$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: F5ZGBpAzkinIB8bZm9iTF84dt+8isPzVzaVMGXl6h5c= Subject key identifier: 4B:A5:E5:DE:76:43:DA:0F:43:92:82:57:F6:12:A8:44:11:D8:CF:29 Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 5C590A6CF1B6EFDE2168C12DD67147098932AA05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 0211 Signing time: Wed 25 Mar 2026 21:40:03 +0000 Manifest this update: Wed 25 Mar 2026 21:35:03 +0000 Manifest next update: Sun 29 Mar 2026 04:03:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: 7MoYlO2do5LfgxxCPx44qicaWuMa0uW85780Yf8D7C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:59:0a:6c:f1:b6:ef:de:21:68:c1:2d:d6:71:47:09:89:32:aa:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Mar 25 21:35:03 2026 GMT Not After : Mar 29 04:03:03 2026 GMT Subject: CN=4BA5E5DE7643DA0F43928257F612A84411D8CF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7b:fe:bc:da:50:69:6b:60:7c:4e:e8:a3:47: 57:52:80:6b:2f:65:98:37:bb:cf:43:74:0c:16:f6: 32:e4:65:23:b0:3c:87:00:a0:4e:23:09:0f:1f:35: d0:b2:4e:b5:39:f9:7f:9e:5c:f3:18:6d:ca:27:52: 79:a6:1e:10:98:a9:0a:3f:4f:30:ac:6c:a8:06:e8: 8a:58:d1:3e:87:d4:c4:6b:1b:72:98:00:36:18:a4: 98:d5:06:c0:a0:34:2a:23:bd:ae:b1:e6:6e:bb:29: 94:c6:64:cb:26:43:df:bf:ee:cf:f9:81:21:71:3a: 8d:d2:61:d5:d1:16:56:bb:1e:b8:93:fd:84:42:6d: 65:d4:36:c4:60:29:99:9a:5a:b1:f3:5a:41:db:44: 79:14:ba:17:ed:55:6e:85:bf:7f:0e:d4:f9:bd:1f: 91:78:78:7c:61:a5:a0:9a:0b:4d:58:00:29:31:b5: 19:7c:65:6c:6a:3a:1c:4f:f9:22:c5:85:77:0d:8f: 4d:0c:a4:9d:62:dc:b3:f7:12:1e:36:01:fe:3c:61: 92:f9:4e:db:03:d3:01:e3:4c:8d:0e:6e:1f:cf:e3: da:76:ef:34:85:dd:0b:bb:1d:26:16:fb:64:e1:20: 89:ff:6c:57:f4:e7:20:86:66:5b:b2:e4:32:74:ba: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A5:E5:DE:76:43:DA:0F:43:92:82:57:F6:12:A8:44:11:D8:CF:29 X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2a:ff:15:b4:d0:b9:52:e1:41:48:71:ce:29:77:bf:03:bb: 4d:90:fb:88:f2:01:c7:b5:7e:85:4c:37:78:8b:c3:ec:8c:01: 0a:6b:d7:22:6c:94:02:ff:f8:59:a8:7e:d0:4b:49:d5:0e:81: ba:a8:bc:35:e1:c6:d5:77:75:7c:56:b5:09:6f:b8:8a:58:7a: 40:76:a8:de:f2:6b:30:a5:e0:bf:51:f0:24:4c:62:64:98:8f: 02:f4:87:d6:37:bd:ea:10:04:d9:80:af:0e:85:d8:64:db:d3: b6:5b:8e:24:aa:ca:26:fd:ca:01:37:08:41:91:27:8c:84:86: 9a:40:3e:ab:6f:cf:b7:84:8f:ac:50:57:da:f5:6e:fc:8b:4a: 49:b5:fa:b6:bc:71:04:1b:49:69:b5:83:65:e8:d1:5a:78:d5: 76:5e:e9:f0:74:21:27:c1:a5:af:f5:d1:db:00:a6:c4:b0:8a: 5e:06:6a:d3:3c:a1:c3:b9:76:20:a9:9f:fd:21:0a:65:84:74: e6:4f:e6:cb:0b:18:d3:de:5e:da:1b:ae:15:6d:f5:96:b0:d6: 87:92:f6:e0:ba:af:01:b4:96:63:6e:ae:8b:35:c3:69:cb:0e: fc:41:9c:92:1b:39:eb:16:6e:5d:d5:ef:8c:60:89:e1:6d:5e: 86:17:3e:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFkKbPG2794haMEt1nFHCYkyqgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNjAzMjUyMTM1MDNaFw0yNjAzMjkwNDAzMDNaMDMxMTAvBgNV BAMTKDRCQTVFNURFNzY0M0RBMEY0MzkyODI1N0Y2MTJBODQ0MTFEOENGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDre/682lBpa2B8TuijR1dSgGsv ZZg3u89DdAwW9jLkZSOwPIcAoE4jCQ8fNdCyTrU5+X+eXPMYbconUnmmHhCYqQo/ TzCsbKgG6IpY0T6H1MRrG3KYADYYpJjVBsCgNCojva6x5m67KZTGZMsmQ9+/7s/5 gSFxOo3SYdXRFla7HriT/YRCbWXUNsRgKZmaWrHzWkHbRHkUuhftVW6Fv38O1Pm9 H5F4eHxhpaCaC01YACkxtRl8ZWxqOhxP+SLFhXcNj00MpJ1i3LP3Eh42Af48YZL5 TtsD0wHjTI0Obh/P49p27zSF3Qu7HSYW+2ThIIn/bFf05yCGZluy5DJ0umEnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS6Xl3nZD2g9DkoJX9hKoRBHYzykwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcq/xW00LlS4UFIcc4pd78Du02Q+4jyAce1 foVMN3iLw+yMAQpr1yJslAL/+FmoftBLSdUOgbqovDXhxtV3dXxWtQlvuIpYekB2 qN7yazCl4L9R8CRMYmSYjwL0h9Y3veoQBNmArw6F2GTb07ZbjiSqyib9ygE3CEGR J4yEhppAPqtvz7eEj6xQV9r1bvyLSkm1+ra8cQQbSWm1g2Xo0Vp41XZe6fB0ISfB pa/10dsApsSwil4GatM8ocO5diCpn/0hCmWEdOZP5ssLGNPeXtobrhVt9Zaw1oeS 9uC6rwG0lmNuros1w2nLDvxBnJIbOesWbl3V74xgieFtXoYXPnY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:37 2026 by rpki-client