$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: 7UKF8+THhE4RPd81pQkMebWZFRj0CnCmU/pR+3Nwjgs= Subject key identifier: 35:2E:C4:6A:D3:43:E0:08:C3:53:DC:44:75:8A:E8:98:40:84:E0:91 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 3C44715F3DD640B0DE572F0E7ED45EBDDD6BC450 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0120 Signing time: Thu 21 Aug 2025 13:40:54 +0000 Manifest this update: Thu 21 Aug 2025 13:35:54 +0000 Manifest next update: Sun 24 Aug 2025 22:54:54 +0000 Files and hashes: 1: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: cbrl6dBckxe27KqOtUNV9s29bXGi1zCIe4QmB1+JlkA=) 2: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: +AkE8lBocYkzQtUK7rxyogDErEqAx6OPKcVzXziAtKI=) 3: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: wWyvaSqD+Sb0DlETLmDySmk/p4nVuzD226TIM5LBl7g=) 4: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:44:71:5f:3d:d6:40:b0:de:57:2f:0e:7e:d4:5e:bd:dd:6b:c4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Aug 21 13:35:54 2025 GMT Not After : Aug 24 22:54:54 2025 GMT Subject: CN=352EC46AD343E008C353DC44758AE8984084E091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ed:e4:50:18:ee:fb:2b:3e:bd:9b:e7:33:6e: 87:4d:9e:ca:ae:34:37:ed:71:4f:d1:91:90:65:5e: ab:68:e2:34:c7:ce:2b:26:99:42:a3:87:4f:70:36: 33:09:f2:a3:55:2d:8e:81:1e:f3:d5:95:0e:95:64: 1c:22:e7:24:ed:73:a8:c3:82:27:13:ee:24:fa:4c: 0e:23:a5:db:03:7e:c5:e8:b8:1c:23:54:ff:68:10: 33:b8:17:76:58:8f:ba:32:1e:01:5f:a4:27:27:96: 85:5e:86:89:b4:49:3c:9c:75:30:84:1f:e9:3b:ae: f4:34:0b:6a:71:c9:d0:b9:9a:e0:d8:63:e8:c4:61: 25:90:c1:97:77:80:93:a7:df:fc:d9:27:a0:64:8e: 9f:4b:f9:a1:95:2a:ff:3b:b9:a7:72:ce:d6:f9:5a: 1d:92:67:b4:9f:1c:5e:b2:c1:21:ee:dd:7a:a0:54: d3:ad:c6:0e:9b:15:3a:7e:3b:03:fd:6b:a8:9e:95: ac:0e:31:9c:77:4a:ff:29:26:15:6f:5f:59:a4:46: 81:f6:7e:0b:7d:2f:c0:b9:e9:df:36:88:f4:57:dd: 9e:33:63:cc:b8:f1:ab:52:0a:1f:29:70:f7:d4:dc: e6:49:d8:42:17:bc:83:27:73:a7:a8:90:01:8d:9a: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2E:C4:6A:D3:43:E0:08:C3:53:DC:44:75:8A:E8:98:40:84:E0:91 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:04:ad:3b:0f:56:27:41:ef:aa:06:f5:6a:b3:37:ae:86:e1: 6d:52:e6:d4:6a:55:12:ee:80:f9:74:91:22:c6:56:da:3b:30: a5:8c:bc:8d:52:73:81:ed:30:b4:25:50:49:9d:e2:bf:f8:b2: ea:2c:c7:4f:b5:ca:ee:9a:73:46:e4:22:a0:5f:88:cf:cc:7d: 54:d5:d0:66:df:81:4f:3b:cb:a7:9d:7d:79:f6:e5:c9:eb:c1: 0c:2f:e4:03:83:c6:78:30:81:cb:95:78:0b:c5:37:90:9d:93: 48:b4:f7:ac:f3:08:2e:60:9d:b7:39:0d:57:69:7e:93:3f:ee: 2d:a2:81:6d:b8:dd:9c:60:93:86:e1:1f:27:af:e8:76:5a:31: ff:fa:38:02:cd:2b:7e:ae:10:98:1f:94:3d:f5:b1:e4:84:90: 3a:f6:a1:2f:1d:8d:77:60:64:ba:05:db:52:57:e9:a2:fd:d8: 18:01:9a:49:8e:4b:fa:27:b9:f2:7b:f5:ce:a8:f9:9f:ce:d2: a3:99:d9:22:71:49:1f:1e:22:71:25:3e:7c:dd:90:09:fa:74: 04:2a:b8:d7:3c:19:c4:b1:2c:b0:c3:0d:fd:49:39:46:0c:79: 46:9f:cc:3d:3a:52:b3:6e:97:d7:18:df:ac:12:50:f3:f6:b3: 21:f4:7e:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPERxXz3WQLDeVy8OftRevd1rxFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNTA4MjExMzM1NTRaFw0yNTA4MjQyMjU0NTRaMDMxMTAvBgNV BAMTKDM1MkVDNDZBRDM0M0UwMDhDMzUzREM0NDc1OEFFODk4NDA4NEUwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx7eRQGO77Kz69m+czbodNnsqu NDftcU/RkZBlXqto4jTHzismmUKjh09wNjMJ8qNVLY6BHvPVlQ6VZBwi5yTtc6jD gicT7iT6TA4jpdsDfsXouBwjVP9oEDO4F3ZYj7oyHgFfpCcnloVehom0STycdTCE H+k7rvQ0C2pxydC5muDYY+jEYSWQwZd3gJOn3/zZJ6Bkjp9L+aGVKv87uadyztb5 Wh2SZ7SfHF6ywSHu3XqgVNOtxg6bFTp+OwP9a6ielawOMZx3Sv8pJhVvX1mkRoH2 fgt9L8C56d82iPRX3Z4zY8y48atSCh8pcPfU3OZJ2EIXvIMnc6eokAGNmmaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNS7EatND4AjDU9xEdYromECE4JEwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgErTsPVidB76oG9WqzN66G4W1S5tRqVRLu gPl0kSLGVto7MKWMvI1Sc4HtMLQlUEmd4r/4suosx0+1yu6ac0bkIqBfiM/MfVTV 0GbfgU87y6edfXn25cnrwQwv5AODxngwgcuVeAvFN5Cdk0i096zzCC5gnbc5DVdp fpM/7i2igW243Zxgk4bhHyev6HZaMf/6OALNK36uEJgflD31seSEkDr2oS8djXdg ZLoF21JX6aL92BgBmkmOS/onufJ79c6o+Z/O0qOZ2SJxSR8eInElPnzdkAn6dAQq uNc8GcSxLLDDDf1JOUYMeUafzD06UrNul9cY36wSUPP2syH0fro= -----END CERTIFICATE-----Generated at Sat Aug 23 16:47:52 2025 by rpki-client