$ rpki-client -vvf repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft File: 132FE11D02592F9985A978A727BF9B772762CDF8.mft (raw, json) Hash identifier: ASIQrZc06VeAN/6GzdxPNgkZbLc0IxJSW4y4y8E6PzQ= Subject key identifier: 81:1C:B6:D7:6A:15:21:F8:B9:D9:3F:38:DE:20:94:A3:5C:34:74:05 Authority key identifier: 13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 Certificate issuer: /CN=132FE11D02592F9985A978A727BF9B772762CDF8 Certificate serial: 5DCF7B43F071D0B950243C74AB7FE9D912973425 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft Manifest number: 0206 Signing time: Sun 01 Mar 2026 10:20:04 +0000 Manifest this update: Sun 01 Mar 2026 10:15:04 +0000 Manifest next update: Wed 04 Mar 2026 20:06:04 +0000 Files and hashes: 1: 132FE11D02592F9985A978A727BF9B772762CDF8.crl (hash: JbDeRgEJQhI164dBpKJI2tcELRu3hra3nheQT1I7Yt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:cf:7b:43:f0:71:d0:b9:50:24:3c:74:ab:7f:e9:d9:12:97:34:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132FE11D02592F9985A978A727BF9B772762CDF8 Validity Not Before: Mar 1 10:15:04 2026 GMT Not After : Mar 4 20:06:04 2026 GMT Subject: CN=811CB6D76A1521F8B9D93F38DE2094A35C347405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:1b:1b:c4:98:2f:09:7d:6e:37:45:22:ae: 9c:99:bf:ea:24:39:e2:64:d8:e5:36:bb:9e:2c:02: 7f:fe:16:03:34:59:b6:1d:f0:b3:fc:0a:4d:8f:c8: aa:b1:c6:6c:ed:3f:e3:9c:aa:06:81:c1:0a:39:70: e0:f9:7d:97:01:ef:dd:61:4c:6f:c0:fd:f1:43:52: 7a:a4:57:ce:e7:66:51:cd:ec:13:97:e5:61:f0:1a: 97:80:16:9a:28:2b:24:25:be:40:9e:55:03:13:8d: 93:d6:b3:55:f2:c5:d4:6e:98:f9:98:02:07:84:0c: 79:e4:15:2c:70:f2:16:66:b9:0d:21:fa:d1:73:24: 74:bf:37:d6:aa:b2:4f:4a:9a:4f:35:a3:7e:70:df: 45:a4:6d:da:09:2b:c6:45:38:8c:82:a3:ef:c9:e4: e3:38:ba:23:0e:2b:3b:af:67:05:16:57:a8:45:7c: 40:a9:98:07:11:34:3e:0c:9b:b9:db:47:b9:fb:fe: ef:f6:3b:30:24:79:3a:b2:81:74:04:b7:9f:9f:f8: 0f:b2:f9:de:5d:30:42:59:6f:5b:f8:2c:22:46:24: c0:c7:d1:b8:7f:5e:5f:a9:85:36:bc:15:68:45:56: 62:c4:e7:66:8b:de:86:65:70:5e:3b:60:99:14:85: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1C:B6:D7:6A:15:21:F8:B9:D9:3F:38:DE:20:94:A3:5C:34:74:05 X509v3 Authority Key Identifier: keyid:13:2F:E1:1D:02:59:2F:99:85:A9:78:A7:27:BF:9B:77:27:62:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132FE11D02592F9985A978A727BF9B772762CDF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/132FE11D02592F9985A978A727BF9B772762CDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:7d:94:91:9f:9e:70:a1:a6:61:34:00:23:d6:6d:36:78:04: