$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: WxUN9rYWyHmnZIBfNiaKj99iZgQj82ipGUt8FWRSHQg= Subject key identifier: A1:34:9A:2B:9E:CD:B5:0E:1A:3A:8F:3B:EB:07:97:9D:BB:7E:2E:74 Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 4B70ED109F4DADAFD13519DCC49659C689AE6260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 01EB Signing time: Sat 06 Sep 2025 06:41:01 +0000 Manifest this update: Sat 06 Sep 2025 06:36:01 +0000 Manifest next update: Tue 09 Sep 2025 15:45:01 +0000 Files and hashes: 1: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) 2: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) 3: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: /vUQOn4Wx984r4vdUWKxDavvZCUOwd78ODlbyXU7PAs=) 4: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) 5: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:70:ed:10:9f:4d:ad:af:d1:35:19:dc:c4:96:59:c6:89:ae:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Sep 6 06:36:01 2025 GMT Not After : Sep 9 15:45:01 2025 GMT Subject: CN=A1349A2B9ECDB50E1A3A8F3BEB07979DBB7E2E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:f0:7e:47:0e:9b:50:95:77:00:a7:89:d1: 3b:fd:ce:1e:6a:5c:8c:bf:8e:c2:56:92:8c:ff:6b: d0:06:f6:2e:c2:c4:c6:ca:38:8d:2e:89:ce:28:7d: 34:75:69:e9:d5:5b:d1:b8:b6:e9:ef:99:32:f4:fa: e8:b5:9b:3b:86:97:35:81:26:58:90:d5:a0:42:d3: 16:e4:6b:a2:ab:0e:c3:0a:7c:c4:8b:6a:df:a7:69: a2:1f:84:f1:17:e5:df:26:5c:bd:a6:25:ea:75:8a: 56:13:ef:f5:fb:35:82:a4:10:4d:fc:8c:3a:0c:7d: 47:79:43:af:14:1f:84:43:ab:1e:88:63:29:88:08: 3d:f8:3c:4a:b1:8c:82:3b:32:a7:ea:b5:31:ce:9d: 60:6a:e5:57:fb:f6:8e:c7:07:6f:af:a4:11:5a:42: 52:f3:3f:19:c8:a8:b1:f6:69:06:63:c7:56:cc:f7: fa:2b:f7:a0:33:55:5e:8a:b5:ea:4f:60:e1:8b:c3: b6:38:82:4f:a7:cc:8a:9d:df:d3:80:b1:23:31:f1: eb:83:0b:eb:c8:e4:0b:55:1b:7e:ca:5f:be:fb:15: 37:cc:2a:b9:e4:43:4d:ef:a6:da:c5:90:af:6f:f0: 5e:0b:79:36:af:fd:d4:8e:f7:86:82:51:31:1b:d7: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:34:9A:2B:9E:CD:B5:0E:1A:3A:8F:3B:EB:07:97:9D:BB:7E:2E:74 X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:7c:85:ba:ac:b5:e3:72:0b:14:66:85:e2:37:4a:2a:14:83: f8:ac:1d:c7:2f:16:a8:31:57:23:9f:30:68:c9:c9:6a:3e:0a: 2b:f9:23:b5:7c:b7:34:36:38:38:3d:92:f0:91:ab:28:9c:0d: ed:58:e5:91:d4:b6:aa:69:a7:36:f5:eb:a2:51:d8:6b:85:2f: bc:7c:c0:fb:41:0e:13:23:9e:af:fe:77:04:4a:3f:57:46:70: 3c:19:f8:a4:f6:f5:c4:7d:45:61:74:26:0b:8f:05:fc:ca:ae: 76:d8:32:77:2b:cb:7b:fd:5a:6c:d8:6b:d9:4c:51:0e:35:01: 8a:24:7d:28:08:72:6f:7a:f7:71:c4:f7:3f:40:75:09:8c:6f: 79:aa:22:26:32:96:d8:75:44:71:db:cc:05:a4:17:85:3b:c5: 3a:9a:73:8a:bc:f7:36:d8:f2:6b:ab:87:c1:9c:93:e8:ea:e6: 49:e6:e6:42:81:e9:95:52:c1:03:b8:25:41:20:7f:41:d1:13: 01:bc:f8:e5:d6:bb:d1:5b:6d:bc:12:b7:8b:a3:6d:b9:b0:23: 00:7a:b2:3c:9b:72:a0:d0:eb:fa:ea:33:bb:8c:41:8e:87:10: 3c:49:b2:de:18:65:31:4b:8d:f1:73:e0:66:47:91:75:16:98: 0e:25:b7:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3DtEJ9Nra/RNRncxJZZxomuYmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNTA5MDYwNjM2MDFaFw0yNTA5MDkxNTQ1MDFaMDMxMTAvBgNV BAMTKEExMzQ5QTJCOUVDREI1MEUxQTNBOEYzQkVCMDc5NzlEQkI3RTJFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RPB+Rw6bUJV3AKeJ0Tv9zh5q XIy/jsJWkoz/a9AG9i7CxMbKOI0uic4ofTR1aenVW9G4tunvmTL0+ui1mzuGlzWB JliQ1aBC0xbka6KrDsMKfMSLat+naaIfhPEX5d8mXL2mJep1ilYT7/X7NYKkEE38 jDoMfUd5Q68UH4RDqx6IYymICD34PEqxjII7MqfqtTHOnWBq5Vf79o7HB2+vpBFa QlLzPxnIqLH2aQZjx1bM9/or96AzVV6KtepPYOGLw7Y4gk+nzIqd39OAsSMx8euD C+vI5AtVG37KX777FTfMKrnkQ03vptrFkK9v8F4LeTav/dSO94aCUTEb1z9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoTSaK57NtQ4aOo876weXnbt+LnQwHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALB8hbqsteNyCxRmheI3SioUg/isHccvFqgx VyOfMGjJyWo+Civ5I7V8tzQ2ODg9kvCRqyicDe1Y5ZHUtqpppzb166JR2GuFL7x8 wPtBDhMjnq/+dwRKP1dGcDwZ+KT29cR9RWF0JguPBfzKrnbYMncry3v9WmzYa9lM UQ41AYokfSgIcm9693HE9z9AdQmMb3mqIiYylth1RHHbzAWkF4U7xTqac4q89zbY 8murh8Gck+jq5knm5kKB6ZVSwQO4JUEgf0HREwG8+OXWu9FbbbwSt4ujbbmwIwB6 sjybcqDQ6/rqM7uMQY6HEDxJst4YZTFLjfFz4GZHkXUWmA4lt58= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:11 2025 by rpki-client