$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: 0Iiy+L5rbjAh8YJ1of03nYatTxOArV3kLk2s1MO8o0w= Subject key identifier: EF:15:BA:02:E8:36:68:96:02:84:73:D6:F0:A3:95:8B:E7:CE:AD:6A Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 03FA23A3C887EB73EF10B6815189839B97BB64D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: F1 Signing time: Tue 04 Nov 2025 02:10:40 +0000 Manifest this update: Tue 04 Nov 2025 02:05:40 +0000 Manifest next update: Fri 07 Nov 2025 06:00:40 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=) 2: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: 3rDg7RetaCL9IVADvjXO4XvoecvDtuhDknkTUBDwGyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fa:23:a3:c8:87:eb:73:ef:10:b6:81:51:89:83:9b:97:bb:64:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Nov 4 02:05:40 2025 GMT Not After : Nov 7 06:00:40 2025 GMT Subject: CN=EF15BA02E8366896028473D6F0A3958BE7CEAD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:1b:eb:ea:55:32:7e:50:73:e1:fa:e1:dc: 90:45:a6:33:3d:47:20:15:74:f4:4e:90:72:88:f0: 88:b2:64:dc:2d:b9:0b:c4:b2:8d:eb:c7:dd:10:72: 64:f4:2e:3a:1a:01:9a:2d:3c:24:64:b3:80:5b:2f: c4:2c:3b:74:3b:79:63:94:87:fd:f7:1d:e4:40:a9: 0b:2f:68:04:ee:06:b8:d1:92:94:13:ec:49:d9:02: f6:f6:c9:49:91:5b:84:16:31:2a:55:c4:19:30:41: 67:7c:c8:ed:42:f1:02:30:f6:34:c5:e3:e1:d9:2b: 84:3e:5d:f3:f6:6a:0f:ff:3f:04:0f:26:dd:e7:23: 7f:44:c6:dd:38:08:9c:71:9c:98:a6:ac:54:ed:19: 71:9d:3e:47:97:cf:10:8b:5b:db:f6:53:f8:cd:b6: 9e:89:d7:98:ad:25:16:fe:d0:ed:ab:79:45:59:d7: 2f:f4:3a:51:bd:08:8e:3a:f5:23:04:22:d8:7d:5a: e4:1c:e3:a9:b5:24:89:75:42:9b:f8:36:d0:c3:04: 1a:9f:b6:bb:3b:02:02:36:d1:7f:94:2e:0d:91:37: 03:46:d9:68:e7:f1:33:68:cf:0c:15:f4:23:96:b1: 89:31:da:0b:e4:7a:94:ca:0a:2a:f6:b3:3c:f1:f3: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:15:BA:02:E8:36:68:96:02:84:73:D6:F0:A3:95:8B:E7:CE:AD:6A X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:87:d7:fe:e0:b8:b7:04:79:ec:5f:68:35:31:1b:68:6e:66: c8:9a:16:71:66:62:2a:dd:0c:16:fa:c1:ff:f0:64:08:eb:33: 6b:b7:6d:1f:ff:04:ae:68:77:be:22:1d:e9:6f:b3:be:74:e3: 66:29:cd:52:19:cf:15:45:57:ea:31:c2:5a:c2:27:d2:ec:23: eb:7c:22:c1:dd:90:9c:f4:1e:e1:55:02:a8:d6:20:e7:1c:16: 86:c4:29:ff:b8:56:b1:d8:b9:3d:c9:7a:78:67:d5:3c:55:f4: 15:f4:dc:1f:18:58:d9:79:fd:d1:2c:27:8d:ca:e5:83:39:98: 63:1c:9f:8f:07:f7:ab:b5:a1:09:df:0e:58:85:c5:ee:73:97: 3c:02:ac:2b:c0:2b:21:da:09:68:c7:18:7a:3d:d6:b5:bb:0a: 95:e9:0c:ef:68:96:67:9d:25:f6:d9:7d:19:0a:7c:46:a3:73: 7e:f2:c1:a9:a1:82:00:6d:af:69:22:c3:10:3b:c5:ba:72:8e: 00:65:86:b8:c0:f0:e8:22:4d:69:43:2a:62:76:4c:a3:cd:a5: ad:d9:c2:fa:88:01:92:ec:dd:32:a9:2c:11:69:c6:93:0f:76: 51:23:97:c4:4d:d7:7b:32:68:37:8a:ce:45:79:26:bf:7f:8d: 60:ba:7c:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/ojo8iH63PvELaBUYmDm5e7ZNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNTExMDQwMjA1NDBaFw0yNTExMDcwNjAwNDBaMDMxMTAvBgNV BAMTKEVGMTVCQTAyRTgzNjY4OTYwMjg0NzNENkYwQTM5NThCRTdDRUFENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XBvr6lUyflBz4frh3JBFpjM9 RyAVdPROkHKI8IiyZNwtuQvEso3rx90QcmT0LjoaAZotPCRks4BbL8QsO3Q7eWOU h/33HeRAqQsvaATuBrjRkpQT7EnZAvb2yUmRW4QWMSpVxBkwQWd8yO1C8QIw9jTF 4+HZK4Q+XfP2ag//PwQPJt3nI39Ext04CJxxnJimrFTtGXGdPkeXzxCLW9v2U/jN tp6J15itJRb+0O2reUVZ1y/0OlG9CI469SMEIth9WuQc46m1JIl1Qpv4NtDDBBqf trs7AgI20X+ULg2RNwNG2Wjn8TNozwwV9COWsYkx2gvkepTKCir2szzx85C3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7xW6Aug2aJYChHPW8KOVi+fOrWowHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaH1/7guLcEeexfaDUxG2huZsiaFnFmYird DBb6wf/wZAjrM2u3bR//BK5od74iHelvs75042YpzVIZzxVFV+oxwlrCJ9LsI+t8 IsHdkJz0HuFVAqjWIOccFobEKf+4VrHYuT3Jenhn1TxV9BX03B8YWNl5/dEsJ43K 5YM5mGMcn48H96u1oQnfDliFxe5zlzwCrCvAKyHaCWjHGHo91rW7CpXpDO9olmed JfbZfRkKfEajc37ywamhggBtr2kiwxA7xbpyjgBlhrjA8OgiTWlDKmJ2TKPNpa3Z wvqIAZLs3TKpLBFpxpMPdlEjl8RN13syaDeKzkV5Jr9/jWC6fPI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:34:46 2025 by rpki-client