$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: 8YqThyxvUd8jCWeoDrUOKE32IdAa8cD3ZMHpJUVSwVE= Subject key identifier: 87:C1:F0:3D:1D:8D:80:8B:37:83:D8:E3:0A:A3:80:F4:DF:31:9D:F4 Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 730E20C42EE89EC5FFD2FB4DA65426DC4F55077B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 0137 Signing time: Sat 23 Nov 2024 16:00:03 +0000 Manifest this update: Sat 23 Nov 2024 15:55:03 +0000 Manifest next update: Tue 26 Nov 2024 23:58:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: LkVV52K2iYEKBNpuJF+uBUH1NAWLVs8pcAlSazWHLhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0e:20:c4:2e:e8:9e:c5:ff:d2:fb:4d:a6:54:26:dc:4f:55:07:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Nov 23 15:55:03 2024 GMT Not After : Nov 26 23:58:03 2024 GMT Subject: CN=87C1F03D1D8D808B3783D8E30AA380F4DF319DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:4b:42:29:1a:99:26:a6:06:19:ab:f3:1c: c8:7e:3a:7a:d4:32:36:72:ac:53:47:21:a6:43:03: 77:a2:d6:a6:6e:44:42:c4:11:e8:22:60:a5:df:62: e4:65:9a:46:8c:cc:cd:08:86:16:30:21:59:41:cd: b9:1f:e2:a7:bf:3e:f1:24:b0:a3:3b:fa:d8:5f:cd: 64:42:17:70:3f:d3:9c:4a:38:29:d4:a5:e7:b9:a0: 88:94:8d:39:99:2a:fe:57:b3:b3:26:33:54:57:2d: 1e:49:5a:42:08:fd:95:f1:bd:c1:49:d1:57:4b:64: cd:bd:ad:04:88:96:25:0a:d5:0e:71:3f:c3:c6:a6: fd:93:51:1d:b4:d4:d1:cd:b2:93:e2:8f:89:8f:d1: a5:92:66:6d:e5:0d:11:3e:6b:ac:68:97:08:31:33: da:8e:9f:a3:3a:ed:7f:38:ba:4f:17:27:35:5c:96: 9d:f5:57:ab:9f:d8:2b:7b:56:4c:98:21:c3:89:4f: 13:8b:db:b5:7d:e7:29:41:77:29:e9:d0:18:1a:d5: 52:14:43:d3:de:1d:47:48:1c:c2:c8:b2:3c:27:7d: 29:be:d5:fa:a9:cb:9e:47:8d:e1:12:e3:53:ac:65: f3:49:63:4a:7e:f3:67:b9:c5:30:ee:33:39:30:37: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C1:F0:3D:1D:8D:80:8B:37:83:D8:E3:0A:A3:80:F4:DF:31:9D:F4 X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:12:2c:c4:f7:96:a6:86:08:f4:f0:44:84:d7:8f:32:49:b6: 6a:70:fb:41:0f:99:61:20:7d:de:13:3e:0e:96:c4:96:89:c9: 8a:6a:78:7c:3b:b6:0c:50:76:f3:0c:b6:46:72:fa:3a:15:df: 34:81:58:61:06:33:c7:68:f2:4a:e9:5a:f8:be:5d:eb:25:20: 25:69:dc:37:20:2f:81:ff:a0:a0:93:d4:2e:70:1a:f0:b9:c7: df:26:36:c9:e9:15:6f:7e:93:b8:f8:7a:9a:29:90:0b:46:74: 61:be:00:b9:df:40:27:44:a3:ca:92:ff:89:61:c2:32:02:d1: 0c:39:07:7b:4c:3f:49:5a:82:d2:f6:cd:26:bb:7f:03:4d:41: 14:7d:c0:59:7b:7f:38:cf:1d:39:36:05:9f:51:55:1d:6a:aa: ac:67:f3:6e:88:1d:4f:f1:7d:a5:82:d2:ed:e3:bf:e4:ff:06: 2a:ea:64:34:27:6f:70:3b:a6:90:5d:55:69:9d:a1:06:19:e0: ef:5a:bd:6b:84:d8:8c:95:05:92:67:d7:e7:9e:e4:e0:2b:f8: 0e:ea:8e:f6:b3:c7:e3:dd:7a:b3:f6:65:14:26:80:5f:ff:57: 0d:61:c0:0a:fa:7e:96:6e:cb:f7:8e:19:75:c7:fc:66:c4:7e: 5c:da:e1:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcw4gxC7onsX/0vtNplQm3E9VB3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNDExMjMxNTU1MDNaFw0yNDExMjYyMzU4MDNaMDMxMTAvBgNV BAMTKDg3QzFGMDNEMUQ4RDgwOEIzNzgzRDhFMzBBQTM4MEY0REYzMTlERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUUtCKRqZJqYGGavzHMh+OnrU MjZyrFNHIaZDA3ei1qZuRELEEegiYKXfYuRlmkaMzM0IhhYwIVlBzbkf4qe/PvEk sKM7+thfzWRCF3A/05xKOCnUpee5oIiUjTmZKv5Xs7MmM1RXLR5JWkII/ZXxvcFJ 0VdLZM29rQSIliUK1Q5xP8PGpv2TUR201NHNspPij4mP0aWSZm3lDRE+a6xolwgx M9qOn6M67X84uk8XJzVclp31V6uf2Ct7VkyYIcOJTxOL27V95ylBdynp0Bga1VIU Q9PeHUdIHMLIsjwnfSm+1fqpy55HjeES41OsZfNJY0p+82e5xTDuMzkwNyg3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh8HwPR2NgIs3g9jjCqOA9N8xnfQwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEISLMT3lqaGCPTwRITXjzJJtmpw+0EPmWEg fd4TPg6WxJaJyYpqeHw7tgxQdvMMtkZy+joV3zSBWGEGM8do8krpWvi+XeslICVp 3DcgL4H/oKCT1C5wGvC5x98mNsnpFW9+k7j4epopkAtGdGG+ALnfQCdEo8qS/4lh wjIC0Qw5B3tMP0lagtL2zSa7fwNNQRR9wFl7fzjPHTk2BZ9RVR1qqqxn826IHU/x faWC0u3jv+T/BirqZDQnb3A7ppBdVWmdoQYZ4O9avWuE2IyVBZJn1+ee5OAr+A7q jvazx+PderP2ZRQmgF//Vw1hwAr6fpZuy/eOGXXH/GbEflza4bI= -----END CERTIFICATE-----Generated at Sat Nov 23 18:35:32 2024 by rpki-client on console-ams.rpki-client.org