$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: 0BW4icbMejflEWF3gT24LjdDcpo/CSa0Wd9108MeAp8= Subject key identifier: 84:D8:18:CB:B3:E3:EE:4B:2E:46:BC:0E:18:41:B8:85:CE:70:87:B9 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 3B7B1CC3F0AFFBFC0C193161A69CD832606795C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: ED Signing time: Tue 04 Nov 2025 20:42:05 +0000 Manifest this update: Tue 04 Nov 2025 20:37:05 +0000 Manifest next update: Fri 07 Nov 2025 23:10:05 +0000 Files and hashes: 1: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) 2: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8=) 3: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: wpNdhD7u9LCUSTfkyb08oCQ8UhDmhX3oTTq99EUnLfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7b:1c:c3:f0:af:fb:fc:0c:19:31:61:a6:9c:d8:32:60:67:95:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Nov 4 20:37:05 2025 GMT Not After : Nov 7 23:10:05 2025 GMT Subject: CN=84D818CBB3E3EE4B2E46BC0E1841B885CE7087B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:1b:59:36:69:b6:30:25:8d:9e:54:9f:47: 7b:23:2b:d7:08:5b:57:5f:ac:f3:d4:de:32:e7:14: 38:0a:a0:c2:24:96:3b:47:33:48:45:e6:44:21:88: 21:42:aa:70:26:67:92:96:1b:93:72:0a:99:51:44: c5:7b:9d:f9:5d:73:29:4e:2b:91:84:5d:0c:c0:22: a9:4d:dd:7d:7e:19:1e:b9:b4:47:42:88:78:1d:0e: a1:56:8c:f2:24:6d:3d:4e:d3:83:4a:0c:d4:a0:ae: 6d:3f:04:85:ca:f1:cf:a7:c0:6e:07:3f:15:fc:d4: 36:d3:2c:b5:da:d7:75:52:b2:72:6a:85:d1:87:dc: ee:5a:fe:be:89:e8:35:4f:f4:0d:88:f0:6e:f3:1d: 98:6d:e7:98:98:82:70:75:81:b7:5f:9e:fe:72:eb: 46:2e:8c:fd:4c:d0:e4:12:55:0f:8d:55:3e:31:29: 76:86:77:f9:1c:6f:f7:6b:de:21:1a:ea:f7:e8:da: 48:61:10:f4:86:e1:c2:a9:03:2c:82:3a:4e:53:a3: 44:62:05:23:cc:35:21:89:64:17:06:12:d2:fb:03: 6f:44:29:83:d9:38:6a:f9:60:2f:51:2a:f1:6a:d0: 13:c0:a6:2e:94:c1:3c:e5:67:ef:20:0b:f0:b2:ac: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D8:18:CB:B3:E3:EE:4B:2E:46:BC:0E:18:41:B8:85:CE:70:87:B9 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:d7:b7:87:6c:03:df:f1:18:07:96:f9:66:ac:3d:5b:8e:cd: 07:5b:61:64:d6:b5:ae:4d:ba:09:e1:b3:a6:5a:02:7f:32:ff: 9c:cc:7e:f1:91:14:2e:58:00:98:9c:9e:17:99:ac:f2:f5:c2: 46:62:80:82:cf:96:db:33:fa:e4:c0:c9:80:3d:ff:56:7a:6d: 65:b7:3b:59:4f:82:e2:93:76:56:0f:53:bd:d9:e8:2f:47:71: 99:b4:40:e1:80:bc:36:fc:2b:dd:d5:8b:79:65:88:98:7c:f6: 31:3e:73:36:86:d4:55:ab:3c:61:7a:fd:93:9d:02:1d:22:da: 22:f6:c7:c3:2f:41:13:d4:08:5e:18:54:a1:3c:2d:51:17:51: a5:cd:40:e5:ea:bf:90:2f:71:e1:16:7e:d4:05:2b:a3:42:8c: fe:6c:23:6c:30:d0:ad:48:3d:c0:54:a9:d2:e2:55:c6:b2:1f: 59:d5:71:15:63:e6:26:a8:c6:94:a8:67:90:4b:ba:f2:7e:cb: 12:02:25:42:ef:4f:38:8d:dd:70:ba:9d:d0:07:13:61:74:52: 00:f5:48:e7:cf:cf:ed:34:ef:15:cc:f6:3d:60:ed:12:70:44: 9b:f7:e2:cc:ba:e9:e3:36:b5:98:25:f3:90:ac:3b:78:98:d9: bc:b0:34:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3scw/Cv+/wMGTFhppzYMmBnlcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTExMDQyMDM3MDVaFw0yNTExMDcyMzEwMDVaMDMxMTAvBgNV BAMTKDg0RDgxOENCQjNFM0VFNEIyRTQ2QkMwRTE4NDFCODg1Q0U3MDg3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJxtZNmm2MCWNnlSfR3sjK9cI W1dfrPPU3jLnFDgKoMIkljtHM0hF5kQhiCFCqnAmZ5KWG5NyCplRRMV7nfldcylO K5GEXQzAIqlN3X1+GR65tEdCiHgdDqFWjPIkbT1O04NKDNSgrm0/BIXK8c+nwG4H PxX81DbTLLXa13VSsnJqhdGH3O5a/r6J6DVP9A2I8G7zHZht55iYgnB1gbdfnv5y 60YujP1M0OQSVQ+NVT4xKXaGd/kcb/dr3iEa6vfo2khhEPSG4cKpAyyCOk5To0Ri BSPMNSGJZBcGEtL7A29EKYPZOGr5YC9RKvFq0BPApi6UwTzlZ+8gC/CyrFlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhNgYy7Pj7ksuRrwOGEG4hc5wh7kwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjXt4dsA9/xGAeW+WasPVuOzQdbYWTWta5N ugnhs6ZaAn8y/5zMfvGRFC5YAJicnheZrPL1wkZigILPltsz+uTAyYA9/1Z6bWW3 O1lPguKTdlYPU73Z6C9HcZm0QOGAvDb8K93Vi3lliJh89jE+czaG1FWrPGF6/ZOd Ah0i2iL2x8MvQRPUCF4YVKE8LVEXUaXNQOXqv5AvceEWftQFK6NCjP5sI2ww0K1I PcBUqdLiVcayH1nVcRVj5iaoxpSoZ5BLuvJ+yxICJULvTziN3XC6ndAHE2F0UgD1 SOfPz+007xXM9j1g7RJwRJv34sy66eM2tZgl85CsO3iY2bywNCc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:21 2025 by rpki-client