$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: Jr8zh5cFj6QPy5+Ne+jQxA2+oVZYj+EXlWjQrOU6pIc= Subject key identifier: 47:93:17:B3:23:AE:2F:06:DA:6D:BB:05:6C:17:F9:DA:83:A2:E3:0B Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 44D3219FC970E498277FB953BFCC7C15B4EF162A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 01BD Signing time: Mon 20 Oct 2025 21:11:09 +0000 Manifest this update: Mon 20 Oct 2025 21:06:09 +0000 Manifest next update: Fri 24 Oct 2025 05:03:09 +0000 Files and hashes: 1: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: E1t+/xSOIrZkxMo9AQ5fFExIpr8gQKjh2W9sAs+Tuws=) 2: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: yBAPGcHVxs0aor3S/MuiHBVURZkJW5hEfJ+S3PVniFQ=) 3: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: UPRB4PsF6TIM5gQt4Oa8RNf/90fBqBwSnDeTKStf0nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d3:21:9f:c9:70:e4:98:27:7f:b9:53:bf:cc:7c:15:b4:ef:16:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Oct 20 21:06:09 2025 GMT Not After : Oct 24 05:03:09 2025 GMT Subject: CN=479317B323AE2F06DA6DBB056C17F9DA83A2E30B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:82:df:f9:8f:45:4f:4f:ae:0d:d7:77:4d:d5: 2c:bc:8f:b7:0b:12:64:9c:10:41:d3:09:d7:86:a5: b9:2f:4e:05:55:8d:27:e9:f7:43:47:62:2b:dc:1c: bc:f1:43:ee:b4:67:aa:a0:26:8c:cc:9d:12:d0:98: 93:0d:f4:a1:95:b2:24:ad:f6:01:16:91:70:5e:93: db:87:d9:86:f3:d0:88:d0:b6:63:8a:33:e0:d3:6b: 28:3e:33:b0:f1:df:65:d2:11:45:5c:8a:f5:8a:95: 1b:01:d8:a8:21:b8:9b:f7:d9:1c:74:26:08:6e:8d: fc:96:10:bd:01:b5:24:82:ab:30:9a:b8:f7:fa:9e: a5:5b:85:25:cd:19:ed:b5:50:ca:1f:8a:8c:c8:5e: 3f:19:46:e8:44:c4:c9:55:2e:bf:6f:72:a9:05:e6: 4b:22:cb:90:6f:d7:bd:15:ff:cd:a6:10:f9:0d:35: 91:da:07:54:6b:3c:ac:d7:62:70:f3:08:f9:62:f4: 1c:ed:0e:e0:d6:b3:9e:df:88:ac:f1:d1:f7:24:61: fa:a9:f9:75:d8:e2:d5:ae:2e:36:f4:25:ee:2b:66: ed:64:bd:54:ab:89:82:46:29:ce:8a:3e:bb:7a:51: 5b:8e:f3:25:57:da:69:b1:60:cc:a2:6e:80:d2:96: af:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:93:17:B3:23:AE:2F:06:DA:6D:BB:05:6C:17:F9:DA:83:A2:E3:0B X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:00:b9:51:2f:90:0f:95:0b:71:09:d4:70:6f:3e:8f:93:d0: a1:74:f1:38:fd:64:8c:df:57:16:d8:3a:5a:ee:8f:5a:02:5c: a2:d2:06:49:84:dd:13:ca:27:07:d9:6c:18:d0:04:5a:72:51: 18:7c:3f:5a:c9:d2:fc:c3:80:90:d8:43:fc:f1:55:7b:65:ab: 20:b1:1d:d3:a5:9d:bd:9e:8d:c8:49:73:b9:3d:e7:0d:5d:af: f4:0f:77:55:e3:52:c7:ca:99:07:37:03:21:ba:a9:96:bf:20: b4:92:29:d1:a0:61:9c:32:64:45:38:2f:a1:81:c5:35:fc:42: a8:5b:5e:97:61:3d:9b:a3:4b:66:79:9f:32:5d:5f:d7:d4:a4: 9f:72:da:37:d0:c1:01:4f:17:d2:d0:97:04:6c:26:52:6b:b8: a7:ab:c1:bf:18:df:1f:95:13:53:30:9d:ad:4f:72:9e:b1:cf: 7d:1a:8a:3a:b1:fb:d9:41:f6:3c:44:1d:0b:57:79:dd:c4:27: d3:fa:7f:3c:ac:bd:b1:45:aa:dd:bd:e5:a4:0c:db:26:e8:cf: d3:b4:8f:7c:39:ea:1e:e6:cf:96:13:74:a2:5f:0f:ad:a5:84: 8a:54:f0:35:3e:42:8d:1d:ac:4c:67:da:d6:f8:62:a7:a4:bb: 84:f3:51:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNMhn8lw5Jgnf7lTv8x8FbTvFiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTEwMjAyMTA2MDlaFw0yNTEwMjQwNTAzMDlaMDMxMTAvBgNV BAMTKDQ3OTMxN0IzMjNBRTJGMDZEQTZEQkIwNTZDMTdGOURBODNBMkUzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigt/5j0VPT64N13dN1Sy8j7cL EmScEEHTCdeGpbkvTgVVjSfp90NHYivcHLzxQ+60Z6qgJozMnRLQmJMN9KGVsiSt 9gEWkXBek9uH2Ybz0IjQtmOKM+DTayg+M7Dx32XSEUVcivWKlRsB2KghuJv32Rx0 JghujfyWEL0BtSSCqzCauPf6nqVbhSXNGe21UMofiozIXj8ZRuhExMlVLr9vcqkF 5ksiy5Bv170V/82mEPkNNZHaB1RrPKzXYnDzCPli9BztDuDWs57fiKzx0fckYfqp +XXY4tWuLjb0Je4rZu1kvVSriYJGKc6KPrt6UVuO8yVX2mmxYMyiboDSlq8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR5MXsyOuLwbabbsFbBf52oOi4wswHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQAuVEvkA+VC3EJ1HBvPo+T0KF08Tj9ZIzf VxbYOlruj1oCXKLSBkmE3RPKJwfZbBjQBFpyURh8P1rJ0vzDgJDYQ/zxVXtlqyCx HdOlnb2ejchJc7k95w1dr/QPd1XjUsfKmQc3AyG6qZa/ILSSKdGgYZwyZEU4L6GB xTX8QqhbXpdhPZujS2Z5nzJdX9fUpJ9y2jfQwQFPF9LQlwRsJlJruKerwb8Y3x+V E1Mwna1Pcp6xz30aijqx+9lB9jxEHQtXed3EJ9P6fzysvbFFqt295aQM2yboz9O0 j3w56h7mz5YTdKJfD62lhIpU8DU+Qo0drExn2tb4Yqeku4TzUVQ= -----END CERTIFICATE-----Generated at Tue Oct 21 02:09:19 2025 by rpki-client