$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: e/xrv+sFHcY/86rour1080LQCCxohC5a4CnZ6MayM8Q= Subject key identifier: 4D:7A:6A:9D:F6:70:46:BF:8E:0F:80:CE:C0:65:35:7E:6C:C6:05:45 Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 695F2A129A9FDB7E05CAF7034286A258F2B26A46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 03CF Signing time: Sun 02 Nov 2025 22:22:13 +0000 Manifest this update: Sun 02 Nov 2025 22:17:13 +0000 Manifest next update: Thu 06 Nov 2025 03:29:13 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: gnd3yBDz15wxmOCyP8Nija9mvIiFk5eKygMVaNaU1ww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5f:2a:12:9a:9f:db:7e:05:ca:f7:03:42:86:a2:58:f2:b2:6a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Nov 2 22:17:13 2025 GMT Not After : Nov 6 03:29:13 2025 GMT Subject: CN=4D7A6A9DF67046BF8E0F80CEC065357E6CC60545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:18:67:69:ba:93:08:93:02:bc:54:b3:60: 24:7e:92:c6:12:cb:c1:07:cc:7d:df:db:b7:bd:c5: 40:af:90:25:99:16:0e:5d:a3:2a:e9:08:a3:58:09: 78:02:8a:6b:0d:84:7b:4b:9d:34:28:6d:7f:2e:b7: d1:9e:c4:9d:04:5b:ce:ce:9a:b8:80:22:86:f6:ee: 30:ea:e3:30:27:17:79:78:c2:39:7d:5f:44:36:df: a6:b7:14:af:b2:49:0e:3a:f6:0b:ee:a5:2e:36:39: 37:f1:e7:70:48:73:8d:19:9e:76:be:c4:ac:ae:89: 67:88:05:16:46:b0:75:7a:db:c8:40:8e:0c:74:7b: 6e:59:6b:94:f3:d7:0a:ba:f1:7a:1c:44:6a:c5:89: e7:7d:58:bc:b7:8d:b6:fa:cc:e4:e9:a2:10:11:6e: 03:69:8d:fa:05:59:54:5c:6b:63:d2:38:ae:04:50: 47:04:55:47:83:03:94:53:c6:6f:38:2a:b5:42:47: 00:88:ef:5c:7f:c7:3f:2d:21:e0:c2:bb:72:37:98: ec:ea:41:d9:c7:71:86:de:6c:5b:f9:ad:d3:66:fa: 94:f5:4e:0c:ed:b9:bc:74:e9:83:99:0f:c0:18:71: b3:a3:f9:f4:7c:20:c6:f5:c8:f8:dd:51:e6:bc:00: 86:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7A:6A:9D:F6:70:46:BF:8E:0F:80:CE:C0:65:35:7E:6C:C6:05:45 X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e9:50:5b:40:3e:58:67:39:7f:23:ec:f3:3d:0a:98:d3:d4: 3a:2b:87:40:ad:1c:f8:d5:fa:a0:07:10:b8:2c:0b:83:36:ce: 92:2b:63:33:57:58:0d:06:49:21:cb:1a:57:42:9d:52:7a:db: fb:b0:25:1f:7e:4a:ee:fb:71:af:eb:6d:59:91:14:d8:c8:e5: 3a:9d:f4:97:dc:79:2f:10:09:3b:e7:7f:08:76:ba:b6:eb:b5: ba:63:1d:f2:0b:7f:ef:12:70:7a:7b:f4:2b:ec:a1:98:6e:04: 58:87:da:ad:86:af:6c:56:06:75:5f:a5:f4:4f:c8:14:18:c6: 9a:09:49:d6:8c:08:66:a6:bd:85:0a:7a:f5:d7:dd:53:7d:f7: ad:87:a1:b1:ee:6f:55:6b:99:42:d1:45:a6:1a:fe:74:81:cb: 5c:18:c9:a8:c3:26:9a:2f:68:62:01:6e:a2:48:cb:e8:6e:01: 94:e2:25:ea:5e:3e:64:52:64:dc:bf:bb:5e:bf:c8:78:1c:14: 98:cf:6f:31:73:f0:26:75:ff:10:23:df:74:b4:1a:a5:e9:e9: 5d:ec:f5:df:70:1f:bd:db:67:b8:ee:35:ef:ce:9a:b4:2a:b8: 9b:16:2c:44:58:81:67:08:c6:7e:f5:c8:77:23:c9:7d:bd:92: 8e:19:0d:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaV8qEpqf234FyvcDQoaiWPKyakYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNTExMDIyMjE3MTNaFw0yNTExMDYwMzI5MTNaMDMxMTAvBgNV BAMTKDREN0E2QTlERjY3MDQ2QkY4RTBGODBDRUMwNjUzNTdFNkNDNjA1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKxhnabqTCJMCvFSzYCR+ksYS y8EHzH3f27e9xUCvkCWZFg5doyrpCKNYCXgCimsNhHtLnTQobX8ut9GexJ0EW87O mriAIob27jDq4zAnF3l4wjl9X0Q236a3FK+ySQ469gvupS42OTfx53BIc40Znna+ xKyuiWeIBRZGsHV628hAjgx0e25Za5Tz1wq68XocRGrFied9WLy3jbb6zOTpohAR bgNpjfoFWVRca2PSOK4EUEcEVUeDA5RTxm84KrVCRwCI71x/xz8tIeDCu3I3mOzq QdnHcYbebFv5rdNm+pT1Tgztubx06YOZD8AYcbOj+fR8IMb1yPjdUea8AIbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTXpqnfZwRr+OD4DOwGU1fmzGBUUwHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfpUFtAPlhnOX8j7PM9CpjT1Dorh0CtHPjV +qAHELgsC4M2zpIrYzNXWA0GSSHLGldCnVJ62/uwJR9+Su77ca/rbVmRFNjI5Tqd 9JfceS8QCTvnfwh2urbrtbpjHfILf+8ScHp79CvsoZhuBFiH2q2Gr2xWBnVfpfRP yBQYxpoJSdaMCGamvYUKevXX3VN9962HobHub1VrmULRRaYa/nSBy1wYyajDJpov aGIBbqJIy+huAZTiJepePmRSZNy/u16/yHgcFJjPbzFz8CZ1/xAj33S0GqXp6V3s 9d9wH73bZ7juNe/OmrQquJsWLERYgWcIxn71yHcjyX29ko4ZDbA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:15 2025 by rpki-client