$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: Gold9E9izhf5mHLM9TbzrqBfwtT5GdxSd4149wqZm3w= Subject key identifier: F6:71:C4:00:4E:66:84:8B:15:86:D3:44:9E:0A:02:F3:13:AF:47:AB Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 72FF57AE976BF5F853A8525972033CF65B868B67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: E5 Signing time: Mon 03 Nov 2025 14:30:36 +0000 Manifest this update: Mon 03 Nov 2025 14:25:36 +0000 Manifest next update: Thu 06 Nov 2025 17:12:36 +0000 Files and hashes: 1: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: iMCfFsVVxdJN3Bi1/9SoHHw+ikOcOAV5svLv9z6Z0lI=) 2: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ff:57:ae:97:6b:f5:f8:53:a8:52:59:72:03:3c:f6:5b:86:8b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Nov 3 14:25:36 2025 GMT Not After : Nov 6 17:12:36 2025 GMT Subject: CN=F671C4004E66848B1586D3449E0A02F313AF47AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:7c:0d:0e:99:1c:44:01:d4:3f:76:4e:11: 99:95:83:54:a8:9b:53:31:32:3d:f8:5c:e9:75:ac: bd:07:b8:6b:ab:e3:7f:83:cc:bb:83:cd:7a:64:ba: 47:a5:a9:a5:2e:b7:2a:ff:2c:b0:3e:0d:0e:eb:61: e0:37:40:3e:7d:a4:5e:c9:c6:ef:be:0f:0e:de:c5: 90:15:7f:62:ef:69:0f:a2:6b:e3:52:fe:79:ef:a7: 08:3c:9d:88:d8:53:de:05:b1:f6:b6:ae:04:b3:bc: af:42:a8:06:3f:83:f1:50:77:ae:d4:f1:8a:98:9e: 6a:06:89:ec:56:ae:1e:5c:49:21:3c:36:1d:99:d1: 81:8a:df:cc:03:04:7e:25:22:cc:1b:92:e6:27:41: 9d:f3:23:f5:31:dc:64:b6:26:79:a1:b3:f2:e4:61: c4:a3:98:30:89:4a:40:54:1c:3f:1f:ce:33:f0:cb: e6:25:64:6f:22:c8:02:41:cb:65:4b:53:5e:bc:39: 38:95:55:13:41:fe:6e:dc:69:6e:e6:71:da:5d:69: 45:5c:9f:0c:ed:14:af:36:34:51:2d:3f:1a:65:ce: bf:56:f7:c1:69:7d:c8:f2:67:0c:02:a7:33:d1:c0: a1:46:13:6f:20:10:7c:b2:0d:c0:ba:ce:82:97:f9: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:71:C4:00:4E:66:84:8B:15:86:D3:44:9E:0A:02:F3:13:AF:47:AB X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b3:83:20:f9:3d:c8:6e:98:2f:13:33:06:7a:77:fa:f3:eb: 09:a5:a7:d0:21:1b:3d:21:92:66:2a:4e:62:6f:a9:4b:fb:49: 4b:b4:5b:f6:5b:f0:6a:68:89:ad:51:b1:8b:eb:5d:11:1b:ec: c5:4b:4f:dd:db:d4:e9:84:30:8f:67:f1:28:c8:0e:93:b5:00: 8f:63:e3:35:3b:0a:71:b6:53:21:8f:59:a7:3a:7f:f3:cb:ef: 70:a5:56:ba:29:ca:bd:74:26:08:13:f9:5b:af:70:a1:0f:99: 70:f5:32:28:09:04:fa:1f:ed:16:04:4b:4b:de:ba:2c:08:33: 36:1a:7d:4b:8e:97:42:13:5d:70:45:a4:08:de:1c:a9:2e:b9: 44:e1:a8:92:58:57:b8:8c:7c:a0:91:db:b7:5c:09:4f:a2:17: 22:84:47:33:ea:74:0d:4d:36:8b:6a:b4:41:25:da:d7:06:24: 22:3e:16:35:38:5b:3a:6a:dc:79:47:a1:46:3e:62:53:50:cf: 46:d3:88:06:97:da:4b:a4:74:cd:93:83:db:c5:a6:9c:13:b5: 36:91:5d:49:77:41:0f:12:7c:4c:c8:b7:f8:d7:93:88:b9:bb: 60:08:62:21:12:a0:93:e4:95:b0:7e:6c:1a:1f:b2:74:68:81: 1b:31:fa:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcv9Xrpdr9fhTqFJZcgM89luGi2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNTExMDMxNDI1MzZaFw0yNTExMDYxNzEyMzZaMDMxMTAvBgNV BAMTKEY2NzFDNDAwNEU2Njg0OEIxNTg2RDM0NDlFMEEwMkYzMTNBRjQ3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERXwNDpkcRAHUP3ZOEZmVg1So m1MxMj34XOl1rL0HuGur43+DzLuDzXpkukelqaUutyr/LLA+DQ7rYeA3QD59pF7J xu++Dw7exZAVf2LvaQ+ia+NS/nnvpwg8nYjYU94Fsfa2rgSzvK9CqAY/g/FQd67U 8YqYnmoGiexWrh5cSSE8Nh2Z0YGK38wDBH4lIswbkuYnQZ3zI/Ux3GS2Jnmhs/Lk YcSjmDCJSkBUHD8fzjPwy+YlZG8iyAJBy2VLU168OTiVVRNB/m7caW7mcdpdaUVc nwztFK82NFEtPxplzr9W98FpfcjyZwwCpzPRwKFGE28gEHyyDcC6zoKX+X9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9nHEAE5mhIsVhtNEngoC8xOvR6swHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWzgyD5PchumC8TMwZ6d/rz6wmlp9AhGz0h kmYqTmJvqUv7SUu0W/Zb8Gpoia1RsYvrXREb7MVLT93b1OmEMI9n8SjIDpO1AI9j 4zU7CnG2UyGPWac6f/PL73ClVropyr10JggT+VuvcKEPmXD1MigJBPof7RYES0ve uiwIMzYafUuOl0ITXXBFpAjeHKkuuUThqJJYV7iMfKCR27dcCU+iFyKERzPqdA1N NotqtEEl2tcGJCI+FjU4Wzpq3HlHoUY+YlNQz0bTiAaX2kukdM2Tg9vFppwTtTaR XUl3QQ8SfEzIt/jXk4i5u2AIYiESoJPklbB+bBofsnRogRsx+tg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:57:05 2025 by rpki-client