$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: m5ZrgoD9gRtTQ85yH+g4Zc+zio64DpE5IXOxDJXgRSo= Subject key identifier: D3:AE:8D:AA:44:BA:79:DF:5C:93:4C:56:EB:B6:5A:92:64:5E:E0:90 Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 4BD2E908BBE94C51BE34F32C1D09D0D843F86B44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 0114 Signing time: Wed 06 Aug 2025 03:51:33 +0000 Manifest this update: Wed 06 Aug 2025 03:46:33 +0000 Manifest next update: Sat 09 Aug 2025 08:09:33 +0000 Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: 7qRzXcdNvgvWzJkTJwT6f9eDmLsDC4rpbkwyAOCtAaA=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: wYdcnUFBSuzFDxRLSZQv3tgeXMwvjCP9rVz+PUMirJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d2:e9:08:bb:e9:4c:51:be:34:f3:2c:1d:09:d0:d8:43:f8:6b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Aug 6 03:46:33 2025 GMT Not After : Aug 9 08:09:33 2025 GMT Subject: CN=D3AE8DAA44BA79DF5C934C56EBB65A92645EE090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:4a:94:0e:fa:5f:7f:1f:1e:25:50:7c:78: 1b:37:3d:ca:6e:1a:1c:b4:80:9d:57:89:3e:04:d7: f4:89:e9:d2:b8:52:69:bd:85:72:9b:ce:db:ca:ac: 4e:75:b0:78:08:0e:8f:98:13:76:d4:c6:57:65:b6: c3:e2:30:95:53:5a:ca:e3:43:f7:6e:5c:3a:d9:51: c9:12:37:1c:a7:9c:53:29:bc:5c:93:be:85:53:c5: b9:3c:da:e7:2b:10:65:e0:e4:93:30:df:a5:51:ea: 48:64:d4:a5:ec:6b:7d:7f:55:9d:49:a6:79:96:2a: c0:b6:d9:35:85:a2:69:7b:13:c7:5f:d1:ed:89:ee: 20:d1:3a:39:45:0e:a5:fb:46:94:5e:b8:8a:34:d2: 9e:0d:ea:93:6c:fc:72:b0:b5:d5:79:46:e7:77:d8: c7:5c:00:60:9d:1e:ca:a5:4d:1c:5e:77:cf:cd:66: 84:0b:6c:f0:de:81:6e:52:ef:5f:88:59:c4:d1:f9: ce:22:7f:ce:d6:0a:20:ff:45:ba:38:91:1a:79:5d: 1b:36:98:b6:35:fc:3d:5d:bb:e4:3d:57:8e:57:23: c0:e0:ca:2c:ae:35:d2:f3:c0:82:18:f1:3b:8a:34: dc:ca:03:60:f1:b6:92:f5:5e:33:69:94:6b:d9:56: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AE:8D:AA:44:BA:79:DF:5C:93:4C:56:EB:B6:5A:92:64:5E:E0:90 X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5f:3f:31:66:90:0a:ed:be:4b:df:ca:d6:93:26:39:ce:9c: eb:7e:39:18:37:b8:da:3e:75:6b:29:98:68:82:00:f5:38:ad: 9a:05:35:5e:a2:95:0d:d3:21:09:93:67:c7:a6:49:5e:d5:44: 50:f9:fd:ea:bf:42:89:30:21:f3:3b:65:60:ce:5c:71:a3:59: f1:69:7c:10:fd:a9:1d:ea:6c:69:45:ed:95:51:b8:50:8c:dc: 66:25:4c:c3:80:54:56:e1:de:88:8a:53:1a:af:b2:11:54:77: 70:0f:41:48:21:5a:0b:55:fa:30:d3:e8:53:e0:08:cc:7f:91: d8:1c:e0:d2:ad:e8:2b:72:07:8a:bb:cc:2e:ac:06:db:52:5e: f8:9d:07:48:09:fd:38:fa:3e:65:4a:d7:08:7c:a8:d5:be:0b: 21:2b:d2:04:d5:18:89:0a:af:a0:f2:47:8f:14:c1:f1:48:ed: 4e:4b:58:68:54:e3:d0:09:0a:d1:04:90:40:a7:8c:6e:94:05: b0:cc:f6:31:d7:de:18:30:65:23:10:97:10:02:0f:1f:f1:46: 15:a7:b9:3d:66:52:97:4f:95:11:fe:74:2c:2b:31:71:78:bc: 60:59:f4:e9:ec:40:5e:6c:ca:33:ed:3a:d2:75:0c:2a:06:2e: 9a:39:dd:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9LpCLvpTFG+NPMsHQnQ2EP4a0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTA4MDYwMzQ2MzNaFw0yNTA4MDkwODA5MzNaMDMxMTAvBgNV BAMTKEQzQUU4REFBNDRCQTc5REY1QzkzNEM1NkVCQjY1QTkyNjQ1RUUwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHkqUDvpffx8eJVB8eBs3Pcpu Ghy0gJ1XiT4E1/SJ6dK4Umm9hXKbztvKrE51sHgIDo+YE3bUxldltsPiMJVTWsrj Q/duXDrZUckSNxynnFMpvFyTvoVTxbk82ucrEGXg5JMw36VR6khk1KXsa31/VZ1J pnmWKsC22TWFoml7E8df0e2J7iDROjlFDqX7RpReuIo00p4N6pNs/HKwtdV5Rud3 2MdcAGCdHsqlTRxed8/NZoQLbPDegW5S71+IWcTR+c4if87WCiD/Rbo4kRp5XRs2 mLY1/D1du+Q9V45XI8DgyiyuNdLzwIIY8TuKNNzKA2DxtpL1XjNplGvZVjktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU066NqkS6ed9ck0xW67ZakmRe4JAwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZfPzFmkArtvkvfytaTJjnOnOt+ORg3uNo+ dWspmGiCAPU4rZoFNV6ilQ3TIQmTZ8emSV7VRFD5/eq/QokwIfM7ZWDOXHGjWfFp fBD9qR3qbGlF7ZVRuFCM3GYlTMOAVFbh3oiKUxqvshFUd3APQUghWgtV+jDT6FPg CMx/kdgc4NKt6CtyB4q7zC6sBttSXvidB0gJ/Tj6PmVK1wh8qNW+CyEr0gTVGIkK r6DyR48UwfFI7U5LWGhU49AJCtEEkECnjG6UBbDM9jHX3hgwZSMQlxACDx/xRhWn uT1mUpdPlRH+dCwrMXF4vGBZ9OnsQF5syjPtOtJ1DCoGLpo53Wc= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:13 2025 by rpki-client