$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: JfhuzYJyzZiPuoGmYmLgiNLpx4AwDju3pIVIMk0aaeg= Subject key identifier: A6:99:59:8B:B9:DF:C9:31:D1:07:59:6F:0F:D7:2B:DB:24:2E:64:C8 Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 45340F5BDD3B04D30FA2835D1F4CBE1B42B0D2B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 0244 Signing time: Wed 25 Mar 2026 06:31:11 +0000 Manifest this update: Wed 25 Mar 2026 06:26:11 +0000 Manifest next update: Sat 28 Mar 2026 09:12:11 +0000 Files and hashes: 1: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: xTG8g0qzeEwKPV5cXQXoxjJ32sjJI3xgIrDkoghTunc=) 2: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) 3: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) 4: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) 5: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:34:0f:5b:dd:3b:04:d3:0f:a2:83:5d:1f:4c:be:1b:42:b0:d2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Mar 25 06:26:11 2026 GMT Not After : Mar 28 09:12:11 2026 GMT Subject: CN=A699598BB9DFC931D107596F0FD72BDB242E64C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0e:77:77:43:e6:e5:a0:79:f8:27:47:df:aa: f1:1c:6d:f4:47:66:3e:7e:3c:02:82:b7:c5:da:55: c8:52:94:bb:b1:b6:4d:18:da:fe:8e:7b:0b:84:dd: 7d:c4:13:53:7d:ba:4f:d0:73:08:6d:6e:4c:14:79: cb:59:10:0a:1f:c7:e5:5e:9d:e6:01:c6:ac:33:c4: 86:a5:c9:6b:e6:67:cb:89:e2:4d:50:07:a7:22:1e: 2e:fb:5b:2f:94:38:bf:24:4b:ab:25:79:41:dd:43: c6:5d:86:63:55:2c:16:2f:b8:b5:23:43:cb:f8:35: b5:b8:54:9e:16:d6:1e:c8:9e:70:34:40:3f:dc:d4: c1:ed:4d:70:21:43:d5:ac:77:b1:ac:50:cb:4f:bc: b7:30:cb:31:10:b0:1a:cc:c2:03:95:ba:54:68:2c: db:de:a4:ef:a9:c3:b6:5b:4a:c7:3a:03:38:63:8e: 44:23:53:7b:ec:35:90:53:8b:bc:cc:91:d2:25:87: 5d:b9:a2:6f:10:14:31:22:e1:86:18:ce:28:c1:30: bb:d0:a7:5b:80:05:51:de:d7:6b:d0:e1:50:69:c9: 73:63:be:3e:04:2b:0d:90:1c:d6:87:ff:3c:96:1c: 1e:ff:3c:20:10:e7:07:9e:b1:75:6a:7b:14:a3:66: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:99:59:8B:B9:DF:C9:31:D1:07:59:6F:0F:D7:2B:DB:24:2E:64:C8 X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3c:5d:49:a4:84:96:1b:6d:56:cb:4d:ec:16:4c:53:3d:f6: ea:36:68:4a:9b:63:5c:8b:67:03:d5:e3:d6:1a:4c:b1:0a:af: 92:3e:80:93:d8:25:ea:e4:ed:fb:07:9d:35:a4:66:6f:ae:00: 47:84:53:f3:3f:f9:fb:11:5c:1a:42:ae:18:58:55:bc:21:72: a2:9d:8d:c6:cf:c8:4d:55:13:a6:5b:ab:0e:b2:6a:89:5a:bc: 32:9e:d3:3a:b5:8e:a7:a5:bf:26:2e:36:8e:85:20:36:67:0e: 94:a4:55:34:da:15:a8:9d:53:92:7f:00:c5:94:74:d3:4c:b6: 77:19:31:00:09:58:75:8f:3b:00:06:43:3f:c9:8d:aa:38:c9: fb:4f:5c:3c:31:fe:e1:2e:bd:63:8b:87:3e:e8:d8:fe:53:00: d4:2e:f0:ed:7e:b5:36:f4:40:dd:e3:ca:1a:a6:1d:ba:a2:39: 65:20:3d:21:37:41:4c:9b:06:c7:ce:86:dc:2e:c0:00:c5:cc: f4:37:ae:71:53:a8:7a:45:34:06:bc:5a:75:2f:87:60:e7:9c: c9:53:e2:63:09:44:b3:8b:9e:78:1b:a3:d7:49:dd:08:53:aa: c3:35:31:47:f9:a7:5f:c3:c9:36:90:1a:30:69:f3:a9:ff:ce: f1:9f:e8:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTQPW907BNMPooNdH0y+G0Kw0rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNjAzMjUwNjI2MTFaFw0yNjAzMjgwOTEyMTFaMDMxMTAvBgNV BAMTKEE2OTk1OThCQjlERkM5MzFEMTA3NTk2RjBGRDcyQkRCMjQyRTY0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlDnd3Q+bloHn4J0ffqvEcbfRH Zj5+PAKCt8XaVchSlLuxtk0Y2v6OewuE3X3EE1N9uk/QcwhtbkwUectZEAofx+Ve neYBxqwzxIalyWvmZ8uJ4k1QB6ciHi77Wy+UOL8kS6sleUHdQ8ZdhmNVLBYvuLUj Q8v4NbW4VJ4W1h7InnA0QD/c1MHtTXAhQ9Wsd7GsUMtPvLcwyzEQsBrMwgOVulRo LNvepO+pw7ZbSsc6AzhjjkQjU3vsNZBTi7zMkdIlh125om8QFDEi4YYYzijBMLvQ p1uABVHe12vQ4VBpyXNjvj4EKw2QHNaH/zyWHB7/PCAQ5weesXVqexSjZs4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpplZi7nfyTHRB1lvD9cr2yQuZMgwHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHg8XUmkhJYbbVbLTewWTFM99uo2aEqbY1yL ZwPV49YaTLEKr5I+gJPYJerk7fsHnTWkZm+uAEeEU/M/+fsRXBpCrhhYVbwhcqKd jcbPyE1VE6Zbqw6yaolavDKe0zq1jqelvyYuNo6FIDZnDpSkVTTaFaidU5J/AMWU dNNMtncZMQAJWHWPOwAGQz/Jjao4yftPXDwx/uEuvWOLhz7o2P5TANQu8O1+tTb0 QN3jyhqmHbqiOWUgPSE3QUybBsfOhtwuwADFzPQ3rnFTqHpFNAa8WnUvh2DnnMlT 4mMJRLOLnngbo9dJ3QhTqsM1MUf5p1/DyTaQGjBp86n/zvGf6HY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:17 2026 by rpki-client