$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft File: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft (raw, json) Hash identifier: dBjwiNOK2Xsyi2I8niAdNQ2jO3ni+PVHE4PQbsrSeig= Subject key identifier: 1C:CD:02:DB:AC:D7:FA:98:38:E2:54:15:94:A9:DF:EE:F2:89:3C:93 Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 306026806E73F7F29CFA26E9F6D0E336FC7FC030 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft Manifest number: 010E Signing time: Mon 20 Oct 2025 04:20:50 +0000 Manifest this update: Mon 20 Oct 2025 04:15:50 +0000 Manifest next update: Thu 23 Oct 2025 04:20:50 +0000 Files and hashes: 1: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl (hash: SGeXbSWK8xzK1482Xbw944iWMkKHJxH3J4am5slTPkY=) 2: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: lPAaUMCnmORN0lcIkL1SdTQ//TRobbXWIgBrv9ai9Yc=) 3: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: bBnfqhprKZxO7GNHi6JFSi7ubIWOVMTy7/ydlUAr+qE=) 4: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: XQ5YOO3QMAmUiXXyDyAvfXAeHqliwoa7oF/Rg8qefuw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:60:26:80:6e:73:f7:f2:9c:fa:26:e9:f6:d0:e3:36:fc:7f:c0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Oct 20 04:15:50 2025 GMT Not After : Oct 23 04:20:50 2025 GMT Subject: CN=1CCD02DBACD7FA9838E2541594A9DFEEF2893C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:7d:14:92:08:ef:ed:a7:5b:04:ec:73:89: 54:09:84:43:db:42:88:22:74:97:de:56:b6:34:60: 60:8f:dd:6c:32:c8:ba:3c:05:54:87:ee:bc:71:f5: dd:ed:7f:91:37:19:59:7f:88:e9:a0:d7:09:3f:97: ec:5c:30:63:56:0a:86:0d:38:27:db:1a:bf:dd:d8: 1b:e6:d3:97:1f:94:8f:57:5a:02:34:97:00:c0:8d: ed:12:18:d1:92:ef:b1:70:f9:6a:1f:1b:96:9d:52: c7:27:43:15:70:82:56:4e:de:b1:51:d8:d8:75:36: da:64:ab:3c:3f:a2:0a:42:e4:f3:f3:06:f9:95:45: c9:be:fa:43:a6:17:87:5f:ed:40:2e:05:fb:0d:4c: f1:4c:92:5b:d7:0d:23:3b:b8:08:9e:e0:4f:87:2a: 61:be:6c:15:ed:e2:a2:e5:a4:7b:a2:68:f6:18:2f: 8f:ad:eb:20:6b:a9:73:43:f1:37:65:53:02:6f:48: d8:01:51:4c:9f:ce:e9:f6:b9:10:e7:e4:17:66:b0: 20:2c:f9:d4:49:a4:26:27:ef:d5:fe:94:a7:2d:d3: dd:68:e3:25:56:d3:37:c7:f2:7a:d5:e9:a4:25:68: 8f:e6:05:c6:25:98:35:15:6a:2d:34:77:77:8d:53: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CD:02:DB:AC:D7:FA:98:38:E2:54:15:94:A9:DF:EE:F2:89:3C:93 X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d6:65:3b:60:a2:9b:85:21:a1:4f:db:45:96:13:aa:1c:52: 02:75:3c:49:75:df:30:79:63:b8:96:24:fb:7b:a3:ab:cc:10: 8c:d4:cf:c6:5c:5b:58:ef:49:4d:21:b3:bc:62:ea:f4:83:f6: 40:c3:61:1a:92:6a:59:e0:32:b4:ef:23:ab:68:20:83:8d:05: f5:76:94:98:25:9e:9a:da:19:17:55:1a:da:03:bc:65:76:d9: c6:e7:ae:8b:74:a3:8b:48:50:59:e9:8b:75:1f:e8:f8:4b:0b: 00:26:7a:da:31:47:c9:5d:9d:5c:49:bb:ec:bf:e6:0d:9f:ac: 5b:8d:d3:8a:15:22:8c:42:7c:61:73:c8:e0:74:94:cc:7b:f4: 0f:0f:77:ee:03:b3:b0:da:85:fd:58:f3:63:ec:86:da:8b:84: e5:19:d0:18:f6:ec:00:af:6b:57:e3:47:3a:72:77:b2:7d:48: 60:bb:c6:cb:ef:70:64:42:d0:11:6c:04:8d:89:97:22:a4:13: a5:04:df:3a:35:44:f6:1b:86:aa:64:88:f1:9a:9f:92:dc:8f: e0:19:32:51:3a:f7:20:6f:0d:fd:3c:ab:8a:eb:51:d8:70:a0: 9f:55:92:10:ae:d8:25:27:ce:ac:16:10:90:46:2b:60:4d:4d: 40:5c:ed:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGAmgG5z9/Kc+ibp9tDjNvx/wDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNTEwMjAwNDE1NTBaFw0yNTEwMjMwNDIwNTBaMDMxMTAvBgNV BAMTKDFDQ0QwMkRCQUNEN0ZBOTgzOEUyNTQxNTk0QTlERkVFRjI4OTNDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWX0Ukgjv7adbBOxziVQJhEPb QogidJfeVrY0YGCP3WwyyLo8BVSH7rxx9d3tf5E3GVl/iOmg1wk/l+xcMGNWCoYN OCfbGr/d2Bvm05cflI9XWgI0lwDAje0SGNGS77Fw+WofG5adUscnQxVwglZO3rFR 2Nh1Ntpkqzw/ogpC5PPzBvmVRcm++kOmF4df7UAuBfsNTPFMklvXDSM7uAie4E+H KmG+bBXt4qLlpHuiaPYYL4+t6yBrqXND8TdlUwJvSNgBUUyfzun2uRDn5BdmsCAs +dRJpCYn79X+lKct091o4yVW0zfH8nrV6aQlaI/mBcYlmDUVai00d3eNUyvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHM0C26zX+pg44lQVlKnf7vKJPJMwHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMz RTFCNTMwNjMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzWZTtgopuFIaFP20WWE6ocUgJ1PEl13zB5 Y7iWJPt7o6vMEIzUz8ZcW1jvSU0hs7xi6vSD9kDDYRqSalngMrTvI6toIIONBfV2 lJglnpraGRdVGtoDvGV22cbnrot0o4tIUFnpi3Uf6PhLCwAmetoxR8ldnVxJu+y/ 5g2frFuN04oVIoxCfGFzyOB0lMx79A8Pd+4Ds7Dahf1Y82PshtqLhOUZ0Bj27ACv a1fjRzpyd7J9SGC7xsvvcGRC0BFsBI2JlyKkE6UE3zo1RPYbhqpkiPGan5Lcj+AZ MlE69yBvDf08q4rrUdhwoJ9VkhCu2CUnzqwWEJBGK2BNTUBc7dE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:43 2025 by rpki-client