$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: MhdNuSvU3tRTpbKJ5VxKV3KAdAl8bALmzZW18B5YVMg= Subject key identifier: 57:5C:7A:7D:2B:8F:86:18:A8:AB:DC:DF:AF:5F:D6:73:0B:96:3C:5B Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 0C32EF0C98405CF172934ACC8CF3A2F2665D6106 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0341 Signing time: Mon 03 Nov 2025 22:42:21 +0000 Manifest this update: Mon 03 Nov 2025 22:37:21 +0000 Manifest next update: Fri 07 Nov 2025 05:07:21 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: ycnEI27J0jDIsLwZ29zdGb3xByGiLzqCxW8q4kLJtjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:32:ef:0c:98:40:5c:f1:72:93:4a:cc:8c:f3:a2:f2:66:5d:61:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Nov 3 22:37:21 2025 GMT Not After : Nov 7 05:07:21 2025 GMT Subject: CN=575C7A7D2B8F8618A8ABDCDFAF5FD6730B963C5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:58:29:91:a3:80:cf:01:37:dd:63:22:94: bd:03:60:fc:53:f2:59:ae:e0:d6:6b:1c:cc:09:51: 39:c6:f5:95:96:17:bc:fd:18:76:c6:a3:74:62:09: 1c:ee:a3:13:f6:b9:45:3b:a3:84:6e:f0:98:9e:a0: 41:bc:ad:5b:a2:76:91:f7:bc:17:b8:ae:17:ff:bb: 4a:14:ca:95:0a:cb:2f:e0:ff:ba:69:d0:51:e2:88: a9:77:c3:ed:f8:b0:11:98:95:93:81:65:ec:79:6e: c8:76:16:aa:73:78:5e:74:05:ca:2d:b5:4e:21:4b: 73:d2:ef:d1:a7:0c:16:d9:59:d2:bf:88:0f:e9:22: 49:9e:59:13:b1:91:60:de:2a:0b:fe:14:49:1a:28: 58:18:4b:c6:a7:ae:af:ec:67:3c:26:d4:3c:61:3b: e7:42:0b:ef:21:b1:a2:1a:85:96:0e:49:df:ef:b1: 21:77:3c:ba:86:a3:4a:7d:c4:73:b7:7d:b2:3c:f8: 8d:79:f1:a5:89:a9:46:1a:34:cb:83:1b:66:ea:f2: dd:4f:2f:c5:51:b2:ee:70:df:14:b9:10:b9:80:4a: ed:2e:6f:b6:e2:cd:32:43:b9:06:c8:f0:ca:67:39: 6c:05:00:82:69:b6:aa:2f:8b:f9:4c:e6:b3:03:d2: 6f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5C:7A:7D:2B:8F:86:18:A8:AB:DC:DF:AF:5F:D6:73:0B:96:3C:5B X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:53:6b:97:ef:79:ab:75:79:9a:a5:4c:14:17:b7:7e:8c:6f: 74:73:38:3e:9c:81:15:5c:ec:a7:f6:87:48:5a:4d:c8:7b:e3: 72:9e:ef:41:bd:78:01:01:d4:af:37:3b:15:d1:da:51:a8:2b: 56:8a:8d:9f:bf:80:67:96:e8:18:0c:e4:59:21:bb:66:c7:64: ec:d6:5b:92:9a:71:02:9d:c6:fd:23:f1:2c:8e:67:9d:8b:e2: ac:16:6b:7e:73:3e:fc:53:f5:33:a7:6a:48:21:7f:69:d0:c0: af:11:bc:0e:45:da:53:94:64:86:82:a4:c6:1d:e5:c8:0d:b6: a5:6b:12:4a:6a:70:35:cc:c7:b9:e8:3c:ec:cc:cf:6f:86:d5: 7b:e6:c2:59:7a:e1:c1:94:06:c0:2d:56:f5:34:8e:5a:70:93: 7c:21:ae:76:30:68:16:cf:c0:59:69:f5:de:fd:b0:11:26:98: 8d:46:97:c6:c6:ad:0f:c1:6d:9d:4d:d9:1e:a9:f4:aa:d9:fd: 86:38:49:8d:0b:ed:7d:b3:1e:f5:1a:33:cb:23:97:3b:24:47: 55:af:ec:1d:79:85:e4:b8:20:57:56:c1:fd:24:44:9d:71:d2: 66:6d:b2:56:c5:06:49:1e:c5:02:56:12:1c:79:f5:40:a2:ce: 46:1b:40:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDLvDJhAXPFyk0rMjPOi8mZdYQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTExMDMyMjM3MjFaFw0yNTExMDcwNTA3MjFaMDMxMTAvBgNV BAMTKDU3NUM3QTdEMkI4Rjg2MThBOEFCRENERkFGNUZENjczMEI5NjNDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzFgpkaOAzwE33WMilL0DYPxT 8lmu4NZrHMwJUTnG9ZWWF7z9GHbGo3RiCRzuoxP2uUU7o4Ru8JieoEG8rVuidpH3 vBe4rhf/u0oUypUKyy/g/7pp0FHiiKl3w+34sBGYlZOBZex5bsh2FqpzeF50Bcot tU4hS3PS79GnDBbZWdK/iA/pIkmeWROxkWDeKgv+FEkaKFgYS8anrq/sZzwm1Dxh O+dCC+8hsaIahZYOSd/vsSF3PLqGo0p9xHO3fbI8+I158aWJqUYaNMuDG2bq8t1P L8VRsu5w3xS5ELmASu0ub7bizTJDuQbI8MpnOWwFAIJptqovi/lM5rMD0m8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV1x6fSuPhhioq9zfr1/WcwuWPFswHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApTa5fveat1eZqlTBQXt36Mb3RzOD6cgRVc 7Kf2h0haTch743Ke70G9eAEB1K83OxXR2lGoK1aKjZ+/gGeW6BgM5Fkhu2bHZOzW W5KacQKdxv0j8SyOZ52L4qwWa35zPvxT9TOnakghf2nQwK8RvA5F2lOUZIaCpMYd 5cgNtqVrEkpqcDXMx7noPOzMz2+G1Xvmwll64cGUBsAtVvU0jlpwk3whrnYwaBbP wFlp9d79sBEmmI1Gl8bGrQ/BbZ1N2R6p9KrZ/YY4SY0L7X2zHvUaM8sjlzskR1Wv 7B15heS4IFdWwf0kRJ1x0mZtslbFBkkexQJWEhx59UCizkYbQHo= -----END CERTIFICATE-----Generated at Thu Nov 6 03:43:09 2025 by rpki-client