$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: qfTESMCRzr4KQEEB6fl1ya+zrnj+2ZAWll+4zT46COk= Subject key identifier: 21:7A:5D:0F:97:0B:9B:F5:22:B8:1C:11:49:DC:B1:B8:6B:42:70:29 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 2D250017F6B2EA5925070CDDB851ACF4274ABD68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0108 Signing time: Sat 28 Jun 2025 18:00:53 +0000 Manifest this update: Sat 28 Jun 2025 17:55:53 +0000 Manifest next update: Wed 02 Jul 2025 04:13:53 +0000 Files and hashes: 1: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: ibQOS7/2ERuMNpNkb7WytvR2tjIuE2dlvwK9BE0OjAg=) 2: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI=) 3: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: cbrl6dBckxe27KqOtUNV9s29bXGi1zCIe4QmB1+JlkA=) 4: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: +AkE8lBocYkzQtUK7rxyogDErEqAx6OPKcVzXziAtKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:25:00:17:f6:b2:ea:59:25:07:0c:dd:b8:51:ac:f4:27:4a:bd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Jun 28 17:55:53 2025 GMT Not After : Jul 2 04:13:53 2025 GMT Subject: CN=217A5D0F970B9BF522B81C1149DCB1B86B427029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:ec:a3:bf:41:00:9b:70:f8:c3:e7:0f:6a: 44:6e:4f:8c:e8:ef:23:3e:c0:f5:9c:3b:7a:5a:80: 67:b0:49:2c:6f:7e:8b:a6:52:30:3d:a5:c6:b6:c3: 63:27:ff:f5:8c:85:8f:28:60:ef:cc:8f:b9:d8:2f: e5:49:bd:ff:9a:23:79:57:70:64:c8:00:8d:37:aa: 50:3f:dd:18:1f:13:8e:ce:87:94:57:bb:4f:b3:cd: 1a:d3:72:6f:03:7c:77:4d:fa:b2:63:ac:59:c8:7f: 65:de:95:10:79:c1:f0:7c:29:fd:72:60:8a:df:30: 4d:e3:7f:64:23:28:18:8b:65:7c:05:22:bc:b7:f7: 8b:98:34:11:34:ac:1b:aa:e9:d3:00:d3:95:99:2c: a8:d2:cf:79:cd:9e:07:ae:6b:cf:37:1c:f6:54:1e: f3:b9:af:01:6d:a1:d9:61:1f:04:ca:94:b1:f4:74: 3d:5d:2a:9b:57:ba:59:ed:33:98:38:6f:ed:8e:e4: e5:d5:e1:cd:07:c7:ba:92:65:18:e5:dc:10:9f:36: 60:7f:f6:02:23:06:e7:20:1c:9f:8e:ef:3a:af:08: a6:d2:ed:cc:ca:4c:2b:82:64:49:fd:8c:9a:5a:60: b9:be:ec:9b:28:61:39:1c:30:dd:16:57:40:bc:ac: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7A:5D:0F:97:0B:9B:F5:22:B8:1C:11:49:DC:B1:B8:6B:42:70:29 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2b:58:03:8a:5c:56:09:40:8f:e8:ca:98:a1:fb:82:c9:cc: ce:be:d6:dd:cf:4e:74:7a:d0:79:cc:40:ba:5b:9e:37:9c:32: 08:37:67:b7:83:65:64:62:c3:42:4b:f1:74:b2:e9:9c:58:a5: e8:19:7a:af:1c:df:6c:fb:44:60:5f:9d:c1:36:3a:9c:4c:12: 77:fb:10:78:46:26:92:93:dd:b7:87:7f:bf:70:e3:54:9f:3b: a6:85:f7:b0:8e:e3:5b:ac:39:20:d2:32:70:0b:95:83:2f:10: 59:53:f5:e6:b7:58:ee:65:62:9c:9e:d1:e5:5c:c3:f3:ce:f8: 96:64:ba:57:c5:a2:50:0a:de:aa:47:90:c2:8d:57:84:83:db: cd:e4:76:a6:3f:57:79:d7:e2:3f:2c:fd:dd:e3:41:01:f6:42: 98:6c:5a:02:6f:2e:3e:8e:aa:f5:58:2e:f1:0f:94:a4:81:0d: 16:0c:5f:71:0d:94:25:3b:c6:56:41:d6:fe:fe:b3:73:03:29: 1c:c4:1d:e0:19:e6:e0:6c:6a:bf:ef:30:11:b6:1b:4d:14:1d: 35:19:9a:d8:de:dd:b2:53:a9:a2:e3:04:e2:13:de:aa:7d:fd: a4:3d:6a:bd:a1:6e:ff:08:c0:ae:70:9f:36:e9:79:cf:ee:2d: 53:8b:f2:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSUAF/ay6lklBwzduFGs9CdKvWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNTA2MjgxNzU1NTNaFw0yNTA3MDIwNDEzNTNaMDMxMTAvBgNV BAMTKDIxN0E1RDBGOTcwQjlCRjUyMkI4MUMxMTQ5RENCMUI4NkI0MjcwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLveyjv0EAm3D4w+cPakRuT4zo 7yM+wPWcO3pagGewSSxvfoumUjA9pca2w2Mn//WMhY8oYO/Mj7nYL+VJvf+aI3lX cGTIAI03qlA/3RgfE47Oh5RXu0+zzRrTcm8DfHdN+rJjrFnIf2XelRB5wfB8Kf1y YIrfME3jf2QjKBiLZXwFIry394uYNBE0rBuq6dMA05WZLKjSz3nNngeua883HPZU HvO5rwFtodlhHwTKlLH0dD1dKptXulntM5g4b+2O5OXV4c0Hx7qSZRjl3BCfNmB/ 9gIjBucgHJ+O7zqvCKbS7czKTCuCZEn9jJpaYLm+7JsoYTkcMN0WV0C8rBNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIXpdD5cLm/UiuBwRSdyxuGtCcCkwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMrWAOKXFYJQI/oypih+4LJzM6+1t3PTnR6 0HnMQLpbnjecMgg3Z7eDZWRiw0JL8XSy6ZxYpegZeq8c32z7RGBfncE2OpxMEnf7 EHhGJpKT3beHf79w41SfO6aF97CO41usOSDSMnALlYMvEFlT9ea3WO5lYpye0eVc w/PO+JZkulfFolAK3qpHkMKNV4SD283kdqY/V3nX4j8s/d3jQQH2QphsWgJvLj6O qvVYLvEPlKSBDRYMX3ENlCU7xlZB1v7+s3MDKRzEHeAZ5uBsar/vMBG2G00UHTUZ mtje3bJTqaLjBOIT3qp9/aQ9ar2hbv8IwK5wnzbpec/uLVOL8lY= -----END CERTIFICATE-----Generated at Mon Jun 30 00:40:53 2025 by rpki-client