$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: Hswrx4JiOGqN0q2wPu6iFeb/0CFr2LeTKqNHveLL+GQ= Subject key identifier: D3:8A:B1:20:31:25:C5:80:CF:89:C0:DB:21:96:08:F3:F6:A1:FB:2D Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 53C2D3A53C730DFA90A107E2A653F2B25CA8E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 0382 Signing time: Tue 04 Nov 2025 23:11:26 +0000 Manifest this update: Tue 04 Nov 2025 23:06:26 +0000 Manifest next update: Sat 08 Nov 2025 05:26:26 +0000 Files and hashes: 1: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 2: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 3: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: gE8KwI3HpgxOzOzgtd4bAyY0p0xqFFfXUkVhLajeJv4=) 4: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) 5: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 05:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c2:d3:a5:3c:73:0d:fa:90:a1:07:e2:a6:53:f2:b2:5c:a8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Nov 4 23:06:26 2025 GMT Not After : Nov 8 05:26:26 2025 GMT Subject: CN=D38AB1203125C580CF89C0DB219608F3F6A1FB2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:19:6f:07:c2:dd:0e:e0:5f:fe:c6:cc:b5: d5:f3:94:10:05:59:a0:fe:15:23:88:1e:ea:55:6b: 34:1e:ce:09:09:ef:6a:70:c7:f1:b7:d9:e5:40:27: 2e:da:80:60:f3:3d:4f:7b:a5:7d:61:fd:ff:37:49: af:19:49:7b:0e:c2:13:71:37:7d:df:91:70:cd:63: 81:43:8b:6c:48:8f:3c:19:ea:00:d0:60:53:ab:5d: 72:71:cd:ed:62:40:6a:6c:54:db:1c:3b:7c:1e:92: fc:84:80:2d:fd:2a:5a:60:e2:38:84:03:90:bb:c5: 96:21:7b:42:9a:5d:25:b7:c9:33:e8:34:b7:ed:d5: ae:37:13:71:b1:2e:36:bd:84:b5:87:13:fd:fd:8e: f5:76:b8:9f:d5:38:a5:3b:84:ba:b3:9c:fb:96:8b: 15:2e:e8:57:a0:a0:cc:76:28:16:63:a6:d5:e7:4f: f2:82:60:b3:c1:6b:a3:51:81:2b:76:5f:10:aa:2d: 17:da:83:97:b8:4f:85:2a:08:66:60:94:24:85:48: aa:54:35:ed:08:05:42:86:b7:4e:b2:78:e4:16:d9: 71:ef:0a:3d:45:57:96:f0:f7:af:1a:a1:98:05:24: 25:2d:7a:98:c7:f6:e8:d9:73:0e:41:9a:85:be:f5: 41:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:B1:20:31:25:C5:80:CF:89:C0:DB:21:96:08:F3:F6:A1:FB:2D X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:26:4d:67:32:46:81:b3:e2:b9:7f:22:03:56:02:12:83:91: 91:ff:3b:fa:a3:d5:64:e6:5c:40:93:c7:b0:b2:ad:6d:ad:a8: f1:21:09:54:dc:00:06:aa:38:35:ef:52:33:e8:e6:c6:66:30: 44:5a:01:fb:d6:90:d3:72:ba:10:8f:fa:25:1f:21:a1:83:03: ab:ae:cd:90:6d:1a:04:a0:e0:75:14:10:65:8f:b5:f2:94:3e: d2:9f:0f:4b:82:8d:d7:c1:33:a6:06:5d:69:13:19:e3:89:06: ed:7e:8b:c7:8e:d0:9b:01:fe:98:f6:87:f8:54:2f:f9:6c:78: ae:4a:b8:a2:61:2c:dd:ee:33:ca:9a:31:0b:17:5b:e0:bc:c4: 17:77:2e:4b:99:4a:79:8a:2b:a3:50:df:2e:7f:e0:29:d6:b7: 6a:74:e2:b4:0c:ef:ca:c9:71:69:f7:42:62:ba:8f:09:84:76: a0:fa:ee:c2:f6:5d:b0:21:1d:d1:4a:c1:e4:ec:4c:78:8b:73: f0:ec:37:0f:6b:31:e3:b8:e2:b9:6b:97:fa:c2:ae:39:b9:7f: 7b:66:59:88:04:41:90:5d:83:6a:f2:79:35:28:ad:f7:c1:cd: 24:3b:67:87:f6:b5:fa:4b:f4:8d:bd:2d:93:82:c4:68:0e:74: 47:e0:fb:72 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITU8LTpTxzDfqQoQfiplPyslyo5TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyQkIxMzgyNzQyMzU3NTE0MURBMEYxQzU3QjMzRTdERTVE N0E2M0E2MB4XDTI1MTEwNDIzMDYyNloXDTI1MTEwODA1MjYyNlowMzExMC8GA1UE AxMoRDM4QUIxMjAzMTI1QzU4MENGODlDMERCMjE5NjA4RjNGNkExRkIyRDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMyRGW8Hwt0O4F/+xsy11fOUEAVZ oP4VI4ge6lVrNB7OCQnvanDH8bfZ5UAnLtqAYPM9T3ulfWH9/zdJrxlJew7CE3E3 fd+RcM1jgUOLbEiPPBnqANBgU6tdcnHN7WJAamxU2xw7fB6S/ISALf0qWmDiOIQD kLvFliF7QppdJbfJM+g0t+3VrjcTcbEuNr2EtYcT/f2O9Xa4n9U4pTuEurOc+5aL FS7oV6CgzHYoFmOm1edP8oJgs8Fro1GBK3ZfEKotF9qDl7hPhSoIZmCUJIVIqlQ1 7QgFQoa3TrJ45BbZce8KPUVXlvD3rxqhmAUkJS16mMf26NlzDkGahb71QXcCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTTirEgMSXFgM+JwNshlgjz9qH7LTAfBgNVHSME GDAWgBQrsTgnQjV1FB2g8cV7M+feXXpjpjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhh NDkzYmUxLWYwNjQtNDllNi05NDlhLWNiM2VjYmZjOGY0Ni8wLzJCQjEzODI3NDIz NTc1MTQxREEwRjFDNTdCMzNFN0RFNUQ3QTYzQTYuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8yQkIxMzgyNzQyMzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2 M0E2LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5 YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQyMzU3NTE0MURBMEYxQzU3QjMzRTdE RTVEN0E2M0E2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAjCZNZzJGgbPiuX8iA1YCEoORkf87+qPVZOZc QJPHsLKtba2o8SEJVNwABqo4Ne9SM+jmxmYwRFoB+9aQ03K6EI/6JR8hoYMDq67N kG0aBKDgdRQQZY+18pQ+0p8PS4KN18EzpgZdaRMZ44kG7X6Lx47QmwH+mPaH+FQv +Wx4rkq4omEs3e4zypoxCxdb4LzEF3cuS5lKeYoro1DfLn/gKda3anTitAzvyslx afdCYrqPCYR2oPruwvZdsCEd0UrB5OxMeItz8Ow3D2sx47jiuWuX+sKuObl/e2ZZ iARBkF2DavJ5NSit98HNJDtnh/a1+kv0jb0tk4LEaA50R+D7cg== -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:17 2025 by rpki-client