$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: Nv53TfqfEArDaT6U02TWHp6lsNkHb3EFpGfIBG8SQIs= Subject key identifier: 2C:60:18:32:4C:90:C4:1E:EC:07:2A:54:6B:A5:0D:AB:13:2A:26:FD Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 4F95ECF5D3D65CE7281A6E2215640834B37E316A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 0269 Signing time: Mon 20 Oct 2025 06:11:13 +0000 Manifest this update: Mon 20 Oct 2025 06:06:13 +0000 Manifest next update: Thu 23 Oct 2025 09:01:13 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: 8OrvsLh7vidCsWWNngZ0bmD/tfArDYpWqZAZu4eEyLU=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: T//zRmtqLINvFlblPvVcdCKW6AunVea7CBpb7QBQYXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:95:ec:f5:d3:d6:5c:e7:28:1a:6e:22:15:64:08:34:b3:7e:31:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Oct 20 06:06:13 2025 GMT Not After : Oct 23 09:01:13 2025 GMT Subject: CN=2C6018324C90C41EEC072A546BA50DAB132A26FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:fd:00:8b:00:06:bf:c2:98:2d:bb:5c:81: ab:6b:7c:79:a2:9b:8e:3d:cb:c6:ff:db:e7:b0:89: 41:aa:c1:9e:86:4c:aa:e4:ea:18:9c:ac:6a:bb:5f: 1f:93:92:2a:d2:4e:8d:3e:fb:99:bc:c8:e7:53:e9: b4:bd:07:09:83:e1:86:8b:3d:04:ab:68:2c:83:a9: fa:35:84:3b:d9:2b:51:ec:20:45:20:ee:69:68:0f: 26:f8:fe:69:c4:61:3b:9c:1d:67:a7:e7:c2:f3:0a: 3b:0e:41:51:7a:71:d0:c7:68:63:c1:1b:a2:4e:5a: a9:3f:28:3d:0d:fe:cb:10:25:f7:40:e3:82:e9:87: e1:9c:bc:06:2b:8c:af:05:7d:39:6a:55:c1:74:f8: 3c:97:5f:5c:be:ac:9a:cd:77:49:54:7a:e4:7a:ec: 2a:7c:47:56:f7:e1:00:b5:c5:68:77:90:79:52:f6: 85:25:2c:b3:58:8b:a0:90:f4:c0:52:44:03:91:03: 1c:cb:72:16:34:38:73:a6:46:0e:0f:9b:39:37:04: 9f:54:6a:e3:e9:e0:01:65:bc:c9:72:a6:75:c2:d2: 7a:a7:ee:54:ae:b9:01:80:a0:ac:d0:21:d5:2c:c9: 42:a7:e2:7a:62:37:f7:dc:1a:f1:1a:1c:33:b9:43: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:60:18:32:4C:90:C4:1E:EC:07:2A:54:6B:A5:0D:AB:13:2A:26:FD X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5b:03:1d:1c:2f:1b:97:89:1b:1b:8b:d7:58:1f:80:b3:ee: ea:f5:b7:e7:1a:d3:26:79:b7:e4:64:f8:35:11:59:67:58:fc: 75:86:e5:fc:15:1d:9a:7d:39:1a:1e:d1:78:43:1f:ed:43:d0: 34:34:88:98:f7:3c:ae:0c:7c:01:f0:82:13:48:3b:a3:2a:0e: 4d:f5:a1:4c:0a:bd:d4:97:65:24:b0:55:38:51:db:1a:ea:1a: b1:50:e1:9f:87:5d:d8:65:9c:db:15:5c:23:4f:fe:bb:b3:d0: 3d:71:e6:46:91:7b:59:4e:88:40:ee:71:dd:fd:9c:e4:69:df: 14:ea:14:f6:b9:b6:c3:95:9e:52:8e:87:47:e1:79:aa:bc:7f: 95:54:94:77:6d:03:0d:80:59:9a:25:a1:cf:c4:72:fe:24:6f: c1:5a:32:64:09:1a:a9:45:c7:4d:58:9c:65:4b:9a:b5:6e:5e: fb:75:4b:5e:d8:02:b2:b9:38:96:90:13:d7:3a:44:7a:e0:93: 97:37:20:bc:b7:70:ec:29:a5:b5:93:96:4b:1e:31:26:25:9c: bc:1d:ed:aa:09:3e:3d:ed:0d:1c:9d:a2:a8:c6:25:6c:5e:a7: 08:16:65:ea:df:7a:c3:36:e4:e4:75:27:c1:55:77:fd:bf:0b: 26:10:4a:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5Xs9dPWXOcoGm4iFWQINLN+MWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTEwMjAwNjA2MTNaFw0yNTEwMjMwOTAxMTNaMDMxMTAvBgNV BAMTKDJDNjAxODMyNEM5MEM0MUVFQzA3MkE1NDZCQTUwREFCMTMyQTI2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpW/0AiwAGv8KYLbtcgatrfHmi m449y8b/2+ewiUGqwZ6GTKrk6hicrGq7Xx+TkirSTo0++5m8yOdT6bS9BwmD4YaL PQSraCyDqfo1hDvZK1HsIEUg7mloDyb4/mnEYTucHWen58LzCjsOQVF6cdDHaGPB G6JOWqk/KD0N/ssQJfdA44Lph+GcvAYrjK8FfTlqVcF0+DyXX1y+rJrNd0lUeuR6 7Cp8R1b34QC1xWh3kHlS9oUlLLNYi6CQ9MBSRAORAxzLchY0OHOmRg4Pmzk3BJ9U auPp4AFlvMlypnXC0nqn7lSuuQGAoKzQIdUsyUKn4npiN/fcGvEaHDO5Q7QFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULGAYMkyQxB7sBypUa6UNqxMqJv0wHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRbAx0cLxuXiRsbi9dYH4Cz7ur1t+ca0yZ5 t+Rk+DURWWdY/HWG5fwVHZp9ORoe0XhDH+1D0DQ0iJj3PK4MfAHwghNIO6MqDk31 oUwKvdSXZSSwVThR2xrqGrFQ4Z+HXdhlnNsVXCNP/ruz0D1x5kaRe1lOiEDucd39 nORp3xTqFPa5tsOVnlKOh0fheaq8f5VUlHdtAw2AWZoloc/Ecv4kb8FaMmQJGqlF x01YnGVLmrVuXvt1S17YArK5OJaQE9c6RHrgk5c3ILy3cOwppbWTlkseMSYlnLwd 7aoJPj3tDRydoqjGJWxepwgWZerfesM25OR1J8FVd/2/CyYQSkU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:30:48 2025 by rpki-client