$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: KjEn9qZPBn1PmO+7Wr3vALsIgBzrEJkSDL3BJHzCOfo= Subject key identifier: 1B:40:79:20:18:57:47:F1:0F:C3:F2:72:04:45:C3:68:C7:86:7D:BF Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 3637A4E36BD5250C960615FAC02C79EAB86962A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 011B Signing time: Thu 21 Aug 2025 16:31:33 +0000 Manifest this update: Thu 21 Aug 2025 16:26:33 +0000 Manifest next update: Sun 24 Aug 2025 22:29:33 +0000 Files and hashes: 1: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: wYdcnUFBSuzFDxRLSZQv3tgeXMwvjCP9rVz+PUMirJ4=) 2: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: QvUwlNeHBoJfxgZzaOD5mSJbqdJhUTfbdQi0RV+VuPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:37:a4:e3:6b:d5:25:0c:96:06:15:fa:c0:2c:79:ea:b8:69:62:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Aug 21 16:26:33 2025 GMT Not After : Aug 24 22:29:33 2025 GMT Subject: CN=1B407920185747F10FC3F2720445C368C7867DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:b7:93:94:fc:b1:43:bc:80:ff:11:96:a1: 78:64:e5:9b:c9:8e:0f:67:1f:e6:ef:6c:6a:ab:20: 71:92:a3:24:a4:93:ff:c2:f1:d9:53:11:4d:71:46: 15:de:3e:10:53:fb:40:09:26:e4:65:0d:64:b9:c6: 73:c2:54:35:3d:55:4d:21:17:af:6a:4e:38:4b:e9: 14:2e:a9:6e:67:d4:49:ba:a2:b8:ae:07:cf:28:a2: 26:af:e0:a8:e5:02:af:13:e5:60:a0:b5:bc:69:aa: 69:be:85:c8:e6:b5:0c:57:45:5d:d6:d6:eb:7f:fe: 40:ee:3b:56:df:b6:d2:24:c8:19:8e:81:bc:d1:8a: ca:50:af:77:f6:ad:c6:71:76:7e:c2:cc:28:ff:aa: 53:95:2b:c9:95:a4:d3:e7:48:65:dc:22:82:c0:df: 7b:31:17:2b:e7:8b:07:a0:49:86:cf:e8:09:3c:68: 99:47:8e:ed:ee:cf:71:43:cf:92:aa:4c:8e:d7:72: e9:0e:94:cb:d6:84:57:13:16:f5:ef:7b:42:2f:5f: d5:02:2c:16:eb:3c:37:6a:7e:03:bd:00:b1:c4:9e: ad:61:b6:66:4c:f9:f2:6f:e1:ad:48:86:d0:3c:f7: 56:ce:b1:ae:4a:60:9b:5b:45:24:51:2a:20:f0:fc: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:40:79:20:18:57:47:F1:0F:C3:F2:72:04:45:C3:68:C7:86:7D:BF X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b0:b0:7c:b3:ea:21:6e:97:3a:47:51:ce:53:61:79:36:2d: 4c:18:8b:03:0f:0b:33:f7:a5:59:cb:5d:87:db:5c:38:da:84: 4a:4c:25:f4:3c:a3:6e:fd:60:bf:14:4e:f9:29:3f:a6:70:7c: ec:83:50:cd:f9:dc:43:b7:37:c2:ee:f7:a6:c0:ea:7e:71:38: 3b:9a:b1:d1:73:15:2e:ae:a2:03:69:0d:c3:b2:2e:23:9e:ac: e9:f5:64:1c:d8:ae:67:f6:f1:5b:dd:db:44:31:25:4c:a2:02: 8d:ec:0c:b5:45:72:e6:2e:ff:67:39:6f:6f:e9:25:5f:dd:01: 5c:e4:89:1f:04:35:3b:65:ec:c7:13:58:53:54:05:c1:9c:3f: 84:56:c2:42:d1:05:cd:65:62:1d:97:88:8f:e9:ab:83:69:30: c7:37:64:0e:75:39:97:97:1c:e5:69:f0:8f:f4:59:47:4e:94: 60:f1:cf:be:69:86:13:da:b5:be:fc:e6:0b:b1:7c:04:aa:2f: 16:3f:df:64:f6:01:b2:e5:64:cc:8a:38:0e:0c:93:81:5e:d7: 43:56:79:e1:10:81:ef:d3:f8:93:d1:98:62:87:c0:13:77:44: b8:84:11:19:7a:c5:0f:8e:51:dc:65:3e:65:33:49:a6:3c:a6: 0e:70:1f:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjek42vVJQyWBhX6wCx56rhpYqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTA4MjExNjI2MzNaFw0yNTA4MjQyMjI5MzNaMDMxMTAvBgNV BAMTKDFCNDA3OTIwMTg1NzQ3RjEwRkMzRjI3MjA0NDVDMzY4Qzc4NjdEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJ7eTlPyxQ7yA/xGWoXhk5ZvJ jg9nH+bvbGqrIHGSoySkk//C8dlTEU1xRhXePhBT+0AJJuRlDWS5xnPCVDU9VU0h F69qTjhL6RQuqW5n1Em6oriuB88ooiav4KjlAq8T5WCgtbxpqmm+hcjmtQxXRV3W 1ut//kDuO1bfttIkyBmOgbzRispQr3f2rcZxdn7CzCj/qlOVK8mVpNPnSGXcIoLA 33sxFyvniwegSYbP6Ak8aJlHju3uz3FDz5KqTI7XcukOlMvWhFcTFvXve0IvX9UC LBbrPDdqfgO9ALHEnq1htmZM+fJv4a1IhtA891bOsa5KYJtbRSRRKiDw/PdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG0B5IBhXR/EPw/JyBEXDaMeGfb8wHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFawsHyz6iFulzpHUc5TYXk2LUwYiwMPCzP3 pVnLXYfbXDjahEpMJfQ8o279YL8UTvkpP6ZwfOyDUM353EO3N8Lu96bA6n5xODua sdFzFS6uogNpDcOyLiOerOn1ZBzYrmf28Vvd20QxJUyiAo3sDLVFcuYu/2c5b2/p JV/dAVzkiR8ENTtl7McTWFNUBcGcP4RWwkLRBc1lYh2XiI/pq4NpMMc3ZA51OZeX HOVp8I/0WUdOlGDxz75phhPatb785guxfASqLxY/32T2AbLlZMyKOA4Mk4Fe10NW eeEQge/T+JPRmGKHwBN3RLiEERl6xQ+OUdxlPmUzSaY8pg5wHzQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:32 2025 by rpki-client