$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: tS6bxHFEqkW+FpknzCBd+2yaoFTD2EeyM6se6SNGsqU= Subject key identifier: 69:4C:49:48:F9:C1:CA:E2:B2:22:BF:90:2F:9A:59:BD:20:B1:D2:7A Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 39A1817AC749854A1399ED82206843FC161301B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 0199 Signing time: Tue 01 Jul 2025 00:40:03 +0000 Manifest this update: Tue 01 Jul 2025 00:35:03 +0000 Manifest next update: Fri 04 Jul 2025 06:23:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: TmEhT5NJcwPIPh3n0qPO7KLuHtgJYOfa/exMr6++EVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a1:81:7a:c7:49:85:4a:13:99:ed:82:20:68:43:fc:16:13:01:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Jul 1 00:35:03 2025 GMT Not After : Jul 4 06:23:03 2025 GMT Subject: CN=694C4948F9C1CAE2B222BF902F9A59BD20B1D27A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b4:9f:35:fd:56:ad:db:d9:f6:b6:cb:d3:57: 9d:f7:6c:04:03:5f:4c:16:54:1e:60:f1:3c:2b:27: 1b:e9:7f:01:94:13:0d:e7:79:38:55:e9:94:65:7f: 15:a2:eb:71:0a:8d:03:5c:4b:03:d5:fd:b1:4e:f4: 6c:59:a7:7c:00:e9:b7:cf:42:96:2f:3e:c5:ad:2a: 2f:d0:59:59:1b:c7:ec:3e:62:65:8f:91:47:9f:48: 2d:11:87:c1:76:4a:12:72:b7:67:2a:31:3c:37:6c: d0:da:c7:ec:30:d5:1e:90:1e:a4:17:da:48:4f:ee: cf:3f:18:36:bd:a4:96:0b:43:8c:1f:c8:7f:1b:10: 28:b3:1c:05:ad:94:fb:19:7a:85:e3:b3:49:31:2d: 47:be:a8:f9:88:78:97:bb:2c:7e:d1:e6:fb:7e:4d: 5b:18:ac:06:54:d2:ff:07:30:e5:fe:73:a9:e1:79: 62:9a:af:fa:eb:75:f3:e5:6c:52:47:9d:e7:c7:b6: d1:cd:a5:e0:79:c0:42:d3:8b:07:ea:25:d1:9e:6d: 58:03:50:f2:5c:92:d5:76:49:b3:13:c1:66:22:6b: c8:b4:3c:15:ef:53:94:10:16:92:da:b7:44:7e:c7: 56:9a:7c:a7:45:5a:19:a2:d8:12:a0:3e:97:87:d0: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4C:49:48:F9:C1:CA:E2:B2:22:BF:90:2F:9A:59:BD:20:B1:D2:7A X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8d:63:bf:1c:47:c5:c9:2c:8b:d2:ef:8f:a5:91:2d:95:55: a9:62:c2:e3:74:de:51:af:fe:ed:7a:a8:a3:62:ac:3c:0e:03: 43:21:7d:be:03:c3:01:c0:af:19:bf:98:21:df:4d:a9:3b:94: 80:48:d7:42:2a:ed:d8:75:0c:ef:02:5d:06:4e:96:58:a9:d8: 98:6b:16:ac:b3:69:ec:65:bb:7b:b2:90:be:93:4e:90:3e:32: 50:8d:29:1a:2e:7d:12:9a:a0:33:f1:1b:af:03:43:b9:09:ce: 56:fd:c3:7a:81:70:69:92:8d:ba:e5:ca:1a:51:c9:97:3e:db: 29:c9:9f:72:3b:f9:e0:b0:72:c3:fe:85:84:8a:fa:37:a4:4f: b0:77:3e:aa:d1:57:66:1d:66:c3:f1:55:f5:93:b5:61:fa:f0: 4c:f2:ea:2b:2b:58:be:ab:91:63:d0:95:94:b2:6d:53:f6:40: 50:ce:f9:31:30:7f:b6:24:b3:5f:13:44:2b:a9:8d:14:88:6c: 6b:c1:38:e9:be:e3:f0:6f:dd:6d:0e:c3:61:29:cd:a7:f6:59: 2e:30:ce:45:b7:06:47:be:ff:f3:fa:1e:96:99:e0:87:16:6b: d2:ef:c5:50:7e:55:48:14:77:c6:ae:32:ed:50:63:39:61:9b: eb:d6:0f:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOaGBesdJhUoTme2CIGhD/BYTAbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA3MDEwMDM1MDNaFw0yNTA3MDQwNjIzMDNaMDMxMTAvBgNV BAMTKDY5NEM0OTQ4RjlDMUNBRTJCMjIyQkY5MDJGOUE1OUJEMjBCMUQyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXtJ81/Vat29n2tsvTV533bAQD X0wWVB5g8TwrJxvpfwGUEw3neThV6ZRlfxWi63EKjQNcSwPV/bFO9GxZp3wA6bfP QpYvPsWtKi/QWVkbx+w+YmWPkUefSC0Rh8F2ShJyt2cqMTw3bNDax+ww1R6QHqQX 2khP7s8/GDa9pJYLQ4wfyH8bECizHAWtlPsZeoXjs0kxLUe+qPmIeJe7LH7R5vt+ TVsYrAZU0v8HMOX+c6nheWKar/rrdfPlbFJHnefHttHNpeB5wELTiwfqJdGebVgD UPJcktV2SbMTwWYia8i0PBXvU5QQFpLat0R+x1aafKdFWhmi2BKgPpeH0MMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaUxJSPnByuKyIr+QL5pZvSCx0nowHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGNY78cR8XJLIvS74+lkS2VValiwuN03lGv /u16qKNirDwOA0Mhfb4DwwHArxm/mCHfTak7lIBI10Iq7dh1DO8CXQZOllip2Jhr Fqyzaexlu3uykL6TTpA+MlCNKRoufRKaoDPxG68DQ7kJzlb9w3qBcGmSjbrlyhpR yZc+2ynJn3I7+eCwcsP+hYSK+jekT7B3PqrRV2YdZsPxVfWTtWH68Ezy6isrWL6r kWPQlZSybVP2QFDO+TEwf7Yks18TRCupjRSIbGvBOOm+4/Bv3W0Ow2Epzaf2WS4w zkW3Bke+//P6HpaZ4IcWa9LvxVB+VUgUd8auMu1QYzlhm+vWD5Q= -----END CERTIFICATE-----Generated at Tue Jul 1 01:57:01 2025 by rpki-client