$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: ogb4za0Z4ykXKVKnC4ivVuZLClQZg9UeXuJW/GTK6bE= Subject key identifier: 58:3E:01:E4:F2:32:31:28:57:BD:2D:37:EC:F3:A4:E0:39:A4:B4:60 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 20A9F9D516168650BF0BE656AD308D80DACC4B96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: 0105 Signing time: Sun 19 Oct 2025 15:30:51 +0000 Manifest this update: Sun 19 Oct 2025 15:25:51 +0000 Manifest next update: Wed 22 Oct 2025 20:33:51 +0000 Files and hashes: 1: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: da35ZPBwBKtYjLeyWXPskYqxtCLtpH1Usry0/HAlC1w=) 2: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a9:f9:d5:16:16:86:50:bf:0b:e6:56:ad:30:8d:80:da:cc:4b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Oct 19 15:25:51 2025 GMT Not After : Oct 22 20:33:51 2025 GMT Subject: CN=583E01E4F232312857BD2D37ECF3A4E039A4B460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:8e:ab:1e:7d:39:d6:01:1d:a6:2f:1a:c3: 7a:c5:68:d5:9e:62:91:39:91:ad:0d:7d:34:03:b2: d5:65:73:38:91:22:1e:b7:08:4f:da:ff:9e:a0:8c: 7e:26:2c:49:1b:0e:48:54:39:8b:b9:a7:fc:33:30: 34:2c:9e:36:ce:48:d9:1d:9c:ba:2d:96:df:05:cc: e7:6e:4e:88:50:36:a8:db:cd:06:63:31:af:02:ee: 58:8c:08:7b:48:e7:f1:f6:f8:81:e9:67:3a:ea:94: 96:aa:c6:80:10:99:9f:91:cb:a8:04:bd:99:37:39: 47:ba:17:36:3b:1f:61:84:54:32:01:95:2e:15:ab: f3:4a:ff:20:a5:0e:d6:86:d2:5f:e7:43:03:41:bd: 95:64:93:72:2f:5c:c8:90:0b:ef:16:ff:cc:82:ec: 5d:b3:1d:8c:79:20:df:1f:94:02:f8:38:91:cf:28: 24:ae:72:1f:4f:9e:f7:22:23:00:ad:e3:eb:8b:d3: 82:ff:91:cf:62:d1:a1:8c:67:40:8c:2f:a0:47:44: 0d:14:bc:80:87:30:42:82:f2:23:55:22:ed:bf:89: 40:7f:64:bf:db:11:b9:79:50:3c:2c:34:a8:f5:db: 90:85:66:78:d3:24:c8:53:c6:04:fe:39:a6:63:dd: 3d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3E:01:E4:F2:32:31:28:57:BD:2D:37:EC:F3:A4:E0:39:A4:B4:60 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:23:30:b4:2d:d9:06:4f:1f:ca:50:3c:f3:15:28:3c:69:8c: d8:d5:c8:12:7d:ef:85:02:7a:05:dd:47:58:74:d9:48:a0:23: 3c:55:7f:84:da:c7:72:c3:38:21:d4:26:66:b2:71:7d:7a:8a: 64:4b:91:38:8c:c9:04:62:f0:d3:e8:1e:72:24:93:6a:1c:cf: 93:ab:5d:a0:84:b8:a0:1a:42:00:8a:2c:65:9b:0d:ea:08:c0: 5a:df:fe:20:08:60:9c:69:b9:c1:fe:8d:3a:46:d4:11:f0:ad: 08:58:d5:79:5d:f8:46:2a:17:a9:c1:ac:17:30:56:ff:99:06: 16:76:8b:6a:26:f6:01:fb:ac:3f:e2:22:b8:d1:5e:f8:36:75: 5d:5f:72:32:9e:69:3d:46:48:6e:3d:59:de:96:55:8a:ba:52: c5:1e:9f:00:e0:e0:b7:bd:0a:44:08:a2:1d:01:33:de:80:02: dd:22:b4:42:03:47:a3:e6:6f:4b:9c:a3:c6:fc:3f:2d:41:2b: c7:eb:07:3b:1e:07:fc:12:41:cd:9f:42:b5:c1:ef:37:35:7d: 06:9e:02:77:f7:f3:e5:9a:62:b8:b7:00:51:e3:cd:49:60:3c: c6:d0:e2:29:19:14:0e:5c:fe:cd:fc:0e:b6:2e:34:d0:09:65: e6:71:99:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKn51RYWhlC/C+ZWrTCNgNrMS5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTEwMTkxNTI1NTFaFw0yNTEwMjIyMDMzNTFaMDMxMTAvBgNV BAMTKDU4M0UwMUU0RjIzMjMxMjg1N0JEMkQzN0VDRjNBNEUwMzlBNEI0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XI6rHn051gEdpi8aw3rFaNWe YpE5ka0NfTQDstVlcziRIh63CE/a/56gjH4mLEkbDkhUOYu5p/wzMDQsnjbOSNkd nLotlt8FzOduTohQNqjbzQZjMa8C7liMCHtI5/H2+IHpZzrqlJaqxoAQmZ+Ry6gE vZk3OUe6FzY7H2GEVDIBlS4Vq/NK/yClDtaG0l/nQwNBvZVkk3IvXMiQC+8W/8yC 7F2zHYx5IN8flAL4OJHPKCSuch9PnvciIwCt4+uL04L/kc9i0aGMZ0CML6BHRA0U vICHMEKC8iNVIu2/iUB/ZL/bEbl5UDwsNKj125CFZnjTJMhTxgT+OaZj3T23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWD4B5PIyMShXvS037POk4DmktGAwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwjMLQt2QZPH8pQPPMVKDxpjNjVyBJ974UC egXdR1h02UigIzxVf4Tax3LDOCHUJmaycX16imRLkTiMyQRi8NPoHnIkk2ocz5Or XaCEuKAaQgCKLGWbDeoIwFrf/iAIYJxpucH+jTpG1BHwrQhY1Xld+EYqF6nBrBcw Vv+ZBhZ2i2om9gH7rD/iIrjRXvg2dV1fcjKeaT1GSG49Wd6WVYq6UsUenwDg4Le9 CkQIoh0BM96AAt0itEIDR6Pmb0uco8b8Py1BK8frBzseB/wSQc2fQrXB7zc1fQae Anf38+WaYri3AFHjzUlgPMbQ4ikZFA5c/s38DrYuNNAJZeZxmZk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:52 2025 by rpki-client