$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: suFfVse4qtIwz3Ja5wbRuT3grIOnSJgpvm3R6DDRDB4= Subject key identifier: 6C:CF:E3:B4:52:E1:CF:DD:4F:C6:02:7D:CB:1C:65:95:38:EC:D5:59 Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 68C4491F087B64A04A32E0DB03FD94677834B11D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 0136 Signing time: Sun 19 Oct 2025 23:11:35 +0000 Manifest this update: Sun 19 Oct 2025 23:06:35 +0000 Manifest next update: Thu 23 Oct 2025 05:22:35 +0000 Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: vCfzMfQvGwOMzwpXG1ONnYK47vGEfQfjQ3qm3O8j45g=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: dEzIqEvBQoLb4jDZxATrGmBvt2RxQTfgU7Js5Mbni88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c4:49:1f:08:7b:64:a0:4a:32:e0:db:03:fd:94:67:78:34:b1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Oct 19 23:06:35 2025 GMT Not After : Oct 23 05:22:35 2025 GMT Subject: CN=6CCFE3B452E1CFDD4FC6027DCB1C659538ECD559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:9e:08:33:c0:bd:5b:16:0f:d0:67:f2:df: 21:da:0e:bf:9e:d7:80:00:84:1c:35:23:86:dc:c7: b3:a7:a2:1b:13:4d:a2:fa:c2:bf:c3:19:b3:da:21: eb:2f:77:88:93:2f:3e:c1:96:c1:ce:d7:ca:11:20: 74:bb:68:23:4d:3c:ed:c4:0e:bb:42:60:5a:fa:3d: 9b:a5:11:7e:44:42:5b:e8:a1:66:8e:cb:d2:bc:b9: ea:c5:30:42:be:49:05:8d:49:1a:5b:37:13:40:69: 61:9e:7a:9d:56:a1:af:ec:22:da:c0:4f:07:a4:85: 86:fd:63:bb:ea:97:69:e1:a4:64:b3:6c:c3:25:dc: d8:80:e2:b7:70:9a:11:36:e2:37:49:02:6e:73:93: 97:71:f4:59:5b:33:fc:59:86:9b:1f:e3:3a:1f:f6: 8c:84:bd:9f:38:c9:f0:24:7a:06:5a:0c:19:b1:21: 04:fa:fc:99:31:23:9b:bf:00:55:ed:11:65:3e:fc: 83:bf:f7:cd:26:bb:c6:59:bb:ba:fb:14:f2:08:e8: 1c:78:27:5c:2b:01:fb:ae:c2:44:7f:53:ae:93:29: 0e:ec:0e:2b:8d:68:ee:77:d3:45:e5:f0:2c:20:92: 0a:7c:a3:99:f7:48:85:61:c8:57:ad:37:d3:0f:9e: 6c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CF:E3:B4:52:E1:CF:DD:4F:C6:02:7D:CB:1C:65:95:38:EC:D5:59 X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:1f:3a:34:25:e1:ac:0a:9b:23:f1:ac:07:65:07:61:69:4b: fa:55:ec:8e:ad:5b:c4:29:e7:c7:4d:c6:ad:51:07:77:d7:7a: fd:d6:e1:91:29:1d:c0:61:45:1f:ed:b1:04:43:43:51:bb:fe: 15:99:38:53:30:98:3e:32:b9:bc:91:27:6c:6f:c7:c5:95:8f: df:75:cc:f8:94:0e:ff:54:84:a4:50:0d:d1:b4:62:2c:68:ab: 46:0e:94:fd:8f:bd:02:e8:ec:21:db:e2:89:d7:64:9e:72:8c: ec:69:d7:4a:90:e6:ea:05:86:09:7a:d7:5c:a9:97:ff:c0:13: aa:3d:c5:29:f1:02:02:3e:38:fc:65:9c:9c:3d:3b:69:57:2a: 66:4d:92:52:9c:19:1f:12:02:ab:c8:3b:b1:c2:34:85:d6:1f: 04:ed:fd:3d:05:72:c1:c1:41:1f:b7:bb:1d:a5:c7:43:81:70: 85:19:c4:8b:92:1f:49:46:50:55:08:0b:31:fd:ba:11:bf:d7: 41:37:e0:85:94:47:47:07:45:e8:e3:89:54:af:7d:a4:5c:d5: 3f:42:4b:13:80:3f:34:36:d2:41:4e:a2:47:ed:14:c6:2e:0a: e3:93:67:b4:57:1b:c5:54:34:5a:b2:fb:09:96:19:d6:97:d7: 04:eb:9d:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMRJHwh7ZKBKMuDbA/2UZ3g0sR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTEwMTkyMzA2MzVaFw0yNTEwMjMwNTIyMzVaMDMxMTAvBgNV BAMTKDZDQ0ZFM0I0NTJFMUNGREQ0RkM2MDI3RENCMUM2NTk1MzhFQ0Q1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQC54IM8C9WxYP0Gfy3yHaDr+e 14AAhBw1I4bcx7OnohsTTaL6wr/DGbPaIesvd4iTLz7BlsHO18oRIHS7aCNNPO3E DrtCYFr6PZulEX5EQlvooWaOy9K8uerFMEK+SQWNSRpbNxNAaWGeep1Woa/sItrA TwekhYb9Y7vql2nhpGSzbMMl3NiA4rdwmhE24jdJAm5zk5dx9FlbM/xZhpsf4zof 9oyEvZ84yfAkegZaDBmxIQT6/JkxI5u/AFXtEWU+/IO/980mu8ZZu7r7FPII6Bx4 J1wrAfuuwkR/U66TKQ7sDiuNaO5300Xl8Cwgkgp8o5n3SIVhyFetN9MPnmwpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbM/jtFLhz91PxgJ9yxxllTjs1VkwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQfOjQl4awKmyPxrAdlB2FpS/pV7I6tW8Qp 58dNxq1RB3fXev3W4ZEpHcBhRR/tsQRDQ1G7/hWZOFMwmD4yubyRJ2xvx8WVj991 zPiUDv9UhKRQDdG0Yixoq0YOlP2PvQLo7CHb4onXZJ5yjOxp10qQ5uoFhgl611yp l//AE6o9xSnxAgI+OPxlnJw9O2lXKmZNklKcGR8SAqvIO7HCNIXWHwTt/T0FcsHB QR+3ux2lx0OBcIUZxIuSH0lGUFUICzH9uhG/10E34IWUR0cHRejjiVSvfaRc1T9C SxOAPzQ20kFOokftFMYuCuOTZ7RXG8VUNFqy+wmWGdaX1wTrnTk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:29 2025 by rpki-client