$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: A37s2Yb59C7GH0jdLcxMLuyldnyWVy+8OOlIDN2i4B4= Subject key identifier: 51:13:03:A7:99:73:B1:97:AF:2D:4F:F2:E7:F2:4B:BA:DA:75:43:46 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 7982EAEDD1B0B27A4135A5C730E61DDF840D0D13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0119 Signing time: Wed 06 Aug 2025 05:40:55 +0000 Manifest this update: Wed 06 Aug 2025 05:35:55 +0000 Manifest next update: Sat 09 Aug 2025 07:52:55 +0000 Files and hashes: 1: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: DC05cjixgN5ZN+Owv8fwtt0YSkWKhuh6dmOoRAa0mwQ=) 2: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: cbrl6dBckxe27KqOtUNV9s29bXGi1zCIe4QmB1+JlkA=) 3: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: +AkE8lBocYkzQtUK7rxyogDErEqAx6OPKcVzXziAtKI=) 4: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:82:ea:ed:d1:b0:b2:7a:41:35:a5:c7:30:e6:1d:df:84:0d:0d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Aug 6 05:35:55 2025 GMT Not After : Aug 9 07:52:55 2025 GMT Subject: CN=511303A79973B197AF2D4FF2E7F24BBADA754346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:49:66:46:0d:ea:82:90:0b:f0:f6:9a:02: 96:e6:23:0d:7f:19:7f:87:20:32:84:ae:ac:d1:1e: 93:d1:26:ac:78:8d:94:eb:b0:bc:40:97:1a:14:44: 7f:18:e0:1b:63:cb:02:e4:91:5a:55:4f:c7:ca:c8: c0:d8:f1:2c:6e:ab:0d:8e:6a:32:03:56:4d:56:15: 24:55:db:47:7c:73:b4:45:62:7d:3e:19:c9:19:ce: 09:11:af:fd:d4:99:e9:62:84:de:f8:5a:cf:dd:d4: 53:89:1e:1a:10:e6:0e:e7:e8:ca:26:ee:e0:69:6e: fc:65:35:a4:52:f0:11:95:b1:69:21:49:56:c3:ab: bb:06:82:cf:a4:1f:06:01:1a:d4:25:7e:b9:09:66: c0:63:62:e8:84:4b:b0:8b:03:dd:8c:41:f4:4b:ae: 66:9d:48:9f:68:bb:97:4f:1b:af:35:5a:c5:1b:50: 96:70:df:54:4a:30:c7:f5:1a:ec:2f:cc:60:b8:a6: b3:61:b0:26:51:c4:7b:ce:5e:36:27:05:d2:de:ee: d6:29:f7:e1:90:ef:b4:a9:d1:da:0a:f2:e8:56:e4: 09:fa:e0:77:92:49:7f:50:dc:34:e0:4d:5e:3e:2b: 91:ee:20:96:cc:4b:cf:c5:6c:b6:91:c9:b0:1b:97: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:13:03:A7:99:73:B1:97:AF:2D:4F:F2:E7:F2:4B:BA:DA:75:43:46 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1c:12:2a:af:70:4c:b1:ea:e2:f0:36:f7:27:13:92:cf:ab: b0:8e:20:61:f0:84:a6:96:56:64:92:01:03:91:22:ce:8b:77: 43:e4:21:c4:f3:8d:59:38:e6:d6:d0:09:c2:f0:d9:3c:88:07: a6:aa:2b:bb:e5:66:dc:a5:38:59:f9:23:25:3f:11:3a:92:78: 58:87:fd:27:9b:b5:97:8c:d9:a1:00:65:a4:d7:da:17:68:65: 8e:00:18:0d:c0:f9:11:6a:94:6d:ec:6a:bc:df:6a:53:55:22: 6b:7f:f2:9f:72:75:a2:54:eb:0d:9e:75:67:7f:db:60:cb:85: 80:b9:29:38:36:ed:8b:f4:ff:4c:a6:27:e1:ff:a1:82:ca:07: c3:14:64:b4:f2:32:5b:cb:ab:5e:c7:6a:1f:73:0f:b7:a1:22: cb:05:46:e7:87:b1:d2:36:c7:a6:15:a3:6e:44:1c:36:53:b9: 42:1b:5f:b7:eb:f9:ac:48:f4:bb:80:79:86:38:b0:cb:91:3d: 54:cc:af:e6:c1:a2:6d:17:cb:ac:c8:d9:85:e6:08:54:6d:31: d2:f8:78:20:7e:19:03:8c:c7:9a:bb:0e:89:a5:3f:09:c6:3c: 7e:b8:28:11:07:00:a8:54:99:70:55:5c:20:75:ca:60:84:bb: b3:c8:c9:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYLq7dGwsnpBNaXHMOYd34QNDRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNTA4MDYwNTM1NTVaFw0yNTA4MDkwNzUyNTVaMDMxMTAvBgNV BAMTKDUxMTMwM0E3OTk3M0IxOTdBRjJENEZGMkU3RjI0QkJBREE3NTQzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXRklmRg3qgpAL8PaaApbmIw1/ GX+HIDKErqzRHpPRJqx4jZTrsLxAlxoURH8Y4BtjywLkkVpVT8fKyMDY8Sxuqw2O ajIDVk1WFSRV20d8c7RFYn0+GckZzgkRr/3UmelihN74Ws/d1FOJHhoQ5g7n6Mom 7uBpbvxlNaRS8BGVsWkhSVbDq7sGgs+kHwYBGtQlfrkJZsBjYuiES7CLA92MQfRL rmadSJ9ou5dPG681WsUbUJZw31RKMMf1GuwvzGC4prNhsCZRxHvOXjYnBdLe7tYp 9+GQ77Sp0doK8uhW5An64HeSSX9Q3DTgTV4+K5HuIJbMS8/FbLaRybAbl+UdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUURMDp5lzsZevLU/y5/JLutp1Q0YwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgcEiqvcEyx6uLwNvcnE5LPq7COIGHwhKaW VmSSAQORIs6Ld0PkIcTzjVk45tbQCcLw2TyIB6aqK7vlZtylOFn5IyU/ETqSeFiH /SebtZeM2aEAZaTX2hdoZY4AGA3A+RFqlG3sarzfalNVImt/8p9ydaJU6w2edWd/ 22DLhYC5KTg27Yv0/0ymJ+H/oYLKB8MUZLTyMlvLq17Hah9zD7ehIssFRueHsdI2 x6YVo25EHDZTuUIbX7fr+axI9LuAeYY4sMuRPVTMr+bBom0Xy6zI2YXmCFRtMdL4 eCB+GQOMx5q7DomlPwnGPH64KBEHAKhUmXBVXCB1ymCEu7PIya4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:24 2025 by rpki-client