$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: agSFOOvEwxce3u0E1wjuH35y1K5sIg9poh9hoC75V/4= Subject key identifier: D6:CD:2F:CD:7E:77:A7:67:5D:FD:44:CB:A7:D8:55:7E:D4:52:A2:8F Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 0CD7F2713E2C6BDEE5A37B28160569FFE512B259 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 018C Signing time: Mon 02 Jun 2025 10:10:03 +0000 Manifest this update: Mon 02 Jun 2025 10:05:03 +0000 Manifest next update: Thu 05 Jun 2025 12:18:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: P6XUa3KrDrGQ+Rc6lU6PZcAc9grbL8s4UvIUPrUC2oA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 12:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d7:f2:71:3e:2c:6b:de:e5:a3:7b:28:16:05:69:ff:e5:12:b2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Jun 2 10:05:03 2025 GMT Not After : Jun 5 12:18:03 2025 GMT Subject: CN=D6CD2FCD7E77A7675DFD44CBA7D8557ED452A28F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:fc:04:7a:39:e5:d7:4f:e2:7b:d9:35:2d: fb:35:9a:c1:d4:72:da:0d:ee:42:d2:6f:bd:08:fc: 11:79:18:85:2f:ff:8f:2c:70:05:61:23:15:cd:f6: 24:d5:4a:45:8d:66:e7:6b:62:e5:f2:19:0d:6b:9c: 65:7d:13:a9:76:4d:6b:f2:46:d4:c8:25:84:28:c3: 3d:6b:45:5e:78:f2:5a:a6:ab:5a:2d:f8:87:1c:6b: 0f:07:ca:f1:90:ba:87:87:62:73:ce:56:7a:c7:a8: 48:a0:3b:9c:57:af:5d:77:c7:70:c7:86:44:46:35: f1:e4:ac:11:9c:5b:ab:aa:11:11:a6:62:a5:59:8d: 59:83:47:89:24:b3:3c:6c:59:9e:61:3c:fc:3c:d7: b3:4e:7e:e6:5a:1d:4e:7c:8b:76:2d:d3:31:28:b3: 49:ce:f9:71:92:ba:fd:47:02:d1:8e:ca:0e:14:df: 32:cc:dc:da:79:7a:ae:ae:00:51:f6:56:3c:12:a5: de:b0:41:9d:7b:0f:f7:83:e9:f8:7e:52:0c:d5:59: b0:a8:b5:a0:d8:c1:43:91:ca:84:ec:21:1a:c4:78: 55:41:30:ba:ce:55:6c:77:a1:0f:3e:ac:ec:75:1a: a1:47:65:01:7c:5b:82:a0:1b:15:e3:da:92:4c:4a: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CD:2F:CD:7E:77:A7:67:5D:FD:44:CB:A7:D8:55:7E:D4:52:A2:8F X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:86:eb:ed:a3:65:bb:18:75:f1:23:8d:fc:23:fa:e7:e6:cf: ec:a0:c0:d8:8f:8f:0f:8b:a6:0b:95:6c:30:46:e2:2b:c4:48: be:d2:f6:f1:22:ff:b0:58:56:92:71:9c:9e:e6:b8:53:3d:32: 3f:e6:4e:e2:47:11:81:47:c1:ab:9f:94:39:ca:1f:fd:92:37: 95:d7:1b:ac:32:bc:68:c4:23:2a:60:52:07:e7:97:6d:45:a8: 8d:a7:4b:fa:11:b8:30:46:34:ba:32:47:2a:a4:8e:d2:42:07: 2a:33:63:07:5b:d9:49:56:a7:80:a5:86:89:ae:bd:0d:cd:bb: ce:f4:bd:25:87:55:23:3c:76:03:0d:b2:9f:ff:87:a5:93:eb: bb:fc:fd:5b:72:5d:59:f0:83:5d:8a:2a:b5:9b:c2:3d:fa:a1: 8b:e6:a7:d2:7f:1b:b5:5d:00:08:c0:39:07:ae:28:23:0c:ce: 43:34:a2:a6:af:c3:42:f5:85:98:5e:e4:1a:24:a2:6f:08:7a: b5:e4:ba:16:9a:1f:57:aa:64:20:16:6b:bf:0f:d7:53:d3:27: af:87:41:be:4e:86:a5:aa:4b:d3:ad:c4:4b:b4:19:8b:4f:f5: 3f:01:e6:02:91:3a:b0:2a:af:a2:e0:46:95:fb:4d:c3:34:1d: 5d:fd:b2:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNfycT4sa97lo3soFgVp/+USslkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA2MDIxMDA1MDNaFw0yNTA2MDUxMjE4MDNaMDMxMTAvBgNV BAMTKEQ2Q0QyRkNEN0U3N0E3Njc1REZENDRDQkE3RDg1NTdFRDQ1MkEyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79vwEejnl10/ie9k1Lfs1msHU ctoN7kLSb70I/BF5GIUv/48scAVhIxXN9iTVSkWNZudrYuXyGQ1rnGV9E6l2TWvy RtTIJYQowz1rRV548lqmq1ot+Iccaw8HyvGQuoeHYnPOVnrHqEigO5xXr113x3DH hkRGNfHkrBGcW6uqERGmYqVZjVmDR4kkszxsWZ5hPPw817NOfuZaHU58i3Yt0zEo s0nO+XGSuv1HAtGOyg4U3zLM3Np5eq6uAFH2VjwSpd6wQZ17D/eD6fh+UgzVWbCo taDYwUORyoTsIRrEeFVBMLrOVWx3oQ8+rOx1GqFHZQF8W4KgGxXj2pJMSuX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1s0vzX53p2dd/UTLp9hVftRSoo8wHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmG6+2jZbsYdfEjjfwj+ufmz+ygwNiPjw+L pguVbDBG4ivESL7S9vEi/7BYVpJxnJ7muFM9Mj/mTuJHEYFHwauflDnKH/2SN5XX G6wyvGjEIypgUgfnl21FqI2nS/oRuDBGNLoyRyqkjtJCByozYwdb2UlWp4Clhomu vQ3Nu870vSWHVSM8dgMNsp//h6WT67v8/VtyXVnwg12KKrWbwj36oYvmp9J/G7Vd AAjAOQeuKCMMzkM0oqavw0L1hZhe5Bokom8IerXkuhaaH1eqZCAWa78P11PTJ6+H Qb5OhqWqS9OtxEu0GYtP9T8B5gKROrAqr6LgRpX7TcM0HV39sjw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:04 2025 by rpki-client