$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: JmuXlm22K2i4AIkO+hbq/MYhbQYpOrPhrchNZvLPefI= Subject key identifier: 7E:AD:53:C5:87:A8:F7:2B:90:63:BD:91:63:FD:3E:FE:E4:45:4E:F0 Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 0BFA1A4B6071CF1BD984E693228AF39B41AD5FDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 01B6 Signing time: Sat 10 May 2025 06:21:00 +0000 Manifest this update: Sat 10 May 2025 06:16:00 +0000 Manifest next update: Tue 13 May 2025 11:00:00 +0000 Files and hashes: 1: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: Ekl0FrcYaGWxYw7IgCiFXv5CngMgEcsPhMAedshOar0=) 2: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: TsbQSh0EleeESQUK/usKxqoHHOIBh1gp9BKJgqAFN50=) 3: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: uI8UCvH3U4LliCexGqC//eVDVZvX3ux4xZSROFcXGxI=) 4: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: hogSmNjvVRnvbJEbdZzHME2POOb3oZaK1lDRIIPTZL4=) 5: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: A6qaCFKyI8dUr1nO6FquVRGin/CswiRL6mnLkqKByNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fa:1a:4b:60:71:cf:1b:d9:84:e6:93:22:8a:f3:9b:41:ad:5f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: May 10 06:16:00 2025 GMT Not After : May 13 11:00:00 2025 GMT Subject: CN=7EAD53C587A8F72B9063BD9163FD3EFEE4454EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:b5:70:66:db:06:96:ef:65:eb:f9:a9:2d: e8:e7:0c:47:5a:cb:14:3a:85:ca:9c:60:4c:f7:50: 64:19:c1:61:a9:45:41:ce:3f:04:e3:73:2b:f9:56: 67:72:ee:6d:47:d6:86:3e:ed:c3:4c:ea:45:cf:77: 27:fb:af:a3:21:c7:fe:ba:20:64:e8:5a:96:45:73: 5c:a9:00:65:bb:b2:5e:10:e8:12:53:e4:4e:55:19: e2:c8:c1:5f:d9:a6:49:09:e6:ab:df:55:af:c6:06: 31:ad:c0:ac:0d:2c:db:ed:a7:7e:78:60:14:d5:9a: 03:28:bf:e5:e1:aa:9d:f2:b6:47:39:e2:e6:8a:ed: 89:ca:bf:f1:f4:ce:4d:13:41:66:39:5f:ae:34:05: ef:77:2a:8d:c5:aa:f1:05:77:ff:82:de:5f:06:08: b6:d9:4c:6c:82:2e:60:fc:fc:53:a5:46:03:52:72: fe:4b:0f:34:99:fe:e8:22:f0:4e:78:05:96:37:b5: de:80:4b:e4:fb:e1:be:32:e6:02:cb:fd:1b:9d:ef: 94:79:a6:e8:f7:0d:31:63:4d:f9:1f:24:f0:70:a3: e2:9d:05:9a:ad:78:f1:c8:5f:76:94:25:90:aa:80: eb:ca:8b:4c:3d:42:8a:6d:cb:85:2d:20:9c:da:35: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AD:53:C5:87:A8:F7:2B:90:63:BD:91:63:FD:3E:FE:E4:45:4E:F0 X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f9:62:90:cc:dc:0b:39:4c:43:c5:6e:0c:78:f1:c8:a7:07: 8b:f4:d3:b6:8f:ff:a3:fa:f3:43:e7:0a:55:c7:b5:00:7c:90: e4:11:44:b2:c5:e2:46:ab:b9:e7:b7:41:dc:60:e5:d7:91:4a: ee:7e:66:b9:d9:f2:ed:6a:56:52:6d:8b:87:9c:0e:74:a5:80: b9:3a:5c:20:3c:c1:5b:c9:65:59:32:4b:be:1c:82:91:3b:05: 24:ed:b5:7c:0d:5a:57:49:6b:74:2b:2d:3e:a5:e9:ed:6e:1a: 6e:ef:40:1d:5b:c8:8d:04:35:57:e9:73:e4:fa:b5:af:36:9a: c6:61:bb:95:eb:23:10:7a:67:d6:c2:5b:d8:6a:3c:95:47:b2: 7f:6f:d1:0b:6c:46:ff:39:2f:a9:a1:83:a1:f8:de:fd:97:81: ae:e7:12:10:18:90:5a:2b:af:92:ca:69:0a:9e:ad:2e:b7:e2: 84:f2:15:5d:d7:5f:3b:6f:79:b2:ed:9c:42:97:5d:4f:84:92: 8b:46:91:f4:1e:0c:dc:4f:82:5e:d8:b7:af:43:a9:c5:50:0d: 9b:cc:70:cc:5f:2b:1c:39:c4:cb:99:3e:f8:b8:a0:d2:4e:c0: d2:d3:1e:16:f2:26:3e:ac:19:00:2b:a9:e1:e2:bc:7b:3e:b1: 78:70:f2:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/oaS2BxzxvZhOaTIorzm0GtX98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNTA1MTAwNjE2MDBaFw0yNTA1MTMxMTAwMDBaMDMxMTAvBgNV BAMTKDdFQUQ1M0M1ODdBOEY3MkI5MDYzQkQ5MTYzRkQzRUZFRTQ0NTRFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3bVwZtsGlu9l6/mpLejnDEda yxQ6hcqcYEz3UGQZwWGpRUHOPwTjcyv5Vmdy7m1H1oY+7cNM6kXPdyf7r6Mhx/66 IGToWpZFc1ypAGW7sl4Q6BJT5E5VGeLIwV/ZpkkJ5qvfVa/GBjGtwKwNLNvtp354 YBTVmgMov+Xhqp3ytkc54uaK7YnKv/H0zk0TQWY5X640Be93Ko3FqvEFd/+C3l8G CLbZTGyCLmD8/FOlRgNScv5LDzSZ/ugi8E54BZY3td6AS+T74b4y5gLL/Rud75R5 puj3DTFjTfkfJPBwo+KdBZqtePHIX3aUJZCqgOvKi0w9Qopty4UtIJzaNaQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfq1TxYeo9yuQY72RY/0+/uRFTvAwHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKX5YpDM3As5TEPFbgx48cinB4v007aP/6P6 80PnClXHtQB8kOQRRLLF4karuee3Qdxg5deRSu5+ZrnZ8u1qVlJti4ecDnSlgLk6 XCA8wVvJZVkyS74cgpE7BSTttXwNWldJa3QrLT6l6e1uGm7vQB1byI0ENVfpc+T6 ta82msZhu5XrIxB6Z9bCW9hqPJVHsn9v0QtsRv85L6mhg6H43v2Xga7nEhAYkFor r5LKaQqerS634oTyFV3XXztvebLtnEKXXU+EkotGkfQeDNxPgl7Yt69DqcVQDZvM cMxfKxw5xMuZPvi4oNJOwNLTHhbyJj6sGQArqeHivHs+sXhw8oQ= -----END CERTIFICATE-----Generated at Sat May 10 09:53:13 2025 by rpki-client