$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: 1lPEVW8PY6Vt4JKBuqyqXqL87CJJPi6vAn4FLXKDzfw= Subject key identifier: 4B:92:25:6C:C5:46:BA:99:A8:38:30:2A:AE:5B:BC:90:4D:0D:AE:37 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 045C1FD503F350E51378FDB7F573BA3C99A5034C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 031A Signing time: Sun 02 Nov 2025 05:41:59 +0000 Manifest this update: Sun 02 Nov 2025 05:36:59 +0000 Manifest next update: Wed 05 Nov 2025 11:34:59 +0000 Files and hashes: 1: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=) 2: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=) 3: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) 4: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: 0v+1DYLpsQCr3ywLHWGitAHYUCqCVxM1UR4AuWkNBsI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5c:1f:d5:03:f3:50:e5:13:78:fd:b7:f5:73:ba:3c:99:a5:03:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Nov 2 05:36:59 2025 GMT Not After : Nov 5 11:34:59 2025 GMT Subject: CN=4B92256CC546BA99A838302AAE5BBC904D0DAE37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:38:7f:f7:8b:10:bd:d2:cc:cb:e1:60:86:f5: 2c:4b:3a:2e:e5:86:70:7c:f7:2c:ab:cd:30:ef:53: 89:8b:5d:92:46:1e:35:57:af:0a:33:75:34:8a:ee: 05:99:02:fc:4f:eb:b4:ba:f9:e2:6d:4c:f4:11:14: 61:64:b7:e4:ec:13:c3:5d:db:66:3c:e9:c2:17:65: 9f:ba:e8:d3:3d:7a:c4:63:df:4c:32:dd:b6:82:a4: f3:99:c7:61:b6:aa:1a:ec:b2:a5:bd:28:db:f4:f4: a1:9b:2b:7e:d5:da:5e:95:23:a6:27:5f:bd:22:c9: 8c:70:05:83:b7:b1:3a:7a:e1:66:5d:06:49:8a:fd: 59:fc:83:2d:20:e9:9e:f7:fc:66:ed:83:62:a0:8f: 1a:6f:d0:a1:4a:07:af:3b:af:04:21:fb:ac:7d:df: 07:43:ab:88:6f:67:52:bc:2b:60:54:51:fb:99:54: f1:ef:5b:e1:15:06:5e:a0:2a:2a:7f:e5:6c:5e:19: da:c0:1a:a1:17:79:d0:3a:26:70:72:8e:48:40:73: 0c:00:45:ea:07:b9:36:42:4f:81:3a:2c:20:d6:c9: ea:39:ed:bd:98:e4:df:ff:7c:59:69:9a:b8:47:8a: 68:b9:a7:3a:19:1d:80:63:06:de:7b:e8:fa:73:1c: 2b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:92:25:6C:C5:46:BA:99:A8:38:30:2A:AE:5B:BC:90:4D:0D:AE:37 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3b:f9:4b:79:87:f1:a8:f7:e8:a2:3b:bc:d1:15:18:21:ff: 27:14:bf:78:18:46:bd:cd:43:50:6e:98:17:89:8f:66:a0:97: 60:28:1e:e8:50:78:e0:12:27:79:3b:0c:74:56:f5:f1:05:01: 01:76:4f:e8:1e:bb:ac:c5:30:18:ce:c1:a0:17:74:c2:d5:f1: de:0a:19:77:43:fe:4a:e6:55:23:a9:0d:ba:6f:ef:b9:c9:b0: 76:83:0d:53:7c:39:47:2f:30:28:0e:d5:0d:c1:2f:f3:44:af: 98:c2:e3:bc:e2:bd:18:a2:38:a8:6f:33:91:36:64:56:73:cb: cf:6a:db:58:ea:e6:08:c8:f8:6a:48:97:74:6f:23:0f:dc:79: 92:76:07:1b:a4:11:6f:e5:ab:ce:ad:59:9d:51:92:13:29:2a: 24:de:64:5a:11:3e:cd:4e:30:d4:f9:56:f8:05:b3:f1:44:4f: 8d:67:85:4a:d9:b3:fe:67:fe:fd:3a:aa:aa:c6:c4:ba:44:d3: 0a:6c:08:96:c4:84:ff:bc:26:78:72:8a:3e:5a:bc:af:e2:a5: a0:f8:c7:43:38:21:a4:36:27:1b:1b:ce:87:ef:6c:21:aa:22: f4:47:a1:85:e7:e6:73:dc:1d:ee:cc:c5:47:8c:be:7f:12:61: a4:75:f5:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFwf1QPzUOUTeP239XO6PJmlA0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTExMDIwNTM2NTlaFw0yNTExMDUxMTM0NTlaMDMxMTAvBgNV BAMTKDRCOTIyNTZDQzU0NkJBOTlBODM4MzAyQUFFNUJCQzkwNEQwREFFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaOH/3ixC90szL4WCG9SxLOi7l hnB89yyrzTDvU4mLXZJGHjVXrwozdTSK7gWZAvxP67S6+eJtTPQRFGFkt+TsE8Nd 22Y86cIXZZ+66NM9esRj30wy3baCpPOZx2G2qhrssqW9KNv09KGbK37V2l6VI6Yn X70iyYxwBYO3sTp64WZdBkmK/Vn8gy0g6Z73/Gbtg2Kgjxpv0KFKB687rwQh+6x9 3wdDq4hvZ1K8K2BUUfuZVPHvW+EVBl6gKip/5WxeGdrAGqEXedA6JnByjkhAcwwA ReoHuTZCT4E6LCDWyeo57b2Y5N//fFlpmrhHimi5pzoZHYBjBt576PpzHCuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS5IlbMVGupmoODAqrlu8kE0NrjcwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs7+Ut5h/Go9+iiO7zRFRgh/ycUv3gYRr3N Q1BumBeJj2agl2AoHuhQeOASJ3k7DHRW9fEFAQF2T+geu6zFMBjOwaAXdMLV8d4K GXdD/krmVSOpDbpv77nJsHaDDVN8OUcvMCgO1Q3BL/NEr5jC47zivRiiOKhvM5E2 ZFZzy89q21jq5gjI+GpIl3RvIw/ceZJ2BxukEW/lq86tWZ1RkhMpKiTeZFoRPs1O MNT5VvgFs/FET41nhUrZs/5n/v06qqrGxLpE0wpsCJbEhP+8Jnhyij5avK/ipaD4 x0M4IaQ2JxsbzofvbCGqIvRHoYXn5nPcHe7MxUeMvn8SYaR19Y0= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:36 2025 by rpki-client