$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: pehXAWcG6GN1wi2EnCzUbn2bYa4kn2CgnEdWmcM9kyg= Subject key identifier: 70:CD:D8:FE:F5:66:47:D8:B8:3C:7F:A7:8D:E7:E5:3B:2D:AD:34:6E Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 284CAEA76A935B5ED5ED54F88963192D68FBB8A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 0244 Signing time: Tue 04 Nov 2025 14:01:08 +0000 Manifest this update: Tue 04 Nov 2025 13:56:08 +0000 Manifest next update: Fri 07 Nov 2025 22:41:08 +0000 Files and hashes: 1: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: vHq3YK/xeMWSAo7oadtZaULiAN74KNieH/KNnsp+FYo=) 2: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4c:ae:a7:6a:93:5b:5e:d5:ed:54:f8:89:63:19:2d:68:fb:b8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Nov 4 13:56:08 2025 GMT Not After : Nov 7 22:41:08 2025 GMT Subject: CN=70CDD8FEF56647D8B83C7FA78DE7E53B2DAD346E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:93:7f:fa:b9:05:bb:23:5b:ad:d2:f5:27: ce:41:14:92:01:90:98:02:5e:75:7e:69:81:2c:e2: 6a:aa:27:88:16:bf:35:51:64:7a:6e:90:06:31:9d: 10:c4:52:8f:7a:dd:80:04:d6:a2:68:45:89:77:58: 9a:32:a7:28:a8:ba:ad:93:89:62:3b:b4:4d:1d:84: 66:c5:0b:1c:d8:74:24:a9:60:78:3c:1e:ac:f0:84: 74:9f:d8:2c:24:7d:ce:4e:ae:d0:c9:96:97:61:b3: 64:1f:1f:3e:27:a4:a7:c2:49:cf:84:da:75:cc:ce: 55:4b:db:06:74:7c:d5:50:08:40:26:ef:e1:6e:12: 6c:32:60:47:ed:29:72:0c:a4:ce:96:37:8d:79:85: c4:80:b1:8d:fb:aa:25:96:da:fe:72:9d:6f:24:6a: c6:f9:89:78:9f:d9:58:5c:e3:16:f2:75:e9:4b:59: 72:66:29:a2:b6:eb:89:2e:64:0f:b6:cc:35:65:4e: 44:83:c8:f0:90:19:7d:c3:54:a1:f0:8a:65:f4:62: 99:e7:36:f5:4d:3f:ab:66:f8:1d:f8:28:06:6d:df: c2:fd:ed:6c:4a:b7:cf:64:30:a6:a9:0e:18:31:ed: ed:7b:a5:73:ac:da:7b:3a:4f:21:db:ff:79:a8:6a: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CD:D8:FE:F5:66:47:D8:B8:3C:7F:A7:8D:E7:E5:3B:2D:AD:34:6E X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8d:f4:46:b4:f4:43:b2:27:fe:2c:6e:fa:83:ce:3c:8c:1d: 1f:37:ab:47:21:93:9a:44:87:bf:5e:99:f5:71:b2:e3:15:d6: ca:af:52:8c:ce:1d:13:4a:03:e8:4b:aa:cc:7c:5b:d2:39:b6: 1f:ab:0c:01:e7:06:9e:72:0f:32:4e:6e:0e:15:1d:d5:ea:c6: 5d:ee:1b:9c:03:16:38:6a:07:07:40:e7:82:29:6a:82:b8:ab: 90:58:10:94:a5:60:4a:62:ca:1c:03:42:23:a0:73:06:5a:c6: 90:66:63:71:be:a5:52:bc:ea:f1:4b:03:3c:65:16:62:d0:ed: d8:b4:61:ad:31:b2:e1:eb:88:75:4a:ff:78:2f:be:7c:e2:fc: 4f:cf:79:6b:1e:55:d5:88:5e:13:0c:ab:d9:71:b5:5e:5f:5f: d3:47:6c:a9:b3:74:ab:66:26:1b:15:54:93:60:cf:fe:83:29: d8:88:9a:e8:f5:55:85:b2:ce:b6:66:60:41:bd:0b:40:b3:b4: 03:ed:18:47:16:ea:17:82:bf:6b:e6:df:de:23:85:e4:5c:80: 1f:b4:90:ee:3b:af:63:0a:4b:4d:8d:f2:0c:41:b4:e4:d3:c2: 84:11:10:31:11:3f:a7:41:47:bb:16:d0:b5:75:7c:15:70:85: f7:03:07:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEyup2qTW17V7VT4iWMZLWj7uKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTExMDQxMzU2MDhaFw0yNTExMDcyMjQxMDhaMDMxMTAvBgNV BAMTKDcwQ0REOEZFRjU2NjQ3RDhCODNDN0ZBNzhERTdFNTNCMkRBRDM0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfc5N/+rkFuyNbrdL1J85BFJIB kJgCXnV+aYEs4mqqJ4gWvzVRZHpukAYxnRDEUo963YAE1qJoRYl3WJoypyiouq2T iWI7tE0dhGbFCxzYdCSpYHg8HqzwhHSf2Cwkfc5OrtDJlpdhs2QfHz4npKfCSc+E 2nXMzlVL2wZ0fNVQCEAm7+FuEmwyYEftKXIMpM6WN415hcSAsY37qiWW2v5ynW8k asb5iXif2Vhc4xbydelLWXJmKaK264kuZA+2zDVlTkSDyPCQGX3DVKHwimX0Ypnn NvVNP6tm+B34KAZt38L97WxKt89kMKapDhgx7e17pXOs2ns6TyHb/3moagQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcM3Y/vVmR9i4PH+njeflOy2tNG4wHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+N9Ea09EOyJ/4sbvqDzjyMHR83q0chk5pE h79emfVxsuMV1sqvUozOHRNKA+hLqsx8W9I5th+rDAHnBp5yDzJObg4VHdXqxl3u G5wDFjhqBwdA54IpaoK4q5BYEJSlYEpiyhwDQiOgcwZaxpBmY3G+pVK86vFLAzxl FmLQ7di0Ya0xsuHriHVK/3gvvnzi/E/PeWseVdWIXhMMq9lxtV5fX9NHbKmzdKtm JhsVVJNgz/6DKdiImuj1VYWyzrZmYEG9C0CztAPtGEcW6heCv2vm394jheRcgB+0 kO47r2MKS02N8gxBtOTTwoQREDERP6dBR7sW0LV1fBVwhfcDB0M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:30 2025 by rpki-client