$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: DdvKSLGSic+vSK3rMrPF4YdNrVukauiJVNk2VJy6EH0= Subject key identifier: 53:EA:E1:FD:C6:5E:EE:32:9F:A4:3F:A5:EE:5A:41:28:04:B6:5F:62 Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 26340877834CA52A30172F37BB7A0F438C98B1B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 01A2 Signing time: Sun 20 Jul 2025 13:50:03 +0000 Manifest this update: Sun 20 Jul 2025 13:45:03 +0000 Manifest next update: Wed 23 Jul 2025 21:32:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: 24tdS4tLlCESHXmLlw6Ioug5F/EiMDma+7O4Wi5F/90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:34:08:77:83:4c:a5:2a:30:17:2f:37:bb:7a:0f:43:8c:98:b1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Jul 20 13:45:03 2025 GMT Not After : Jul 23 21:32:03 2025 GMT Subject: CN=53EAE1FDC65EEE329FA43FA5EE5A412804B65F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:bf:3f:5e:22:47:2b:83:71:88:7b:2e:d8: 6e:b4:94:69:41:46:40:44:dc:98:ad:f2:d8:bb:6c: b6:51:f4:a8:60:26:21:35:5f:2d:3c:99:f6:d6:1a: 6f:56:f6:af:b2:78:ea:22:38:a3:32:7b:54:90:36: 04:d3:aa:a2:8f:0c:6c:30:4f:13:cd:c8:85:92:73: 81:bb:52:8c:dc:ab:1f:ac:fc:82:0f:60:17:a3:cf: 90:65:07:f8:b5:27:3d:5d:e3:46:8f:a3:44:99:d9: b6:9b:ab:a7:ce:5e:7d:7c:18:d5:bb:95:88:79:0e: 7b:45:38:88:da:be:2d:53:96:13:db:65:b5:d5:7f: c8:80:f1:8d:5e:aa:d8:20:ff:35:ee:f0:ee:c0:ef: 1c:e1:93:19:8f:5a:3d:bf:88:3f:43:ba:12:7c:05: 6d:af:7e:a1:57:e0:cb:8b:7c:57:12:d9:4b:25:c9: cf:72:6e:30:bc:f6:96:11:e2:22:8b:62:8b:e4:17: 76:ad:36:f9:09:44:c3:69:13:07:b2:16:d1:ec:f3: fa:68:13:90:51:ce:1d:7f:5f:9e:1b:01:e0:ee:bc: d2:a4:bd:7e:0e:c0:e9:74:26:24:ab:e0:2b:8d:9b: 4f:5a:81:e4:79:1b:06:df:20:a9:f7:70:06:5f:07: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EA:E1:FD:C6:5E:EE:32:9F:A4:3F:A5:EE:5A:41:28:04:B6:5F:62 X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:19:db:0b:c6:36:97:8d:a6:d1:42:9f:5e:b2:5f:9d:17:9e: c6:39:df:27:4a:61:73:bb:c0:c6:ad:bb:fa:e3:13:f3:cf:47: cd:d6:4f:ca:f0:42:9f:0f:4a:69:7f:24:83:9e:3b:46:cf:29: 27:55:11:5e:5f:7b:86:4e:82:e6:b2:b4:45:88:80:c1:55:66: a3:18:09:b2:45:06:68:a6:84:85:0b:12:72:48:8c:cd:1f:61: 28:75:cf:da:99:82:42:55:72:8d:a0:f5:58:5e:1f:1b:33:72: fa:30:0d:68:1d:9c:be:ed:56:25:42:4f:2d:0f:b6:b7:83:a8: a7:fc:4b:df:e5:15:19:cb:ac:90:94:18:47:e3:94:9c:e6:0d: 73:b9:a2:27:c6:ef:7a:95:3b:0d:5c:7b:60:83:bd:70:1b:73: b4:2e:78:d7:c7:22:69:ed:cd:1c:ec:24:be:d9:fb:c3:e2:fb: 9d:46:62:2f:55:e1:34:cc:8d:06:77:94:0c:4c:74:6b:37:d9: 8e:1e:54:a6:72:ad:f7:76:7c:4a:eb:69:b6:0f:f6:1c:8c:fc: 12:90:e5:0b:f6:f9:ab:04:0c:37:e9:2e:e2:dd:f5:5c:ba:ba: 8f:37:5d:ec:49:ff:17:2c:12:03:02:8b:17:c5:19:34:1a:03: 45:64:46:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjQId4NMpSowFy83u3oPQ4yYsbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA3MjAxMzQ1MDNaFw0yNTA3MjMyMTMyMDNaMDMxMTAvBgNV BAMTKDUzRUFFMUZEQzY1RUVFMzI5RkE0M0ZBNUVFNUE0MTI4MDRCNjVGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaSL8/XiJHK4NxiHsu2G60lGlB RkBE3Jit8ti7bLZR9KhgJiE1Xy08mfbWGm9W9q+yeOoiOKMye1SQNgTTqqKPDGww TxPNyIWSc4G7Uozcqx+s/IIPYBejz5BlB/i1Jz1d40aPo0SZ2babq6fOXn18GNW7 lYh5DntFOIjavi1TlhPbZbXVf8iA8Y1eqtgg/zXu8O7A7xzhkxmPWj2/iD9DuhJ8 BW2vfqFX4MuLfFcS2Uslyc9ybjC89pYR4iKLYovkF3atNvkJRMNpEweyFtHs8/po E5BRzh1/X54bAeDuvNKkvX4OwOl0JiSr4CuNm09ageR5GwbfIKn3cAZfB+OVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU+rh/cZe7jKfpD+l7lpBKAS2X2IwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8Z2wvGNpeNptFCn16yX50XnsY53ydKYXO7 wMatu/rjE/PPR83WT8rwQp8PSml/JIOeO0bPKSdVEV5fe4ZOguaytEWIgMFVZqMY CbJFBmimhIULEnJIjM0fYSh1z9qZgkJVco2g9VheHxszcvowDWgdnL7tViVCTy0P treDqKf8S9/lFRnLrJCUGEfjlJzmDXO5oifG73qVOw1ce2CDvXAbc7QueNfHImnt zRzsJL7Z+8Pi+51GYi9V4TTMjQZ3lAxMdGs32Y4eVKZyrfd2fErrabYP9hyM/BKQ 5Qv2+asEDDfpLuLd9Vy6uo83XexJ/xcsEgMCixfFGTQaA0VkRrs= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:56 2025 by rpki-client