$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: 7ZPxiENAIPv7nQC98y0lzy6rT0V/QJrAAyDEMIhRt5o= Subject key identifier: A5:40:12:46:2F:E2:D5:21:9D:B8:17:30:20:0F:39:31:20:14:73:AB Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 49C56CF3E3EA453FAE00F07F928CB844B3D809C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 0185 Signing time: Sun 15 Jun 2025 18:21:05 +0000 Manifest this update: Sun 15 Jun 2025 18:16:05 +0000 Manifest next update: Wed 18 Jun 2025 22:00:05 +0000 Files and hashes: 1: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: 0isGiTOQspJ7p7TBFGpkkGvAzD6B8R5vVRmjJAFbqCA=) 2: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: UPRB4PsF6TIM5gQt4Oa8RNf/90fBqBwSnDeTKStf0nw=) 3: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: yBAPGcHVxs0aor3S/MuiHBVURZkJW5hEfJ+S3PVniFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 22:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c5:6c:f3:e3:ea:45:3f:ae:00:f0:7f:92:8c:b8:44:b3:d8:09:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Jun 15 18:16:05 2025 GMT Not After : Jun 18 22:00:05 2025 GMT Subject: CN=A54012462FE2D5219DB81730200F3931201473AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:dc:3f:1a:90:0a:53:5a:7b:ed:d3:86:a6: b2:14:62:39:ea:73:53:d1:f6:2d:c9:9a:7d:a5:50: a6:f8:bd:52:31:83:9b:34:7a:16:d4:55:f9:a9:7a: a7:5f:42:1a:6f:c3:de:46:e8:f3:e1:83:8c:bc:47: 71:67:1d:0d:28:73:aa:d9:c7:3c:71:04:86:16:1f: 2d:c0:5d:17:bf:19:f9:85:6a:e4:bb:13:e8:a9:f0: 00:92:25:ec:1c:19:f6:ee:99:ad:1d:ff:dd:f3:0d: 89:eb:5e:08:ef:f1:7f:00:71:3d:cc:bb:99:91:35: ed:8c:08:99:07:3d:95:14:41:cb:7e:9a:46:a9:1a: 55:43:f8:91:25:94:79:15:09:a2:6d:64:e3:1e:da: ee:65:08:85:9e:3f:b7:95:da:73:d2:e5:d7:15:da: 03:b3:71:6d:c7:be:90:27:3d:eb:2f:33:15:61:5d: d2:a4:d9:ee:ed:32:5a:ed:9e:bc:33:58:3a:8c:2a: 64:85:bf:67:ee:4e:61:23:6f:51:d0:d2:6b:d4:74: d0:7d:c5:ed:cd:c7:3b:2b:0f:cc:fd:4d:46:5a:98: 5d:15:a2:c4:f4:04:de:fb:81:2f:10:3f:d5:5f:3a: a6:d1:06:a7:1f:12:48:dd:71:f8:15:3c:83:8e:3e: 3e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:40:12:46:2F:E2:D5:21:9D:B8:17:30:20:0F:39:31:20:14:73:AB X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:84:f5:01:9d:95:3a:78:c9:d7:41:ae:32:2d:b2:cf:5c:e3: 7c:fa:a4:4a:8c:d0:04:67:54:d4:1a:b9:58:53:e4:ad:69:1c: 9f:e9:03:ac:51:e4:4b:7b:de:1a:19:af:9a:1e:6e:fc:4a:5c: 5d:3d:aa:c8:8e:bf:ae:ef:ca:dd:ba:c7:71:ad:0c:ef:fa:e9: 94:4b:37:ab:48:7c:d0:22:b6:32:c7:46:12:d9:67:17:57:d7: a6:b9:f3:52:cb:b2:f1:6c:fe:97:eb:8a:53:e6:98:ce:47:48: d9:67:dd:63:dd:7b:7e:af:98:68:e2:18:38:bd:d0:97:6a:37: 68:1f:21:32:94:f2:99:16:85:f9:7a:5e:bb:67:92:c9:de:76: 6f:88:f0:9c:86:32:9a:1d:43:7b:97:68:7f:e3:31:ee:02:20: dd:72:78:ae:8a:54:52:80:f0:a6:3a:20:f6:6d:90:aa:d1:eb: 05:4b:88:95:b7:72:b2:ad:21:e6:fa:c3:dc:4b:79:86:f5:18: e4:f0:d6:0f:d7:77:66:8b:72:50:26:e3:6a:25:64:8b:29:67: d2:f4:7c:67:94:85:38:6a:e4:36:29:42:f2:8f:17:20:a6:e8: 6d:32:50:5f:04:96:93:2b:0c:34:d4:4a:65:b5:1b:14:0a:04: 43:23:a7:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScVs8+PqRT+uAPB/koy4RLPYCccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTA2MTUxODE2MDVaFw0yNTA2MTgyMjAwMDVaMDMxMTAvBgNV BAMTKEE1NDAxMjQ2MkZFMkQ1MjE5REI4MTczMDIwMEYzOTMxMjAxNDczQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWtw/GpAKU1p77dOGprIUYjnq c1PR9i3Jmn2lUKb4vVIxg5s0ehbUVfmpeqdfQhpvw95G6PPhg4y8R3FnHQ0oc6rZ xzxxBIYWHy3AXRe/GfmFauS7E+ip8ACSJewcGfbuma0d/93zDYnrXgjv8X8AcT3M u5mRNe2MCJkHPZUUQct+mkapGlVD+JEllHkVCaJtZOMe2u5lCIWeP7eV2nPS5dcV 2gOzcW3HvpAnPesvMxVhXdKk2e7tMlrtnrwzWDqMKmSFv2fuTmEjb1HQ0mvUdNB9 xe3NxzsrD8z9TUZamF0VosT0BN77gS8QP9VfOqbRBqcfEkjdcfgVPIOOPj4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUASRi/i1SGduBcwIA85MSAUc6swHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOE9QGdlTp4yddBrjItss9c43z6pEqM0ARn VNQauVhT5K1pHJ/pA6xR5Et73hoZr5oebvxKXF09qsiOv67vyt26x3GtDO/66ZRL N6tIfNAitjLHRhLZZxdX16a581LLsvFs/pfrilPmmM5HSNln3WPde36vmGjiGDi9 0JdqN2gfITKU8pkWhfl6Xrtnksnedm+I8JyGMpodQ3uXaH/jMe4CIN1yeK6KVFKA 8KY6IPZtkKrR6wVLiJW3crKtIeb6w9xLeYb1GOTw1g/Xd2aLclAm42olZIspZ9L0 fGeUhThq5DYpQvKPFyCm6G0yUF8ElpMrDDTUSmW1GxQKBEMjp4w= -----END CERTIFICATE-----Generated at Tue Jun 17 16:54:11 2025 by rpki-client