bf:68:65:c2:89:f0:ed:4e:d7:84:40:2b:5b:23:69:b7:70:ec: bf:91:7e:23:dc:e2:1f:51:36:d7:ec:e4:43:0f:cc:b4:8e:ef: 13:eb:70:2a:89:67:e5:19:d9:ac:b4:e8:b4:77:b5:ae:1a:e9: d2:1e:34:e0:92:47:cc:b1:0a:f8:9b:a7:61:89:e0:b1:a3:61: f5:a8:f2:29:5d:e2:04:d6:3b:bc:d1:b3:d5:ac:38:82:06:2a: 59:1c:27:2c:fa:1e:f0:da:0b:93:36:ed:ab:1f:f1:07:11:ef: 06:93:12:1e:4c:e3:b9:c5:29:8c:3b:53:87:50:6a:16:3e:71: 07:54:f8:db:f5:8d:55:51:ad:cf:05:b6:39:da:64:09:16:78: c6:0e:9f:58:cc:11:b3:4a:25:e4:b4:63:dc:98:88:b2:00:51: 69:1f:8c:a2:05:39:a3:3d:90:8a:85:bd:9b:61:4e:ec:42:29: 32:7f:02:16:a0:4b:a9:fb:79:ed:81:da:32:bf:ee:6a:b7:04: 69:1d:42:37:73:01:02:c9:56:76:4f:30:a0:62:4a:2a:7c:04: 0a:15:67:4a:6a:23:a3:53:a8:a4:d2:ea:c8:88:17:03:a3:20: 84:f0:f5:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXc97Q/Bx0LlQJDx0q3/p2RKXNCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcy NzYyQ0RGODAeFw0yNjAzMDExMDE1MDRaFw0yNjAzMDQyMDA2MDRaMDMxMTAvBgNV BAMTKDgxMUNCNkQ3NkExNTIxRjhCOUQ5M0YzOERFMjA5NEEzNUMzNDc0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/hsbxJgvCX1uN0UirpyZv+ok OeJk2OU2u54sAn/+FgM0WbYd8LP8Ck2PyKqxxmztP+OcqgaBwQo5cOD5fZcB791h TG/A/fFDUnqkV87nZlHN7BOX5WHwGpeAFpooKyQlvkCeVQMTjZPWs1XyxdRumPmY AgeEDHnkFSxw8hZmuQ0h+tFzJHS/N9aqsk9Kmk81o35w30WkbdoJK8ZFOIyCo+/J 5OM4uiMOKzuvZwUWV6hFfECpmAcRND4Mm7nbR7n7/u/2OzAkeTqygXQEt5+f+A+y +d5dMEJZb1v4LCJGJMDH0bh/Xl+phTa8FWhFVmLE52aL3oZlcF47YJkUhd+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgRy212oVIfi52T843iCUo1w0dAUwHwYDVR0j BBgwFoAUEy/hHQJZL5mFqXinJ7+bdydizfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzUyMjVhNi0wNWQzLTQ0NGMtYmYzZi0xMWUzZWY3YjZhMTUvMC8xMzJGRTExRDAy NTkyRjk5ODVBOTc4QTcyN0JGOUI3NzI3NjJDREY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlCNzcyNzYy Q0RGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMTMyRkUxMUQwMjU5MkY5OTg1QTk3OEE3MjdCRjlC NzcyNzYyQ0RGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALF9lJGfnnChpmE0ACPWbTZ4BL9oZcKJ8O1O 14RAK1sjabdw7L+RfiPc4h9RNtfs5EMPzLSO7xPrcCqJZ+UZ2ay06LR3ta4a6dIe NOCSR8yxCvibp2GJ4LGjYfWo8ild4gTWO7zRs9WsOIIGKlkcJyz6HvDaC5M27asf 8QcR7waTEh5M47nFKYw7U4dQahY+cQdU+Nv1jVVRrc8FtjnaZAkWeMYOn1jMEbNK JeS0Y9yYiLIAUWkfjKIFOaM9kIqFvZthTuxCKTJ/AhagS6n7ee2B2jK/7mq3BGkd QjdzAQLJVnZPMKBiSip8BAoVZ0pqI6NTqKTS6siIFwOjIITw9U8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:07:18 2026 by rpki-client