$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: 9/91w2AHtduIyIX/cXm7HJ7tPETn0QRLSewNTZ8ePYA= Subject key identifier: A1:B7:80:D5:29:15:3D:54:70:75:75:BF:24:E2:5F:2A:49:3A:F5:C5 Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 171566BBECD990EAF58F5DBA3BF195919E1D9A76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 0519 Signing time: Sat 18 Oct 2025 13:31:21 +0000 Manifest this update: Sat 18 Oct 2025 13:26:21 +0000 Manifest next update: Tue 21 Oct 2025 17:15:21 +0000 Files and hashes: 1: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: vwAnyBXL4T90RRn5GG2nSYiYO8Lyl4YhVXLo52370KA=) 2: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) 3: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: /ZqmuN0x+ZwpTTLsOK93bf5aWydgNNzXSi3NS4bqhi0=) 4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: bV9xBqFWWdQNpl4xPPj/IRLaOQzWewk+JeafEOq6H8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:15:66:bb:ec:d9:90:ea:f5:8f:5d:ba:3b:f1:95:91:9e:1d:9a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Oct 18 13:26:21 2025 GMT Not After : Oct 21 17:15:21 2025 GMT Subject: CN=A1B780D529153D54707575BF24E25F2A493AF5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d8:6e:9a:ff:14:84:59:3a:ae:38:50:b6:2e: 16:cf:8f:24:9f:00:c7:b8:e2:53:2c:e0:73:19:ab: 23:a1:b4:d4:01:18:b5:42:78:62:3d:65:d9:0b:e3: a6:8a:50:51:bf:6a:29:95:1d:ce:29:d2:3b:71:ba: 28:59:86:8d:bf:91:94:34:f6:bb:f9:24:f8:63:b3: f6:82:a3:ec:0c:24:1c:df:0b:74:43:b8:0a:45:af: 3f:aa:80:63:07:7a:54:c2:2c:ac:2b:60:7b:15:e4: e0:75:42:ff:e2:54:bf:12:04:79:22:76:b0:b9:28: ad:8a:49:80:3f:b3:e6:43:b6:0e:2a:54:6f:c4:2b: 26:69:fd:aa:bd:e5:a6:c1:9b:48:54:86:22:b3:60: 89:43:83:da:a9:3b:71:1c:b1:89:29:2b:a5:cb:ee: b0:c3:b5:23:c4:cb:1b:7f:39:3f:19:2d:b2:33:1e: 7d:c6:5f:9a:97:23:b0:e0:b7:aa:a9:e0:81:0e:5e: 88:15:9d:b2:b7:17:c8:fa:11:16:82:b1:02:54:ef: 47:e1:5b:6f:8a:bd:17:27:93:8e:63:ef:61:9a:25: e8:4f:5d:c8:91:4f:1e:7c:60:d5:a3:69:46:24:e8: 72:2b:0c:fd:0f:1b:46:ac:a8:b3:c3:90:51:5d:20: 5c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B7:80:D5:29:15:3D:54:70:75:75:BF:24:E2:5F:2A:49:3A:F5:C5 X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ac:5a:98:01:aa:bd:b6:28:f1:59:8e:7b:f9:4c:71:ad:dc: f2:bb:99:5b:d7:d1:5b:d0:06:14:24:4a:bf:ff:12:e1:06:52: 83:33:92:eb:16:fd:01:ae:d6:6b:9d:aa:4c:0b:75:30:66:44: ea:f1:9f:a0:10:e9:12:d3:3e:ec:ba:25:e6:11:2a:62:6d:ae: 86:7c:46:fa:b7:00:27:76:bc:8b:d3:55:83:0d:42:8e:30:9f: 59:9e:67:d0:1b:ca:40:e1:93:88:04:ba:34:ff:44:6b:c5:44: 5f:c5:aa:48:31:7d:2d:3d:a4:ab:54:39:5f:fb:27:eb:73:40: 54:5c:97:c5:c7:ee:e4:82:43:63:5c:51:42:c8:cb:2d:f3:0b: 80:46:08:7a:00:31:2c:8d:48:c0:69:66:00:40:79:d2:14:43: 9c:c5:37:64:cf:6b:34:5d:4c:8e:d5:50:f8:db:c0:13:5d:29: 37:b2:40:e4:51:06:1f:c2:b8:f7:86:89:00:d9:ea:68:e3:7c: bb:f4:ca:5d:88:b9:1c:41:73:53:c4:c8:d9:0e:49:17:c3:e1: d4:3f:94:7a:a5:b0:de:a6:8b:95:a9:6a:53:87:a7:56:be:48: 8b:25:3f:ed:5c:28:f8:cf:53:8d:8a:6b:3f:85:76:62:55:68: 8c:46:48:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFxVmu+zZkOr1j126O/GVkZ4dmnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNTEwMTgxMzI2MjFaFw0yNTEwMjExNzE1MjFaMDMxMTAvBgNV BAMTKEExQjc4MEQ1MjkxNTNENTQ3MDc1NzVCRjI0RTI1RjJBNDkzQUY1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt2G6a/xSEWTquOFC2LhbPjySf AMe44lMs4HMZqyOhtNQBGLVCeGI9ZdkL46aKUFG/aimVHc4p0jtxuihZho2/kZQ0 9rv5JPhjs/aCo+wMJBzfC3RDuApFrz+qgGMHelTCLKwrYHsV5OB1Qv/iVL8SBHki drC5KK2KSYA/s+ZDtg4qVG/EKyZp/aq95abBm0hUhiKzYIlDg9qpO3EcsYkpK6XL 7rDDtSPEyxt/OT8ZLbIzHn3GX5qXI7Dgt6qp4IEOXogVnbK3F8j6ERaCsQJU70fh W2+KvRcnk45j72GaJehPXciRTx58YNWjaUYk6HIrDP0PG0asqLPDkFFdIFxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUobeA1SkVPVRwdXW/JOJfKkk69cUwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSsWpgBqr22KPFZjnv5THGt3PK7mVvX0VvQ BhQkSr//EuEGUoMzkusW/QGu1mudqkwLdTBmROrxn6AQ6RLTPuy6JeYRKmJtroZ8 Rvq3ACd2vIvTVYMNQo4wn1meZ9AbykDhk4gEujT/RGvFRF/FqkgxfS09pKtUOV/7 J+tzQFRcl8XH7uSCQ2NcUULIyy3zC4BGCHoAMSyNSMBpZgBAedIUQ5zFN2TPazRd TI7VUPjbwBNdKTeyQORRBh/CuPeGiQDZ6mjjfLv0yl2IuRxBc1PEyNkOSRfD4dQ/ lHqlsN6mi5WpalOHp1a+SIslP+1cKPjPU42Kaz+FdmJVaIxGSHk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:11 2025 by rpki-client