$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: 7dMfJkEjFxj60xGvINd85c1GY3ZPP5cBJFTy8Ypk+7k= Subject key identifier: 17:89:65:FF:3D:78:A7:0F:12:94:4E:05:C4:93:96:28:27:A1:F7:03 Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 26C9B9544D3C533874A4112DA19CEC35C8400DF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 024E Signing time: Fri 17 Apr 2026 08:02:26 +0000 Manifest this update: Fri 17 Apr 2026 07:57:26 +0000 Manifest next update: Mon 20 Apr 2026 12:59:26 +0000 Files and hashes: 1: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) 2: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) 3: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: e/jYjULfAd2WmWS8AzVHspPa2GCE4T6NFgcKirPOhnU=) 4: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) 5: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c9:b9:54:4d:3c:53:38:74:a4:11:2d:a1:9c:ec:35:c8:40:0d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Apr 17 07:57:26 2026 GMT Not After : Apr 20 12:59:26 2026 GMT Subject: CN=178965FF3D78A70F12944E05C493962827A1F703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:49:84:cc:db:35:2e:a3:ec:76:51:70:99: a9:08:2a:25:26:c6:d3:3a:ff:a3:72:05:01:23:48: 88:97:f1:60:a6:4b:30:98:53:a4:29:a9:5a:fa:3f: 43:e2:1f:a5:07:a2:2b:1b:8e:3a:0d:70:89:4a:33: a5:2e:c0:fb:b6:7e:c8:98:fb:ff:62:e1:c8:4c:59: 55:89:d9:a7:a8:55:2c:3d:43:b1:12:eb:b1:7f:36: 06:22:8d:6f:ee:0b:55:31:6d:f9:3b:52:4a:90:1b: f4:e6:1c:af:5a:68:4c:1a:51:25:76:ba:8d:cc:ed: 45:4a:fe:c9:3d:1d:dd:e4:ef:e4:14:a6:a5:75:da: 75:a0:2e:f4:39:f6:c6:80:d5:f1:66:fa:f3:7a:8a: bd:5f:f5:56:a9:da:b2:ca:08:18:57:ef:8c:1a:d0: 47:07:4e:0b:18:8e:d7:cf:78:44:c8:1d:56:9d:3a: 43:73:a2:ad:a8:6b:ff:98:e8:36:50:f7:c4:ef:71: 6b:5a:99:63:cd:84:1c:69:1e:47:af:6b:e2:a3:97: 49:09:2c:61:37:ea:46:6a:3c:8b:53:9b:25:d2:49: a7:b8:3a:29:38:4c:8d:b3:71:33:04:52:e0:8c:2b: 48:9e:21:6a:3a:fe:ab:1d:48:d6:62:f1:e9:4b:0f: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:89:65:FF:3D:78:A7:0F:12:94:4E:05:C4:93:96:28:27:A1:F7:03 X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c5:72:23:92:a6:f5:42:95:df:a6:4a:37:3a:78:90:5a:0c: 9d:81:3d:d4:29:ff:aa:2a:64:85:c1:e8:7d:3e:fc:a3:f1:09: 75:69:b1:79:4f:00:fa:6d:a4:a3:65:d3:86:4b:f1:e2:a3:2b: d1:20:af:a0:1d:14:d5:3d:fa:ef:17:eb:b0:dc:92:b3:99:55: 38:8c:b3:1d:28:f7:d8:7e:53:0e:70:7a:d5:61:9a:e3:8a:17: 71:84:6a:78:a1:57:bd:13:9a:df:22:09:46:33:fa:07:81:c3: aa:66:ec:6d:9e:da:dd:a1:be:75:a9:5e:d3:ec:bc:71:2c:fb: 12:ab:c0:51:30:df:d1:4c:9e:b4:47:57:4f:8d:8c:ad:1a:e6: 12:b6:51:f2:d7:c5:73:6d:6d:e9:a2:9c:c2:93:95:d8:9a:cb: 98:fa:64:ae:1e:75:66:a8:96:c5:df:e6:04:f9:08:56:84:64: ca:d0:1d:8a:97:51:da:33:c7:a6:ff:c9:48:32:1c:a3:4d:c7: 82:68:a7:2b:ab:7d:0f:9f:71:4f:c9:9f:7f:a1:7f:4f:b6:4c: 4e:d9:72:ff:54:1b:e6:22:f6:d4:66:53:7f:43:14:cc:b7:7d: 93:a6:bb:0a:8b:d3:97:c9:73:6b:97:c9:ca:42:81:d1:f9:22: d0:14:d5:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsm5VE08Uzh0pBEtoZzsNchADfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNjA0MTcwNzU3MjZaFw0yNjA0MjAxMjU5MjZaMDMxMTAvBgNV BAMTKDE3ODk2NUZGM0Q3OEE3MEYxMjk0NEUwNUM0OTM5NjI4MjdBMUY3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVgEmEzNs1LqPsdlFwmakIKiUm xtM6/6NyBQEjSIiX8WCmSzCYU6QpqVr6P0PiH6UHoisbjjoNcIlKM6UuwPu2fsiY +/9i4chMWVWJ2aeoVSw9Q7ES67F/NgYijW/uC1Uxbfk7UkqQG/TmHK9aaEwaUSV2 uo3M7UVK/sk9Hd3k7+QUpqV12nWgLvQ59saA1fFm+vN6ir1f9Vap2rLKCBhX74wa 0EcHTgsYjtfPeETIHVadOkNzoq2oa/+Y6DZQ98TvcWtamWPNhBxpHkeva+Kjl0kJ LGE36kZqPItTmyXSSae4Oik4TI2zcTMEUuCMK0ieIWo6/qsdSNZi8elLDx43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4ll/z14pw8SlE4FxJOWKCeh9wMwHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDFciOSpvVCld+mSjc6eJBaDJ2BPdQp/6oq ZIXB6H0+/KPxCXVpsXlPAPptpKNl04ZL8eKjK9Egr6AdFNU9+u8X67DckrOZVTiM sx0o99h+Uw5wetVhmuOKF3GEanihV70Tmt8iCUYz+geBw6pm7G2e2t2hvnWpXtPs vHEs+xKrwFEw39FMnrRHV0+NjK0a5hK2UfLXxXNtbeminMKTldiay5j6ZK4edWao lsXf5gT5CFaEZMrQHYqXUdozx6b/yUgyHKNNx4JopyurfQ+fcU/Jn3+hf0+2TE7Z cv9UG+Yi9tRmU39DFMy3fZOmuwqL05fJc2uXycpCgdH5ItAU1Uo= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:01 2026 by rpki-client