$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: PjrJwsc+sf03ehqK8KydjITiQuwDcHqvaZHN+dUwUHE= Subject key identifier: 9B:72:10:24:38:05:C4:62:83:6C:92:AF:3D:B0:50:F6:92:40:DB:58 Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 426FCC59835B7FE3A216CA3E8E9A73A04226EEE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 0320 Signing time: Sat 23 Aug 2025 08:40:49 +0000 Manifest this update: Sat 23 Aug 2025 08:35:49 +0000 Manifest next update: Tue 26 Aug 2025 09:47:49 +0000 Files and hashes: 1: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) 2: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: 5QVtocVZxIMw74FEKUW68O/nUHU4gMkPnpzo9CeOWes=) 3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pokBZpL5hJ0olRQ6JHoy2AMfLYfeAfsOoOkW3DB0M7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6f:cc:59:83:5b:7f:e3:a2:16:ca:3e:8e:9a:73:a0:42:26:ee:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Aug 23 08:35:49 2025 GMT Not After : Aug 26 09:47:49 2025 GMT Subject: CN=9B7210243805C462836C92AF3DB050F69240DB58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:f7:ca:fd:1c:9d:ee:39:f9:32:6d:ac:06: a2:1f:00:77:08:50:5d:76:7c:a8:dc:48:51:ca:08: 0a:04:06:b1:ee:d9:8f:d5:d5:9b:77:63:46:56:cd: a2:99:ad:b4:b7:62:45:f9:3d:40:3b:45:2b:44:0c: 9e:bd:71:2a:c0:74:b3:8a:e9:9e:62:f7:01:50:13: b4:cb:ec:73:07:41:92:e3:de:52:09:2d:11:24:27: b6:b2:cf:15:2b:d4:e4:fc:16:ff:96:af:7d:92:ba: 85:1c:7e:50:32:4b:80:95:42:13:69:f3:21:10:df: 93:45:2c:66:c8:3b:68:96:6c:38:35:81:ac:19:b6: 0c:7c:bc:cf:74:c4:96:d1:0d:dd:12:b0:b9:5e:6d: a7:e1:24:3f:fc:56:29:9c:23:b7:8c:2f:c2:8e:6c: 06:1e:d2:a5:96:f3:a2:bf:e2:1e:05:5e:c5:dd:09: 00:71:a5:25:6d:d7:b9:4c:63:f1:ac:71:22:f1:9f: 68:a8:5d:69:71:23:44:4a:e0:80:ea:3f:fa:a6:39: 82:0b:18:57:b8:8f:da:aa:22:ab:32:2f:09:4b:8e: a8:49:54:83:1c:6c:e2:c5:33:9e:5e:e5:ab:9f:65: c6:7f:7b:44:f7:fc:b0:cc:26:ca:6e:d8:35:6e:f0: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:72:10:24:38:05:C4:62:83:6C:92:AF:3D:B0:50:F6:92:40:DB:58 X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:af:31:da:d0:8a:57:3a:c6:be:69:fe:fb:71:32:7f:33:47: ae:69:1a:8a:c3:3f:d6:52:0f:47:26:4e:b6:81:7d:ba:71:e1: 50:69:3f:44:48:b4:ed:5c:1c:cd:5d:33:57:6b:53:3c:52:a5: d2:58:33:c4:46:75:62:5c:ac:ee:a8:1e:f4:d6:cb:19:71:18: 1e:e9:75:83:bc:58:c7:cb:16:c3:73:1b:16:e4:ee:75:cc:60: ca:e8:c6:73:43:53:0b:bc:4b:39:d6:80:3e:2f:aa:c5:05:31: 8b:26:34:9a:11:2a:2c:90:a2:31:8d:68:d7:cf:73:ed:16:ce: 74:da:fc:9f:77:67:85:48:6f:8e:60:f7:38:42:d2:f4:0e:dd: 7d:10:88:ec:04:91:f8:b7:65:cf:aa:24:0a:54:f3:ff:ec:9c: 3a:1b:bc:bd:39:aa:b1:eb:28:33:6d:f9:47:fc:b9:95:48:05: 5b:f1:94:d9:16:a9:c2:a4:57:a6:3b:f3:d2:00:9f:74:06:c8: c1:c1:1f:2f:14:8f:84:6b:34:88:1c:2c:d7:63:84:71:18:62: 1f:3d:0d:c7:dd:12:eb:ff:10:0e:58:47:3d:64:91:c1:49:12: 43:06:ba:21:a9:9c:6a:4f:f6:61:45:1b:9d:fd:34:be:55:db: 5a:56:d3:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQm/MWYNbf+OiFso+jppzoEIm7uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNTA4MjMwODM1NDlaFw0yNTA4MjYwOTQ3NDlaMDMxMTAvBgNV BAMTKDlCNzIxMDI0MzgwNUM0NjI4MzZDOTJBRjNEQjA1MEY2OTI0MERCNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7v/fK/Ryd7jn5Mm2sBqIfAHcI UF12fKjcSFHKCAoEBrHu2Y/V1Zt3Y0ZWzaKZrbS3YkX5PUA7RStEDJ69cSrAdLOK 6Z5i9wFQE7TL7HMHQZLj3lIJLREkJ7ayzxUr1OT8Fv+Wr32SuoUcflAyS4CVQhNp 8yEQ35NFLGbIO2iWbDg1gawZtgx8vM90xJbRDd0SsLlebafhJD/8VimcI7eML8KO bAYe0qWW86K/4h4FXsXdCQBxpSVt17lMY/GscSLxn2ioXWlxI0RK4IDqP/qmOYIL GFe4j9qqIqsyLwlLjqhJVIMcbOLFM55e5aufZcZ/e0T3/LDMJspu2DVu8JLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3IQJDgFxGKDbJKvPbBQ9pJA21gwHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCvMdrQilc6xr5p/vtxMn8zR65pGorDP9ZS D0cmTraBfbpx4VBpP0RItO1cHM1dM1drUzxSpdJYM8RGdWJcrO6oHvTWyxlxGB7p dYO8WMfLFsNzGxbk7nXMYMroxnNDUwu8SznWgD4vqsUFMYsmNJoRKiyQojGNaNfP c+0WznTa/J93Z4VIb45g9zhC0vQO3X0QiOwEkfi3Zc+qJApU8//snDobvL05qrHr KDNt+Uf8uZVIBVvxlNkWqcKkV6Y789IAn3QGyMHBHy8Uj4RrNIgcLNdjhHEYYh89 DcfdEuv/EA5YRz1kkcFJEkMGuiGpnGpP9mFFG539NL5V21pW0+0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:26 2025 by rpki-client