$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: ZK6DiRMJ5zCvE4X7u2fUbh/eAIRbUfh4B5Rp/6JpbNI= Subject key identifier: BB:2A:89:D2:FB:A7:87:17:C2:EC:90:A2:79:2E:01:DE:2A:62:E7:51 Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 59F8FC8C8E9138DDD164A643052B7440504AECE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: EC Signing time: Fri 09 May 2025 20:51:32 +0000 Manifest this update: Fri 09 May 2025 20:46:32 +0000 Manifest next update: Mon 12 May 2025 20:57:32 +0000 Files and hashes: 1: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: wYdcnUFBSuzFDxRLSZQv3tgeXMwvjCP9rVz+PUMirJ4=) 2: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: jxUzYoJV0V0RD4iC7et+b22nDe4e+4t3n4dAdOt3pxs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f8:fc:8c:8e:91:38:dd:d1:64:a6:43:05:2b:74:40:50:4a:ec:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: May 9 20:46:32 2025 GMT Not After : May 12 20:57:32 2025 GMT Subject: CN=BB2A89D2FBA78717C2EC90A2792E01DE2A62E751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:91:39:7a:33:af:09:c9:b0:92:60:a3:bd: 71:db:2a:c1:b3:02:c9:c8:bf:de:e1:fd:b8:09:a9: ea:34:35:44:7c:93:6b:79:b5:0e:b2:e4:ad:ba:85: ff:1a:bf:b4:54:87:35:3c:80:dc:22:04:60:1b:19: 07:b1:59:28:24:2a:d3:22:b5:56:b2:c9:32:9b:05: 11:33:20:bf:e4:67:a9:52:14:c2:88:49:0c:45:6c: 64:fe:f7:a0:67:d8:9c:5c:8b:09:41:04:02:89:b7: 33:3e:72:87:0b:2e:ed:6d:3c:23:4c:1a:63:2c:93: 8d:79:cf:8c:d6:4a:97:2e:f0:df:8a:79:a4:9d:9f: 5f:7a:24:4d:64:fe:2a:6e:e8:19:15:4e:49:8f:27: a0:10:28:be:8f:e2:64:ca:c9:44:31:b9:d1:1e:af: c0:1d:ca:92:33:a7:eb:86:84:5c:05:07:02:1b:ee: 66:94:a2:43:ff:19:39:e3:d0:aa:de:fd:d8:ce:39: 25:fd:10:8a:9e:64:f6:55:f1:7d:f5:48:2e:66:be: 4e:2c:7b:d4:41:03:26:d3:33:5a:e9:8b:a5:9d:6e: 7c:04:94:2c:7b:5a:cf:15:c2:49:fa:00:dc:e8:0c: e8:49:e5:4c:9e:8e:37:09:5e:8b:c7:1a:04:52:7f: 8c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2A:89:D2:FB:A7:87:17:C2:EC:90:A2:79:2E:01:DE:2A:62:E7:51 X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:45:65:6d:0a:f3:79:fd:69:36:24:2b:9e:cb:9a:9a:f2:89: e5:88:c1:69:8f:76:7f:22:d1:84:f3:51:27:61:0e:e9:50:55: c5:e9:a0:34:39:62:b9:00:29:bb:84:89:54:31:3f:fb:4b:45: fa:cf:50:b5:eb:b1:cc:63:07:69:21:65:3d:b6:49:58:02:b4: b2:b2:20:c1:62:8f:9d:09:2b:6d:09:13:63:be:ac:50:fb:35: 80:47:68:07:78:3c:85:19:20:a4:de:53:f1:26:dc:9d:9d:64: 2b:33:74:7d:38:f3:f9:07:57:bf:93:d1:c7:ea:15:87:52:59: 8c:4d:c1:ff:fb:1c:b1:4c:ea:52:57:50:9d:62:0b:3f:36:c0: af:a4:87:e6:e3:98:63:d7:38:dd:5c:15:e7:63:e0:30:04:3e: 49:91:c1:c5:a8:6f:a9:81:fc:c6:7b:8f:70:18:62:e3:94:b0: d4:85:75:7c:27:1e:ad:07:22:e8:61:64:76:e0:e3:e9:a0:3d: cc:11:92:11:7f:92:81:94:0a:04:47:61:89:7e:5e:7f:bb:ce: d5:ef:91:4c:b7:39:7d:3e:95:0b:26:86:68:07:7a:08:a2:24: 5c:17:05:b9:68:4b:08:b6:0d:66:5a:72:6a:9b:de:5f:34:82: 44:61:5c:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfj8jI6RON3RZKZDBSt0QFBK7OEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTA1MDkyMDQ2MzJaFw0yNTA1MTIyMDU3MzJaMDMxMTAvBgNV BAMTKEJCMkE4OUQyRkJBNzg3MTdDMkVDOTBBMjc5MkUwMURFMkE2MkU3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCJE5ejOvCcmwkmCjvXHbKsGz AsnIv97h/bgJqeo0NUR8k2t5tQ6y5K26hf8av7RUhzU8gNwiBGAbGQexWSgkKtMi tVayyTKbBREzIL/kZ6lSFMKISQxFbGT+96Bn2JxciwlBBAKJtzM+cocLLu1tPCNM GmMsk415z4zWSpcu8N+KeaSdn196JE1k/ipu6BkVTkmPJ6AQKL6P4mTKyUQxudEe r8AdypIzp+uGhFwFBwIb7maUokP/GTnj0Kre/djOOSX9EIqeZPZV8X31SC5mvk4s e9RBAybTM1rpi6WdbnwElCx7Ws8Vwkn6ANzoDOhJ5UyejjcJXovHGgRSf4x9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyqJ0vunhxfC7JCieS4B3ipi51EwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpFZW0K83n9aTYkK57LmpryieWIwWmPdn8i 0YTzUSdhDulQVcXpoDQ5YrkAKbuEiVQxP/tLRfrPULXrscxjB2khZT22SVgCtLKy IMFij50JK20JE2O+rFD7NYBHaAd4PIUZIKTeU/Em3J2dZCszdH048/kHV7+T0cfq FYdSWYxNwf/7HLFM6lJXUJ1iCz82wK+kh+bjmGPXON1cFedj4DAEPkmRwcWob6mB /MZ7j3AYYuOUsNSFdXwnHq0HIuhhZHbg4+mgPcwRkhF/koGUCgRHYYl+Xn+7ztXv kUy3OX0+lQsmhmgHegiiJFwXBbloSwi2DWZacmqb3l80gkRhXKw= -----END CERTIFICATE-----Generated at Sun May 11 06:17:25 2025 by rpki-client