$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: aZ2JKY8BgfBr12lqqzCNYEVtWaGLdza8yBZ/W6xVFZ8= Subject key identifier: 12:31:89:10:53:2C:B7:49:3F:F1:CC:79:2B:9F:47:3E:04:38:F3:3B Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 61D542BEA96E59520C07F423DD292D760788E744 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 01B0 Signing time: Thu 21 Aug 2025 18:20:03 +0000 Manifest this update: Thu 21 Aug 2025 18:15:03 +0000 Manifest next update: Sun 24 Aug 2025 20:50:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: Ixgw7HMiZwT4AGUGpv0NPhSiRjiDVyWUd59eSQcLtyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d5:42:be:a9:6e:59:52:0c:07:f4:23:dd:29:2d:76:07:88:e7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Aug 21 18:15:03 2025 GMT Not After : Aug 24 20:50:03 2025 GMT Subject: CN=12318910532CB7493FF1CC792B9F473E0438F33B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:d3:1d:42:77:21:bd:d8:69:a2:b9:dd:b4: e3:16:a7:82:79:c2:47:6a:bc:91:92:a7:34:62:fd: af:b7:dc:8a:7a:88:24:88:ad:98:eb:1c:b0:fd:91: dc:21:cb:31:31:67:50:20:43:67:24:ce:cf:35:97: df:e9:cf:d5:e1:15:0e:df:66:43:66:41:53:c0:81: 86:b3:cd:58:53:07:df:f8:69:04:5b:c0:01:ec:14: 99:18:24:73:72:8e:ab:63:4d:86:e8:e0:c3:d7:d5: 36:ca:e1:3e:6c:aa:76:d8:07:67:db:96:7b:13:38: 4c:56:c0:97:0b:8f:4c:64:23:8c:d5:ed:c5:11:30: 0f:45:f0:94:02:2f:e1:35:b4:3b:99:b9:ca:26:00: 68:35:49:ff:b3:55:77:fb:b9:ae:bc:d2:85:92:b9: c2:45:8a:1a:8f:24:20:b8:64:0d:b9:3e:1c:29:f4: e4:3e:b0:54:15:40:c0:5a:95:56:d8:ed:27:f1:9d: 94:74:7b:26:2d:87:d2:c0:fc:99:2f:aa:6f:59:1e: 0b:15:36:b7:06:3b:f9:fa:2f:0d:e8:0f:cc:0a:25: c4:7a:f9:55:31:4f:f6:1d:d2:7c:19:6a:ac:88:74: df:df:ad:30:a8:94:c8:43:43:c5:d9:a7:fa:b8:84: 37:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:31:89:10:53:2C:B7:49:3F:F1:CC:79:2B:9F:47:3E:04:38:F3:3B X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a4:7f:4d:98:8b:a8:54:56:0a:2e:6c:54:5f:c4:b2:29:17: d0:cd:ed:1a:eb:6f:dd:22:43:c7:ac:ac:1d:10:3b:6d:19:17: 62:e7:8d:d5:7d:07:e1:a1:92:ab:63:8f:2f:89:36:b2:9f:ea: 06:dc:ff:b1:ee:86:4d:02:98:a9:d8:bd:60:d7:9f:0c:6f:0a: 93:76:c4:b1:9c:ce:85:8b:6c:4d:9d:45:b4:50:84:6a:9f:a3: 1b:c6:81:2d:1b:4d:00:c9:54:26:61:77:af:e7:d8:05:44:42: 07:6c:af:aa:5c:48:c6:49:f5:1f:65:0b:c1:b8:72:3b:0d:c5: 54:ee:0b:26:2e:77:12:3f:6c:37:23:f5:7e:93:55:7c:24:c0: 90:19:15:4b:74:0f:de:a4:9c:e5:93:53:9e:58:00:68:d4:ab: 02:a6:84:0c:94:80:86:26:2b:1e:c3:6a:ef:71:fd:16:4d:bf: e5:0e:c3:a0:ec:bd:b0:82:04:da:7d:5d:6e:cf:13:0f:1a:e5: 0b:75:4d:86:80:e6:92:68:85:e4:af:77:26:17:a7:89:8e:29: 12:41:86:c5:63:06:da:46:71:19:9a:66:4c:58:2e:f8:eb:e0: c6:bf:67:a3:e2:0d:52:46:cf:27:d1:16:e7:ec:a4:4a:0a:ab: 3c:43:bc:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdVCvqluWVIMB/Qj3SktdgeI50QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA4MjExODE1MDNaFw0yNTA4MjQyMDUwMDNaMDMxMTAvBgNV BAMTKDEyMzE4OTEwNTMyQ0I3NDkzRkYxQ0M3OTJCOUY0NzNFMDQzOEYzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vtMdQnchvdhporndtOMWp4J5 wkdqvJGSpzRi/a+33Ip6iCSIrZjrHLD9kdwhyzExZ1AgQ2ckzs81l9/pz9XhFQ7f ZkNmQVPAgYazzVhTB9/4aQRbwAHsFJkYJHNyjqtjTYbo4MPX1TbK4T5sqnbYB2fb lnsTOExWwJcLj0xkI4zV7cURMA9F8JQCL+E1tDuZucomAGg1Sf+zVXf7ua680oWS ucJFihqPJCC4ZA25Phwp9OQ+sFQVQMBalVbY7SfxnZR0eyYth9LA/Jkvqm9ZHgsV NrcGO/n6Lw3oD8wKJcR6+VUxT/Yd0nwZaqyIdN/frTColMhDQ8XZp/q4hDdrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEjGJEFMst0k/8cx5K59HPgQ48zswHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSkf02Yi6hUVgoubFRfxLIpF9DN7Rrrb90i Q8esrB0QO20ZF2LnjdV9B+Ghkqtjjy+JNrKf6gbc/7Huhk0CmKnYvWDXnwxvCpN2 xLGczoWLbE2dRbRQhGqfoxvGgS0bTQDJVCZhd6/n2AVEQgdsr6pcSMZJ9R9lC8G4 cjsNxVTuCyYudxI/bDcj9X6TVXwkwJAZFUt0D96knOWTU55YAGjUqwKmhAyUgIYm Kx7Dau9x/RZNv+UOw6DsvbCCBNp9XW7PEw8a5Qt1TYaA5pJoheSvdyYXp4mOKRJB hsVjBtpGcRmaZkxYLvjr4Ma/Z6PiDVJGzyfRFufspEoKqzxDvAw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:48:36 2025 by rpki-client