$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: AnDTAjySVoqbXb/v8zrJLE5MxYjKZYBtQhXDq+tQsJE= Subject key identifier: C3:95:C5:1B:7F:0D:9C:FD:DA:69:85:B1:A4:80:4C:09:5A:CD:90:21 Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 6018287505E20F40580DF1F1389350087E6E901C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 019C Signing time: Wed 06 Aug 2025 19:31:14 +0000 Manifest this update: Wed 06 Aug 2025 19:26:14 +0000 Manifest next update: Sun 10 Aug 2025 06:28:14 +0000 Files and hashes: 1: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: JTwUsbJNtis5/2DzfT7nnuceJarV687Fnen4vHGPOmw=) 2: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: yBAPGcHVxs0aor3S/MuiHBVURZkJW5hEfJ+S3PVniFQ=) 3: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: UPRB4PsF6TIM5gQt4Oa8RNf/90fBqBwSnDeTKStf0nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:18:28:75:05:e2:0f:40:58:0d:f1:f1:38:93:50:08:7e:6e:90:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Aug 6 19:26:14 2025 GMT Not After : Aug 10 06:28:14 2025 GMT Subject: CN=C395C51B7F0D9CFDDA6985B1A4804C095ACD9021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4b:8d:c3:fd:ae:20:73:ca:2a:1a:14:f3:b0: 0f:c6:ff:83:9f:71:41:60:d6:e1:92:19:04:ec:1b: c1:8f:a7:45:92:86:61:21:a3:6b:4c:5b:9e:c2:8c: 20:8a:b0:95:7b:1f:21:2a:5c:7e:81:f6:17:b4:14: 51:1d:4d:5b:66:8a:65:5d:77:4d:d8:27:d0:53:36: e0:42:67:ae:08:0b:a7:27:9d:6e:b0:f3:01:55:7d: cd:7e:e9:20:1a:98:e6:56:08:cd:2b:5e:da:64:00: 65:74:f1:ad:32:58:70:f6:5b:97:72:f6:78:2c:65: 94:28:02:40:a8:d1:ff:e4:6b:21:25:42:45:df:cf: b0:98:e2:96:b0:30:01:79:43:e8:a1:89:6f:0e:c9: a7:0f:1b:e2:61:d3:41:8a:00:c4:04:4d:96:a0:cf: a2:54:a6:0e:79:6b:5f:94:63:67:d9:0d:e4:06:5a: 73:96:d9:be:95:87:69:66:56:36:31:9d:46:f6:c7: 0a:05:9f:8b:9f:3f:d8:9c:c9:ec:9e:db:08:df:64: 3f:40:c3:ea:92:fc:f7:9a:71:19:93:67:cb:c4:56: 94:fc:5a:25:b1:24:69:17:f2:c6:74:c6:1f:5d:be: 86:cb:df:2d:51:dd:d7:0d:9f:f9:75:fd:5a:92:4d: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:95:C5:1B:7F:0D:9C:FD:DA:69:85:B1:A4:80:4C:09:5A:CD:90:21 X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:96:d2:65:97:c9:00:e7:d2:50:4e:dd:e0:32:67:97:46:ca: d1:f8:84:c2:28:5b:cc:c3:66:20:d6:0a:5a:1a:67:b3:c5:7c: 57:68:bf:ea:53:ee:15:e4:de:93:7f:c5:96:fa:45:c1:b1:1a: 83:2a:5f:9d:02:a9:0c:ed:38:90:8f:c1:a7:9a:f9:b4:25:86: 2a:d5:00:38:81:32:ca:2a:ad:10:8f:fb:d4:b1:f2:d2:6b:b9: 28:af:91:5d:68:f6:ef:02:56:5d:95:26:ab:6c:82:17:96:b3: 2b:93:09:4d:bc:5b:aa:10:1d:f5:7b:a6:32:02:01:b4:04:c7: ff:cd:4f:cc:d5:45:d0:39:63:a0:21:e5:b0:2b:8e:fc:08:8a: 63:1e:fa:30:fc:d6:aa:b6:24:97:1c:be:03:69:60:ee:b5:bb: 8f:c7:42:ea:2a:a5:05:54:90:be:4d:d0:0d:99:39:5d:5c:35: eb:8d:50:32:dc:99:74:a2:84:e4:60:9a:25:dc:f8:aa:f1:fd: ab:52:4a:3d:fd:51:ed:99:ba:ab:fb:a2:41:ce:1a:83:c1:b6: 72:78:9b:4e:11:94:82:20:82:1d:6d:f9:80:8b:3d:26:57:aa: 4d:d9:7b:97:a5:f3:e7:de:75:a5:31:ef:ca:79:59:95:c6:5a: a3:b0:33:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBgodQXiD0BYDfHxOJNQCH5ukBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTA4MDYxOTI2MTRaFw0yNTA4MTAwNjI4MTRaMDMxMTAvBgNV BAMTKEMzOTVDNTFCN0YwRDlDRkREQTY5ODVCMUE0ODA0QzA5NUFDRDkwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmS43D/a4gc8oqGhTzsA/G/4Of cUFg1uGSGQTsG8GPp0WShmEho2tMW57CjCCKsJV7HyEqXH6B9he0FFEdTVtmimVd d03YJ9BTNuBCZ64IC6cnnW6w8wFVfc1+6SAamOZWCM0rXtpkAGV08a0yWHD2W5dy 9ngsZZQoAkCo0f/kayElQkXfz7CY4pawMAF5Q+ihiW8OyacPG+Jh00GKAMQETZag z6JUpg55a1+UY2fZDeQGWnOW2b6Vh2lmVjYxnUb2xwoFn4ufP9icyeye2wjfZD9A w+qS/PeacRmTZ8vEVpT8WiWxJGkX8sZ0xh9dvobL3y1R3dcNn/l1/VqSTbURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw5XFG38NnP3aaYWxpIBMCVrNkCEwHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWW0mWXyQDn0lBO3eAyZ5dGytH4hMIoW8zD ZiDWCloaZ7PFfFdov+pT7hXk3pN/xZb6RcGxGoMqX50CqQztOJCPwaea+bQlhirV ADiBMsoqrRCP+9Sx8tJruSivkV1o9u8CVl2VJqtsgheWsyuTCU28W6oQHfV7pjIC AbQEx//NT8zVRdA5Y6Ah5bArjvwIimMe+jD81qq2JJccvgNpYO61u4/HQuoqpQVU kL5N0A2ZOV1cNeuNUDLcmXSihORgmiXc+Krx/atSSj39Ue2Zuqv7okHOGoPBtnJ4 m04RlIIggh1t+YCLPSZXqk3Ze5el8+fedaUx78p5WZXGWqOwM5s= -----END CERTIFICATE-----Generated at Fri Aug 8 19:30:20 2025 by rpki-client