$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: swaRDCxMIJhO7KFElJ+M1m9Ctq0+ebS9jalejtFbzWg= Subject key identifier: F5:17:E4:6F:4C:6A:AE:C3:D8:A0:12:5B:8F:87:BD:14:64:0C:81:24 Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 4CF96269AD28150DE3992BA38093A312C966CFE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 04D3 Signing time: Sat 18 Oct 2025 18:31:46 +0000 Manifest this update: Sat 18 Oct 2025 18:26:46 +0000 Manifest next update: Tue 21 Oct 2025 20:18:46 +0000 Files and hashes: 1: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: tlEIjwbDv/XpJIyRnvetLz5t7G3CCOfefxdMiwdAtXg=) 2: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: voGeHKK4ikA3uaKs2J+WeJLtpIfTnr3JdLSLAJpRJmc=) 3: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 1I55HZV9ASBX91G1gmKkN8XsoZ52BjLH6TscAGFfb1w=) 4: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: VKvXvb3BP6384nLUH1LdjT/mbF098hu6bIg7H4DeDLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f9:62:69:ad:28:15:0d:e3:99:2b:a3:80:93:a3:12:c9:66:cf:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Oct 18 18:26:46 2025 GMT Not After : Oct 21 20:18:46 2025 GMT Subject: CN=F517E46F4C6AAEC3D8A0125B8F87BD14640C8124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:32:b4:3e:a0:61:81:fc:ec:1f:9e:54:a2:8f: 92:a4:d3:27:24:95:5c:c1:24:e5:a1:24:94:49:c3: 62:9f:54:9d:bc:2a:a7:8e:0a:c2:26:0e:9c:f5:fa: b6:7c:37:74:1d:b3:1a:cb:f2:ce:94:e2:21:6c:07: f6:6e:90:dc:8a:e7:e7:e7:58:0a:c3:81:d1:39:66: 09:08:5a:d8:9f:9d:9d:67:af:80:b6:31:58:35:92: aa:34:94:67:28:e0:d4:59:45:c6:00:bb:cf:c7:79: 58:6b:0d:bf:69:40:38:99:ba:cb:21:55:8f:de:fa: c9:ab:38:3a:13:70:4f:6c:17:cb:52:46:3d:7e:e8: 24:f6:80:a7:ad:f5:79:47:76:7b:3e:a0:58:ef:55: c7:39:80:c6:91:68:c3:28:12:71:d6:09:df:0e:f4: e6:f3:16:50:8b:e3:96:ca:c6:26:a8:f7:d4:47:ac: 22:3f:55:11:09:83:7a:b0:b7:a4:6f:cb:3e:81:92: 95:b9:71:50:c3:67:da:28:74:66:23:ed:e1:74:82: f6:ff:0c:75:79:27:eb:bf:e9:c2:87:17:a6:6f:02: 0a:a2:ae:31:85:aa:be:f4:07:22:f5:33:71:f8:7c: f1:0c:fe:f2:57:ff:6e:c6:ad:ea:36:50:67:e7:24: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:17:E4:6F:4C:6A:AE:C3:D8:A0:12:5B:8F:87:BD:14:64:0C:81:24 X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:99:1f:ba:43:d4:eb:c6:7c:1a:3d:59:6e:bb:6a:a9:18:8d: 1d:5e:17:2a:cc:9d:5d:1c:2b:b6:de:b1:fb:45:3b:03:8d:f4: b3:f2:1c:12:fa:85:93:db:b5:84:5c:24:03:98:68:1b:cc:96: 66:ae:18:31:b7:4e:30:b3:d3:4a:9b:5a:6c:bd:5c:e6:44:24: cb:b6:fc:da:27:03:54:94:e5:9c:22:9a:11:75:89:84:a0:e3: 27:9b:4e:1e:7b:b7:ac:22:b3:d9:8d:a0:74:36:a4:02:01:1d: 60:19:61:17:d7:c1:13:eb:07:25:51:34:f1:42:3a:15:94:fc: f8:fc:7e:f2:a9:a1:24:58:7d:27:55:63:cd:00:bb:e2:8f:7f: a2:88:5e:45:f4:88:da:31:91:27:c5:dd:a3:b5:a7:1a:9c:bf: 77:d2:5c:c2:17:90:55:7b:39:f8:b4:96:6f:0e:dd:e5:2c:26: 26:ad:1b:10:d8:25:93:fe:df:77:34:19:80:3e:d2:3e:d0:b1: b7:ad:e0:e3:2d:c2:2b:24:fb:a2:65:33:db:16:12:b6:3e:04: ee:41:c2:a4:2a:49:75:64:db:5f:53:8b:ff:d1:89:3a:63:0d: 34:41:19:98:84:a4:05:61:34:63:0b:e7:aa:a3:9a:46:2d:22: fb:3a:2c:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPliaa0oFQ3jmSujgJOjEslmz+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNTEwMTgxODI2NDZaFw0yNTEwMjEyMDE4NDZaMDMxMTAvBgNV BAMTKEY1MTdFNDZGNEM2QUFFQzNEOEEwMTI1QjhGODdCRDE0NjQwQzgxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfMrQ+oGGB/OwfnlSij5Kk0yck lVzBJOWhJJRJw2KfVJ28KqeOCsImDpz1+rZ8N3QdsxrL8s6U4iFsB/ZukNyK5+fn WArDgdE5ZgkIWtifnZ1nr4C2MVg1kqo0lGco4NRZRcYAu8/HeVhrDb9pQDiZussh VY/e+smrODoTcE9sF8tSRj1+6CT2gKet9XlHdns+oFjvVcc5gMaRaMMoEnHWCd8O 9ObzFlCL45bKxiao99RHrCI/VREJg3qwt6Rvyz6BkpW5cVDDZ9oodGYj7eF0gvb/ DHV5J+u/6cKHF6ZvAgqirjGFqr70ByL1M3H4fPEM/vJX/27Greo2UGfnJFAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Rfkb0xqrsPYoBJbj4e9FGQMgSQwHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCZH7pD1OvGfBo9WW67aqkYjR1eFyrMnV0c K7besftFOwON9LPyHBL6hZPbtYRcJAOYaBvMlmauGDG3TjCz00qbWmy9XOZEJMu2 /NonA1SU5ZwimhF1iYSg4yebTh57t6wis9mNoHQ2pAIBHWAZYRfXwRPrByVRNPFC OhWU/Pj8fvKpoSRYfSdVY80Au+KPf6KIXkX0iNoxkSfF3aO1pxqcv3fSXMIXkFV7 Ofi0lm8O3eUsJiatGxDYJZP+33c0GYA+0j7Qsbet4OMtwisk+6JlM9sWErY+BO5B wqQqSXVk219Ti//RiTpjDTRBGZiEpAVhNGML56qjmkYtIvs6LC4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:56:40 2025 by rpki-client