$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: WRj6p6+Rsgi0xetC5dwXsR4+7XpTy7Q7f+C3aOkX8LA= Subject key identifier: FB:F2:B8:58:C3:81:2D:D1:17:6B:69:96:3A:CD:96:6A:D2:12:5D:12 Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 6CD51049181452301E5D82F6B0A8A718B2362398 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 01B6 Signing time: Wed 03 Sep 2025 14:40:26 +0000 Manifest this update: Wed 03 Sep 2025 14:35:26 +0000 Manifest next update: Sat 06 Sep 2025 19:39:26 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: gINYIEt3Iy8Vqt/+H7wlw9Qgu1ZOixWHOE8LgQScw44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 19:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d5:10:49:18:14:52:30:1e:5d:82:f6:b0:a8:a7:18:b2:36:23:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Sep 3 14:35:26 2025 GMT Not After : Sep 6 19:39:26 2025 GMT Subject: CN=FBF2B858C3812DD1176B69963ACD966AD2125D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:c3:70:f5:38:1d:d3:a8:ec:21:e8:c0:62: e8:78:fc:ec:f6:8f:5a:d4:2a:bc:71:0f:ee:7f:ce: 32:7e:3c:80:e9:89:b8:e7:53:18:16:d6:10:71:dd: 96:62:56:0f:18:56:da:1f:f0:4b:59:ba:ae:d0:95: 94:07:09:a6:b8:9d:e2:a5:cc:e3:d1:42:e4:8f:c4: 60:82:49:75:c4:12:fd:84:28:57:9f:35:fe:54:90: b3:d7:52:d4:16:2e:05:bd:b2:d5:b6:3b:d1:c2:e8: 20:3a:30:0f:70:11:98:e4:7b:78:6b:9f:73:2b:e7: 4d:2f:d1:d7:27:c4:c0:bf:8f:7d:99:cd:78:4f:82: 12:7d:1c:eb:f5:20:55:d7:ab:85:ec:e6:14:46:26: 6c:e9:aa:ce:7c:f0:2c:6a:53:b9:ba:74:fe:a7:a4: 36:5c:73:88:44:af:b2:1d:6c:00:aa:e9:84:c4:88: 85:af:a5:4f:5e:00:54:cc:87:dc:0b:4b:91:54:d1: 3b:4c:cc:99:c2:a5:12:69:3e:9d:05:65:12:5f:be: 96:3d:11:ea:4a:e0:e0:14:5e:99:c7:4d:9d:b2:8e: 2e:33:05:a9:e3:34:5e:5b:9a:e4:c4:00:f8:59:5b: b9:99:65:ba:84:5a:8d:4f:cf:9b:8f:89:90:23:94: c6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F2:B8:58:C3:81:2D:D1:17:6B:69:96:3A:CD:96:6A:D2:12:5D:12 X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1b:21:d8:a9:ae:da:78:e2:c8:77:de:d9:ee:92:d5:96:0b: 07:4a:52:90:84:79:69:96:ed:8c:79:bd:11:0d:64:3c:e9:42: d0:ed:e2:f1:3a:1d:d5:0b:56:a4:cc:a7:13:1a:94:c3:2a:6b: 0d:2b:73:15:cd:29:db:19:4a:87:b6:de:4d:c5:04:ce:3d:c5: 97:1b:3d:b5:70:17:2b:b0:51:a4:05:5f:89:4c:2b:6d:c2:70: f1:50:19:a4:31:e4:2d:12:07:c4:09:ad:21:65:b8:4e:0d:5b: 87:34:b6:93:80:1b:87:c9:98:b6:c7:57:22:c0:67:da:e9:6c: 09:dd:33:69:a6:27:52:bd:8b:17:a2:9d:05:52:31:7e:da:47: 62:54:33:07:92:a9:42:53:b7:51:03:4e:d9:2c:a4:91:aa:d6: 6f:b5:f9:61:08:7a:0b:6c:2a:a2:98:a4:f8:18:5c:bc:a4:e5: 32:8a:1b:76:f9:54:42:4f:f5:10:94:cc:86:b1:9b:c9:6c:09: ed:7f:ac:0e:dc:a3:89:fd:fa:c9:f8:a7:1b:0d:92:b2:f2:64: c1:df:d9:48:d7:2a:31:a1:2b:66:04:bb:6b:2c:73:f3:32:f2: 2e:df:ae:5a:1a:49:b2:12:39:2a:72:af:a7:de:e4:fa:05:92: 2a:79:80:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNUQSRgUUjAeXYL2sKinGLI2I5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTA5MDMxNDM1MjZaFw0yNTA5MDYxOTM5MjZaMDMxMTAvBgNV BAMTKEZCRjJCODU4QzM4MTJERDExNzZCNjk5NjNBQ0Q5NjZBRDIxMjVEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqMNw9Tgd06jsIejAYuh4/Oz2 j1rUKrxxD+5/zjJ+PIDpibjnUxgW1hBx3ZZiVg8YVtof8EtZuq7QlZQHCaa4neKl zOPRQuSPxGCCSXXEEv2EKFefNf5UkLPXUtQWLgW9stW2O9HC6CA6MA9wEZjke3hr n3Mr500v0dcnxMC/j32ZzXhPghJ9HOv1IFXXq4Xs5hRGJmzpqs588CxqU7m6dP6n pDZcc4hEr7IdbACq6YTEiIWvpU9eAFTMh9wLS5FU0TtMzJnCpRJpPp0FZRJfvpY9 EepK4OAUXpnHTZ2yji4zBanjNF5bmuTEAPhZW7mZZbqEWo1Pz5uPiZAjlMY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+/K4WMOBLdEXa2mWOs2WatISXRIwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkbIdiprtp44sh33tnuktWWCwdKUpCEeWmW 7Yx5vRENZDzpQtDt4vE6HdULVqTMpxMalMMqaw0rcxXNKdsZSoe23k3FBM49xZcb PbVwFyuwUaQFX4lMK23CcPFQGaQx5C0SB8QJrSFluE4NW4c0tpOAG4fJmLbHVyLA Z9rpbAndM2mmJ1K9ixeinQVSMX7aR2JUMweSqUJTt1EDTtkspJGq1m+1+WEIegts KqKYpPgYXLyk5TKKG3b5VEJP9RCUzIaxm8lsCe1/rA7co4n9+sn4pxsNkrLyZMHf 2UjXKjGhK2YEu2ssc/My8i7frloaSbISOSpyr6fe5PoFkip5gI4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:13 2025 by rpki-client