$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: P0J5O8oqQ80DfCSyvueiM6OZ+68prw+zV6kgauJFRVA= Subject key identifier: 5B:85:FA:4A:3E:6D:06:60:6A:9C:29:15:F2:38:C2:16:13:39:9E:8F Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 7747D606969448F70C0BAD6CB94F0400800118B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 01E5 Signing time: Sat 23 Aug 2025 01:21:02 +0000 Manifest this update: Sat 23 Aug 2025 01:16:02 +0000 Manifest next update: Tue 26 Aug 2025 03:59:02 +0000 Files and hashes: 1: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) 2: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) 3: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) 4: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: kGP/r/iQ//Sa75zpdfThidkYLYidMvvYSxZboxwowOI=) 5: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:47:d6:06:96:94:48:f7:0c:0b:ad:6c:b9:4f:04:00:80:01:18:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Aug 23 01:16:02 2025 GMT Not After : Aug 26 03:59:02 2025 GMT Subject: CN=5B85FA4A3E6D06606A9C2915F238C21613399E8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:55:15:f9:28:c1:42:70:91:80:50:bc:c5: b0:1d:82:a5:b8:35:32:14:06:d6:18:98:1e:5c:83: 3e:ce:1d:2a:05:e5:a7:7c:16:05:7d:e3:82:95:eb: d4:f6:58:88:4a:13:b7:95:1d:e2:e1:2e:fe:07:cd: d9:76:39:aa:f7:8a:73:a4:48:10:70:a8:e3:a5:52: 42:d1:43:56:87:75:87:ac:0e:c4:29:c5:09:f4:49: 2f:ab:b0:a2:e4:ee:ce:85:6d:a4:c3:10:fd:fb:f9: e5:e0:8a:c6:84:b7:a3:84:cd:cb:12:b2:55:e8:04: e4:5c:ca:c2:20:6a:65:aa:a2:35:5d:70:69:a3:4f: da:1b:dd:e5:38:6f:e4:40:51:8d:46:4e:6e:cd:ff: 19:49:e1:fc:3d:d7:bc:9a:5c:8b:7d:24:e3:11:f9: aa:b2:6e:ac:1e:b0:f7:92:37:a5:c8:4e:3d:eb:d5: db:45:5d:3c:a6:23:7f:2f:db:06:39:60:90:12:a4: 95:59:a7:70:be:94:7d:c6:0a:29:0e:32:58:e4:a5: ce:25:7d:18:47:17:74:da:87:b9:ab:98:34:fa:50: ea:d5:90:88:7d:6b:51:dd:ce:dc:97:e6:31:80:08: d2:d9:34:ce:9f:c8:25:b0:28:4d:7a:48:c4:b3:25: fa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:85:FA:4A:3E:6D:06:60:6A:9C:29:15:F2:38:C2:16:13:39:9E:8F X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e6:98:f2:3c:63:97:3f:72:6e:f2:0f:29:eb:8d:8b:00:74: 9d:78:e7:a2:b6:86:38:ec:88:e9:63:d8:e6:a7:e6:df:75:aa: 05:49:e1:41:3b:35:dd:bf:ee:d8:91:8c:d9:70:69:d7:c3:b6: f4:73:58:07:fe:96:d4:a7:bf:09:3d:d9:f0:fc:f8:87:df:d9: 40:dd:53:b9:56:f2:a4:61:14:77:a4:87:61:7d:10:8d:cb:84: 69:d0:ef:12:87:ab:a3:1e:24:8f:a6:db:f9:da:96:0c:b2:92: 16:f2:11:cb:99:21:24:13:9f:c7:27:c8:73:71:24:e8:da:b1: d9:92:b3:b9:c9:89:62:db:e3:c0:10:5a:1d:fe:72:2d:42:57: ce:cc:ef:48:fa:1c:d7:f1:4c:01:3d:61:3e:d0:76:aa:da:9e: db:35:2e:b4:e6:97:08:df:a1:d1:87:27:96:dc:0e:98:91:49: 74:79:b2:01:cc:2b:a4:f6:7f:b9:bb:f9:91:e8:b4:e8:91:9f: df:df:6f:a6:ff:26:21:08:fb:67:08:5d:2b:92:c1:8b:cd:02: e9:a3:17:ff:dc:56:4d:9c:87:6f:ac:75:80:a2:f2:5f:c3:94: fb:ad:d4:0f:00:f4:f7:7a:9e:7c:9b:97:60:21:33:4c:c3:9d: b4:3f:60:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0fWBpaUSPcMC61suU8EAIABGLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNTA4MjMwMTE2MDJaFw0yNTA4MjYwMzU5MDJaMDMxMTAvBgNV BAMTKDVCODVGQTRBM0U2RDA2NjA2QTlDMjkxNUYyMzhDMjE2MTMzOTlFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQVUV+SjBQnCRgFC8xbAdgqW4 NTIUBtYYmB5cgz7OHSoF5ad8FgV944KV69T2WIhKE7eVHeLhLv4Hzdl2Oar3inOk SBBwqOOlUkLRQ1aHdYesDsQpxQn0SS+rsKLk7s6FbaTDEP37+eXgisaEt6OEzcsS slXoBORcysIgamWqojVdcGmjT9ob3eU4b+RAUY1GTm7N/xlJ4fw917yaXIt9JOMR +aqybqwesPeSN6XITj3r1dtFXTymI38v2wY5YJASpJVZp3C+lH3GCikOMljkpc4l fRhHF3Tah7mrmDT6UOrVkIh9a1HdztyX5jGACNLZNM6fyCWwKE16SMSzJfrfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW4X6Sj5tBmBqnCkV8jjCFhM5no8wHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLmmPI8Y5c/cm7yDynrjYsAdJ1456K2hjjs iOlj2Oan5t91qgVJ4UE7Nd2/7tiRjNlwadfDtvRzWAf+ltSnvwk92fD8+Iff2UDd U7lW8qRhFHekh2F9EI3LhGnQ7xKHq6MeJI+m2/nalgyykhbyEcuZISQTn8cnyHNx JOjasdmSs7nJiWLb48AQWh3+ci1CV87M70j6HNfxTAE9YT7Qdqrants1LrTmlwjf odGHJ5bcDpiRSXR5sgHMK6T2f7m7+ZHotOiRn9/fb6b/JiEI+2cIXSuSwYvNAumj F//cVk2ch2+sdYCi8l/DlPut1A8A9Pd6nnybl2AhM0zDnbQ/YKI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:05 2025 by rpki-client