$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: 490eOZPe8eT1dfdy+iVM8ZOCEHu/LrnFpVTeaFEuOAQ= Subject key identifier: 45:EF:6F:52:18:B9:8F:B7:5F:99:26:F4:93:56:FE:C5:7A:1C:24:93 Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 768C41C2F157EBEA964CC57D4923BA00E50AC915 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 0172 Signing time: Sat 05 Apr 2025 06:00:03 +0000 Manifest this update: Sat 05 Apr 2025 05:55:03 +0000 Manifest next update: Tue 08 Apr 2025 07:59:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: 3kdGw9n4HQo8IJEMTlEAx5mR4cSLamVmy4/R1r+wQYw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8c:41:c2:f1:57:eb:ea:96:4c:c5:7d:49:23:ba:00:e5:0a:c9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Apr 5 05:55:03 2025 GMT Not After : Apr 8 07:59:03 2025 GMT Subject: CN=45EF6F5218B98FB75F9926F49356FEC57A1C2493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:69:3e:aa:f1:3a:a4:78:47:6a:e7:3b:a7:8d: 5e:67:65:d0:8c:ca:8f:56:ab:39:19:47:44:18:a1: cf:b5:bf:66:4a:41:e6:dc:50:b1:8d:0e:9a:43:f4: e5:66:d0:3c:50:67:14:29:9b:e9:e6:84:ed:fa:8f: c9:ff:8d:78:85:68:26:28:1a:d6:65:56:20:8d:53: fe:d3:1b:30:b9:cd:eb:07:7a:bc:ec:15:66:3c:b7: e0:f7:61:da:0d:ec:b2:84:de:ae:00:cf:2e:75:83: 7d:a7:7c:df:82:20:a2:e7:7b:89:5f:e4:95:9d:82: d8:31:ed:d2:39:6b:74:3d:42:40:a2:03:9e:f5:64: 2c:4e:09:22:da:da:09:cc:de:a2:4a:b8:9f:80:c1: 8a:c1:85:54:cc:e4:eb:7c:f7:83:52:6f:c3:cd:c8: 98:d4:88:75:83:bb:f1:da:df:d3:0f:5e:ba:6f:a3: 4e:2c:2a:12:b8:d3:32:e9:b5:e0:51:68:4a:90:ba: 85:f0:4c:ea:dc:61:7d:85:92:38:94:66:d9:77:41: b2:8b:01:e4:90:3f:ff:5d:c2:b1:06:3f:47:f2:c2: 8e:c2:4c:c7:c3:09:ab:32:93:9f:75:8d:16:ae:cc: 2b:94:46:c5:b7:0a:6d:14:5e:b3:12:06:f9:ef:80: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EF:6F:52:18:B9:8F:B7:5F:99:26:F4:93:56:FE:C5:7A:1C:24:93 X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9c:0f:65:48:84:42:79:43:39:06:ff:46:e4:87:23:29:48: 82:e6:dd:99:1f:fa:b1:ab:82:9d:e4:bb:f8:b4:c9:73:bc:7a: 47:54:c9:5b:8f:a3:f0:f5:53:f7:15:12:86:1b:61:7d:20:53: 54:01:0e:90:12:09:7d:79:d8:88:60:2c:5d:bc:a1:f0:ba:a6: 25:a7:e8:65:a2:13:e7:ee:30:39:11:8d:d4:52:ec:e6:fb:9e: 2d:0c:d7:d1:06:32:38:33:74:ae:38:56:5c:2f:2b:01:ab:0b: 68:00:0d:d0:ac:6f:24:5b:57:4f:ce:a2:25:51:d7:c4:a5:ed: e6:3e:81:30:cf:40:fc:03:36:b2:80:1e:f9:0e:4e:1e:30:0c: 93:8f:1a:52:5e:5e:cf:b3:0a:c0:4f:b0:de:ff:fb:b8:e4:52: 48:61:6c:7a:db:67:c6:0c:f5:3a:a0:97:ed:c2:64:ff:43:cf: 26:d2:67:d6:8b:e9:2f:ad:a0:d3:2c:38:98:81:f1:59:60:ec: 29:29:fc:65:af:1b:a9:31:40:6f:e8:38:82:22:03:21:11:1b: 0d:76:6f:91:a8:ba:b9:95:8e:4a:b1:1a:cd:f4:f2:88:7b:09: d3:4b:54:be:1d:ee:bc:87:a9:e1:51:5b:81:2f:83:06:19:b3: ae:e7:37:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoxBwvFX6+qWTMV9SSO6AOUKyRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA0MDUwNTU1MDNaFw0yNTA0MDgwNzU5MDNaMDMxMTAvBgNV BAMTKDQ1RUY2RjUyMThCOThGQjc1Rjk5MjZGNDkzNTZGRUM1N0ExQzI0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaT6q8TqkeEdq5zunjV5nZdCM yo9WqzkZR0QYoc+1v2ZKQebcULGNDppD9OVm0DxQZxQpm+nmhO36j8n/jXiFaCYo GtZlViCNU/7TGzC5zesHerzsFWY8t+D3YdoN7LKE3q4Azy51g32nfN+CIKLne4lf 5JWdgtgx7dI5a3Q9QkCiA571ZCxOCSLa2gnM3qJKuJ+AwYrBhVTM5Ot894NSb8PN yJjUiHWDu/Ha39MPXrpvo04sKhK40zLpteBRaEqQuoXwTOrcYX2FkjiUZtl3QbKL AeSQP/9dwrEGP0fywo7CTMfDCasyk591jRauzCuURsW3Cm0UXrMSBvnvgEBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURe9vUhi5j7dfmSb0k1b+xXocJJMwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKicD2VIhEJ5QzkG/0bkhyMpSILm3Zkf+rGr gp3ku/i0yXO8ekdUyVuPo/D1U/cVEoYbYX0gU1QBDpASCX152IhgLF28ofC6piWn 6GWiE+fuMDkRjdRS7Ob7ni0M19EGMjgzdK44VlwvKwGrC2gADdCsbyRbV0/OoiVR 18Sl7eY+gTDPQPwDNrKAHvkOTh4wDJOPGlJeXs+zCsBPsN7/+7jkUkhhbHrbZ8YM 9Tqgl+3CZP9DzybSZ9aL6S+toNMsOJiB8Vlg7Ckp/GWvG6kxQG/oOIIiAyERGw12 b5GourmVjkqxGs308oh7CdNLVL4d7ryHqeFRW4EvgwYZs67nNzo= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:09 2025 by rpki-client