$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: svnbIp/O4ZgwgQjl7/X8+xdW9J4pDiV++5U4hCYHbK8= Subject key identifier: B0:2C:5C:18:13:CD:B1:AD:CD:10:CA:F8:67:78:6F:B2:23:8D:FE:71 Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 7DFCBE016647FAB70BEF03A2B0D5EA9E4ACEBEA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 017D Signing time: Tue 29 Apr 2025 17:40:03 +0000 Manifest this update: Tue 29 Apr 2025 17:35:03 +0000 Manifest next update: Sat 03 May 2025 04:38:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: MZ03RJgbE8tw7E85uUteF5gYpN/YSsp4oCiDaRxRjQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 04:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fc:be:01:66:47:fa:b7:0b:ef:03:a2:b0:d5:ea:9e:4a:ce:be:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Apr 29 17:35:03 2025 GMT Not After : May 3 04:38:03 2025 GMT Subject: CN=B02C5C1813CDB1ADCD10CAF867786FB2238DFE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:91:8a:e3:3e:34:06:04:15:fb:06:fe:f1: d3:39:4a:d3:7d:bc:3b:1d:93:25:6a:32:4a:83:e0: a5:cf:45:bc:cc:98:3d:bf:45:30:21:96:e5:09:48: 06:76:b4:62:69:2d:5f:c8:d0:40:b4:1e:9a:37:34: 0e:31:b3:ed:8f:b3:2b:1e:f8:c9:53:f8:b5:06:9f: 5e:3a:7c:f9:44:c0:a1:8a:8f:34:86:07:8b:51:6b: a2:1f:05:ba:e8:45:de:f7:0c:7c:a9:3b:3f:15:b7: db:14:f5:99:7b:4d:e8:5e:2a:96:36:67:e0:ea:7b: 1a:9d:1a:03:97:50:e7:2f:e2:f9:4f:53:f7:91:02: b4:51:00:4d:76:0d:8a:c8:12:cc:3d:79:85:a8:7b: 02:c0:44:b2:0b:db:c4:22:48:77:a3:88:b6:be:8b: ab:21:60:0b:a2:27:86:1b:61:7e:79:16:e9:67:db: 5f:be:d9:6d:3f:aa:e1:bf:a1:2a:3c:4e:93:4a:f9: 6a:0d:fc:99:15:9c:0d:62:b5:cd:ff:9b:d2:f3:f0: ab:6a:91:59:cb:e8:14:f0:8c:f6:72:b5:df:0f:b8: 5d:52:11:ca:e0:0e:fb:3a:f2:45:11:77:57:5b:57: e4:b5:a4:84:61:54:f1:d4:e3:27:24:90:54:fc:e6: b1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2C:5C:18:13:CD:B1:AD:CD:10:CA:F8:67:78:6F:B2:23:8D:FE:71 X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:33:ba:fa:fc:b9:42:8a:dd:6b:0b:90:e8:76:6f:ef:da:46: 97:d6:99:78:bc:67:15:ed:10:86:73:8e:b5:62:90:66:ca:c9: 4d:65:c9:a0:f9:98:ac:b7:26:f7:7f:5b:a1:d3:a5:ca:83:52: dd:38:1b:d0:55:69:e8:b7:fc:23:7e:f6:06:61:69:65:35:2b: 97:5b:ea:96:22:da:d6:fe:ed:7a:d1:f0:d2:0d:f6:06:dc:04: a1:ae:88:58:f4:e1:fa:18:81:ea:18:54:6f:14:eb:3d:c4:1e: 67:8e:91:db:78:55:46:1b:98:6e:76:1c:18:00:06:17:56:c1: ca:33:1b:4a:a1:4f:56:5e:97:fb:08:17:40:5a:37:15:9f:b1: 58:96:90:1d:91:9e:50:6a:9c:c5:a0:3b:f2:ca:e4:b2:39:88: 3e:ea:a2:d3:82:61:0f:25:9a:49:f4:03:7d:58:7b:fd:d1:4b: d9:fd:79:08:01:42:2a:dc:71:9f:40:c4:c5:a6:64:4f:24:f9: 2c:07:65:55:51:77:29:81:5d:f0:6f:01:5b:09:14:e9:a6:d9: a6:f0:da:45:d0:40:18:fe:87:3a:8d:af:94:58:60:5b:c1:f7: 37:67:91:65:28:8f:ff:7f:83:07:6c:de:da:6f:a6:8b:f8:c0: 68:ec:79:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffy+AWZH+rcL7wOisNXqnkrOvqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA0MjkxNzM1MDNaFw0yNTA1MDMwNDM4MDNaMDMxMTAvBgNV BAMTKEIwMkM1QzE4MTNDREIxQURDRDEwQ0FGODY3Nzg2RkIyMjM4REZFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTD5GK4z40BgQV+wb+8dM5StN9 vDsdkyVqMkqD4KXPRbzMmD2/RTAhluUJSAZ2tGJpLV/I0EC0Hpo3NA4xs+2Psyse +MlT+LUGn146fPlEwKGKjzSGB4tRa6IfBbroRd73DHypOz8Vt9sU9Zl7TeheKpY2 Z+DqexqdGgOXUOcv4vlPU/eRArRRAE12DYrIEsw9eYWoewLARLIL28QiSHejiLa+ i6shYAuiJ4YbYX55Fuln21++2W0/quG/oSo8TpNK+WoN/JkVnA1itc3/m9Lz8Ktq kVnL6BTwjPZytd8PuF1SEcrgDvs68kURd1dbV+S1pIRhVPHU4yckkFT85rHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsCxcGBPNsa3NEMr4Z3hvsiON/nEwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIczuvr8uUKK3WsLkOh2b+/aRpfWmXi8ZxXt EIZzjrVikGbKyU1lyaD5mKy3Jvd/W6HTpcqDUt04G9BVaei3/CN+9gZhaWU1K5db 6pYi2tb+7XrR8NIN9gbcBKGuiFj04foYgeoYVG8U6z3EHmeOkdt4VUYbmG52HBgA BhdWwcozG0qhT1Zel/sIF0BaNxWfsViWkB2RnlBqnMWgO/LK5LI5iD7qotOCYQ8l mkn0A31Ye/3RS9n9eQgBQirccZ9AxMWmZE8k+SwHZVVRdymBXfBvAVsJFOmm2abw 2kXQQBj+hzqNr5RYYFvB9zdnkWUoj/9/gwds3tpvpov4wGjseQY= -----END CERTIFICATE-----Generated at Wed Apr 30 05:32:44 2025 by rpki-client