$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: 1MAqttorukOsTE1BnqH5v89YaEXR2/13WRPSmZfBV5A= Subject key identifier: 54:3F:8C:65:D2:F4:58:C8:3F:58:32:B9:17:D1:87:E7:ED:8F:97:C4 Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 016C880DA74D97AA12514285559E9BC4ED8C97FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 013C Signing time: Mon 03 Nov 2025 01:31:33 +0000 Manifest this update: Mon 03 Nov 2025 01:26:33 +0000 Manifest next update: Thu 06 Nov 2025 09:52:33 +0000 Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: S5KtgxSMbkujxrZsZLNVdkrI2x9ypKIMiw9W/ERZlao=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: dEzIqEvBQoLb4jDZxATrGmBvt2RxQTfgU7Js5Mbni88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6c:88:0d:a7:4d:97:aa:12:51:42:85:55:9e:9b:c4:ed:8c:97:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Nov 3 01:26:33 2025 GMT Not After : Nov 6 09:52:33 2025 GMT Subject: CN=543F8C65D2F458C83F5832B917D187E7ED8F97C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:f4:92:a5:3d:31:f0:26:61:98:93:58:1d: f2:db:35:b7:fb:42:4d:70:cf:fb:40:fb:da:dc:98: e9:1b:e7:7b:2a:19:ea:60:8d:ca:73:9c:b3:ee:04: a1:3a:d7:c9:5c:0b:c7:98:d4:69:f7:aa:92:f3:72: 21:c2:a5:95:22:5f:fd:03:9a:7e:39:93:6a:f0:27: 43:ad:ac:fb:5f:b6:6f:44:b3:d6:76:f0:c9:05:db: 40:36:c4:c0:16:41:9d:26:98:d9:2e:f0:f8:d7:5d: 71:dc:81:f7:d8:73:6f:0e:e1:ec:f3:ef:4e:13:ee: 9a:6b:e9:f3:1f:ba:e4:85:71:8d:d1:71:7b:34:cb: ef:e7:30:74:dd:9e:43:b6:3d:8d:95:c4:a9:e6:ca: ba:93:41:ab:f9:f0:41:82:5b:97:7e:6a:e6:83:55: 5f:b4:e8:63:6a:1d:80:26:bd:82:2c:ff:bf:ca:4a: 80:a3:0a:7e:72:b9:00:3f:07:8d:d5:f5:e6:e4:7e: 6f:75:99:42:06:e6:bb:9e:0e:5c:7d:ea:26:c6:db: 27:1d:6b:0b:d3:e6:33:cc:31:08:6d:8e:e2:13:3c: 32:96:68:0c:9c:c7:b7:76:b2:fc:c8:b8:18:a9:ce: c5:c9:1b:e6:07:56:7d:2a:f0:f1:f9:cb:85:bc:6e: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3F:8C:65:D2:F4:58:C8:3F:58:32:B9:17:D1:87:E7:ED:8F:97:C4 X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:75:76:ff:2a:46:e9:f2:ad:d1:09:a7:20:d5:22:a1:eb:74: 3f:95:18:65:16:16:a4:35:e2:a0:f3:b9:09:b5:8e:19:c2:72: f8:0a:85:6e:22:69:bb:56:59:e2:b3:29:26:c5:01:8e:c8:6f: ce:e6:78:c5:ef:69:0b:44:49:9a:d2:2b:76:01:5c:ff:14:8e: 6d:08:04:cb:e1:b3:27:9a:99:b3:61:f6:21:48:43:7b:c3:53: d7:41:51:ba:10:22:dd:7c:a9:2d:2e:13:56:93:33:d1:1a:06: 22:5e:9c:79:2a:15:08:ba:5b:56:f9:07:7a:93:5e:05:8d:ff: c9:85:87:51:eb:b3:33:c1:bf:88:47:43:44:ea:8a:25:41:e5: 0b:e0:d5:72:46:1a:9d:bb:b2:75:1b:d0:c2:94:59:4f:44:48: 61:86:24:10:86:4b:d0:a1:2b:36:74:43:e1:34:c1:c2:9c:63: 50:9a:e5:80:8c:e4:16:42:36:8d:28:c1:ca:00:e4:34:c1:22: f8:85:bb:93:ab:bc:10:3b:a0:5b:dc:af:a0:7a:96:5c:80:82: 2b:cf:96:71:3a:6f:f5:7e:a9:6f:9f:2f:e6:7c:b7:59:f0:d4: 7a:e5:58:22:da:a8:53:d1:e3:59:42:d8:28:c9:a2:6d:75:55: d4:6e:c6:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAWyIDadNl6oSUUKFVZ6bxO2Ml/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTExMDMwMTI2MzNaFw0yNTExMDYwOTUyMzNaMDMxMTAvBgNV BAMTKDU0M0Y4QzY1RDJGNDU4QzgzRjU4MzJCOTE3RDE4N0U3RUQ4Rjk3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6PSSpT0x8CZhmJNYHfLbNbf7 Qk1wz/tA+9rcmOkb53sqGepgjcpznLPuBKE618lcC8eY1Gn3qpLzciHCpZUiX/0D mn45k2rwJ0OtrPtftm9Es9Z28MkF20A2xMAWQZ0mmNku8PjXXXHcgffYc28O4ezz 704T7ppr6fMfuuSFcY3RcXs0y+/nMHTdnkO2PY2VxKnmyrqTQav58EGCW5d+auaD VV+06GNqHYAmvYIs/7/KSoCjCn5yuQA/B43V9ebkfm91mUIG5rueDlx96ibG2ycd awvT5jPMMQhtjuITPDKWaAycx7d2svzIuBipzsXJG+YHVn0q8PH5y4W8bpC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVD+MZdL0WMg/WDK5F9GH5+2Pl8QwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH91dv8qRunyrdEJpyDVIqHrdD+VGGUWFqQ1 4qDzuQm1jhnCcvgKhW4iabtWWeKzKSbFAY7Ib87meMXvaQtESZrSK3YBXP8Ujm0I BMvhsyeambNh9iFIQ3vDU9dBUboQIt18qS0uE1aTM9EaBiJenHkqFQi6W1b5B3qT XgWN/8mFh1HrszPBv4hHQ0TqiiVB5Qvg1XJGGp27snUb0MKUWU9ESGGGJBCGS9Ch KzZ0Q+E0wcKcY1Ca5YCM5BZCNo0owcoA5DTBIviFu5OrvBA7oFvcr6B6llyAgivP lnE6b/V+qW+fL+Z8t1nw1HrlWCLaqFPR41lC2CjJom11VdRuxq4= -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:44 2025 by rpki-client