$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: omcI4Tt1oJWL3MtW2b9ZV0u3DRxMqQr0N3lm67IJHlw= Subject key identifier: 9F:45:45:51:F1:5B:99:5F:3B:56:FD:6B:46:60:A5:7F:1F:8B:7D:4C Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 78E5343BBBE0A9D21B367B75EADA30F5BE58F72C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 013C Signing time: Sat 18 Oct 2025 18:02:15 +0000 Manifest this update: Sat 18 Oct 2025 17:57:15 +0000 Manifest next update: Wed 22 Oct 2025 02:07:15 +0000 Files and hashes: 1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: 8+uuzdnvpaewIlyw5c8VhudJcYlibUnXISiemJCeADw=) 2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: dNnoIXKVhmyapC9qepVTmmkVYB2sWKjzCXWE7DAeobc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e5:34:3b:bb:e0:a9:d2:1b:36:7b:75:ea:da:30:f5:be:58:f7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Oct 18 17:57:15 2025 GMT Not After : Oct 22 02:07:15 2025 GMT Subject: CN=9F454551F15B995F3B56FD6B4660A57F1F8B7D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1c:57:c1:31:30:49:0f:5c:f9:f8:e2:7c:07: 81:73:19:0b:0f:75:2f:5b:85:90:61:a6:c1:3b:6f: e3:77:ce:a7:ef:38:70:5e:db:70:35:fc:f4:c1:41: 90:c4:02:cf:21:b0:c1:41:b3:88:31:b0:46:51:38: 5d:de:bb:55:8f:6f:81:81:cb:44:22:7b:28:9f:6a: 92:ac:94:f1:ee:ec:61:56:ae:16:69:df:d0:66:20: 29:bd:03:be:3a:f2:cf:33:50:e6:ec:80:c0:8d:5d: 26:e1:41:39:17:2c:5c:8d:f3:de:42:b5:f8:49:d3: b7:f9:09:1c:40:50:12:7c:46:1f:0c:d0:6b:a7:0b: 4c:c9:07:80:ca:47:7a:ad:43:1a:f4:61:65:12:43: 99:3b:5a:a3:6c:7e:be:a5:c5:52:77:06:ab:da:c9: 55:ce:21:d9:41:42:cb:ca:e5:f2:a7:29:5b:43:05: e3:8f:2a:ca:98:fb:ce:53:47:cf:a4:19:6b:4b:e3: de:eb:92:e6:15:eb:f7:ce:a3:6a:e9:35:e4:d5:a2: ce:39:a2:5e:ad:84:e8:8c:f3:f0:6b:7c:47:ae:e5: d0:2d:51:35:a9:e0:fe:f1:04:a9:f5:84:15:ac:58: 73:ad:e6:af:91:aa:5f:71:69:b5:4a:cf:a3:c9:00: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:45:45:51:F1:5B:99:5F:3B:56:FD:6B:46:60:A5:7F:1F:8B:7D:4C X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:6b:9a:30:f4:5a:2f:f1:d0:d9:cf:ed:a2:59:7b:e8:4a:e2: 9c:3d:4f:8c:56:95:93:08:4c:9c:ba:8f:e1:b5:93:1a:da:0f: 44:49:e4:93:9f:fb:dd:e2:36:c6:3f:c7:f9:46:2b:7e:16:2a: 4a:01:62:b1:f5:39:95:04:04:aa:62:b9:d3:32:b2:05:3a:1d: 46:18:76:99:3c:db:87:fa:32:86:5f:c0:5b:1f:9e:cb:96:a8: 86:18:60:37:db:db:a7:39:fa:c1:37:e3:4a:d6:97:ff:5f:d9: 5d:f6:77:09:40:a3:53:11:19:74:18:6b:80:38:9d:c5:aa:f6: 22:9b:d1:62:f8:07:78:eb:f3:eb:75:72:9e:db:31:90:06:f4: 83:32:b7:a9:28:75:81:8c:49:e1:fb:14:ea:14:3e:df:bb:cd: 12:fa:6a:06:2e:5d:0e:59:61:ee:a6:dd:1d:f5:27:d8:53:0c: 78:8c:f7:51:bc:5b:78:63:64:db:17:f6:a3:c1:0d:c6:0c:ec: 4a:b7:c2:8f:12:8a:e0:ae:95:2b:eb:e6:d1:76:a9:7c:88:d2: 7c:48:08:72:62:41:73:ae:92:97:86:8e:cb:f2:14:8c:74:c4: 8a:65:a2:ab:84:14:a5:ec:76:7a:cb:32:d2:1e:01:23:a9:8c: 99:d0:58:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOU0O7vgqdIbNnt16tow9b5Y9ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTEwMTgxNzU3MTVaFw0yNTEwMjIwMjA3MTVaMDMxMTAvBgNV BAMTKDlGNDU0NTUxRjE1Qjk5NUYzQjU2RkQ2QjQ2NjBBNTdGMUY4QjdENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlHFfBMTBJD1z5+OJ8B4FzGQsP dS9bhZBhpsE7b+N3zqfvOHBe23A1/PTBQZDEAs8hsMFBs4gxsEZROF3eu1WPb4GB y0QieyifapKslPHu7GFWrhZp39BmICm9A7468s8zUObsgMCNXSbhQTkXLFyN895C tfhJ07f5CRxAUBJ8Rh8M0GunC0zJB4DKR3qtQxr0YWUSQ5k7WqNsfr6lxVJ3Bqva yVXOIdlBQsvK5fKnKVtDBeOPKsqY+85TR8+kGWtL497rkuYV6/fOo2rpNeTVos45 ol6thOiM8/BrfEeu5dAtUTWp4P7xBKn1hBWsWHOt5q+Rql9xabVKz6PJAIBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn0VFUfFbmV87Vv1rRmClfx+LfUwwHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFrmjD0Wi/x0NnP7aJZe+hK4pw9T4xWlZMI TJy6j+G1kxraD0RJ5JOf+93iNsY/x/lGK34WKkoBYrH1OZUEBKpiudMysgU6HUYY dpk824f6MoZfwFsfnsuWqIYYYDfb26c5+sE340rWl/9f2V32dwlAo1MRGXQYa4A4 ncWq9iKb0WL4B3jr8+t1cp7bMZAG9IMyt6kodYGMSeH7FOoUPt+7zRL6agYuXQ5Z Ye6m3R31J9hTDHiM91G8W3hjZNsX9qPBDcYM7Eq3wo8SiuCulSvr5tF2qXyI0nxI CHJiQXOukpeGjsvyFIx0xIploquEFKXsdnrLMtIeASOpjJnQWFE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:23 2025 by rpki-client