$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: MiR+NrsCUoWahFeF6UVtEjkFUZyPrd9iFezIkgAigC4= Subject key identifier: 31:EF:03:8B:FA:1F:28:F4:0C:75:13:18:AF:D3:B4:FB:9C:1A:CC:89 Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 1DADE14B567481753FD00FC7760EF3D90156C37B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 01B1 Signing time: Mon 28 Apr 2025 23:20:58 +0000 Manifest this update: Mon 28 Apr 2025 23:15:58 +0000 Manifest next update: Fri 02 May 2025 08:34:58 +0000 Files and hashes: 1: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: Cq22Xn1yyyFyap0uegeGBBcoBXONm8ERSymYzf1jA38=) 2: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: Ekl0FrcYaGWxYw7IgCiFXv5CngMgEcsPhMAedshOar0=) 3: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: TsbQSh0EleeESQUK/usKxqoHHOIBh1gp9BKJgqAFN50=) 4: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: A6qaCFKyI8dUr1nO6FquVRGin/CswiRL6mnLkqKByNE=) 5: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: uI8UCvH3U4LliCexGqC//eVDVZvX3ux4xZSROFcXGxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 08:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ad:e1:4b:56:74:81:75:3f:d0:0f:c7:76:0e:f3:d9:01:56:c3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Apr 28 23:15:58 2025 GMT Not After : May 2 08:34:58 2025 GMT Subject: CN=31EF038BFA1F28F40C751318AFD3B4FB9C1ACC89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:0c:d2:ba:74:01:c5:d7:fd:4b:5c:e7:74: 8f:0b:3f:8a:f5:fc:94:13:73:b0:8e:ab:09:9b:43: 80:d2:bd:b0:86:06:a1:d6:59:be:73:d3:19:db:e6: 87:98:dd:9a:5f:0e:08:97:1e:79:e2:dd:45:97:04: 12:b6:db:3d:b3:88:1b:8f:88:64:05:a7:12:8f:dc: 41:2b:22:d4:15:57:f0:6c:b1:63:bb:73:13:87:ba: 4f:22:e2:6a:e2:ac:ef:64:5e:54:bc:e4:b3:a4:06: 24:81:53:9a:81:cc:c9:ef:ec:fe:91:94:68:42:ab: cf:bb:a8:4e:fe:e7:63:85:73:28:7e:fe:9c:0d:a4: 59:3d:ed:b7:27:b7:a3:b7:30:c2:94:db:eb:8f:6e: 0e:e3:99:37:93:6b:56:64:9f:81:a2:ce:59:03:88: e8:02:8a:ed:bd:e2:f7:91:e4:1e:6e:36:6b:eb:06: 17:25:36:ef:21:2e:a7:1d:49:5c:ca:da:1b:58:d5: 41:c0:05:0f:07:4a:5d:e5:7e:8d:de:0b:74:e6:1f: bb:02:ee:60:db:1b:7e:77:87:52:3e:46:30:b9:6b: 24:29:25:05:b5:69:34:a3:db:e8:02:3e:96:d3:eb: e7:8a:39:5b:f7:a8:71:b9:10:af:b5:04:ce:e8:6f: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EF:03:8B:FA:1F:28:F4:0C:75:13:18:AF:D3:B4:FB:9C:1A:CC:89 X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:51:3a:97:1e:29:c8:1e:ea:cf:02:53:2d:f7:82:e5:df:ad: fb:bf:c7:16:a1:56:2b:81:a0:f3:70:17:2f:dc:41:8f:e6:6f: c6:39:17:5b:eb:cb:fe:0f:14:10:2d:14:78:a1:87:15:c9:52: c2:56:4f:8d:d0:55:28:74:c8:f0:47:fe:e2:df:1e:18:81:6d: 4f:0c:7a:33:90:ed:60:24:bd:a2:31:3d:b4:67:2c:58:3d:03: f4:14:52:b3:4c:dd:97:ad:c7:af:46:88:96:d1:8d:bc:5d:78: bc:67:3a:87:fe:f2:e9:5f:cc:1c:0d:8f:9e:56:df:74:c5:94: ef:39:e6:0a:aa:40:01:b3:56:e6:8e:75:84:51:b0:7c:0b:74: af:a6:d2:93:15:25:b4:c2:df:f2:fa:8c:7a:37:6e:13:39:44: f1:48:92:c1:cb:34:b7:ca:5b:66:4b:21:da:16:d0:c0:13:72: df:f3:af:d0:a2:7b:f9:0f:28:23:f2:d2:7d:d1:32:91:8e:54: a4:fe:af:4f:73:62:c1:e1:cc:c1:f8:e2:15:19:2c:15:0a:90: f8:ec:77:0c:e6:59:a7:f0:2c:cc:9f:de:ff:97:cd:94:ec:49: 97:c9:b6:fa:5d:8f:7c:b1:98:a3:93:48:36:d9:fd:0a:8b:34: 3f:8f:b1:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHa3hS1Z0gXU/0A/Hdg7z2QFWw3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNTA0MjgyMzE1NThaFw0yNTA1MDIwODM0NThaMDMxMTAvBgNV BAMTKDMxRUYwMzhCRkExRjI4RjQwQzc1MTMxOEFGRDNCNEZCOUMxQUNDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lAzSunQBxdf9S1zndI8LP4r1 /JQTc7COqwmbQ4DSvbCGBqHWWb5z0xnb5oeY3ZpfDgiXHnni3UWXBBK22z2ziBuP iGQFpxKP3EErItQVV/BssWO7cxOHuk8i4mrirO9kXlS85LOkBiSBU5qBzMnv7P6R lGhCq8+7qE7+52OFcyh+/pwNpFk97bcnt6O3MMKU2+uPbg7jmTeTa1Zkn4GizlkD iOgCiu294veR5B5uNmvrBhclNu8hLqcdSVzK2htY1UHABQ8HSl3lfo3eC3TmH7sC 7mDbG353h1I+RjC5ayQpJQW1aTSj2+gCPpbT6+eKOVv3qHG5EK+1BM7ob12dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMe8Di/ofKPQMdRMYr9O0+5wazIkwHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFROpceKcge6s8CUy33guXfrfu/xxahViuB oPNwFy/cQY/mb8Y5F1vry/4PFBAtFHihhxXJUsJWT43QVSh0yPBH/uLfHhiBbU8M ejOQ7WAkvaIxPbRnLFg9A/QUUrNM3Zetx69GiJbRjbxdeLxnOof+8ulfzBwNj55W 33TFlO855gqqQAGzVuaOdYRRsHwLdK+m0pMVJbTC3/L6jHo3bhM5RPFIksHLNLfK W2ZLIdoW0MATct/zr9Cie/kPKCPy0n3RMpGOVKT+r09zYsHhzMH44hUZLBUKkPjs dwzmWafwLMyf3v+XzZTsSZfJtvpdj3yxmKOTSDbZ/QqLND+PsUU= -----END CERTIFICATE-----Generated at Wed Apr 30 12:48:57 2025 by rpki-client