:a1:59:64:bb:75:5e:d7:59:6e:62:e4:93: ae:4c:1d:b4:7b:97:c3:d3:51:92:e3:1e:fc:ec:f8: 61:1d:12:a5:69:ef:9d:bf:66:cd:41:ca:9b:61:04: bd:cc:47:39:b6:c2:c6:45:ea:c8:32:c8:a0:b4:a4: 4f:d2:a9:2c:59:b8:b0:33:21:19:37:98:fb:fc:96: 08:0a:ba:1c:61:e2:e3:04:f5:c9:0b:80:2d:32:57: 9c:45:d9:93:b0:37:c8:e6:25:90:08:d6:a5:ce:9b: 7f:60:f5:5b:ae:ec:6d:f9:5f:37:46:94:ef:60:28: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B6:61:B0:EE:41:1F:78:FF:75:74:00:E3:18:20:DD:66:8D:7E:78 X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:29:66:91:4d:54:aa:76:c9:d6:b8:8e:64:9d:ee:ed:3d:c2: 27:c4:60:9f:50:12:22:cf:06:5d:e7:66:98:a5:8d:06:9c:a1: 34:40:b0:19:9f:0d:38:03:e7:2f:57:4e:12:71:5e:81:bd:b6: f6:6c:92:ac:4d:bf:bc:3f:44:70:05:27:c3:f0:09:95:7c:a7: 0a:55:85:87:4f:e0:08:15:d0:a4:b3:07:49:c2:56:9f:35:2a: 11:64:52:08:3a:3d:da:05:78:24:90:f8:60:3f:70:b7:b4:96: 93:6b:fc:7d:8f:e6:a5:0d:ea:75:af:49:03:dd:ae:88:a3:e4: f8:05:18:19:45:11:df:20:06:63:a7:6f:2e:62:c6:eb:f8:64: c0:3a:20:ef:8c:78:f2:62:a8:77:74:ae:a0:75:d8:55:a2:db: 0a:ef:b2:cb:11:69:45:00:54:69:76:ae:5b:0d:7f:5d:d7:b5: 33:31:5f:a5:12:cb:a4:23:54:e1:58:6f:5b:ec:9d:9a:35:fd: 7e:e7:3d:f1:42:7f:79:db:9b:f9:0e:4d:28:fc:1c:87:0c:2c: 0a:00:a5:2d:34:32:d1:b8:f2:18:c4:ff:44:17:bb:14:9a:2e: 08:2c:91:94:cb:ed:cb:8b:b3:db:c2:ee:bb:6b:63:0a:bc:cf: c0:fb:3e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQu1Xda3K3d8x4eb2Uv+V2/S1VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTExMDMxMDQ2MDdaFw0yNTExMDYxODE3MDdaMDMxMTAvBgNV BAMTKERBQjY2MUIwRUU0MTFGNzhGRjc1NzQwMEUzMTgyMERENjY4RDdFNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkyJ0Lu+t1S+SyEmDBSo+dHNn /MqTfhbR7wOzZZnicWXkDxEUPBRDyOveSrOlsacJdZnr/zYfbA8Km6Hv+czSfFSb qlZVpzTjVHjJWH27d73a2Dsiv02dc+npMdxDGpDN7/RL7oQFfNAJvsJsadvMOVkw gMw4yctlTi+Hh/A4DrQnRTAlJR5oxaFZZLt1XtdZbmLkk65MHbR7l8PTUZLjHvzs +GEdEqVp752/Zs1BypthBL3MRzm2wsZF6sgyyKC0pE/SqSxZuLAzIRk3mPv8lggK uhxh4uME9ckLgC0yV5xF2ZOwN8jmJZAI1qXOm39g9Vuu7G35XzdGlO9gKAE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2rZhsO5BH3j/dXQA4xgg3WaNfngwHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwpZpFNVKp2yda4jmSd7u09wifEYJ9QEiLP Bl3nZpiljQacoTRAsBmfDTgD5y9XThJxXoG9tvZskqxNv7w/RHAFJ8PwCZV8pwpV hYdP4AgV0KSzB0nCVp81KhFkUgg6PdoFeCSQ+GA/cLe0lpNr/H2P5qUN6nWvSQPd roij5PgFGBlFEd8gBmOnby5ixuv4ZMA6IO+MePJiqHd0rqB12FWi2wrvsssRaUUA VGl2rlsNf13XtTMxX6USy6QjVOFYb1vsnZo1/X7nPfFCf3nbm/kOTSj8HIcMLAoA pS00MtG48hjE/0QXuxSaLggskZTL7cuLs9vC7rtrYwq8z8D7PvA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:42:13 2025 by rpki-client