$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: l25czhVSVNhFEXBrHXBGFGif9kZriZSOljCcwk0Nc7M= Subject key identifier: 3D:E4:5A:D9:4E:15:4B:9E:03:A2:5C:6C:95:9D:7C:6D:4F:E3:E6:88 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 728C5889E0AF70BCD0CCCB582CE9327ECFB04F54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 023D Signing time: Sun 19 Oct 2025 17:41:07 +0000 Manifest this update: Sun 19 Oct 2025 17:36:07 +0000 Manifest next update: Thu 23 Oct 2025 04:30:07 +0000 Files and hashes: 1: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: w+nHsNo7H+OGmeFVe6RdMqdjGWJtdXhVVZtb/F+GDM0=) 2: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:8c:58:89:e0:af:70:bc:d0:cc:cb:58:2c:e9:32:7e:cf:b0:4f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Oct 19 17:36:07 2025 GMT Not After : Oct 23 04:30:07 2025 GMT Subject: CN=3DE45AD94E154B9E03A25C6C959D7C6D4FE3E688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:55:96:f0:5f:ed:07:a2:bd:dd:46:81:0b: 2f:d2:91:7e:ad:c5:46:70:54:ea:ea:3e:e4:dd:74: 7b:44:90:e0:f2:41:10:9a:fe:85:45:48:fa:c5:ec: e3:28:d0:50:ed:65:1a:c0:41:6b:fd:e0:64:09:59: f8:ad:9e:23:95:50:f2:ff:60:4c:df:7a:19:65:a2: 8c:24:1e:7b:11:6b:56:3e:b2:e6:4d:55:01:a3:1c: 2e:6e:3c:4d:49:94:45:2c:10:cc:34:9a:52:b1:48: 5d:0e:e9:db:4f:69:1c:51:bb:9e:16:c5:93:19:ec: 02:2b:e5:a4:7d:73:f2:5e:93:db:42:90:49:6a:53: 14:1b:01:8b:92:7e:18:6e:4d:0b:b7:96:2f:a9:1a: ab:b1:76:79:6d:49:ae:bb:a1:1c:24:25:f2:03:df: 15:9c:b2:39:b7:e0:7d:68:a5:56:c3:ab:eb:6f:3b: df:c7:b4:8b:74:9f:22:6d:20:b7:42:7f:1f:cf:8e: 8e:fd:77:80:de:18:b1:fe:07:ea:b9:72:b9:84:a3: df:27:f7:91:b6:4c:83:f8:45:50:e0:7d:15:39:05: 55:f8:e7:d1:35:e0:09:93:0d:38:98:83:40:f3:f4: 2b:20:2b:27:c9:3a:c9:0a:79:eb:23:cd:1e:96:24: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E4:5A:D9:4E:15:4B:9E:03:A2:5C:6C:95:9D:7C:6D:4F:E3:E6:88 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:18:8b:55:0c:e3:57:22:88:bb:d3:88:08:23:53:da:07:cf: 82:da:7d:4b:06:2e:1b:c0:75:f5:3e:1d:d3:07:c2:63:e2:2a: 99:42:7b:75:11:16:29:a4:7d:ff:f5:1b:0e:0c:29:20:17:22: 68:a8:5d:8a:22:d3:46:6c:95:b3:ea:72:7b:2f:45:af:da:77: 2f:4d:55:fb:44:33:f7:e9:8c:6e:0a:4a:00:cd:78:52:d8:91: 0f:d1:43:7d:e4:e7:99:e3:4b:02:d0:30:73:5c:bd:0c:70:39: b4:4f:f9:ea:1f:db:73:43:20:1e:68:61:f8:f1:a2:81:51:82: 75:79:c6:68:d4:01:4f:52:a2:0b:ba:28:76:19:05:42:58:e9: 9b:e5:84:70:2d:6a:44:d6:b7:20:40:f1:be:fb:85:42:71:f1: 52:3c:30:e6:84:27:8d:fc:e0:e9:5b:4f:75:72:b7:77:bb:7d: 45:85:a9:76:37:b1:4c:d0:88:d9:a3:ea:e9:8e:2f:47:f9:6d: be:c0:10:a1:62:51:dc:18:d3:5c:8d:57:cd:2a:ee:08:94:ba: 61:25:82:af:19:58:1b:31:8e:41:62:0e:75:3b:1c:0b:dd:85: b3:72:fc:45:5d:24:d5:32:22:12:9a:4d:f5:66:a0:6b:00:50: 73:ef:ae:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoxYieCvcLzQzMtYLOkyfs+wT1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTEwMTkxNzM2MDdaFw0yNTEwMjMwNDMwMDdaMDMxMTAvBgNV BAMTKDNERTQ1QUQ5NEUxNTRCOUUwM0EyNUM2Qzk1OUQ3QzZENEZFM0U2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHlWW8F/tB6K93UaBCy/SkX6t xUZwVOrqPuTddHtEkODyQRCa/oVFSPrF7OMo0FDtZRrAQWv94GQJWfitniOVUPL/ YEzfehlloowkHnsRa1Y+suZNVQGjHC5uPE1JlEUsEMw0mlKxSF0O6dtPaRxRu54W xZMZ7AIr5aR9c/Jek9tCkElqUxQbAYuSfhhuTQu3li+pGquxdnltSa67oRwkJfID 3xWcsjm34H1opVbDq+tvO9/HtIt0nyJtILdCfx/Pjo79d4DeGLH+B+q5crmEo98n 95G2TIP4RVDgfRU5BVX459E14AmTDTiYg0Dz9CsgKyfJOskKeesjzR6WJPmDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPeRa2U4VS54DolxslZ18bU/j5ogwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEYi1UM41ciiLvTiAgjU9oHz4LafUsGLhvA dfU+HdMHwmPiKplCe3URFimkff/1Gw4MKSAXImioXYoi00ZslbPqcnsvRa/ady9N VftEM/fpjG4KSgDNeFLYkQ/RQ33k55njSwLQMHNcvQxwObRP+eof23NDIB5oYfjx ooFRgnV5xmjUAU9Sogu6KHYZBUJY6ZvlhHAtakTWtyBA8b77hUJx8VI8MOaEJ438 4OlbT3Vyt3e7fUWFqXY3sUzQiNmj6umOL0f5bb7AEKFiUdwY01yNV80q7giUumEl gq8ZWBsxjkFiDnU7HAvdhbNy/EVdJNUyIhKaTfVmoGsAUHPvrtk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:54 2025 by rpki-client