$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft File: C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json) Hash identifier: TWBITot5KH/XdlwS/PE65HxZo6Zn9J6Th7TahOoLvuE= Subject key identifier: FA:53:D8:C8:77:7C:CD:C1:C3:06:D9:50:1F:F9:E8:19:03:A6:C3:8F Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 Certificate issuer: /CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Certificate serial: 2ED5D8EB2F79BA15C4D992379FDE1331740CE20C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft Manifest number: 013F Signing time: Mon 03 Nov 2025 11:11:39 +0000 Manifest this update: Mon 03 Nov 2025 11:06:39 +0000 Manifest next update: Thu 06 Nov 2025 16:20:39 +0000 Files and hashes: 1: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: dATjFz2GgCuZI7do22WaaBEM9mGMyqKI+2l7xnlR/rA=) 2: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: UE2T/LLfMhqETXOz1L2Vbeb2GaWRdHSfrm3mJJwX2I4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d5:d8:eb:2f:79:ba:15:c4:d9:92:37:9f:de:13:31:74:0c:e2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Validity Not Before: Nov 3 11:06:39 2025 GMT Not After : Nov 6 16:20:39 2025 GMT Subject: CN=FA53D8C8777CCDC1C306D9501FF9E81903A6C38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:bb:c8:65:c3:1c:82:9f:8d:d0:77:7c:b5: 44:8e:84:91:40:04:6d:22:c0:4c:fa:09:20:b3:31: 9a:59:ff:51:ba:b9:ca:ee:2e:c4:d6:ca:19:b1:0e: a9:df:70:4b:00:57:b5:f3:19:98:ef:d5:41:88:7b: 25:8a:84:94:98:91:96:a2:8e:95:48:14:06:c3:5b: 9f:f0:6c:2b:b0:f0:4a:53:f8:44:29:7a:eb:0a:04: 24:ac:7c:ab:fe:b5:c4:7a:20:a2:80:f7:5a:5a:be: ab:41:44:28:22:03:59:a9:d0:01:b4:71:57:33:cc: 4c:b0:1e:1b:ed:f7:82:98:c6:c2:4f:08:c9:10:a9: c1:4f:00:36:66:82:dd:5b:d1:a4:5d:8a:26:c3:a8: 22:4e:87:66:37:6a:9e:ac:55:0d:ba:fe:a6:08:91: 68:e8:8d:af:06:44:61:a0:5f:5b:5c:cf:f4:61:92: 92:4e:f4:ac:6d:6a:b2:2e:02:61:56:61:7b:e7:c6: f5:41:2d:55:86:17:81:1d:30:6a:ba:f4:ae:31:ec: 62:3b:ab:bc:40:62:46:d6:c7:0e:43:fa:90:da:01: 7f:89:72:a5:42:0e:40:9e:94:0c:c8:14:4e:b2:6e: 96:57:ca:21:2b:47:9a:04:46:47:48:c6:f1:6e:de: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:53:D8:C8:77:7C:CD:C1:C3:06:D9:50:1F:F9:E8:19:03:A6:C3:8F X509v3 Authority Key Identifier: keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a9:42:f8:b3:e1:e0:fa:04:1e:9d:b8:5f:85:fb:fe:12:62: 71:53:45:73:67:f6:ee:60:50:eb:8b:df:c7:b8:48:0d:fb:92: e8:5c:82:42:55:63:23:55:27:62:1f:99:ef:9b:2c:f7:06:e4: 3d:a4:f2:d4:0a:0a:a1:83:7b:c4:b3:54:0a:cc:19:f6:eb:c2: 17:87:4e:8e:fe:08:d2:5b:8c:58:f1:5e:9e:2c:26:20:99:71: 85:ac:c9:8d:e1:ee:1a:5c:70:ce:fd:06:6a:ac:f7:21:4d:bb: 3a:c5:dd:d5:44:29:76:18:b4:6b:59:e3:db:c5:29:81:8c:45: f5:44:9f:5c:78:ee:3f:10:fb:c9:73:16:58:e8:d8:11:e7:bb: d8:e9:09:8f:3e:ca:69:00:2c:7f:8e:94:67:10:9d:ca:8f:b1: 41:38:9f:5a:88:3f:d7:a1:c2:1d:27:57:5b:c8:71:2d:73:73: 5e:6f:ae:66:cd:d9:e9:b5:b7:e5:da:59:3c:a9:3f:da:d7:4d: 3a:84:66:30:8a:6c:2a:77:d8:1b:9b:18:06:0b:f0:26:cf:49: c8:16:c0:a1:46:df:7a:3d:b4:53:dd:42:75:1f:ad:ea:2e:f2: 2c:ba:06:24:a4:45:e3:e6:60:f9:36:07:db:4c:07:f4:5e:44: 74:2c:c9:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtXY6y95uhXE2ZI3n94TMXQM4gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFF Q0FDMjdEMjAeFw0yNTExMDMxMTA2MzlaFw0yNTExMDYxNjIwMzlaMDMxMTAvBgNV BAMTKEZBNTNEOEM4Nzc3Q0NEQzFDMzA2RDk1MDFGRjlFODE5MDNBNkMzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0LvIZcMcgp+N0Hd8tUSOhJFA BG0iwEz6CSCzMZpZ/1G6ucruLsTWyhmxDqnfcEsAV7XzGZjv1UGIeyWKhJSYkZai jpVIFAbDW5/wbCuw8EpT+EQpeusKBCSsfKv+tcR6IKKA91pavqtBRCgiA1mp0AG0 cVczzEywHhvt94KYxsJPCMkQqcFPADZmgt1b0aRdiibDqCJOh2Y3ap6sVQ26/qYI kWjoja8GRGGgX1tcz/RhkpJO9KxtarIuAmFWYXvnxvVBLVWGF4EdMGq69K4x7GI7 q7xAYkbWxw5D+pDaAX+JcqVCDkCelAzIFE6ybpZXyiErR5oERkdIxvFu3hjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lPYyHd8zcHDBtlQH/noGQOmw48wHwYDVR0j BBgwFoAUwukp37BfgbkYgLyAgVQ2WuysJ9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDZmZmFkMi0yMGJjLTQyNDYtODI5My00NDY2NmNlMWNmZTAvMC9DMkU5MjlERkIw NUY4MUI5MTg4MEJDODA4MTU0MzY1QUVDQUMyN0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFFQ0FD MjdEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2 NUFFQ0FDMjdEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2pQviz4eD6BB6duF+F+/4SYnFTRXNn9u5g UOuL38e4SA37kuhcgkJVYyNVJ2Ifme+bLPcG5D2k8tQKCqGDe8SzVArMGfbrwheH To7+CNJbjFjxXp4sJiCZcYWsyY3h7hpccM79Bmqs9yFNuzrF3dVEKXYYtGtZ49vF KYGMRfVEn1x47j8Q+8lzFljo2BHnu9jpCY8+ymkALH+OlGcQncqPsUE4n1qIP9eh wh0nV1vIcS1zc15vrmbN2em1t+XaWTypP9rXTTqEZjCKbCp32BubGAYL8CbPScgW wKFG33o9tFPdQnUfreou8iy6BiSkRePmYPk2B9tMB/ReRHQsya8= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:33 2025 by rpki-client