$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: DvusImjCfxtGK8n9yVaq6iP2Fn7+NkyGjRBYXxXLW0U= Subject key identifier: 85:D2:AC:CB:8F:19:DE:D5:F0:70:38:24:E6:C3:E5:6B:C6:C9:57:E3 Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 72E23B846EB87113C07C061EAA339A28D0539CA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 021B Signing time: Fri 17 Apr 2026 08:20:04 +0000 Manifest this update: Fri 17 Apr 2026 08:15:04 +0000 Manifest next update: Mon 20 Apr 2026 11:44:04 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: kyQ/3yLDjM6mG+y1lXJ7FRlBu2pi9YtLtXxaQF/5Ros=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e2:3b:84:6e:b8:71:13:c0:7c:06:1e:aa:33:9a:28:d0:53:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Apr 17 08:15:04 2026 GMT Not After : Apr 20 11:44:04 2026 GMT Subject: CN=85D2ACCB8F19DED5F0703824E6C3E56BC6C957E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:00:1f:6a:c0:dc:22:b6:1c:7c:ed:6a:48: c4:f3:8b:3c:26:70:71:87:8a:c3:62:19:87:9d:d5: 23:30:06:ae:e8:31:c3:97:49:7f:00:8f:85:77:1a: 75:be:db:f2:07:53:eb:2c:d7:8b:9b:cb:1e:d6:4d: 32:56:65:dd:42:43:fa:ea:89:b5:cf:bd:8c:59:33: 46:0f:b0:4d:9e:43:20:f9:7f:7d:4e:1b:04:a0:92: 70:7f:f8:d2:88:ae:d9:01:33:75:45:bc:24:80:5f: 3b:82:97:7e:b5:e6:d7:81:f5:53:a2:71:7f:be:56: c4:26:ec:02:84:2f:77:20:13:55:c8:f5:a0:c4:54: 17:d2:48:05:c1:d6:fe:0c:58:23:a7:b8:6c:fb:1b: cd:ad:ab:12:a5:9e:71:87:bf:bb:8d:40:1c:16:ee: c7:12:22:1d:65:6d:21:ff:fb:e8:a4:e6:75:bc:70: 27:97:cd:2d:a9:c4:9f:67:19:8b:22:7f:9b:1d:db: 0b:a3:f1:a0:37:1d:a5:7f:0e:94:21:1c:fa:40:5f: 2b:67:11:26:70:4a:5f:10:64:d7:c6:44:62:4b:e5: 23:49:cd:f3:26:d2:24:70:07:ed:83:f3:f4:5a:db: 4f:41:10:d3:35:40:ff:ce:e6:1a:8c:72:44:44:4f: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:AC:CB:8F:19:DE:D5:F0:70:38:24:E6:C3:E5:6B:C6:C9:57:E3 X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:dc:40:7e:20:69:2e:be:b0:f3:ef:83:8c:23:f7:c7:6c:a7: 85:f4:86:da:46:6e:02:ae:57:46:b4:fb:eb:9e:07:2e:19:d9: 30:b7:37:8c:ad:9d:ca:ef:3f:ca:42:bb:00:aa:7f:0b:00:b7: 95:c7:da:00:fd:a9:a6:e7:fb:0c:db:fc:91:89:4b:ee:41:97: 53:2e:bb:be:95:a4:b2:f3:03:e3:e6:7b:3b:3a:02:d5:52:78: f2:80:2a:50:e7:c7:22:ee:51:c5:7b:92:31:74:a9:20:e1:3c: 92:ac:80:b1:3c:c7:70:4a:41:a6:26:b3:c5:d4:1d:ba:6c:d2: f6:cb:ab:23:35:29:7c:e6:e9:80:49:8a:57:1e:20:1c:54:27: ec:4e:95:9c:ae:f6:5d:4d:9d:41:b1:cd:cd:1b:cd:f8:06:f8: 93:41:17:50:c2:a9:04:47:6c:3b:a7:6e:67:07:0b:22:7e:b1: 8d:12:c4:e9:63:e1:0c:75:30:b2:4e:84:68:cf:c7:08:e3:bf: f2:b6:a8:7d:ae:22:98:80:ab:80:c6:32:54:dc:44:9c:f7:24: a3:f3:65:4f:10:93:b1:88:01:a8:e0:1f:ae:92:74:d7:95:05: 9a:ec:23:af:8c:f5:df:b9:1e:3a:e9:56:17:26:81:73:b0:32: 72:57:9d:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuI7hG64cRPAfAYeqjOaKNBTnKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNjA0MTcwODE1MDRaFw0yNjA0MjAxMTQ0MDRaMDMxMTAvBgNV BAMTKDg1RDJBQ0NCOEYxOURFRDVGMDcwMzgyNEU2QzNFNTZCQzZDOTU3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTwAfasDcIrYcfO1qSMTzizwm cHGHisNiGYed1SMwBq7oMcOXSX8Aj4V3GnW+2/IHU+ss14ubyx7WTTJWZd1CQ/rq ibXPvYxZM0YPsE2eQyD5f31OGwSgknB/+NKIrtkBM3VFvCSAXzuCl3615teB9VOi cX++VsQm7AKEL3cgE1XI9aDEVBfSSAXB1v4MWCOnuGz7G82tqxKlnnGHv7uNQBwW 7scSIh1lbSH/++ik5nW8cCeXzS2pxJ9nGYsif5sd2wuj8aA3HaV/DpQhHPpAXytn ESZwSl8QZNfGRGJL5SNJzfMm0iRwB+2D8/Ra209BENM1QP/O5hqMckRET3GdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhdKsy48Z3tXwcDgk5sPla8bJV+MwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPcQH4gaS6+sPPvg4wj98dsp4X0htpGbgKu V0a0++ueBy4Z2TC3N4ytncrvP8pCuwCqfwsAt5XH2gD9qabn+wzb/JGJS+5Bl1Mu u76VpLLzA+Pmezs6AtVSePKAKlDnxyLuUcV7kjF0qSDhPJKsgLE8x3BKQaYms8XU Hbps0vbLqyM1KXzm6YBJilceIBxUJ+xOlZyu9l1NnUGxzc0bzfgG+JNBF1DCqQRH bDunbmcHCyJ+sY0SxOlj4Qx1MLJOhGjPxwjjv/K2qH2uIpiAq4DGMlTcRJz3JKPz ZU8Qk7GIAajgH66SdNeVBZrsI6+M9d+5HjrpVhcmgXOwMnJXndQ= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:04 2026 by rpki-client