$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: A4HlAFPluw/GaO7zZsxKYVLnu2peFJZOfwDl0vwEjJU= Subject key identifier: 7C:8E:CD:1B:59:CE:04:1C:FE:45:60:08:57:9B:2D:14:25:9A:C9:46 Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 3B586500B4E9538DF948FB33371D3B102BF82CF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 0175 Signing time: Sat 10 May 2025 22:51:06 +0000 Manifest this update: Sat 10 May 2025 22:46:06 +0000 Manifest next update: Tue 13 May 2025 23:02:06 +0000 Files and hashes: 1: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: UPRB4PsF6TIM5gQt4Oa8RNf/90fBqBwSnDeTKStf0nw=) 2: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: yswPBxpi4q5x4lbS4G/FA2H4SXa9+8I3Exow7fV+/zo=) 3: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: yBAPGcHVxs0aor3S/MuiHBVURZkJW5hEfJ+S3PVniFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:58:65:00:b4:e9:53:8d:f9:48:fb:33:37:1d:3b:10:2b:f8:2c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: May 10 22:46:06 2025 GMT Not After : May 13 23:02:06 2025 GMT Subject: CN=7C8ECD1B59CE041CFE456008579B2D14259AC946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:e7:55:77:9d:48:4f:2f:5d:21:a7:da:5b: 9b:d3:8d:d4:c0:1c:d1:55:e7:90:1b:b5:9a:47:7e: e6:b8:09:5e:9d:14:9e:a9:3b:bd:91:3b:e7:d7:66: cb:af:22:0c:2a:ce:87:11:74:30:56:21:fd:76:ba: f1:0a:ee:67:45:12:44:1c:8d:ed:ad:df:c4:bc:81: 45:d2:60:f9:58:9c:41:7e:76:45:9d:ce:49:3c:1e: 1e:d4:dd:80:8f:00:a7:b7:fd:f1:b4:12:ee:10:ad: bb:79:a4:6b:c6:ff:2e:72:76:fd:40:c2:1a:8c:d5: c0:99:1b:f1:2d:9f:c2:8a:ba:10:c0:0a:81:33:77: ad:23:e2:ef:19:6e:dc:eb:68:ca:04:8a:5f:09:78: 03:e4:33:3a:20:15:06:b9:d6:6c:94:a8:39:43:e3: 04:19:5a:ba:00:f6:85:a9:24:f2:14:a1:bc:59:e5: 9f:f8:fa:77:9d:5b:9d:95:1c:21:35:26:ba:e0:b8: df:80:99:2d:cd:6b:3e:37:4e:df:06:a8:1e:c7:77: 7c:6f:79:ae:05:f5:56:86:3f:e6:92:4e:5d:b9:dd: c6:8d:5b:65:c9:ef:a8:f1:d3:09:db:b3:26:95:f2: 6e:c7:0d:09:f9:0e:19:4e:ee:c1:f4:28:b5:9e:35: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8E:CD:1B:59:CE:04:1C:FE:45:60:08:57:9B:2D:14:25:9A:C9:46 X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cd:bb:d7:4a:d0:14:f2:e9:cf:03:ef:5e:be:bf:2a:86:f4: eb:83:c9:c1:36:2d:a8:83:40:21:b9:a7:31:ea:d7:83:a7:e1: 4d:2e:64:2f:42:e7:87:e8:f1:03:fc:e5:a1:bb:ca:7f:3e:7c: 61:d5:37:d1:02:c2:7d:a6:e4:b9:bb:c5:03:1b:e1:b7:30:48: 2e:b0:92:3e:f2:8a:64:27:36:f8:a8:15:28:de:a6:4a:7b:26: 72:5e:7c:50:b3:31:f6:f7:f2:20:ed:c5:c5:3f:1a:e5:30:18: 65:e5:41:22:87:fc:6b:4b:e1:0c:21:17:ce:98:11:92:c0:51: 06:fa:be:77:4c:b8:cd:b5:03:ff:7f:a7:43:83:da:24:06:7d: 1e:23:0d:e2:25:bc:16:8f:bc:bf:48:95:bd:bf:f8:16:a1:e3: 45:1e:86:c6:75:15:b3:40:63:dc:37:2d:c6:0e:1f:a9:8b:b0: dc:b7:cd:3d:b0:06:b0:cb:a3:ec:af:9d:56:bf:20:d3:07:f1: df:36:5d:93:45:8b:dc:d6:dd:8c:cd:11:d3:a2:cd:5d:89:ee: dd:b1:a0:5f:9a:41:bc:39:4b:ca:a1:93:cd:14:0d:6f:e2:4b: 7a:d1:a8:6a:8a:cd:d5:c5:07:dc:fe:75:81:28:a4:f4:40:86: 31:15:0b:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1hlALTpU435SPszNx07ECv4LPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTA1MTAyMjQ2MDZaFw0yNTA1MTMyMzAyMDZaMDMxMTAvBgNV BAMTKDdDOEVDRDFCNTlDRTA0MUNGRTQ1NjAwODU3OUIyRDE0MjU5QUM5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HudVd51ITy9dIafaW5vTjdTA HNFV55AbtZpHfua4CV6dFJ6pO72RO+fXZsuvIgwqzocRdDBWIf12uvEK7mdFEkQc je2t38S8gUXSYPlYnEF+dkWdzkk8Hh7U3YCPAKe3/fG0Eu4Qrbt5pGvG/y5ydv1A whqM1cCZG/Etn8KKuhDACoEzd60j4u8ZbtzraMoEil8JeAPkMzogFQa51myUqDlD 4wQZWroA9oWpJPIUobxZ5Z/4+nedW52VHCE1JrrguN+AmS3Naz43Tt8GqB7Hd3xv ea4F9VaGP+aSTl253caNW2XJ76jx0wnbsyaV8m7HDQn5DhlO7sH0KLWeNbiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfI7NG1nOBBz+RWAIV5stFCWayUYwHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3Nu9dK0BTy6c8D716+vyqG9OuDycE2LaiD QCG5pzHq14On4U0uZC9C54fo8QP85aG7yn8+fGHVN9ECwn2m5Lm7xQMb4bcwSC6w kj7yimQnNvioFSjepkp7JnJefFCzMfb38iDtxcU/GuUwGGXlQSKH/GtL4QwhF86Y EZLAUQb6vndMuM21A/9/p0OD2iQGfR4jDeIlvBaPvL9Ilb2/+Bah40UehsZ1FbNA Y9w3LcYOH6mLsNy3zT2wBrDLo+yvnVa/INMH8d82XZNFi9zW3YzNEdOizV2J7t2x oF+aQbw5S8qhk80UDW/iS3rRqGqKzdXFB9z+dYEopPRAhjEVCwA= -----END CERTIFICATE-----Generated at Sun May 11 22:23:55 2025 by rpki-client