$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: 12JC+Tmea2u9B8/xBFqSvcDsqUZAThqUfJunAUun2o8= Subject key identifier: 2E:8D:1A:88:73:CC:AF:53:1A:44:5F:D6:BB:BC:8B:0F:A7:76:FB:EE Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 30F744470CC4A1F25849064DB4732BB014E02331 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 0251 Signing time: Sun 02 Nov 2025 23:40:04 +0000 Manifest this update: Sun 02 Nov 2025 23:35:04 +0000 Manifest next update: Thu 06 Nov 2025 01:00:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: KZJDo+40/GAl2AZadtOSuEIxX8trgtckyz5euZsNJmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f7:44:47:0c:c4:a1:f2:58:49:06:4d:b4:73:2b:b0:14:e0:23:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Nov 2 23:35:04 2025 GMT Not After : Nov 6 01:00:04 2025 GMT Subject: CN=2E8D1A8873CCAF531A445FD6BBBC8B0FA776FBEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a0:e5:2d:64:28:56:a1:cb:c5:8e:e2:a1:dc: d1:1b:95:2c:13:2f:c1:b9:9e:2b:f4:97:0f:39:9e: c9:ca:80:ca:0f:34:5b:3d:2f:43:57:63:02:b3:b7: 60:cc:99:ff:bc:5f:14:aa:de:f3:91:5d:a4:c8:d3: 1a:7e:06:13:9b:f8:b4:67:01:91:6d:32:fa:60:62: 96:8b:d3:f0:eb:16:b0:dc:9a:43:c3:c3:97:d0:96: 95:ac:e4:b4:38:93:d0:88:06:d8:9b:20:5c:8c:d5: 84:6f:de:6f:28:f4:ee:2b:0d:d2:7d:3f:e5:83:e3: 29:f2:03:b8:70:bd:25:7c:9e:10:48:01:c9:b8:0f: 3e:86:ce:ff:a6:be:14:73:0c:fb:c7:22:73:6f:f1: 27:71:37:a3:a0:96:84:ca:01:b8:ea:3d:4b:c3:8a: 2d:27:53:c4:9d:5d:58:e7:77:ba:8a:b4:3b:d6:dd: 15:3d:9a:f4:4f:21:30:4b:2e:ad:8c:e9:51:ef:2a: e4:ed:03:83:93:0d:17:ed:7f:ba:4e:c7:77:ee:3b: 37:34:53:0a:eb:22:75:76:d1:06:67:dc:ae:f7:4d: a4:7e:46:59:97:70:68:ca:20:bb:57:62:87:f2:75: 65:36:71:73:b1:d7:18:d7:c4:2e:e0:b8:b2:2d:b2: ea:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:1A:88:73:CC:AF:53:1A:44:5F:D6:BB:BC:8B:0F:A7:76:FB:EE X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:73:a1:f5:1d:fc:5a:bf:4e:c7:d9:3a:c9:9f:d7:b0:e1:5c: 3f:e1:d7:22:cd:1b:2a:55:fe:48:4d:e2:6d:47:80:9d:f3:a2: 23:9b:17:1d:89:ab:de:71:0e:94:66:98:29:0c:0e:12:0a:16: f5:38:3e:6b:c1:7f:22:91:ee:e6:b4:b7:c6:77:1f:a2:d2:59: 1f:90:20:ed:ba:ab:d3:4d:95:a9:20:51:3c:d3:58:e3:55:6e: 48:e6:6d:5d:d2:c2:b8:6f:06:e9:59:d2:26:df:f2:ea:00:5b: a4:8f:44:5f:a2:1e:ad:df:d8:bd:18:17:97:88:45:9a:5a:0e: b9:6a:a6:10:7b:aa:8a:e5:be:3f:44:8d:8f:f2:36:80:2c:33: 67:b1:c1:7e:77:88:e2:9d:df:c1:0f:bc:37:90:02:0c:16:f9: 7c:ed:15:69:16:50:2a:d0:bc:c8:90:77:e9:df:07:b2:95:a7: 7e:88:32:af:74:ca:af:fc:c0:57:f2:68:ec:48:ab:c5:74:8b: e0:84:48:80:76:ae:a2:74:63:3f:48:08:16:09:a8:10:01:9a: 7d:ca:8e:ce:87:ba:b5:c0:eb:5f:9a:3f:52:f0:d2:4e:36:93: 09:d9:6c:a9:62:5d:de:b0:49:e8:b5:59:85:65:94:34:7c:c6: 98:9f:1d:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPdERwzEofJYSQZNtHMrsBTgIzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTExMDIyMzM1MDRaFw0yNTExMDYwMTAwMDRaMDMxMTAvBgNV BAMTKDJFOEQxQTg4NzNDQ0FGNTMxQTQ0NUZENkJCQkM4QjBGQTc3NkZCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSoOUtZChWocvFjuKh3NEblSwT L8G5niv0lw85nsnKgMoPNFs9L0NXYwKzt2DMmf+8XxSq3vORXaTI0xp+BhOb+LRn AZFtMvpgYpaL0/DrFrDcmkPDw5fQlpWs5LQ4k9CIBtibIFyM1YRv3m8o9O4rDdJ9 P+WD4ynyA7hwvSV8nhBIAcm4Dz6Gzv+mvhRzDPvHInNv8SdxN6OgloTKAbjqPUvD ii0nU8SdXVjnd7qKtDvW3RU9mvRPITBLLq2M6VHvKuTtA4OTDRftf7pOx3fuOzc0 UwrrInV20QZn3K73TaR+RlmXcGjKILtXYofydWU2cXOx1xjXxC7guLItsuodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULo0aiHPMr1MaRF/Wu7yLD6d2++4wHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVzofUd/Fq/TsfZOsmf17DhXD/h1yLNGypV /khN4m1HgJ3zoiObFx2Jq95xDpRmmCkMDhIKFvU4PmvBfyKR7ua0t8Z3H6LSWR+Q IO26q9NNlakgUTzTWONVbkjmbV3SwrhvBulZ0ibf8uoAW6SPRF+iHq3f2L0YF5eI RZpaDrlqphB7qorlvj9EjY/yNoAsM2exwX53iOKd38EPvDeQAgwW+XztFWkWUCrQ vMiQd+nfB7KVp36IMq90yq/8wFfyaOxIq8V0i+CESIB2rqJ0Yz9ICBYJqBABmn3K js6HurXA61+aP1Lw0k42kwnZbKliXd6wSei1WYVllDR8xpifHV4= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:25 2025 by rpki-client