$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: 1s83SM99uW0dDM/+HxR/+MrELZr+kdkK88lc+zHxYM0= Subject key identifier: 40:3B:5C:BB:DB:91:C8:14:27:C2:A5:25:34:5A:BC:87:08:50:68:AD Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 5C324695D3D26156F2D40701C07C3B1D373861A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 01DD Signing time: Tue 05 Aug 2025 08:21:01 +0000 Manifest this update: Tue 05 Aug 2025 08:16:01 +0000 Manifest next update: Fri 08 Aug 2025 11:37:01 +0000 Files and hashes: 1: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: dK7mjb+zkpEkPUVs7MymIURIoMsPj3k7TQpgaPUGzDk=) 2: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) 3: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) 4: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) 5: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 11:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:32:46:95:d3:d2:61:56:f2:d4:07:01:c0:7c:3b:1d:37:38:61:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Aug 5 08:16:01 2025 GMT Not After : Aug 8 11:37:01 2025 GMT Subject: CN=403B5CBBDB91C81427C2A525345ABC87085068AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:e0:95:df:2e:30:81:e4:d8:0c:a3:f5:04: 76:86:b8:65:6c:6a:b1:ec:43:0c:c2:8e:c7:be:af: 3b:89:ec:65:bf:6c:d0:21:1e:89:19:f6:91:d8:28: 6b:ac:18:1a:8f:26:d8:32:c8:6a:63:74:bc:5c:cc: 89:d7:72:fe:37:b7:fc:3b:0e:a1:6b:94:0f:f1:71: 95:b6:9c:9e:48:83:c6:32:7e:78:ef:99:45:5a:4d: f5:5d:39:9c:36:d3:d9:a8:f5:d9:46:62:58:57:0d: 9b:64:a0:d7:b8:68:20:7c:42:12:51:c3:e2:12:c9: e1:47:dc:aa:64:9a:a1:7c:7f:30:aa:1f:03:a4:09: f6:2b:5a:00:4f:c2:fe:6f:2a:f9:50:ef:af:26:4b: 6e:35:ae:20:20:92:ee:eb:ee:c0:37:b3:b1:51:fb: 48:e1:da:59:4f:fe:e8:c2:3e:7d:34:b6:60:95:23: 93:54:fa:16:1a:17:84:2d:d9:57:a7:f9:47:8d:6f: 50:17:a5:53:1d:6b:94:39:be:ee:80:b9:f3:26:41: 20:11:8e:55:d5:dc:cd:03:db:6a:4d:ee:bc:a5:9b: 38:10:c8:8f:6a:5c:f5:d0:6a:92:e1:3e:94:d9:87: d5:70:1e:dc:2b:48:c1:4f:ef:63:4c:9b:f1:b7:d0: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3B:5C:BB:DB:91:C8:14:27:C2:A5:25:34:5A:BC:87:08:50:68:AD X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7e:31:4a:06:21:0c:fc:0e:0c:b5:9f:99:ae:7c:35:8c:a2: 8d:0c:0c:4b:a5:19:30:17:09:0a:bf:d3:19:59:2f:96:e9:16: 8e:4d:24:d2:49:a0:25:e5:06:b3:72:d8:52:4e:79:6e:39:94: 0e:9c:c4:59:7c:c5:d5:c5:e9:56:e8:ee:41:1f:cf:b9:de:4d: 2a:cd:2d:0c:4f:ff:3c:5b:86:50:82:97:78:56:28:c0:19:da: ad:ca:c2:41:67:7c:53:c9:59:14:99:25:15:46:a8:1f:3e:6f: 66:11:1c:9f:8a:b8:00:08:d2:33:5c:e7:46:68:ca:71:53:d8: f3:d7:c7:50:80:f8:1f:05:5f:81:0c:7b:0f:a5:62:43:ad:32: 23:5d:ad:d1:bd:75:93:af:0a:00:fa:5f:0d:b4:2f:bc:d8:85: cf:c9:5d:8f:ef:e0:39:42:dd:28:ed:82:cc:4e:a8:6b:72:00: ce:b9:88:35:d4:53:08:f6:88:43:69:12:da:6e:2c:d2:dc:bd: 67:94:81:af:66:43:3a:40:e8:b9:25:40:d0:bd:e2:02:97:42: 47:f9:ab:72:29:6e:4e:37:49:eb:fb:f7:4c:90:06:7a:3d:68: 87:95:48:09:13:1b:51:dd:cf:ec:d6:a5:f7:0f:a7:ac:41:3f: a9:cf:5d:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDJGldPSYVby1AcBwHw7HTc4YagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNTA4MDUwODE2MDFaFw0yNTA4MDgxMTM3MDFaMDMxMTAvBgNV BAMTKDQwM0I1Q0JCREI5MUM4MTQyN0MyQTUyNTM0NUFCQzg3MDg1MDY4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ruCV3y4wgeTYDKP1BHaGuGVs arHsQwzCjse+rzuJ7GW/bNAhHokZ9pHYKGusGBqPJtgyyGpjdLxczInXcv43t/w7 DqFrlA/xcZW2nJ5Ig8YyfnjvmUVaTfVdOZw209mo9dlGYlhXDZtkoNe4aCB8QhJR w+ISyeFH3KpkmqF8fzCqHwOkCfYrWgBPwv5vKvlQ768mS241riAgku7r7sA3s7FR +0jh2llP/ujCPn00tmCVI5NU+hYaF4Qt2Ven+UeNb1AXpVMda5Q5vu6AufMmQSAR jlXV3M0D22pN7rylmzgQyI9qXPXQapLhPpTZh9VwHtwrSMFP72NMm/G30JW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQDtcu9uRyBQnwqUlNFq8hwhQaK0wHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABl+MUoGIQz8Dgy1n5mufDWMoo0MDEulGTAX CQq/0xlZL5bpFo5NJNJJoCXlBrNy2FJOeW45lA6cxFl8xdXF6Vbo7kEfz7neTSrN LQxP/zxbhlCCl3hWKMAZ2q3KwkFnfFPJWRSZJRVGqB8+b2YRHJ+KuAAI0jNc50Zo ynFT2PPXx1CA+B8FX4EMew+lYkOtMiNdrdG9dZOvCgD6Xw20L7zYhc/JXY/v4DlC 3SjtgsxOqGtyAM65iDXUUwj2iENpEtpuLNLcvWeUga9mQzpA6LklQNC94gKXQkf5 q3Ipbk43Sev790yQBno9aIeVSAkTG1Hdz+zWpfcPp6xBP6nPXco= -----END CERTIFICATE-----Generated at Thu Aug 7 01:16:39 2025 by rpki-client