$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft File: 2A2E185B12379871494114828D5D5D713982E469.mft (raw, json) Hash identifier: q+AFJK/Xr3xD+1Xm7TAXI9iiRmHt3YQb/cqsIrbjLK8= Subject key identifier: 2F:02:F3:3A:BD:C7:8E:F7:4E:89:0B:36:EB:9F:FB:E9:2F:AD:81:5E Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 Certificate issuer: /CN=2A2E185B12379871494114828D5D5D713982E469 Certificate serial: 4EE50C82F05D5AFDD6529A877AD71AE12DD2ECD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft Manifest number: 0114 Signing time: Sun 19 Oct 2025 05:10:48 +0000 Manifest this update: Sun 19 Oct 2025 05:05:48 +0000 Manifest next update: Wed 22 Oct 2025 12:50:48 +0000 Files and hashes: 1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: V+YjkhbIydkZ+oGTevb+ipQYCKYryW/Ib0ruhbJynjY=) 2: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: qKAYMPVyu+A7eOvsZOog0l+BCxyceofYhvuOH/dWFH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e5:0c:82:f0:5d:5a:fd:d6:52:9a:87:7a:d7:1a:e1:2d:d2:ec:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2E185B12379871494114828D5D5D713982E469 Validity Not Before: Oct 19 05:05:48 2025 GMT Not After : Oct 22 12:50:48 2025 GMT Subject: CN=2F02F33ABDC78EF74E890B36EB9FFBE92FAD815E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:d0:e0:c3:a8:8b:9d:6f:2f:2e:10:e9:68: 6f:3b:5e:78:ad:05:0e:77:4a:da:44:4d:5b:ea:70: 7f:dc:01:35:84:0a:e8:39:04:83:2d:2c:ac:28:51: 8f:21:3c:b4:43:3e:3d:67:e6:e7:4e:19:f9:d8:56: 44:28:60:e2:8b:09:4b:c9:49:db:be:f0:16:a0:7d: 01:29:59:c6:97:49:04:c8:92:d0:fb:d9:5d:2c:a1: 55:46:bb:8c:ec:c6:93:32:b9:29:0d:a0:6e:bf:a2: 06:15:87:72:f9:53:35:39:95:f3:ae:c8:15:ee:64: 9c:20:43:f0:9f:33:12:80:5e:8b:25:08:c0:84:5f: 46:f2:bd:44:b5:41:93:60:71:94:12:c4:e8:44:33: 67:65:72:19:ba:50:4b:32:ed:07:14:a6:08:b0:1d: e3:36:69:5e:a3:e7:a5:40:3c:e6:ce:4d:ad:06:71: c1:f3:36:49:5c:e8:9a:e2:98:dc:da:63:22:5b:c6: 38:e7:30:59:1f:92:29:26:13:01:47:f6:e5:4e:00: d9:2d:a8:e4:55:74:6d:c0:3e:b8:5a:a8:c9:77:d6: de:3a:84:16:6d:af:a4:02:ad:9e:fb:d3:3f:1b:f3: 52:02:67:42:72:9d:02:bc:ce:33:34:b8:a0:6e:eb: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:02:F3:3A:BD:C7:8E:F7:4E:89:0B:36:EB:9F:FB:E9:2F:AD:81:5E X509v3 Authority Key Identifier: keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c0:bb:6f:0b:27:33:08:c3:f6:dd:9a:01:fe:60:0c:b9:7f: 0e:1f:10:f1:43:92:f9:73:f6:e4:b8:e9:2e:d3:3d:66:ad:86: 1b:a2:3c:fe:ba:dc:9a:d4:a1:70:7b:8d:a4:59:a7:a7:ea:10: 65:f1:16:c2:61:29:8e:1a:1b:b0:56:28:3e:7a:3f:fc:d6:67: b1:26:da:11:b2:78:eb:6c:33:17:a8:b1:0d:a1:fa:dd:99:ab: 7c:d5:7c:3e:ac:45:8a:37:b5:6f:46:c5:fe:c4:c8:f8:ed:8c: e0:b7:51:a5:f9:1c:b5:f3:1f:ef:ca:b7:f7:37:c1:b8:04:b4: e9:c4:6a:d1:52:50:97:af:5d:22:3b:fd:63:37:89:82:2b:97: 94:ef:50:e4:cd:bf:09:04:eb:13:7c:04:03:91:c4:c9:6c:2b: 90:67:26:38:2c:33:8e:ed:18:8c:4e:58:79:f6:67:f2:1a:0a: c7:2d:e5:11:50:89:5e:53:eb:a8:71:e6:d5:f0:1b:a2:54:da: 46:53:a4:64:3a:30:68:8d:f3:94:7b:3e:dc:c5:3e:f6:d9:4b: 32:7e:74:f2:46:33:a7:14:c1:06:13:d5:ee:98:7e:1e:ec:92: cb:60:72:d9:13:a2:2d:85:0d:ab:06:85:44:4e:37:45:2a:04: a8:6b:dd:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuUMgvBdWv3WUpqHetca4S3S7NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEz OTgyRTQ2OTAeFw0yNTEwMTkwNTA1NDhaFw0yNTEwMjIxMjUwNDhaMDMxMTAvBgNV BAMTKDJGMDJGMzNBQkRDNzhFRjc0RTg5MEIzNkVCOUZGQkU5MkZBRDgxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtodDgw6iLnW8vLhDpaG87Xnit BQ53StpETVvqcH/cATWECug5BIMtLKwoUY8hPLRDPj1n5udOGfnYVkQoYOKLCUvJ Sdu+8BagfQEpWcaXSQTIktD72V0soVVGu4zsxpMyuSkNoG6/ogYVh3L5UzU5lfOu yBXuZJwgQ/CfMxKAXoslCMCEX0byvUS1QZNgcZQSxOhEM2dlchm6UEsy7QcUpgiw HeM2aV6j56VAPObOTa0GccHzNklc6JrimNzaYyJbxjjnMFkfkikmEwFH9uVOANkt qORVdG3APrhaqMl31t46hBZtr6QCrZ770z8b81ICZ0JynQK8zjM0uKBu61FBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULwLzOr3HjvdOiQs265/76S+tgV4wHwYDVR0j BBgwFoAUKi4YWxI3mHFJQRSCjV1dcTmC5GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMC8yQTJFMTg1QjEy Mzc5ODcxNDk0MTE0ODI4RDVENUQ3MTM5ODJFNDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEzOTgy RTQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzAvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVE NzEzOTgyRTQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjAu28LJzMIw/bdmgH+YAy5fw4fEPFDkvlz 9uS46S7TPWathhuiPP663JrUoXB7jaRZp6fqEGXxFsJhKY4aG7BWKD56P/zWZ7Em 2hGyeOtsMxeosQ2h+t2Zq3zVfD6sRYo3tW9Gxf7EyPjtjOC3UaX5HLXzH+/Kt/c3 wbgEtOnEatFSUJevXSI7/WM3iYIrl5TvUOTNvwkE6xN8BAORxMlsK5BnJjgsM47t GIxOWHn2Z/IaCsct5RFQiV5T66hx5tXwG6JU2kZTpGQ6MGiN85R7PtzFPvbZSzJ+ dPJGM6cUwQYT1e6Yfh7skstgctkToi2FDasGhURON0UqBKhr3ZY= -----END CERTIFICATE-----Generated at Tue Oct 21 05:40:11 2025 by rpki-client