$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: CiKOGXgcR1f33sTK9yBbQhvUO8YKDnmYqUc5vtmyumw= Subject key identifier: B8:44:30:D8:52:9E:DE:CD:CB:D4:A8:28:CB:30:DF:9B:79:A8:A8:6A Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 21DFE3377C6FE3B8688CD3F9E62FEE5992ABFFA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: E0 Signing time: Sun 19 Oct 2025 19:22:04 +0000 Manifest this update: Sun 19 Oct 2025 19:17:04 +0000 Manifest next update: Thu 23 Oct 2025 00:06:04 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: fk0+taRnuhNDQoOp1V+V7afO0ICBkea9o/vRE4e6DaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:df:e3:37:7c:6f:e3:b8:68:8c:d3:f9:e6:2f:ee:59:92:ab:ff:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Oct 19 19:17:04 2025 GMT Not After : Oct 23 00:06:04 2025 GMT Subject: CN=B84430D8529EDECDCBD4A828CB30DF9B79A8A86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:a1:c9:b7:47:79:c2:32:6c:63:ec:34:55: fd:c0:1f:0b:1d:a8:8b:62:1b:a0:3c:55:67:41:95: 4c:6a:b4:f2:5b:55:4a:24:02:00:87:1e:d1:3b:1f: 29:95:80:ce:8a:c9:8e:9b:43:ac:43:47:7e:75:ec: 9e:82:3f:6a:db:7b:29:b6:76:82:8b:e9:e4:b8:45: 43:85:e8:59:52:36:67:cc:2f:f3:b0:71:0e:d5:99: 88:6b:42:ae:fd:6d:64:aa:48:04:de:11:6a:fd:4f: 71:9c:c8:c9:d2:b4:6c:d7:54:a0:9c:b1:f2:af:e0: cc:ed:b8:66:7d:8d:60:c1:5e:1b:d5:49:39:7a:7a: cf:14:20:0e:65:35:c1:10:6d:aa:91:dc:94:4b:25: 2d:6a:de:a3:c2:73:30:65:64:26:42:28:75:fd:30: 17:26:7f:81:85:76:d0:9a:06:3d:4a:0c:fc:b4:a3: f4:be:7b:c8:56:09:f4:7f:97:70:94:68:16:ae:88: 45:63:eb:97:21:e7:50:df:ee:9a:53:c2:78:34:e3: 52:c1:86:33:19:85:1a:47:7a:9e:9c:9e:66:95:60: b3:ef:ff:32:2f:d9:67:e4:64:ea:75:e0:be:3e:be: 47:f0:10:26:89:0e:7b:78:6a:a8:60:fe:31:a4:85: b7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:44:30:D8:52:9E:DE:CD:CB:D4:A8:28:CB:30:DF:9B:79:A8:A8:6A X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c9:c4:9d:d9:6b:1c:dd:cc:e8:ef:41:8e:aa:70:00:e4:8d: 06:70:d0:c8:80:18:d3:7d:f4:83:62:fb:dc:f1:9e:2f:88:5b: 3b:a6:14:02:18:6d:1a:a0:40:f5:64:62:f9:7c:c7:80:f9:7b: f4:03:3d:55:69:da:e3:5f:64:cd:26:1d:05:45:cc:8c:7a:c0: e7:5f:f8:d3:8d:5b:34:db:3f:30:a5:f8:37:b6:96:f3:86:fa: d9:e7:b2:c2:68:f5:86:b6:06:11:a7:b7:0a:bb:07:27:09:ac: c6:47:d3:62:56:e2:70:25:5b:c6:5e:04:f1:a5:6d:b4:4e:44: 9c:21:52:6a:38:a1:85:e3:8f:e9:7c:da:58:b5:ba:50:dc:a3: 29:6a:eb:2b:71:4e:90:71:af:bd:b0:45:a4:f6:67:1b:09:0a: 8b:a1:af:90:4d:b6:4b:04:58:ab:9b:1b:2d:5f:68:74:9a:c0: b4:e2:04:c8:1f:85:9e:e7:34:78:97:50:13:cf:9d:60:05:ad: 8b:a5:4c:da:4a:09:4d:af:e7:f6:87:b5:fd:95:c0:b5:76:db: bb:4f:dd:dd:71:04:78:d8:7a:e9:1f:ef:40:d4:23:8e:69:59: ac:17:e2:43:e4:aa:90:97:1e:02:dd:6d:a8:b9:46:4a:44:c6: b3:61:72:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUId/jN3xv47hojNP55i/uWZKr/6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTEwMTkxOTE3MDRaFw0yNTEwMjMwMDA2MDRaMDMxMTAvBgNV BAMTKEI4NDQzMEQ4NTI5RURFQ0RDQkQ0QTgyOENCMzBERjlCNzlBOEE4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3R6HJt0d5wjJsY+w0Vf3AHwsd qItiG6A8VWdBlUxqtPJbVUokAgCHHtE7HymVgM6KyY6bQ6xDR3517J6CP2rbeym2 doKL6eS4RUOF6FlSNmfML/OwcQ7VmYhrQq79bWSqSATeEWr9T3GcyMnStGzXVKCc sfKv4MztuGZ9jWDBXhvVSTl6es8UIA5lNcEQbaqR3JRLJS1q3qPCczBlZCZCKHX9 MBcmf4GFdtCaBj1KDPy0o/S+e8hWCfR/l3CUaBauiEVj65ch51Df7ppTwng041LB hjMZhRpHep6cnmaVYLPv/zIv2WfkZOp14L4+vkfwECaJDnt4aqhg/jGkhbdRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuEQw2FKe3s3L1KgoyzDfm3moqGowHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3JxJ3ZaxzdzOjvQY6qcADkjQZw0MiAGNN9 9INi+9zxni+IWzumFAIYbRqgQPVkYvl8x4D5e/QDPVVp2uNfZM0mHQVFzIx6wOdf +NONWzTbPzCl+De2lvOG+tnnssJo9Ya2BhGntwq7BycJrMZH02JW4nAlW8ZeBPGl bbRORJwhUmo4oYXjj+l82li1ulDcoylq6ytxTpBxr72wRaT2ZxsJCouhr5BNtksE WKubGy1faHSawLTiBMgfhZ7nNHiXUBPPnWAFrYulTNpKCU2v5/aHtf2VwLV227tP 3d1xBHjYeukf70DUI45pWawX4kPkqpCXHgLdbai5RkpExrNhcoY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:33 2025 by rpki-client