$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: h96xptyyHD37mqhHeGRILf+qxgRpkiqUBtY195A9pNU= Subject key identifier: BA:9B:35:D0:EB:5E:94:75:39:AE:DB:13:FD:13:B6:38:D7:B4:3D:24 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 6C018E5887FB1217A86134DAE0CAA66B45F4BE69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 039A Signing time: Tue 04 Nov 2025 12:42:05 +0000 Manifest this update: Tue 04 Nov 2025 12:37:05 +0000 Manifest next update: Fri 07 Nov 2025 14:25:05 +0000 Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) 2: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: JdhF1VMk8CFCyAnGqenmMO9nAYdNRzu1VBw+x3YnlAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 14:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:01:8e:58:87:fb:12:17:a8:61:34:da:e0:ca:a6:6b:45:f4:be:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Nov 4 12:37:05 2025 GMT Not After : Nov 7 14:25:05 2025 GMT Subject: CN=BA9B35D0EB5E947539AEDB13FD13B638D7B43D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d6:dc:df:1f:f4:3f:7e:95:86:55:8c:f3:04: 91:db:4c:8c:8d:19:34:61:b1:52:a5:bc:b4:bd:f1: 3e:72:f8:bc:61:e1:c2:a9:14:ca:6e:c9:25:1c:85: 4c:bf:5b:51:03:e6:03:b2:19:03:6a:12:8a:40:fa: 65:26:85:5c:d0:d1:ef:f4:19:d3:98:22:28:98:d2: 25:c1:81:34:fe:b5:ad:a5:57:5a:89:de:49:25:7e: a5:0f:20:d3:13:9c:6e:37:41:2b:c7:0e:2b:2a:70: 2a:8d:c6:f2:40:da:92:c0:06:26:fd:c3:93:2b:4c: 2d:ca:e7:5e:43:c7:00:c7:5f:cc:8c:4a:41:28:69: 84:a7:83:c7:08:22:05:b0:ef:79:a9:29:89:a8:51: 57:d3:13:e7:f2:41:45:8e:a0:83:a0:87:f3:cc:31: 8a:57:41:89:b7:69:1e:aa:34:6c:f5:aa:07:0d:7e: dd:f3:45:63:90:b9:12:0a:c1:b3:71:cf:f5:bb:65: c2:28:81:6c:dc:a1:29:86:e6:06:90:73:22:9c:a5: 59:cf:40:7e:28:d5:9c:83:2c:26:fa:6e:18:62:15: 89:8e:c8:3e:c0:1d:60:94:80:93:50:72:9e:65:66: 2b:70:0d:23:7d:57:d1:37:75:54:a5:c4:06:be:ae: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:35:D0:EB:5E:94:75:39:AE:DB:13:FD:13:B6:38:D7:B4:3D:24 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ad:ae:3a:e1:49:e2:64:ce:4d:62:b5:de:0e:25:7d:61:5f: 29:12:74:4e:bb:f4:79:1d:74:b4:37:eb:04:42:e3:f6:5d:a0: 43:fd:d2:26:36:ba:4c:ca:2e:d1:03:89:ad:0d:61:33:c6:da: f5:e5:fa:a9:44:21:1a:7f:ca:8b:12:66:8c:9e:6f:97:80:c8: 97:01:db:66:44:cf:8d:8e:b1:69:5b:74:31:3c:98:6f:f2:c6: 4a:e6:7e:59:6a:34:31:e9:8b:70:da:93:05:98:57:bf:4a:d3: 2d:92:9a:81:b3:d8:ad:12:83:60:9d:f4:f0:02:0f:53:2a:8b: 88:7d:fb:76:c2:d4:c0:62:e0:24:e3:53:1a:5a:6e:9f:66:39: 52:0b:ea:3d:86:d4:a5:0b:a5:63:9f:46:5c:03:70:6c:e1:f6: 03:94:8a:72:4a:ab:2e:93:76:e4:40:71:0e:03:85:8b:36:30: 73:12:20:83:37:12:8e:be:e4:77:99:41:69:c7:92:ad:71:34: 14:f2:b9:ab:33:cd:48:69:51:e1:a2:6a:a1:79:d0:e6:74:0d: 0e:31:c3:d2:22:28:6c:1a:30:d3:d9:e6:38:b5:fd:40:77:fd: 1d:79:b4:93:ea:c7:c1:75:f9:c6:7e:a6:dc:db:93:3f:18:10: b6:1c:76:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAGOWIf7EheoYTTa4Mqma0X0vmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTExMDQxMjM3MDVaFw0yNTExMDcxNDI1MDVaMDMxMTAvBgNV BAMTKEJBOUIzNUQwRUI1RTk0NzUzOUFFREIxM0ZEMTNCNjM4RDdCNDNEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz1tzfH/Q/fpWGVYzzBJHbTIyN GTRhsVKlvLS98T5y+Lxh4cKpFMpuySUchUy/W1ED5gOyGQNqEopA+mUmhVzQ0e/0 GdOYIiiY0iXBgTT+ta2lV1qJ3kklfqUPINMTnG43QSvHDisqcCqNxvJA2pLABib9 w5MrTC3K515DxwDHX8yMSkEoaYSng8cIIgWw73mpKYmoUVfTE+fyQUWOoIOgh/PM MYpXQYm3aR6qNGz1qgcNft3zRWOQuRIKwbNxz/W7ZcIogWzcoSmG5gaQcyKcpVnP QH4o1ZyDLCb6bhhiFYmOyD7AHWCUgJNQcp5lZitwDSN9V9E3dVSlxAa+rkQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUups10OtelHU5rtsT/RO2ONe0PSQwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKetrjrhSeJkzk1itd4OJX1hXykSdE679Hkd dLQ36wRC4/ZdoEP90iY2ukzKLtEDia0NYTPG2vXl+qlEIRp/yosSZoyeb5eAyJcB 22ZEz42OsWlbdDE8mG/yxkrmfllqNDHpi3DakwWYV79K0y2SmoGz2K0Sg2Cd9PAC D1Mqi4h9+3bC1MBi4CTjUxpabp9mOVIL6j2G1KULpWOfRlwDcGzh9gOUinJKqy6T duRAcQ4DhYs2MHMSIIM3Eo6+5HeZQWnHkq1xNBTyuaszzUhpUeGiaqF50OZ0DQ4x w9IiKGwaMNPZ5ji1/UB3/R15tJPqx8F1+cZ+ptzbkz8YELYcdvM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:46 2025 by rpki-client