$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: S3hd2XXwhTA9MQtYYmBXxWgsjoyMPCy8ERzVM/nxdW8= Subject key identifier: A1:6A:84:6D:F3:48:E4:F4:18:BD:79:40:33:53:54:37:CA:95:3F:1C Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 1D0F832CDE669C2FF3D30799DCFAF245F2E8D2C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 017F Signing time: Sun 04 May 2025 13:10:03 +0000 Manifest this update: Sun 04 May 2025 13:05:03 +0000 Manifest next update: Wed 07 May 2025 22:09:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: sJ6wt886oeA8ZOR3TufZII6zFpCPWqzviTy5iszR6vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 22:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0f:83:2c:de:66:9c:2f:f3:d3:07:99:dc:fa:f2:45:f2:e8:d2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: May 4 13:05:03 2025 GMT Not After : May 7 22:09:03 2025 GMT Subject: CN=A16A846DF348E4F418BD794033535437CA953F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ad:2f:48:6a:63:ae:33:05:23:9f:36:05:dc: ef:88:01:14:b3:c8:75:33:a5:84:1a:bd:e8:23:44: 9a:be:6a:e1:ba:4d:6a:ae:0a:f1:fa:38:8a:c7:b7: 93:ee:43:f4:6b:d9:79:95:d9:29:b5:3e:61:62:cb: af:cd:52:a1:1c:5d:f5:7a:20:d1:45:a9:24:55:93: 24:0c:7b:f4:da:46:0f:a2:01:0f:1d:9b:e3:77:62: c7:43:db:c2:fd:5a:86:00:2b:e2:54:e0:48:cb:4d: 75:15:c9:2d:12:8c:0b:18:8c:34:bc:ca:72:fe:63: b1:f3:11:00:fa:81:5e:a7:fd:95:00:50:a7:07:aa: ac:24:c3:62:47:17:63:f5:ea:11:a8:bc:cd:65:d2: 6f:ca:d2:dd:1b:c1:eb:b2:b3:a3:fe:e8:b7:a7:ff: e5:9d:f0:25:eb:8f:25:43:b8:f4:25:37:ba:fa:80: 0e:75:1d:94:ad:b7:19:c1:25:fc:ca:74:58:ee:61: f5:c0:7a:d9:3f:fb:59:de:fe:57:fb:fa:7d:8c:cb: 81:a7:c7:6e:c7:c2:d5:95:51:08:7c:28:8d:35:14: 45:84:9b:5a:24:0f:39:45:67:a1:a9:80:1a:c2:95: ee:97:3d:29:7b:a1:4b:ea:3a:4e:f6:1f:d8:0d:06: a4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6A:84:6D:F3:48:E4:F4:18:BD:79:40:33:53:54:37:CA:95:3F:1C X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:32:55:40:00:de:5f:04:5a:69:f5:a6:1e:9b:99:32:7b:65: 10:6a:62:07:1c:73:f4:a3:df:85:fc:d4:2a:6e:71:23:95:ad: d9:6b:56:1f:08:61:f8:22:db:f1:67:36:f9:28:4a:60:d8:bb: 92:38:49:79:62:5d:d6:ce:89:25:c4:8a:5e:f7:e0:21:9a:3f: cf:62:07:67:4f:61:ea:f3:23:5f:1f:77:6c:6f:38:c1:ea:90: 71:1e:d7:6a:24:83:6b:cb:db:28:5d:71:be:7b:4c:12:60:f6: 30:31:f0:c8:cf:48:70:b4:db:29:85:2f:35:2a:97:c9:c6:e2: 3c:78:c3:b5:de:5d:87:2d:d6:93:0f:95:79:17:6e:90:ca:a8: a7:0d:a2:36:bc:b1:1f:a3:93:f0:8a:d8:0c:09:ba:c9:05:5b: db:bf:10:b6:9e:07:42:35:00:77:d8:6a:47:a6:51:f9:84:16: c0:18:29:95:6e:d6:dd:70:b2:3d:0f:3f:78:c9:4b:e6:36:fb: 96:cc:4e:e9:41:97:9c:e6:90:e7:6e:3f:1c:cb:73:a7:7f:43: 50:73:c7:c8:ba:0d:33:02:36:14:47:b2:8d:1a:dd:31:52:48: 8a:a4:ef:d6:31:ea:fd:c4:d3:2a:2b:51:ea:e4:86:d6:af:23: 83:af:35:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQ+DLN5mnC/z0weZ3PryRfLo0sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA1MDQxMzA1MDNaFw0yNTA1MDcyMjA5MDNaMDMxMTAvBgNV BAMTKEExNkE4NDZERjM0OEU0RjQxOEJENzk0MDMzNTM1NDM3Q0E5NTNGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7rS9IamOuMwUjnzYF3O+IARSz yHUzpYQavegjRJq+auG6TWquCvH6OIrHt5PuQ/Rr2XmV2Sm1PmFiy6/NUqEcXfV6 INFFqSRVkyQMe/TaRg+iAQ8dm+N3YsdD28L9WoYAK+JU4EjLTXUVyS0SjAsYjDS8 ynL+Y7HzEQD6gV6n/ZUAUKcHqqwkw2JHF2P16hGovM1l0m/K0t0bweuys6P+6Len /+Wd8CXrjyVDuPQlN7r6gA51HZSttxnBJfzKdFjuYfXAetk/+1ne/lf7+n2My4Gn x27HwtWVUQh8KI01FEWEm1okDzlFZ6GpgBrCle6XPSl7oUvqOk72H9gNBqTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoWqEbfNI5PQYvXlAM1NUN8qVPxwwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAyVUAA3l8EWmn1ph6bmTJ7ZRBqYgccc/Sj 34X81CpucSOVrdlrVh8IYfgi2/FnNvkoSmDYu5I4SXliXdbOiSXEil734CGaP89i B2dPYerzI18fd2xvOMHqkHEe12okg2vL2yhdcb57TBJg9jAx8MjPSHC02ymFLzUq l8nG4jx4w7XeXYct1pMPlXkXbpDKqKcNoja8sR+jk/CK2AwJuskFW9u/ELaeB0I1 AHfYakemUfmEFsAYKZVu1t1wsj0PP3jJS+Y2+5bMTulBl5zmkOduPxzLc6d/Q1Bz x8i6DTMCNhRHso0a3TFSSIqk79Yx6v3E0yorUerkhtavI4OvNf8= -----END CERTIFICATE-----Generated at Wed May 7 08:07:48 2025 by rpki-client