$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: F5axLxqne4K9ZvJurpSya0OmejOO+aUfpC/pBhmeSsA= Subject key identifier: 8F:4F:51:2D:6F:2D:B5:50:60:55:9B:F7:D7:80:2F:B5:F6:3B:73:9B Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 42E4B48729876BF63FCF7CE323DFDAA010CA220E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 01D1 Signing time: Tue 04 Nov 2025 15:10:03 +0000 Manifest this update: Tue 04 Nov 2025 15:05:03 +0000 Manifest next update: Fri 07 Nov 2025 22:11:03 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: fL09HROaD2TbZfMKGqL4hVN8rqy0/q0n2dSLVq4S/tY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 22:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e4:b4:87:29:87:6b:f6:3f:cf:7c:e3:23:df:da:a0:10:ca:22:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Nov 4 15:05:03 2025 GMT Not After : Nov 7 22:11:03 2025 GMT Subject: CN=8F4F512D6F2DB55060559BF7D7802FB5F63B739B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:d7:42:e2:42:54:e0:c7:ca:93:e2:40:78: 14:2c:28:dd:4a:0e:32:df:f4:b1:35:a5:1d:86:ed: 48:06:67:05:a7:73:20:06:47:7e:ce:81:74:8f:1d: b6:8d:a2:5d:53:dd:33:ca:60:99:f2:d6:ae:f7:46: 8c:e2:4a:90:85:b5:a8:79:34:7d:d5:42:db:3d:fe: 1d:82:a1:b0:74:9c:f0:90:bf:c6:cd:a3:7d:62:47: 16:6b:e5:34:86:6d:a8:b3:62:84:56:92:ad:b8:00: e3:60:93:69:25:0d:f1:b0:a0:e2:19:aa:88:fc:0a: 92:25:45:b1:86:7a:e2:f2:c9:b0:49:6c:84:46:e6: e3:15:a8:8a:48:8f:ba:25:2d:13:ad:93:a2:81:56: 05:a8:0f:c1:86:7f:21:00:cb:3f:38:da:2f:56:f7: 1a:5c:6d:cc:71:7d:0e:53:b6:34:34:29:ce:f5:96: ce:56:d3:b5:76:64:aa:96:74:d4:f2:11:7d:70:0b: 22:ef:13:39:3e:c6:32:f1:3f:1c:3d:2f:cc:70:77: 20:73:ff:45:16:6d:f0:45:20:3c:0c:76:97:d9:5c: 95:5f:77:5c:51:33:1a:ba:a3:ec:9f:23:4f:7e:b5: c0:6b:53:da:d6:f0:90:0a:28:9d:6c:83:a9:9a:e6: 88:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4F:51:2D:6F:2D:B5:50:60:55:9B:F7:D7:80:2F:B5:F6:3B:73:9B X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6d:2b:fa:ed:82:12:af:e1:11:14:8d:1c:9a:74:12:c3:e9: ba:0a:ff:14:3f:ed:ec:3d:1b:88:1b:fd:be:aa:f7:d4:d0:5e: 89:26:93:a0:ab:06:68:9e:0c:4e:30:fc:49:0b:5a:a5:a8:5d: 0c:3b:9a:5a:f7:1b:29:a1:24:99:42:a1:24:2b:90:24:ea:68: c4:b7:1e:a8:51:8d:9a:92:04:b1:3a:84:a4:bb:7f:38:56:2f: 56:e0:a5:5d:66:8f:fd:3f:32:32:d0:51:6f:77:0c:7a:76:39: 69:bf:34:61:94:f7:1f:a8:a4:07:a3:1d:2c:58:ef:d4:e4:63: 01:06:3b:42:30:09:52:84:44:0d:ab:e9:d0:6c:ba:71:8b:02: 80:9d:fa:37:16:fe:1b:85:b5:99:b6:3e:16:c8:98:9e:cf:6c: 09:37:cc:e8:36:95:67:cc:bd:f4:62:0d:1e:69:79:1f:8d:95: fa:1e:34:6a:67:be:14:7b:19:ca:ce:ae:db:89:ec:fd:12:b9: 31:24:13:a1:9f:eb:45:3e:12:8c:34:c4:7a:cb:bf:1a:1a:32: 67:a7:4f:9e:e0:fc:db:f6:71:8b:41:dc:e7:6d:80:8a:df:04: 32:55:85:c0:78:32:f2:56:4f:3c:87:f6:bd:a3:ab:4c:17:03: 9b:d1:f7:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuS0hymHa/Y/z3zjI9/aoBDKIg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNTExMDQxNTA1MDNaFw0yNTExMDcyMjExMDNaMDMxMTAvBgNV BAMTKDhGNEY1MTJENkYyREI1NTA2MDU1OUJGN0Q3ODAyRkI1RjYzQjczOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX5ddC4kJU4MfKk+JAeBQsKN1K DjLf9LE1pR2G7UgGZwWncyAGR37OgXSPHbaNol1T3TPKYJny1q73RoziSpCFtah5 NH3VQts9/h2CobB0nPCQv8bNo31iRxZr5TSGbaizYoRWkq24AONgk2klDfGwoOIZ qoj8CpIlRbGGeuLyybBJbIRG5uMVqIpIj7olLROtk6KBVgWoD8GGfyEAyz842i9W 9xpcbcxxfQ5TtjQ0Kc71ls5W07V2ZKqWdNTyEX1wCyLvEzk+xjLxPxw9L8xwdyBz /0UWbfBFIDwMdpfZXJVfd1xRMxq6o+yfI09+tcBrU9rW8JAKKJ1sg6ma5oglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj09RLW8ttVBgVZv314AvtfY7c5swHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJtK/rtghKv4REUjRyadBLD6boK/xQ/7ew9 G4gb/b6q99TQXokmk6CrBmieDE4w/EkLWqWoXQw7mlr3GymhJJlCoSQrkCTqaMS3 HqhRjZqSBLE6hKS7fzhWL1bgpV1mj/0/MjLQUW93DHp2OWm/NGGU9x+opAejHSxY 79TkYwEGO0IwCVKERA2r6dBsunGLAoCd+jcW/huFtZm2PhbImJ7PbAk3zOg2lWfM vfRiDR5peR+NlfoeNGpnvhR7GcrOrtuJ7P0SuTEkE6Gf60U+Eow0xHrLvxoaMmen T57g/Nv2cYtB3OdtgIrfBDJVhcB4MvJWTzyH9r2jq0wXA5vR9yE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:34 2025 by rpki-client