$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: +P5CjOVQWuwyr0DpCYEzl8JdXzGqJV3VI/yQHjQSgAk= Subject key identifier: 29:D6:18:15:78:23:A3:76:2D:8F:C8:BF:CE:0A:4B:21:7B:09:2F:9C Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 27FD5FFBEC993D965FD354812F0002ACCFA2CAF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 01FE Signing time: Sat 18 Oct 2025 22:01:01 +0000 Manifest this update: Sat 18 Oct 2025 21:56:01 +0000 Manifest next update: Wed 22 Oct 2025 05:10:01 +0000 Files and hashes: 1: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) 2: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) 3: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) 4: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: nZQXrqNFvkOywlWU9g/Dk767VYgctVc7TPLSc7AcebE=) 5: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:fd:5f:fb:ec:99:3d:96:5f:d3:54:81:2f:00:02:ac:cf:a2:ca:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Oct 18 21:56:01 2025 GMT Not After : Oct 22 05:10:01 2025 GMT Subject: CN=29D618157823A3762D8FC8BFCE0A4B217B092F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:49:28:66:84:55:de:ce:1f:c0:12:67:77: ed:cc:93:6d:a4:4e:9f:cb:b4:6c:bd:76:24:bb:d3: b9:67:81:4d:28:42:b0:f9:61:3c:8c:15:b0:8a:a3: 97:d2:d5:6d:24:1a:9c:9e:c0:f4:a2:11:50:98:95: fd:16:af:1f:e0:14:1a:87:01:73:94:46:1a:cb:eb: 7d:ae:c6:7a:7d:be:6b:30:b7:ff:64:9e:75:50:71: 44:d8:a4:28:45:a2:4b:2a:91:09:ee:f1:d4:52:28: ee:a2:5b:41:ea:62:bf:02:6d:a0:5f:d4:53:89:27: 6f:5f:56:4d:9f:d5:c9:31:e3:c9:42:cd:7d:d8:d1: b6:e8:6f:ab:8c:b5:4e:e5:5a:7a:91:cb:67:99:9e: d8:a9:ec:bd:a8:f7:14:16:d9:4b:ac:0f:6a:0c:a0: 97:1a:87:60:1d:2b:f9:3d:2e:8d:8c:31:13:0e:00: f6:37:ea:7a:62:12:6f:c2:76:b7:56:fd:8d:e9:bc: f6:38:5d:8b:a0:8a:d5:04:3a:0f:d5:1b:43:23:a6: 79:4c:d0:5d:9d:75:d4:ba:d4:25:44:3c:8d:b4:d5: 6a:22:fe:30:aa:4a:fd:80:76:6f:86:2a:39:ef:93: 78:d4:a9:fa:dd:90:9d:ea:7b:07:5b:d4:0e:2d:9e: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D6:18:15:78:23:A3:76:2D:8F:C8:BF:CE:0A:4B:21:7B:09:2F:9C X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3a:08:ce:6f:59:e3:40:24:c2:b5:82:6b:6d:bf:ec:12:05: 62:95:bc:de:a1:a7:45:f9:6e:2d:c9:f4:ee:dc:f3:57:91:ac: d4:70:80:9f:b5:aa:88:2d:0f:44:34:89:26:3d:f6:c7:f2:6d: c4:4f:b4:28:cc:22:e5:ee:ab:72:95:92:00:15:26:e8:d7:b4: 87:8b:74:c6:32:ea:2c:25:e1:26:17:c4:20:d9:31:57:b6:68: 53:d2:3d:d2:6f:64:4b:2d:23:8a:4e:ed:e6:d5:75:99:76:aa: af:2f:ca:6c:dc:1f:f4:90:9e:ae:38:fb:75:6f:e7:11:c1:ec: 4c:fd:30:1b:63:37:17:75:9f:78:cd:39:b2:80:93:ca:2f:bf: 43:e9:95:52:5e:85:4b:bd:7c:31:f6:c6:55:ff:8d:4f:09:e4: 43:90:42:4d:a4:74:c8:60:55:b6:a7:00:9f:7a:4a:42:4d:6a: f3:7c:67:62:ba:27:af:75:45:d3:f5:ae:a2:9d:d7:88:a5:e7: 12:8b:32:4a:e3:b7:23:88:f9:39:be:d2:e7:84:7a:3a:f8:62: a3:5b:f2:72:23:49:3f:dc:5b:5e:19:e3:64:50:30:f1:97:41: e7:83:92:8b:2c:71:cc:d5:32:7f:e2:d4:ee:75:29:4f:13:fa: 56:6a:b4:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/1f++yZPZZf01SBLwACrM+iyvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNTEwMTgyMTU2MDFaFw0yNTEwMjIwNTEwMDFaMDMxMTAvBgNV BAMTKDI5RDYxODE1NzgyM0EzNzYyRDhGQzhCRkNFMEE0QjIxN0IwOTJGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7C0koZoRV3s4fwBJnd+3Mk22k Tp/LtGy9diS707lngU0oQrD5YTyMFbCKo5fS1W0kGpyewPSiEVCYlf0Wrx/gFBqH AXOURhrL632uxnp9vmswt/9knnVQcUTYpChFoksqkQnu8dRSKO6iW0HqYr8CbaBf 1FOJJ29fVk2f1ckx48lCzX3Y0bbob6uMtU7lWnqRy2eZntip7L2o9xQW2UusD2oM oJcah2AdK/k9Lo2MMRMOAPY36npiEm/CdrdW/Y3pvPY4XYugitUEOg/VG0MjpnlM 0F2dddS61CVEPI201Woi/jCqSv2Adm+GKjnvk3jUqfrdkJ3qewdb1A4tnlSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKdYYFXgjo3Ytj8i/zgpLIXsJL5wwHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo6CM5vWeNAJMK1gmttv+wSBWKVvN6hp0X5 bi3J9O7c81eRrNRwgJ+1qogtD0Q0iSY99sfybcRPtCjMIuXuq3KVkgAVJujXtIeL dMYy6iwl4SYXxCDZMVe2aFPSPdJvZEstI4pO7ebVdZl2qq8vymzcH/SQnq44+3Vv 5xHB7Ez9MBtjNxd1n3jNObKAk8ovv0PplVJehUu9fDH2xlX/jU8J5EOQQk2kdMhg VbanAJ96SkJNavN8Z2K6J691RdP1rqKd14il5xKLMkrjtyOI+Tm+0ueEejr4YqNb 8nIjST/cW14Z42RQMPGXQeeDkosscczVMn/i1O51KU8T+lZqtFU= -----END CERTIFICATE-----Generated at Mon Oct 20 17:53:43 2025 by rpki-client