$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: J6Nk2ks69Z7JPt7yeNd4GSxc4K6C9VBe5w9INA9DQGc= Subject key identifier: 26:7F:FD:47:0B:B9:30:89:BD:CA:F9:55:11:78:CD:BF:8C:6E:84:07 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 57047A18B95B9155CCD6E2099120A2128E8C784B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 0314 Signing time: Sun 19 Oct 2025 20:01:58 +0000 Manifest this update: Sun 19 Oct 2025 19:56:58 +0000 Manifest next update: Thu 23 Oct 2025 00:50:58 +0000 Files and hashes: 1: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) 2: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: St2bP3Ez0Q6oO6NmLOiC0rH1+lgNTJ9AD0o1N8gUGDs=) 3: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=) 4: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:04:7a:18:b9:5b:91:55:cc:d6:e2:09:91:20:a2:12:8e:8c:78:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Oct 19 19:56:58 2025 GMT Not After : Oct 23 00:50:58 2025 GMT Subject: CN=267FFD470BB93089BDCAF9551178CDBF8C6E8407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:54:50:5f:e1:9b:56:a4:76:9b:5d:56:d3: 3f:68:b8:a0:6c:43:9c:7c:13:89:c6:45:9e:e7:31: 05:06:d6:2c:d2:bf:08:7c:d6:a3:5b:fb:ef:98:c6: 4c:40:a9:cf:2b:68:03:ae:54:87:4e:09:34:18:16: bc:31:30:d0:a7:41:af:83:55:8d:09:29:ef:6f:62: 7e:66:52:50:7f:5c:15:8e:83:f9:d6:99:56:e8:5f: 5b:86:24:65:52:c2:53:1e:fd:03:a7:1f:a1:05:d2: 1b:0e:d3:4f:23:61:7b:b7:e0:0c:ba:5a:0e:98:07: 94:1a:1f:7e:d7:79:77:c6:19:68:55:c4:0a:66:c6: a3:27:ec:5f:c3:3c:33:03:dd:d6:cd:09:ba:5b:cd: 98:75:bf:d8:f3:11:6e:ba:7b:4c:c8:33:a3:74:d4: 38:df:73:cd:07:18:eb:59:d0:5d:25:e4:28:18:42: 46:ca:ba:72:f6:1c:da:7a:dc:7a:35:c1:07:d7:92: 83:cf:ae:e0:d8:ca:72:1c:02:50:af:9b:4e:60:29: 5e:0f:ea:45:1f:1d:dc:f8:74:37:54:20:50:3f:cb: 41:25:52:52:90:e6:57:3f:9f:53:09:11:ac:1e:f5: 29:9d:31:e7:27:3d:3a:f5:78:53:15:9e:68:b7:37: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7F:FD:47:0B:B9:30:89:BD:CA:F9:55:11:78:CD:BF:8C:6E:84:07 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a8:84:72:23:4c:bc:a7:2f:13:dd:88:d4:73:8e:67:c3:e5: 5a:3b:eb:96:7c:ee:a5:6f:d2:36:f0:cc:5f:74:2a:8b:55:be: 53:37:24:09:26:e9:85:66:31:d0:98:78:68:22:f6:b5:61:82: f8:b8:e1:e6:85:58:57:09:6c:d4:31:1f:d6:58:2f:79:92:35: cd:b4:46:65:21:ad:a9:e3:c2:40:ff:94:ea:6f:0f:f2:31:5a: c3:38:fd:9f:6e:6c:49:d5:8b:05:7e:2d:e4:54:6b:74:14:8c: 67:d8:d2:b0:20:69:86:00:c3:c5:a8:8e:77:6f:f6:01:35:c7: 06:e7:74:be:1c:27:e2:04:73:8f:b1:fd:53:81:b6:0c:33:0a: 73:00:54:61:94:e5:c6:a7:24:3f:1f:30:5c:90:92:9d:b2:66: 42:6e:66:8d:43:4f:58:0a:95:bb:4e:20:a8:e2:b3:39:17:88: 37:a4:38:05:9f:a8:49:0d:67:78:e7:b4:b4:d4:e8:a5:70:c7: bd:d4:43:f8:2f:9b:84:4c:0c:e9:2d:c7:82:02:c6:87:1a:a6: 09:37:9b:30:e9:1a:df:cb:8a:8f:b6:6c:c0:33:f9:e5:af:0a: c4:50:2e:38:ad:06:79:fb:71:9d:fd:30:aa:8c:60:bb:38:ac: 3f:c1:0a:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwR6GLlbkVXM1uIJkSCiEo6MeEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTEwMTkxOTU2NThaFw0yNTEwMjMwMDUwNThaMDMxMTAvBgNV BAMTKDI2N0ZGRDQ3MEJCOTMwODlCRENBRjk1NTExNzhDREJGOEM2RTg0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSV1RQX+GbVqR2m11W0z9ouKBs Q5x8E4nGRZ7nMQUG1izSvwh81qNb+++YxkxAqc8raAOuVIdOCTQYFrwxMNCnQa+D VY0JKe9vYn5mUlB/XBWOg/nWmVboX1uGJGVSwlMe/QOnH6EF0hsO008jYXu34Ay6 Wg6YB5QaH37XeXfGGWhVxApmxqMn7F/DPDMD3dbNCbpbzZh1v9jzEW66e0zIM6N0 1Djfc80HGOtZ0F0l5CgYQkbKunL2HNp63Ho1wQfXkoPPruDYynIcAlCvm05gKV4P 6kUfHdz4dDdUIFA/y0ElUlKQ5lc/n1MJEawe9SmdMecnPTr1eFMVnmi3N/dLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJn/9Rwu5MIm9yvlVEXjNv4xuhAcwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGohHIjTLynLxPdiNRzjmfD5Vo765Z87qVv 0jbwzF90KotVvlM3JAkm6YVmMdCYeGgi9rVhgvi44eaFWFcJbNQxH9ZYL3mSNc20 RmUhranjwkD/lOpvD/IxWsM4/Z9ubEnViwV+LeRUa3QUjGfY0rAgaYYAw8Wojndv 9gE1xwbndL4cJ+IEc4+x/VOBtgwzCnMAVGGU5canJD8fMFyQkp2yZkJuZo1DT1gK lbtOIKjiszkXiDekOAWfqEkNZ3jntLTU6KVwx73UQ/gvm4RMDOktx4ICxocapgk3 mzDpGt/Lio+2bMAz+eWvCsRQLjitBnn7cZ39MKqMYLs4rD/BCms= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:14 2025 by rpki-client