$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: WB/ObfWMyvfW+vRmxfM5jL2yVoCsJcytF+9qqkNtN1k= Subject key identifier: D7:03:42:0B:C6:09:54:0B:61:32:3B:46:8F:6D:7D:5F:FA:14:D0:C2 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 3701B7DF8CB89A840AB6B446E4CB47DC8DF14D1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: E6 Signing time: Sun 02 Nov 2025 05:02:03 +0000 Manifest this update: Sun 02 Nov 2025 04:57:03 +0000 Manifest next update: Wed 05 Nov 2025 15:16:03 +0000 Files and hashes: 1: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: +EJoUcfnoJBUgW4ujSzPn6ZYnPhFbbEJRrPKjgoWBE4=) 2: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 15:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:01:b7:df:8c:b8:9a:84:0a:b6:b4:46:e4:cb:47:dc:8d:f1:4d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Nov 2 04:57:03 2025 GMT Not After : Nov 5 15:16:03 2025 GMT Subject: CN=D703420BC609540B61323B468F6D7D5FFA14D0C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:16:4e:43:27:6e:10:c8:7e:b5:f8:6b:5b: c5:cf:eb:2c:48:34:b8:69:b0:b1:31:82:1b:2a:05: 63:64:a2:e7:f4:ee:f8:2b:a2:de:59:4b:8b:1b:78: 34:bb:3c:5a:0e:e2:da:c9:9e:29:ad:29:2b:96:de: 20:ca:f4:57:17:bf:01:9a:ba:46:a2:75:57:b7:19: c1:00:d1:a1:41:03:de:31:3f:d8:50:5a:48:31:47: cd:1a:57:af:06:42:94:40:de:67:31:23:30:05:b4: 02:9d:0d:27:79:fd:55:38:c8:4e:ef:89:fd:35:a5: d7:f0:07:7b:5b:37:e5:5f:3b:7b:79:b5:b5:0d:ab: ee:4f:61:05:63:1e:30:59:9e:e6:8b:f3:47:6e:ca: 3d:cc:1a:40:e9:1f:3f:5f:25:79:b4:84:a4:05:88: a6:6c:60:3e:1b:ac:46:30:43:65:25:38:3a:1f:a2: 77:8e:11:5e:50:63:8e:a3:b9:52:2e:48:4f:52:fc: 87:0e:d0:a1:a9:83:68:f2:ac:df:99:f8:9c:ce:89: ec:d0:8a:26:e1:9c:27:6a:fd:90:a2:01:88:22:7e: 69:0b:16:95:15:26:14:19:53:e9:88:b4:7d:a1:63: 0e:94:65:22:a9:8c:ef:1e:61:c5:6d:2c:fb:2c:15: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:03:42:0B:C6:09:54:0B:61:32:3B:46:8F:6D:7D:5F:FA:14:D0:C2 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:36:14:7d:54:90:51:86:bf:c4:5f:54:ef:98:20:5c:11:a3: f5:06:e5:ff:67:12:49:fe:68:16:b3:ca:a4:35:ba:81:f7:7f: da:dc:61:cd:b2:9c:ea:85:e0:a1:b2:35:c7:f5:6a:59:a4:f8: aa:01:41:36:b1:6f:3e:6c:ac:68:a4:26:01:b4:ee:eb:b6:ad: 94:0c:cd:78:1b:c3:35:b7:5d:c0:3e:ab:fd:ed:0c:58:b0:ef: 78:ed:80:5d:6a:c4:bb:42:fe:cf:fb:e6:cc:48:dc:90:79:27: cf:d2:34:a8:eb:83:b7:bd:52:e3:22:af:b0:e4:e6:43:8f:39: 2a:a0:19:c2:40:a4:59:75:65:3b:1d:2a:f2:da:5d:cb:a2:fb: 03:56:8c:7a:1a:30:b5:33:1e:4e:63:12:55:9c:46:48:f3:e9: b1:da:0d:1c:3e:5f:d8:c6:13:91:74:10:30:b2:3f:58:3c:77: 6a:ca:84:8c:a0:de:81:40:b1:19:6c:a6:e6:73:87:4c:da:ae: 54:05:4e:cf:bd:30:06:bb:62:8f:c2:69:2e:61:5b:b5:2d:66: c9:c8:d2:01:25:9c:92:9e:9f:45:da:bd:6d:8a:ec:2b:86:38: 52:2a:4f:ed:43:b7:12:17:fe:3d:ee:dc:97:7a:35:a7:a2:fb: 06:08:bb:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwG334y4moQKtrRG5MtH3I3xTRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTExMDIwNDU3MDNaFw0yNTExMDUxNTE2MDNaMDMxMTAvBgNV BAMTKEQ3MDM0MjBCQzYwOTU0MEI2MTMyM0I0NjhGNkQ3RDVGRkExNEQwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUxZOQyduEMh+tfhrW8XP6yxI NLhpsLExghsqBWNkouf07vgrot5ZS4sbeDS7PFoO4trJnimtKSuW3iDK9FcXvwGa ukaidVe3GcEA0aFBA94xP9hQWkgxR80aV68GQpRA3mcxIzAFtAKdDSd5/VU4yE7v if01pdfwB3tbN+VfO3t5tbUNq+5PYQVjHjBZnuaL80duyj3MGkDpHz9fJXm0hKQF iKZsYD4brEYwQ2UlODofoneOEV5QY46juVIuSE9S/IcO0KGpg2jyrN+Z+JzOiezQ iibhnCdq/ZCiAYgifmkLFpUVJhQZU+mItH2hYw6UZSKpjO8eYcVtLPssFfe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wNCC8YJVAthMjtGj219X/oU0MIwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY2FH1UkFGGv8RfVO+YIFwRo/UG5f9nEkn+ aBazyqQ1uoH3f9rcYc2ynOqF4KGyNcf1almk+KoBQTaxbz5srGikJgG07uu2rZQM zXgbwzW3XcA+q/3tDFiw73jtgF1qxLtC/s/75sxI3JB5J8/SNKjrg7e9UuMir7Dk 5kOPOSqgGcJApFl1ZTsdKvLaXcui+wNWjHoaMLUzHk5jElWcRkjz6bHaDRw+X9jG E5F0EDCyP1g8d2rKhIyg3oFAsRlspuZzh0zarlQFTs+9MAa7Yo/CaS5hW7UtZsnI 0gElnJKen0XavW2K7CuGOFIqT+1DtxIX/j3u3Jd6Naei+wYIu9s= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:44 2025 by rpki-client