$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft File: 2E55483B906244D2DA357F014F9AFA606D95C345.mft (raw, json) Hash identifier: SJJFaZIwPYfnUnJ+Zz8McP4kqXFuj3PA4MxWB25yVIg= Subject key identifier: 09:4D:1C:0F:8C:61:05:8C:5D:26:01:59:2F:9F:A9:0D:83:B1:65:8D Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345 Certificate serial: 6DFF3FB0457C2FFCBEDF37450544509E20823D2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft Manifest number: F3 Signing time: Tue 04 Nov 2025 08:51:14 +0000 Manifest this update: Tue 04 Nov 2025 08:46:14 +0000 Manifest next update: Fri 07 Nov 2025 13:37:14 +0000 Files and hashes: 1: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: d6+MpeOwnH/agtVVZkfqBxwK6cPDeJjFB6fgvTWTTwY=) 2: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: Du41YA1NCiK2HlEV88F/QDnyK1sLmVF33xCMfe54rMI=) 3: 2E55483B906244D2DA357F014F9AFA606D95C345.crl (hash: mQPaXvmQmyNy+qMGUfRHOuRWVsXo1/JFdcSIGcGwpaU=) 4: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: UMm8CVytUz3mnXPaURu9cvBWCMEG+/Kh9q1dvGzVdN0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ff:3f:b0:45:7c:2f:fc:be:df:37:45:05:44:50:9e:20:82:3d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345 Validity Not Before: Nov 4 08:46:14 2025 GMT Not After : Nov 7 13:37:14 2025 GMT Subject: CN=094D1C0F8C61058C5D2601592F9FA90D83B1658D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:dc:c5:78:09:85:58:55:85:da:94:cc:d7: d8:53:b2:ff:88:30:94:8d:07:c2:ee:57:fc:61:e8: c6:d4:ba:f1:5c:36:7b:4d:10:82:8c:45:d9:21:a0: fc:27:ec:07:94:af:83:b1:0d:15:16:d5:91:ff:0f: 51:b7:b7:ea:e7:2d:d1:96:7c:35:29:32:30:35:92: fb:12:2d:3c:d9:0e:b7:0b:de:a6:f2:75:6a:8d:02: 90:8b:17:5b:69:69:28:89:06:89:49:11:4d:5f:da: 48:70:1f:46:e8:2e:dd:47:5d:89:d7:c2:5f:ce:78: 0e:2a:d7:db:76:41:1f:67:46:8e:44:2f:76:35:23: 2b:23:b9:3f:39:01:8b:00:c5:a1:77:48:34:bb:9a: f6:8b:9a:61:10:a7:00:4b:70:67:32:4f:d9:f8:63: c3:97:1f:27:82:4d:3c:74:08:52:11:24:b5:aa:34: 36:70:c3:51:7c:c0:e1:44:e7:29:77:19:a0:b9:cb: 62:40:47:66:4b:4a:73:78:33:b0:a7:de:56:ef:db: 46:05:4b:fe:fc:b1:9a:ed:21:b4:c2:1b:b0:cc:0e: 12:4c:b5:9e:4f:1b:15:03:ef:58:ae:34:c0:4f:2d: 39:8e:9f:8a:6e:7d:dd:2b:58:1e:bb:5f:d2:e5:ef: 71:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4D:1C:0F:8C:61:05:8C:5D:26:01:59:2F:9F:A9:0D:83:B1:65:8D X509v3 Authority Key Identifier: keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:2f:8e:98:21:e3:3c:f3:8c:8b:97:f5:a4:21:05:cb:14:32: 27:ed:0f:14:0d:fb:6d:88:3b:26:72:18:0f:f4:09:0d:26:d6: 70:d1:70:82:63:b6:ff:f2:94:e6:47:31:64:f4:b5:16:f9:3e: 79:20:18:50:fb:d5:2c:a2:67:42:ff:b5:22:02:ff:5e:0b:f9: 2c:a4:5b:4e:b7:14:4d:f5:7d:a5:6a:be:ca:36:44:9d:b3:11: f2:be:3e:ed:1b:83:b6:ec:21:cb:81:0c:9d:57:be:2d:84:35: 21:9d:c6:b9:8a:f6:88:05:a1:9c:3f:be:e0:3f:18:4a:88:77: 81:86:fb:ad:90:ce:d4:f4:e7:7c:4d:07:c9:a6:88:4c:24:7a: ea:66:c9:08:d9:a8:dc:d2:e5:04:1e:0c:47:a7:99:1b:99:24: 03:4c:a2:00:27:b8:4a:de:b8:8d:18:56:e0:b1:1f:e6:04:6d: 74:a2:7c:4a:74:c7:f7:bf:a3:65:8f:be:89:5c:7d:72:de:29: 14:3e:25:8d:ea:ca:98:a7:5b:a5:91:d0:e1:8d:26:d3:bd:b5: f8:71:16:89:15:1d:4a:4d:c9:14:f8:6f:af:75:df:28:b6:18: 0b:9c:78:03:5f:e1:d1:40:bf:ed:d3:bd:63:2d:3d:f5:d1:a7: d5:15:e4:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbf8/sEV8L/y+3zdFBURQniCCPSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2 RDk1QzM0NTAeFw0yNTExMDQwODQ2MTRaFw0yNTExMDcxMzM3MTRaMDMxMTAvBgNV BAMTKDA5NEQxQzBGOEM2MTA1OEM1RDI2MDE1OTJGOUZBOTBEODNCMTY1OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gtzFeAmFWFWF2pTM19hTsv+I MJSNB8LuV/xh6MbUuvFcNntNEIKMRdkhoPwn7AeUr4OxDRUW1ZH/D1G3t+rnLdGW fDUpMjA1kvsSLTzZDrcL3qbydWqNApCLF1tpaSiJBolJEU1f2khwH0boLt1HXYnX wl/OeA4q19t2QR9nRo5EL3Y1IysjuT85AYsAxaF3SDS7mvaLmmEQpwBLcGcyT9n4 Y8OXHyeCTTx0CFIRJLWqNDZww1F8wOFE5yl3GaC5y2JAR2ZLSnN4M7Cn3lbv20YF S/78sZrtIbTCG7DMDhJMtZ5PGxUD71iuNMBPLTmOn4pufd0rWB67X9Ll73HBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCU0cD4xhBYxdJgFZL5+pDYOxZY0wHwYDVR0j BBgwFoAULlVIO5BiRNLaNX8BT5r6YG2Vw0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMC8yRTU1NDgzQjkw NjI0NEQyREEzNTdGMDE0RjlBRkE2MDZEOTVDMzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2RDk1 QzM0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi NmEtNGZkYzM4N2ViYzU4LzAvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZB NjA2RDk1QzM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgvjpgh4zzzjIuX9aQhBcsUMiftDxQN+22I OyZyGA/0CQ0m1nDRcIJjtv/ylOZHMWT0tRb5PnkgGFD71SyiZ0L/tSIC/14L+Syk W063FE31faVqvso2RJ2zEfK+Pu0bg7bsIcuBDJ1Xvi2ENSGdxrmK9ogFoZw/vuA/ GEqId4GG+62QztT053xNB8mmiEwkeupmyQjZqNzS5QQeDEenmRuZJANMogAnuEre uI0YVuCxH+YEbXSifEp0x/e/o2WPvolcfXLeKRQ+JY3qypinW6WR0OGNJtO9tfhx FokVHUpNyRT4b6913yi2GAuceANf4dFAv+3TvWMtPfXRp9UV5LM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:10 2025 by rpki-client