$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: HO2DHOogFcCUJw8P8y0LU79g8hXFosiUQAmu6O4zfwc= Subject key identifier: 53:47:5A:60:06:11:E7:B6:65:50:BB:19:94:D6:17:8B:36:2F:D7:E8 Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 2CACBB7ACA1A4F1083E18D1D41D64ACC6DFA1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 01C5 Signing time: Wed 05 Nov 2025 12:50:41 +0000 Manifest this update: Wed 05 Nov 2025 12:45:41 +0000 Manifest next update: Sat 08 Nov 2025 18:09:41 +0000 Files and hashes: 1: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: 2L7DCJfQuXYmkUJUsfdFqwDAT1SsF8x6dqI0f/qoYAI=) 2: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: lFfJBbMjbElAIDMlqWT9rCqds3zdiZFcywa8gZam8po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 18:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ac:bb:7a:ca:1a:4f:10:83:e1:8d:1d:41:d6:4a:cc:6d:fa:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Nov 5 12:45:41 2025 GMT Not After : Nov 8 18:09:41 2025 GMT Subject: CN=53475A600611E7B66550BB1994D6178B362FD7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:d4:a5:0c:3a:33:37:58:80:97:01:fb:70: 10:c7:6c:f6:59:98:cd:03:15:3f:1f:02:cb:51:2a: 5b:e0:8f:ce:49:34:e7:bf:15:de:27:e5:32:f7:f2: 7f:7b:b6:3d:e3:72:0b:1d:17:f8:25:83:9c:60:07: bc:c0:80:f3:30:ca:90:c4:3b:84:bd:25:5a:19:f3: 6a:d8:c8:28:cc:dc:d0:02:7e:ec:ca:37:7f:1f:7f: 30:12:32:ad:61:f7:2f:14:8a:fb:d6:80:6d:c2:76: a7:c1:62:10:b4:6c:cd:94:50:0f:c1:f5:f6:41:0e: 2d:44:39:c2:a3:02:eb:83:08:dd:b2:9f:cc:f7:40: b8:6b:7c:d4:76:39:2e:e7:f9:9b:30:c1:27:94:25: f1:5f:70:61:0e:c7:8a:ae:7f:39:86:32:44:03:48: 84:c4:40:05:c1:d9:4a:40:b2:dc:6c:67:57:a5:0e: ad:7b:87:a7:ec:3b:46:a1:45:24:9e:ba:c0:54:7e: c8:e8:a9:0b:11:f2:bb:f1:e5:8f:56:93:c4:4f:7c: 28:3f:68:22:57:a9:92:63:3b:45:73:18:24:89:65: d5:55:a8:97:58:7b:96:77:5d:81:0f:dc:8a:30:cd: 17:0d:52:c9:0b:5d:3d:69:96:33:93:f8:53:1d:26: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:47:5A:60:06:11:E7:B6:65:50:BB:19:94:D6:17:8B:36:2F:D7:E8 X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:32:ac:b6:5b:40:f5:5c:00:8c:a5:40:05:01:f4:ba:7d:98: 39:b5:76:0e:52:3f:cc:4a:9b:8b:c1:30:e6:f0:75:86:1b:60: 99:bf:03:3e:b2:92:af:c8:13:a9:12:39:b5:c2:3c:f9:f8:bb: 45:e3:24:b0:8d:48:ba:8a:e4:08:fa:9b:ad:17:64:11:2f:66: 5e:2a:d6:63:48:42:8e:c5:a2:1f:90:72:f7:c0:e5:42:78:35: 2d:de:80:0f:d2:07:9a:4c:b6:0f:b9:29:40:72:76:21:5e:39: 8b:a7:7d:55:a4:e8:7b:43:dc:1d:9d:63:00:f3:53:ce:41:2a: fa:7c:fd:41:48:63:08:46:98:28:16:e2:20:ab:bb:ff:28:11: 16:75:5c:ac:e2:e7:09:5c:af:cd:f0:82:c7:60:a9:2b:79:fe: b2:38:56:71:ac:f3:c4:99:bf:c9:f0:ce:49:af:dd:e4:70:cb: 30:15:a1:6e:ae:d3:bf:4c:ed:cf:76:24:51:a2:37:a3:46:f7: 3a:90:58:97:5a:7c:85:55:65:98:74:5d:7d:28:e8:7d:6e:9f: 62:59:87:e3:a6:6e:08:c3:10:b9:b5:62:fb:1e:d6:ad:37:f6: 3a:c7:22:b9:8c:24:a0:16:3d:57:55:90:9a:39:72:e8:fb:16: 98:16:df:8d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITLKy7esoaTxCD4Y0dQdZKzG36GzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyQTI3ODAyMzNCRjJFMDZENTMzRUM2QjA1RjUwMDIwNkZC QjA2RDZEMB4XDTI1MTEwNTEyNDU0MVoXDTI1MTEwODE4MDk0MVowMzExMC8GA1UE AxMoNTM0NzVBNjAwNjExRTdCNjY1NTBCQjE5OTRENjE3OEIzNjJGRDdFODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZB1KUMOjM3WICXAftwEMds9lmY zQMVPx8Cy1EqW+CPzkk0578V3iflMvfyf3u2PeNyCx0X+CWDnGAHvMCA8zDKkMQ7 hL0lWhnzatjIKMzc0AJ+7Mo3fx9/MBIyrWH3LxSK+9aAbcJ2p8FiELRszZRQD8H1 9kEOLUQ5wqMC64MI3bKfzPdAuGt81HY5Luf5mzDBJ5Ql8V9wYQ7Hiq5/OYYyRANI hMRABcHZSkCy3GxnV6UOrXuHp+w7RqFFJJ66wFR+yOipCxHyu/Hlj1aTxE98KD9o IlepkmM7RXMYJIll1VWol1h7lnddgQ/cijDNFw1SyQtdPWmWM5P4Ux0mZe8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRTR1pgBhHntmVQuxmU1heLNi/X6DAfBgNVHSME GDAWgBQqJ4AjO/LgbVM+xrBfUAIG+7BtbTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNj NmY4YzBhLWUwM2YtNDE0MC1iYTE2LTgzM2FjMjI0MWFmYi8wLzJBMjc4MDIzM0JG MkUwNkQ1MzNFQzZCMDVGNTAwMjA2RkJCMDZENkQuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8yQTI3ODAyMzNCRjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2 RDZELmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8zYzZmOGMwYS1lMDNmLTQxNDAtYmEx Ni04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNCRjJFMDZENTMzRUM2QjA1RjUwMDIw NkZCQjA2RDZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEACzKstltA9VwAjKVABQH0un2YObV2DlI/zEqb i8Ew5vB1hhtgmb8DPrKSr8gTqRI5tcI8+fi7ReMksI1IuorkCPqbrRdkES9mXirW Y0hCjsWiH5By98DlQng1Ld6AD9IHmky2D7kpQHJ2IV45i6d9VaToe0PcHZ1jAPNT zkEq+nz9QUhjCEaYKBbiIKu7/ygRFnVcrOLnCVyvzfCCx2CpK3n+sjhWcazzxJm/ yfDOSa/d5HDLMBWhbq7Tv0ztz3YkUaI3o0b3OpBYl1p8hVVlmHRdfSjofW6fYlmH 46ZuCMMQubVi+x7WrTf2OsciuYwkoBY9V1WQmjly6PsWmBbfjQ== -----END CERTIFICATE-----Generated at Wed Nov 5 19:12:23 2025 by rpki-client