$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: dyf7kBvJqsEWBc6POBR0xLGhwYvR7OBATGC7lQq5k9g= Subject key identifier: 3C:DF:44:5C:DC:1E:A8:AF:94:0E:55:D3:33:C9:65:EE:68:85:C1:0C Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 25E2EA994AB0747F2E615C9888AAF68549A9A7D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: E3 Signing time: Sun 19 May 2024 19:30:03 +0000 Manifest this update: Sun 19 May 2024 19:25:03 +0000 Manifest next update: Wed 22 May 2024 20:25:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: 8BQY3BTpm16SgjIIJ2X6SjizjBaZlRoOOJqQW/9c6Z8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e2:ea:99:4a:b0:74:7f:2e:61:5c:98:88:aa:f6:85:49:a9:a7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: May 19 19:25:03 2024 GMT Not After : May 22 20:25:03 2024 GMT Subject: CN=3CDF445CDC1EA8AF940E55D333C965EE6885C10C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:a7:5d:85:49:cb:60:e4:2e:6c:75:1f:8c: 33:92:df:77:94:33:e4:3e:a2:e0:c9:9e:50:82:ce: ba:81:63:60:c2:13:bb:7f:93:dc:ec:cc:7f:53:1b: 07:a3:de:91:5f:04:60:0a:24:bf:89:c9:47:6e:0a: e4:9e:72:e8:2c:e3:0b:91:1a:56:2e:d4:0b:ad:ce: 10:5f:dc:28:74:96:71:86:9f:60:75:0b:d4:43:38: 6d:39:6a:79:5a:63:0c:fe:0c:d4:c2:59:14:c0:4a: b4:ec:5a:62:9b:d9:0d:61:89:47:73:a5:72:f9:46: 7c:a1:d7:71:22:6d:c9:af:ee:ad:29:d3:9c:31:31: a1:6c:c1:be:6e:a4:77:ec:16:a6:c9:af:cf:c4:9e: 26:7f:77:be:bc:47:af:12:98:3f:48:89:30:8a:13: 8b:7e:3a:3b:d5:d5:74:c1:8b:ab:87:84:67:df:48: ff:a3:fc:0a:43:49:f5:08:0b:39:df:71:8c:94:81: 60:8d:82:d7:15:c3:f3:2c:81:75:82:c0:69:07:21: 81:75:72:f9:c6:1d:ab:77:e7:dc:89:aa:16:cc:fb: bc:16:b2:53:8d:b7:f1:3c:90:31:8d:07:c5:09:e6: a7:f1:71:53:c2:06:d8:d9:a5:74:55:d0:5c:ba:9b: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DF:44:5C:DC:1E:A8:AF:94:0E:55:D3:33:C9:65:EE:68:85:C1:0C X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:13:b1:0b:cf:d2:04:d9:3e:a6:ac:b3:b4:01:69:da:a1:1b: 58:65:3d:e0:43:d3:89:f9:db:41:dd:43:5d:5c:b9:c4:39:bb: 7a:52:38:ed:20:fb:ce:8c:a2:27:cd:f8:1a:de:43:70:ed:3c: 20:a2:5b:85:e3:6d:77:27:a0:20:42:2c:8b:d3:a1:9b:da:ec: 7e:19:84:84:5a:5b:48:9f:b4:03:6b:e9:1d:d7:5f:3f:6a:2c: 88:78:ca:b4:46:b3:cb:d3:63:e5:b9:b3:6f:c0:61:b4:a6:b6: c2:41:c8:a3:8c:2c:12:1b:70:db:b0:86:50:64:8b:e4:85:3e: 86:e3:d8:1c:b7:13:e8:12:aa:b3:0b:3d:44:df:94:70:93:b5: ec:a3:a1:b9:80:b1:17:6c:73:d3:6f:54:ac:ac:72:ed:87:00: 8d:b0:cd:d6:29:e8:03:78:74:d4:88:20:82:88:f4:dd:22:5d: fc:fe:b2:78:c5:b2:1c:a8:43:12:98:bd:f7:1e:28:ac:f7:8b: af:99:2e:aa:b9:9e:32:61:d1:4e:2c:d5:58:5f:24:aa:8f:33: 3d:28:58:d8:3f:cc:a6:b9:26:fb:f2:18:64:41:22:eb:bf:86: fd:bd:58:46:55:b3:ef:e8:e7:52:59:41:a7:fd:be:2c:6e:fb: 30:47:a1:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJeLqmUqwdH8uYVyYiKr2hUmpp9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNDA1MTkxOTI1MDNaFw0yNDA1MjIyMDI1MDNaMDMxMTAvBgNV BAMTKDNDREY0NDVDREMxRUE4QUY5NDBFNTVEMzMzQzk2NUVFNjg4NUMxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvn6ddhUnLYOQubHUfjDOS33eU M+Q+ouDJnlCCzrqBY2DCE7t/k9zszH9TGwej3pFfBGAKJL+JyUduCuSecugs4wuR GlYu1AutzhBf3Ch0lnGGn2B1C9RDOG05anlaYwz+DNTCWRTASrTsWmKb2Q1hiUdz pXL5Rnyh13Eibcmv7q0p05wxMaFswb5upHfsFqbJr8/EniZ/d768R68SmD9IiTCK E4t+OjvV1XTBi6uHhGffSP+j/ApDSfUICznfcYyUgWCNgtcVw/MsgXWCwGkHIYF1 cvnGHat359yJqhbM+7wWslONt/E8kDGNB8UJ5qfxcVPCBtjZpXRV0Fy6m4d3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPN9EXNweqK+UDlXTM8ll7miFwQwwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMTsQvP0gTZPqass7QBadqhG1hlPeBD04n5 20HdQ11cucQ5u3pSOO0g+86MoifN+BreQ3DtPCCiW4XjbXcnoCBCLIvToZva7H4Z hIRaW0iftANr6R3XXz9qLIh4yrRGs8vTY+W5s2/AYbSmtsJByKOMLBIbcNuwhlBk i+SFPobj2By3E+gSqrMLPUTflHCTteyjobmAsRdsc9NvVKyscu2HAI2wzdYp6AN4 dNSIIIKI9N0iXfz+snjFshyoQxKYvfceKKz3i6+ZLqq5njJh0U4s1VhfJKqPMz0o WNg/zKa5JvvyGGRBIuu/hv29WEZVs+/o51JZQaf9vixu+zBHoVM= -----END CERTIFICATE-----Generated at Sun May 19 20:54:08 2024 by rpki-client on console-ams.rpki-client.org