$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: SgdHCPqVHPoEpDr3RP212MNAGPpaY3PkX/LmRKculXA= Subject key identifier: BF:A2:03:C3:C6:69:61:DE:17:C4:2F:9A:7D:25:95:90:FF:22:0A:F0 Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 3CA09B183A1EE92FF14B4677FF2888E733FA81E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: A5 Signing time: Sun 02 Nov 2025 14:41:50 +0000 Manifest this update: Sun 02 Nov 2025 14:36:50 +0000 Manifest next update: Wed 05 Nov 2025 20:36:50 +0000 Files and hashes: 1: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: JZ8LoYtZAc3YBJaw/q8cq/iad0ui2q1BQMxP30SPQk4=) 2: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: 0PyZ1Izmcdz8RbI4pvamYzCkDML//PlzpXnY61vINZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a0:9b:18:3a:1e:e9:2f:f1:4b:46:77:ff:28:88:e7:33:fa:81:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: Nov 2 14:36:50 2025 GMT Not After : Nov 5 20:36:50 2025 GMT Subject: CN=BFA203C3C66961DE17C42F9A7D259590FF220AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:d9:34:59:06:31:94:b2:8c:09:e7:c5:e0: 0c:01:db:f9:4e:4c:5e:8f:af:f8:5a:35:fe:99:aa: 29:05:c1:e2:e2:da:d4:f5:da:4a:51:a6:76:20:95: 11:b1:bd:d2:63:ee:8e:9a:60:be:2b:de:95:fd:ef: b2:74:79:58:6a:82:d1:91:7b:c2:be:81:0d:13:7c: f5:62:b4:da:75:c2:32:e9:7b:af:a8:01:d7:83:5e: 97:85:65:87:43:7e:2d:ae:c7:b8:20:31:38:28:34: fa:37:ea:7d:40:4e:6b:4f:a8:c1:f3:53:8f:bb:ac: ef:bd:73:10:f4:30:9c:82:6a:2d:3a:f4:cd:69:5a: a3:6a:84:44:8e:d0:93:52:f4:2d:18:92:35:b1:fe: 90:ad:e4:02:fa:f2:4c:a8:35:b7:de:a3:96:96:84: 6f:aa:1f:c3:16:d0:e6:06:07:92:7a:21:a6:f5:a3: bd:4c:3d:1e:65:01:39:9a:e0:29:36:b6:a2:c0:a2: d8:6d:36:e9:22:38:1d:ad:a7:69:3a:5f:6f:9b:fb: 5d:37:da:5f:9d:e6:ec:68:09:21:18:81:29:03:81: a5:67:69:64:21:61:87:11:d2:2e:39:36:d3:76:e5: ef:3b:2e:4c:2d:b8:1a:4a:af:62:8a:1d:70:5d:7e: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A2:03:C3:C6:69:61:DE:17:C4:2F:9A:7D:25:95:90:FF:22:0A:F0 X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:28:d5:87:b6:85:0e:90:52:28:13:75:7f:7e:2d:f5:62:1b: 38:53:09:c2:14:74:e0:7e:0d:3e:77:27:f0:1f:fe:b0:16:09: ca:76:c4:de:89:b4:03:43:50:26:6a:aa:5e:9f:3d:4d:8d:59: 05:8a:b4:8f:83:00:1a:12:ca:00:ab:15:70:bb:17:18:fe:da: 56:22:5e:e8:2c:89:2d:06:f9:9f:3a:35:31:bd:77:95:a6:3f: fa:ea:3e:ea:9a:90:e8:42:6d:6a:ad:70:2e:f0:94:05:07:0c: 8b:0d:c5:ea:b0:1c:d4:6a:bf:e2:1e:4e:88:30:c4:13:bd:6e: df:08:f0:e8:40:2c:19:cd:20:84:83:88:5a:55:e2:cf:88:61: 02:53:7e:0f:e8:c1:8c:24:a2:80:b8:31:5d:3f:aa:b1:7e:1a: bb:ad:1d:45:6f:9a:ea:1e:1f:70:d3:d9:88:c9:41:26:04:a7: d1:1b:1a:5a:89:ee:93:e6:89:2f:2d:53:15:f4:64:e1:fa:d0: 52:c5:59:64:8f:e7:ae:47:33:46:c3:28:be:9d:b7:4d:1a:c6: 79:fd:c5:20:4d:1b:97:ea:20:e5:73:32:a1:04:f4:d0:df:58: a4:61:18:49:2f:6e:6d:27:57:e8:a8:7a:26:a7:d1:6b:0d:cf: 78:e5:85:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKCbGDoe6S/xS0Z3/yiI5zP6gecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNTExMDIxNDM2NTBaFw0yNTExMDUyMDM2NTBaMDMxMTAvBgNV BAMTKEJGQTIwM0MzQzY2OTYxREUxN0M0MkY5QTdEMjU5NTkwRkYyMjBBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDidk0WQYxlLKMCefF4AwB2/lO TF6Pr/haNf6ZqikFweLi2tT12kpRpnYglRGxvdJj7o6aYL4r3pX977J0eVhqgtGR e8K+gQ0TfPVitNp1wjLpe6+oAdeDXpeFZYdDfi2ux7ggMTgoNPo36n1ATmtPqMHz U4+7rO+9cxD0MJyCai069M1pWqNqhESO0JNS9C0YkjWx/pCt5AL68kyoNbfeo5aW hG+qH8MW0OYGB5J6Iab1o71MPR5lATma4Ck2tqLAothtNukiOB2tp2k6X2+b+103 2l+d5uxoCSEYgSkDgaVnaWQhYYcR0i45NtN25e87LkwtuBpKr2KKHXBdft0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv6IDw8ZpYd4XxC+afSWVkP8iCvAwHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIo1Ye2hQ6QUigTdX9+LfViGzhTCcIUdOB+ DT53J/Af/rAWCcp2xN6JtANDUCZqql6fPU2NWQWKtI+DABoSygCrFXC7Fxj+2lYi XugsiS0G+Z86NTG9d5WmP/rqPuqakOhCbWqtcC7wlAUHDIsNxeqwHNRqv+IeTogw xBO9bt8I8OhALBnNIISDiFpV4s+IYQJTfg/owYwkooC4MV0/qrF+GrutHUVvmuoe H3DT2YjJQSYEp9EbGlqJ7pPmiS8tUxX0ZOH60FLFWWSP565HM0bDKL6dt00axnn9 xSBNG5fqIOVzMqEE9NDfWKRhGEkvbm0nV+ioeian0WsNz3jlhX0= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:26 2025 by rpki-client