$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: sXhFp+XIqq0CAxtmFW+k9F603U1C+eSPnEXt6pOBi0Y= Subject key identifier: D8:D1:C3:23:3C:A1:4B:DB:20:A1:12:78:C4:13:48:AC:48:E4:85:C0 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 0ECD35EC918CBDF809A1318072AC10C1FF1B7678 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: D4 Signing time: Mon 03 Nov 2025 17:11:41 +0000 Manifest this update: Mon 03 Nov 2025 17:06:41 +0000 Manifest next update: Thu 06 Nov 2025 23:42:41 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: tfmyZG32vnftIhf4eCL1u3/teCIN0ZxfPmzXzUJW4cs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cd:35:ec:91:8c:bd:f8:09:a1:31:80:72:ac:10:c1:ff:1b:76:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Nov 3 17:06:41 2025 GMT Not After : Nov 6 23:42:41 2025 GMT Subject: CN=D8D1C3233CA14BDB20A11278C41348AC48E485C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:b6:f5:b0:a6:17:61:23:4b:b9:e6:de:2b: 03:7c:bf:dc:eb:cb:bb:53:a4:71:d5:bc:2e:b0:99: a3:58:da:7d:22:68:cf:3a:a6:78:92:47:e5:8c:1d: 8a:74:ce:14:c2:ff:09:d5:06:d7:0b:83:99:55:a9: d1:56:27:a7:72:68:8a:5f:e3:1d:0c:33:4a:f8:7c: af:68:70:b6:62:f3:3d:44:ac:ab:d7:f1:86:47:77: eb:a5:69:a7:0a:2b:d5:3b:5f:f2:ce:8d:4b:8e:d5: 7f:ea:60:f9:e5:64:08:21:1e:8a:27:ae:25:9f:18: bb:64:fb:b8:c9:dc:c6:c0:b0:ad:22:04:4f:b8:08: 3b:05:27:b7:15:d7:68:8a:41:7e:c1:13:23:48:db: 64:a9:48:21:be:6c:96:db:e0:b2:1b:5e:65:b8:bd: 68:1d:d0:38:d2:f5:12:5d:73:94:94:50:06:a8:43: ed:62:58:25:60:9e:0c:4e:d9:ed:96:db:26:39:fd: a2:30:78:37:96:ea:3d:0d:af:08:46:72:02:7b:9e: 0a:06:75:30:a4:78:98:a0:c1:e9:d8:4c:f8:18:c3: 0d:22:31:96:15:ce:c1:4c:1e:a5:cb:42:0d:ed:43: 92:d1:7d:00:ec:72:16:5c:c8:c1:8b:54:cb:4d:e5: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D1:C3:23:3C:A1:4B:DB:20:A1:12:78:C4:13:48:AC:48:E4:85:C0 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e0:35:83:39:cc:29:84:04:eb:7b:58:a5:64:70:36:f9:d7: e8:97:8c:5e:ae:c5:ac:87:c9:18:55:dd:46:01:d5:1b:b8:22: f0:3f:a2:c5:29:70:2a:26:e9:63:37:89:0e:c6:a9:31:15:a0: 87:05:d4:1d:82:f3:1d:09:b8:dd:56:c2:04:df:00:6e:40:03: d4:b8:34:45:c6:51:ce:7c:0b:6d:76:e4:d9:b6:95:65:08:b1: 0e:98:05:d7:04:24:98:0f:91:85:ba:0e:3d:79:14:96:34:88: 1f:ac:87:08:90:65:d8:e4:e3:33:d5:7d:cd:33:32:55:2c:22: 69:78:02:df:34:bd:4a:84:09:03:ad:9e:4f:5a:39:c1:73:3e: a9:c3:d7:94:74:b0:7f:c7:0c:47:02:75:94:20:03:ee:c1:c1: c7:7d:c6:02:4a:3b:10:52:ef:6a:6c:ac:58:3a:0c:fe:f2:73: f2:79:64:16:30:73:56:12:91:70:7d:39:82:a2:81:9a:a3:d0: fe:7e:9b:13:b7:4f:43:08:57:6a:fa:cd:55:c9:92:91:87:89: 5c:49:1c:95:02:b8:31:52:b1:ba:fe:d7:cb:54:3f:ef:90:05: d2:c4:bf:70:2f:f7:0e:59:80:dd:d1:99:14:3c:64:2e:6e:05: 49:ec:44:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDs017JGMvfgJoTGAcqwQwf8bdngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNTExMDMxNzA2NDFaFw0yNTExMDYyMzQyNDFaMDMxMTAvBgNV BAMTKEQ4RDFDMzIzM0NBMTRCREIyMEExMTI3OEM0MTM0OEFDNDhFNDg1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzLb1sKYXYSNLuebeKwN8v9zr y7tTpHHVvC6wmaNY2n0iaM86pniSR+WMHYp0zhTC/wnVBtcLg5lVqdFWJ6dyaIpf 4x0MM0r4fK9ocLZi8z1ErKvX8YZHd+ulaacKK9U7X/LOjUuO1X/qYPnlZAghHoon riWfGLtk+7jJ3MbAsK0iBE+4CDsFJ7cV12iKQX7BEyNI22SpSCG+bJbb4LIbXmW4 vWgd0DjS9RJdc5SUUAaoQ+1iWCVgngxO2e2W2yY5/aIweDeW6j0NrwhGcgJ7ngoG dTCkeJigwenYTPgYww0iMZYVzsFMHqXLQg3tQ5LRfQDschZcyMGLVMtN5dmLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2NHDIzyhS9sgoRJ4xBNIrEjkhcAwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJngNYM5zCmEBOt7WKVkcDb51+iXjF6uxayH yRhV3UYB1Ru4IvA/osUpcCom6WM3iQ7GqTEVoIcF1B2C8x0JuN1WwgTfAG5AA9S4 NEXGUc58C2125Nm2lWUIsQ6YBdcEJJgPkYW6Dj15FJY0iB+shwiQZdjk4zPVfc0z MlUsIml4At80vUqECQOtnk9aOcFzPqnD15R0sH/HDEcCdZQgA+7Bwcd9xgJKOxBS 72psrFg6DP7yc/J5ZBYwc1YSkXB9OYKigZqj0P5+mxO3T0MIV2r6zVXJkpGHiVxJ HJUCuDFSsbr+18tUP++QBdLEv3Av9w5ZgN3RmRQ8ZC5uBUnsREc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:38 2025 by rpki-client