$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: yvTzbBI2GvajON3SJBYPATR/oPhoteZOe3hGFD7IgII= Subject key identifier: DB:BC:86:D4:F0:B3:DD:69:30:08:E8:4A:68:1E:66:41:5B:84:F9:CD Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 4D0E35A9A6AC55B82E034B9DE0561B2D66DCF28E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 0192 Signing time: Sun 15 Jun 2025 11:10:03 +0000 Manifest this update: Sun 15 Jun 2025 11:05:03 +0000 Manifest next update: Wed 18 Jun 2025 15:02:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: BBTHiM28h5zLv1KcChwbp2Sc/SRnUX0boIva5ymGuro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0e:35:a9:a6:ac:55:b8:2e:03:4b:9d:e0:56:1b:2d:66:dc:f2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Jun 15 11:05:03 2025 GMT Not After : Jun 18 15:02:03 2025 GMT Subject: CN=DBBC86D4F0B3DD693008E84A681E66415B84F9CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:73:f5:80:52:1f:84:24:98:41:8d:52:2a: 80:7c:0c:24:39:ca:43:9b:f7:fd:f0:ff:64:82:d6: 11:81:38:22:9e:29:c0:4f:74:06:a8:af:a6:c7:bc: 55:c0:c4:48:a6:f3:37:10:89:5b:5f:75:d8:eb:62: c7:a6:90:4d:99:b9:93:85:ea:70:15:8c:68:34:c0: cf:09:e1:b6:17:8d:f5:b8:81:1c:14:13:78:c9:ea: 37:f1:b8:46:8d:1a:fe:0a:f2:54:f5:c5:d3:b9:19: 71:37:b7:74:04:8f:89:11:d7:52:4b:f2:df:2e:9b: ce:43:92:ac:2e:9e:ad:f5:1e:74:9a:8d:2a:f5:b9: 1f:01:f4:04:02:0f:26:69:8d:41:4d:99:61:52:be: 80:fc:37:24:17:90:44:2c:ab:04:4f:00:68:b7:24: d8:66:6a:d7:d4:5d:be:1c:4d:4b:8f:89:c5:2e:18: a6:fe:91:11:63:c7:6f:7b:ea:1a:07:57:3e:46:f9: 28:0c:31:ac:c0:e0:37:2b:0f:12:b8:e6:ec:10:73: 09:09:cd:94:cc:77:38:01:12:73:3b:c6:ea:d1:43: 7d:11:a8:2a:0c:75:b3:64:1e:3c:f5:f6:ff:dc:00: 84:ee:f9:0d:6e:2c:04:af:bf:a1:94:78:4f:e9:81: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BC:86:D4:F0:B3:DD:69:30:08:E8:4A:68:1E:66:41:5B:84:F9:CD X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fe:1d:d8:31:85:5f:49:2b:1c:3d:d8:8d:1c:7b:08:01:b2: 9b:51:31:ec:0f:d0:d8:71:e4:bc:bb:df:d9:66:03:e3:68:23: fd:9a:15:38:15:4a:81:bc:a3:8b:5e:10:62:b6:9a:1d:6c:e9: 2b:c5:05:74:47:c3:ae:f7:f4:5d:31:6d:bb:f2:bd:23:19:6d: d9:af:7e:1a:a4:9a:86:28:dd:1c:59:4d:0a:d6:24:19:3d:86: 17:a0:a1:d0:6e:04:75:29:2c:1a:8d:17:ee:32:18:d5:9a:e5: a9:d6:45:fb:04:8b:00:95:f9:0a:4f:3b:ce:4b:36:b4:13:89: 6e:dd:38:13:06:6c:5f:59:dc:39:d7:c5:df:ec:2a:0e:03:3c: 65:94:68:9a:ed:d0:6d:6e:b6:f7:cc:76:c8:56:15:02:cf:de: 59:55:74:e5:1d:07:ce:25:41:60:b6:ce:28:52:70:72:79:32: 0e:d2:ea:e4:9f:f4:dd:44:9d:31:68:20:67:a8:d8:97:7a:7e: bd:ea:4b:91:60:40:f3:5a:c7:c8:6d:24:a5:71:bb:98:56:9a: cb:fb:58:54:57:c9:0d:97:08:97:f6:80:e4:73:7a:a7:2a:74: 50:1d:12:73:cb:56:6a:1e:cb:41:87:f5:18:5f:6d:77:fc:72: 57:dc:fb:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQ41qaasVbguA0ud4FYbLWbc8o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA2MTUxMTA1MDNaFw0yNTA2MTgxNTAyMDNaMDMxMTAvBgNV BAMTKERCQkM4NkQ0RjBCM0RENjkzMDA4RTg0QTY4MUU2NjQxNUI4NEY5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFnP1gFIfhCSYQY1SKoB8DCQ5 ykOb9/3w/2SC1hGBOCKeKcBPdAaor6bHvFXAxEim8zcQiVtfddjrYsemkE2ZuZOF 6nAVjGg0wM8J4bYXjfW4gRwUE3jJ6jfxuEaNGv4K8lT1xdO5GXE3t3QEj4kR11JL 8t8um85Dkqwunq31HnSajSr1uR8B9AQCDyZpjUFNmWFSvoD8NyQXkEQsqwRPAGi3 JNhmatfUXb4cTUuPicUuGKb+kRFjx2976hoHVz5G+SgMMazA4DcrDxK45uwQcwkJ zZTMdzgBEnM7xurRQ30RqCoMdbNkHjz19v/cAITu+Q1uLASvv6GUeE/pgSHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27yG1PCz3WkwCOhKaB5mQVuE+c0wHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKH+HdgxhV9JKxw92I0cewgBsptRMewP0Nhx 5Ly739lmA+NoI/2aFTgVSoG8o4teEGK2mh1s6SvFBXRHw6739F0xbbvyvSMZbdmv fhqkmoYo3RxZTQrWJBk9hhegodBuBHUpLBqNF+4yGNWa5anWRfsEiwCV+QpPO85L NrQTiW7dOBMGbF9Z3DnXxd/sKg4DPGWUaJrt0G1utvfMdshWFQLP3llVdOUdB84l QWC2zihScHJ5Mg7S6uSf9N1EnTFoIGeo2Jd6fr3qS5FgQPNax8htJKVxu5hWmsv7 WFRXyQ2XCJf2gORzeqcqdFAdEnPLVmoey0GH9RhfbXf8clfc+x4= -----END CERTIFICATE-----Generated at Mon Jun 16 20:51:20 2025 by rpki-client