$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: sClRm57sGIB63JFmYYuIHiSqsdFDAJMvxTUl23ME+lQ= Subject key identifier: 95:66:1A:EE:46:F2:9F:41:1E:FB:F8:4D:25:49:BF:12:90:85:16:06 Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 50B2B0E1E2E039160BC5EB63F373B64A4FAB25BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 01A9 Signing time: Tue 05 Aug 2025 08:20:03 +0000 Manifest this update: Tue 05 Aug 2025 08:15:03 +0000 Manifest next update: Fri 08 Aug 2025 19:04:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: cSyUc5YwhHNz5bKMLZ98AG6783DxHvQWrrfftQB2T0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b2:b0:e1:e2:e0:39:16:0b:c5:eb:63:f3:73:b6:4a:4f:ab:25:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Aug 5 08:15:03 2025 GMT Not After : Aug 8 19:04:03 2025 GMT Subject: CN=95661AEE46F29F411EFBF84D2549BF1290851606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:09:5a:5a:f5:9f:50:5a:bc:63:b2:f0:8c: 29:39:0a:94:c6:e8:ba:2f:25:69:c4:02:12:6a:89: 5a:d2:2a:ca:2a:89:f3:f2:24:b5:59:e6:30:6c:47: 06:c6:fb:86:98:c2:0e:a4:f7:1b:cd:b6:8b:11:ed: 49:b8:b1:32:97:bb:51:b3:fd:aa:92:37:8f:45:2c: 95:69:34:a8:da:45:c0:c5:79:9d:1c:a7:16:a8:b8: 1f:31:c1:51:5d:87:cb:23:8e:47:fc:66:fa:58:69: 3a:8d:fd:19:92:7e:82:3c:03:3f:fe:98:d4:aa:83: ea:10:4e:b0:98:85:7d:11:5e:07:85:dc:e4:4e:1f: f0:74:28:e7:e4:1e:cc:4a:92:05:a4:0f:7f:92:c7: 5e:ce:9d:52:f9:f4:e8:9a:3a:ec:b5:0c:e6:01:61: 6e:a2:a1:38:e8:c4:b6:3b:95:06:bf:25:40:68:cb: 73:e8:d0:f9:05:e6:45:1b:71:0d:52:b4:e9:86:4d: f6:f6:a7:b4:18:13:ad:84:cb:d3:3d:de:bb:45:ec: 33:9f:b1:7a:d4:71:28:96:54:e7:52:07:98:bd:f7: 29:f5:a1:b9:9c:6c:a6:de:44:fb:ae:e2:b2:af:0b: 50:57:7d:0d:d8:67:2d:88:6f:49:d9:f3:14:fa:41: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:66:1A:EE:46:F2:9F:41:1E:FB:F8:4D:25:49:BF:12:90:85:16:06 X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:95:3c:02:c8:dd:80:b9:4b:19:ef:cc:57:84:43:21:4d:04: 0a:81:08:70:4f:42:b9:52:50:e7:1c:b3:80:9f:2b:c1:2c:63: 33:95:8b:2f:c4:41:2c:97:56:08:3e:26:c5:fb:88:1f:9e:21: 2f:24:b2:eb:85:15:8f:12:ee:8f:e9:6a:f8:35:43:11:78:88: 86:6a:79:d4:80:a4:53:d0:e2:73:44:2c:d5:e2:36:7b:13:2b: 7e:0a:f9:d8:32:7f:f9:d1:dc:70:a5:cb:02:60:c5:6c:5f:00: 38:7b:81:6c:13:30:e5:93:22:e1:88:48:e2:06:dd:88:d0:26: 08:fb:12:c5:0f:63:d3:4c:35:cd:ac:4e:6a:ef:ff:5d:c3:36: 97:1f:5a:78:53:6e:76:ad:2e:4d:d8:ee:4d:f0:ca:5b:50:51: 26:66:23:d5:bb:7a:be:7e:d3:ee:ce:5f:d3:88:49:95:07:90: a7:c8:81:cd:dd:f5:b1:fd:3b:07:92:4d:e9:15:ad:23:16:eb: 9d:7c:61:b5:52:16:81:a4:b0:b2:29:ac:0d:5b:fc:20:6a:b5: e5:57:f1:3a:e2:a9:8a:cf:1b:c2:9b:b4:cc:16:04:70:c8:dc: 8b:59:1b:95:54:48:df:7f:80:9f:e5:af:e6:04:3b:37:2d:fc: c0:7f:03:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUULKw4eLgORYLxetj83O2Sk+rJbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA4MDUwODE1MDNaFw0yNTA4MDgxOTA0MDNaMDMxMTAvBgNV BAMTKDk1NjYxQUVFNDZGMjlGNDExRUZCRjg0RDI1NDlCRjEyOTA4NTE2MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9wlaWvWfUFq8Y7LwjCk5CpTG 6LovJWnEAhJqiVrSKsoqifPyJLVZ5jBsRwbG+4aYwg6k9xvNtosR7Um4sTKXu1Gz /aqSN49FLJVpNKjaRcDFeZ0cpxaouB8xwVFdh8sjjkf8ZvpYaTqN/RmSfoI8Az/+ mNSqg+oQTrCYhX0RXgeF3OROH/B0KOfkHsxKkgWkD3+Sx17OnVL59OiaOuy1DOYB YW6ioTjoxLY7lQa/JUBoy3Po0PkF5kUbcQ1StOmGTfb2p7QYE62Ey9M93rtF7DOf sXrUcSiWVOdSB5i99yn1obmcbKbeRPuu4rKvC1BXfQ3YZy2Ib0nZ8xT6QU3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlWYa7kbyn0Ee+/hNJUm/EpCFFgYwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuVPALI3YC5SxnvzFeEQyFNBAqBCHBPQrlS UOccs4CfK8EsYzOViy/EQSyXVgg+JsX7iB+eIS8ksuuFFY8S7o/pavg1QxF4iIZq edSApFPQ4nNELNXiNnsTK34K+dgyf/nR3HClywJgxWxfADh7gWwTMOWTIuGISOIG 3YjQJgj7EsUPY9NMNc2sTmrv/13DNpcfWnhTbnatLk3Y7k3wyltQUSZmI9W7er5+ 0+7OX9OISZUHkKfIgc3d9bH9OweSTekVrSMW6518YbVSFoGksLIprA1b/CBqteVX 8TriqYrPG8KbtMwWBHDI3ItZG5VUSN9/gJ/lr+YEOzct/MB/A10= -----END CERTIFICATE-----Generated at Thu Aug 7 11:10:28 2025 by rpki-client