$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: Xtr+4pcvjWFvvTrvj1wDOp4QIw/jAU936oL71GdmpTA= Subject key identifier: F6:BB:D5:B9:F0:30:9E:D5:2E:13:CF:D0:B8:D6:E4:00:66:4D:97:17 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 16C161073341E7CD8115BFC35B71A7A3F8766065 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 0266 Signing time: Sun 02 Nov 2025 10:51:54 +0000 Manifest this update: Sun 02 Nov 2025 10:46:54 +0000 Manifest next update: Wed 05 Nov 2025 22:43:54 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=) 2: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: TMKw8o/7e6vOHf/UXLEr/ldymaNO+RtqRXTxoRMlmWM=) 3: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=) 4: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c1:61:07:33:41:e7:cd:81:15:bf:c3:5b:71:a7:a3:f8:76:60:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Nov 2 10:46:54 2025 GMT Not After : Nov 5 22:43:54 2025 GMT Subject: CN=F6BBD5B9F0309ED52E13CFD0B8D6E400664D9717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:1f:8a:8b:97:4d:49:2b:d1:2a:fe:d2:3f: e6:b7:bf:4b:ed:04:63:22:1c:4a:9e:14:9f:39:27: 5b:0a:b3:56:cc:24:1f:8d:ab:cb:bb:05:6e:9b:1b: e8:2e:73:82:fd:10:5c:7a:c2:09:5f:66:d7:84:44: 0a:e4:50:f9:85:9a:6f:61:24:30:9c:aa:58:88:ca: 5b:ef:b5:dc:16:85:47:79:6f:31:b5:fb:0d:3f:a8: 91:ab:07:53:44:bd:89:c8:6d:7f:88:03:ca:61:b3: 97:75:03:be:01:53:dc:ed:26:05:38:76:0a:d9:19: c7:f9:a2:00:f4:d2:e9:bc:69:b2:9c:e2:14:8b:0d: 97:77:4c:66:60:0d:60:a1:04:f0:59:4b:f3:9f:25: 8a:2e:03:1b:db:a5:4f:1c:c5:3b:9b:91:39:14:f2: db:2c:b0:23:23:71:5a:d9:06:06:9e:31:cb:ea:d9: fa:51:da:28:98:89:b7:80:34:c5:20:f6:24:23:e2: 57:97:e4:31:e7:e3:1f:3c:bb:bd:12:58:a7:59:04: 0e:23:b2:bf:cd:4a:64:34:c0:e6:8a:45:be:54:41: ba:ff:eb:60:f9:bd:d0:c2:96:6a:87:31:3d:60:78: f0:86:78:d3:10:09:9f:c3:22:62:96:e2:62:0c:44: 6a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BB:D5:B9:F0:30:9E:D5:2E:13:CF:D0:B8:D6:E4:00:66:4D:97:17 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a3:b1:d0:f8:ba:58:aa:3b:78:2c:b5:2d:b1:9f:dd:26:9c: d0:a6:4f:ae:34:9a:b0:ac:a9:25:25:d7:be:3e:9c:62:f1:a7: fc:c4:a5:5a:eb:21:23:f7:d7:bd:da:a4:7b:1e:d5:27:a2:57: c7:88:8b:05:06:80:23:7d:23:96:a2:8e:2e:8e:56:9a:29:62: 18:0f:e5:54:ed:75:f1:65:c5:03:82:31:0a:02:b4:3b:07:22: 8e:c5:b1:e3:05:f7:e8:18:3f:a6:31:ec:cf:a1:ad:9e:79:85: 34:a9:b6:f7:2d:03:f2:06:0a:6d:37:cb:0d:c9:f4:c1:39:00: 7f:ce:91:41:4f:28:4d:49:f1:b3:f3:e0:a0:60:ca:79:6c:5c: ed:ce:02:36:27:76:4c:ae:d0:a6:0c:6a:29:27:33:71:8b:b3: 74:da:1a:25:8f:0e:60:71:d5:da:2d:94:00:5d:ef:3b:49:de: 1f:c9:02:66:95:5d:df:c4:6d:40:2c:f1:c1:ce:e1:c2:f0:e2: 0f:f1:7f:2c:1c:71:9b:db:cc:71:98:19:0a:31:0d:27:70:17: fb:1c:4b:fc:4b:94:f5:12:29:2a:d9:fd:c5:24:c1:2c:5f:37: 02:3a:62:b1:25:f8:0e:79:de:f8:93:a4:a6:7f:be:30:31:db: a8:61:0f:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFsFhBzNB582BFb/DW3Gno/h2YGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTExMDIxMDQ2NTRaFw0yNTExMDUyMjQzNTRaMDMxMTAvBgNV BAMTKEY2QkJENUI5RjAzMDlFRDUyRTEzQ0ZEMEI4RDZFNDAwNjY0RDk3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmh+Ki5dNSSvRKv7SP+a3v0vt BGMiHEqeFJ85J1sKs1bMJB+Nq8u7BW6bG+guc4L9EFx6wglfZteERArkUPmFmm9h JDCcqliIylvvtdwWhUd5bzG1+w0/qJGrB1NEvYnIbX+IA8phs5d1A74BU9ztJgU4 dgrZGcf5ogD00um8abKc4hSLDZd3TGZgDWChBPBZS/OfJYouAxvbpU8cxTubkTkU 8tsssCMjcVrZBgaeMcvq2fpR2iiYibeANMUg9iQj4leX5DHn4x88u70SWKdZBA4j sr/NSmQ0wOaKRb5UQbr/62D5vdDClmqHMT1gePCGeNMQCZ/DImKW4mIMRGphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9rvVufAwntUuE8/QuNbkAGZNlxcwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGjsdD4uliqO3gstS2xn90mnNCmT640mrCs qSUl174+nGLxp/zEpVrrISP3173apHse1SeiV8eIiwUGgCN9I5aiji6OVpopYhgP 5VTtdfFlxQOCMQoCtDsHIo7FseMF9+gYP6Yx7M+hrZ55hTSptvctA/IGCm03yw3J 9ME5AH/OkUFPKE1J8bPz4KBgynlsXO3OAjYndkyu0KYMaiknM3GLs3TaGiWPDmBx 1dotlABd7ztJ3h/JAmaVXd/EbUAs8cHO4cLw4g/xfywccZvbzHGYGQoxDSdwF/sc S/xLlPUSKSrZ/cUkwSxfNwI6YrEl+A553viTpKZ/vjAx26hhD9Y= -----END CERTIFICATE-----Generated at Tue Nov 4 02:08:13 2025 by rpki-client