$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: pDixoXdIypCQ/VGrPBeBqDQOdvUaycMlC4LQApAgB5w= Subject key identifier: F0:02:C0:3B:74:5E:F3:66:2D:73:BB:EC:6A:90:44:EF:F8:AB:2F:1C Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 0A2A24CB10D5302FF226326427CD1AB8CD6FCC11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: F2 Signing time: Sun 02 Nov 2025 08:30:37 +0000 Manifest this update: Sun 02 Nov 2025 08:25:37 +0000 Manifest next update: Wed 05 Nov 2025 16:07:37 +0000 Files and hashes: 1: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: Qk1aebZH6HpsmbRtyw6Zbd7LsZDQbi5L/mrlB31+AsU=) 2: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: s05NUxO3OCK6ljSM126JzvbuefrUbP5vbV9fxoiHqUw=) 3: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: DQ0Ofq0HCAAZ2gtWFMMRKwWQCnNoEuRs554HeHbKakw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2a:24:cb:10:d5:30:2f:f2:26:32:64:27:cd:1a:b8:cd:6f:cc:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Nov 2 08:25:37 2025 GMT Not After : Nov 5 16:07:37 2025 GMT Subject: CN=F002C03B745EF3662D73BBEC6A9044EFF8AB2F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:52:87:33:07:5a:fa:f6:03:09:ef:24:94: 58:1d:11:26:5e:07:2d:2b:9a:7a:5a:3c:70:a6:f1: 93:65:8a:0f:e3:53:c3:e0:5a:d4:36:7f:de:0d:2b: fb:fa:10:cd:7c:81:ba:2a:c3:08:cf:c6:8e:03:ff: 6f:9a:84:15:09:b3:36:4d:90:9b:66:c2:cc:35:0c: 5a:5b:8a:69:22:5b:dc:c2:2c:30:8b:8f:c7:85:a3: 20:0f:cb:b6:d6:4b:b2:14:a6:b5:08:20:56:35:96: 5f:ce:1b:3c:e3:2b:09:d0:e0:a1:a2:67:13:87:43: 44:e1:a1:9e:96:ce:8e:f0:66:a7:ba:c9:1a:9b:63: 3f:48:60:51:d9:2f:f4:0c:00:71:82:3e:45:34:31: bd:0e:35:05:3a:09:b2:87:d4:46:d8:f5:d8:dd:9e: e9:c1:f7:a9:c6:c1:fb:7a:78:43:61:71:fc:c0:09: 81:5b:84:0b:0e:73:98:0a:b2:4f:70:26:7f:0b:9c: 0c:e8:f7:0c:79:2d:f4:99:81:ec:cb:26:63:cc:36: ae:a4:93:95:ed:c1:d4:9e:9b:e5:d7:b4:7f:ef:4b: e4:d8:ad:ed:55:29:d8:82:75:e2:69:61:45:a1:5c: ba:40:9e:cd:78:19:9c:7f:51:a8:f0:62:6b:b0:0f: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:02:C0:3B:74:5E:F3:66:2D:73:BB:EC:6A:90:44:EF:F8:AB:2F:1C X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e9:cc:85:fb:49:c0:9b:2e:fb:34:db:6c:b5:3a:67:99:cf: 2e:74:a1:8d:62:4c:7d:55:e3:d4:2d:41:8a:d4:17:01:4f:7a: 7a:2b:e1:7a:e9:d5:01:dd:12:da:9f:58:27:c4:02:cf:f7:e2: d6:33:4f:4d:3b:00:1c:5a:58:8a:1c:04:e5:aa:92:6c:f4:4f: 77:64:a4:fa:f8:ae:96:1e:8f:b8:de:1a:86:5d:67:56:76:91: b9:b6:c2:40:51:56:40:58:80:72:2e:dc:05:e3:a2:d5:c2:42: 66:73:82:f4:2f:4e:5c:8c:75:cd:5f:5b:28:08:31:1f:d5:7c: 5a:2c:e9:38:07:02:99:c8:17:16:eb:d8:23:f9:82:1e:22:75: f7:dd:47:85:6c:e5:5a:da:5f:bd:9d:17:5a:7b:0f:ff:d7:73: f8:b7:b0:4b:b1:93:1b:7a:0f:2d:48:ae:15:a9:ba:9f:49:99: eb:8c:04:db:fe:a8:0d:0b:d5:88:75:e8:41:df:57:fd:52:97: 40:bd:81:61:9e:a2:84:68:a7:c9:fc:89:f0:c2:38:14:44:65: 64:ad:e2:60:5e:f8:6c:80:51:7d:e9:e7:2c:70:90:51:0d:6c: c9:27:5f:ff:7e:06:02:fb:fe:85:a7:87:fc:81:45:5b:a5:27: 5a:ff:b5:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiokyxDVMC/yJjJkJ80auM1vzBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNTExMDIwODI1MzdaFw0yNTExMDUxNjA3MzdaMDMxMTAvBgNV BAMTKEYwMDJDMDNCNzQ1RUYzNjYyRDczQkJFQzZBOTA0NEVGRjhBQjJGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/R1KHMwda+vYDCe8klFgdESZe By0rmnpaPHCm8ZNlig/jU8PgWtQ2f94NK/v6EM18gboqwwjPxo4D/2+ahBUJszZN kJtmwsw1DFpbimkiW9zCLDCLj8eFoyAPy7bWS7IUprUIIFY1ll/OGzzjKwnQ4KGi ZxOHQ0ThoZ6Wzo7wZqe6yRqbYz9IYFHZL/QMAHGCPkU0Mb0ONQU6CbKH1EbY9djd nunB96nGwft6eENhcfzACYFbhAsOc5gKsk9wJn8LnAzo9wx5LfSZgezLJmPMNq6k k5XtwdSem+XXtH/vS+TYre1VKdiCdeJpYUWhXLpAns14GZx/UajwYmuwDzQBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ALAO3Re82Ytc7vsapBE7/irLxwwHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLpzIX7ScCbLvs022y1OmeZzy50oY1iTH1V 49QtQYrUFwFPenor4Xrp1QHdEtqfWCfEAs/34tYzT007ABxaWIocBOWqkmz0T3dk pPr4rpYej7jeGoZdZ1Z2kbm2wkBRVkBYgHIu3AXjotXCQmZzgvQvTlyMdc1fWygI MR/VfFos6TgHApnIFxbr2CP5gh4idffdR4Vs5VraX72dF1p7D//Xc/i3sEuxkxt6 Dy1IrhWpup9JmeuMBNv+qA0L1Yh16EHfV/1Sl0C9gWGeooRop8n8ifDCOBREZWSt 4mBe+GyAUX3p5yxwkFENbMknX/9+BgL7/oWnh/yBRVulJ1r/td8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:44:27 2025 by rpki-client