$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: bIFSKpnspdc2lDG3KjxbrpYJuBcMy1ysE9EinYocr+8= Subject key identifier: D2:EF:DB:2D:E1:8B:31:D6:A8:4F:D4:7C:A1:C8:C8:D4:CF:BA:20:0D Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 5BC5B56E0874D2DCF6CDFAC90204AF0911D6EB2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: 9F Signing time: Mon 20 Oct 2025 06:21:51 +0000 Manifest this update: Mon 20 Oct 2025 06:16:51 +0000 Manifest next update: Thu 23 Oct 2025 11:36:51 +0000 Files and hashes: 1: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: 9naFWFl6sq00DuE5W3/8VQn8qqHRUWWR7BpwNKCzzXQ=) 2: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: 0PyZ1Izmcdz8RbI4pvamYzCkDML//PlzpXnY61vINZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c5:b5:6e:08:74:d2:dc:f6:cd:fa:c9:02:04:af:09:11:d6:eb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: Oct 20 06:16:51 2025 GMT Not After : Oct 23 11:36:51 2025 GMT Subject: CN=D2EFDB2DE18B31D6A84FD47CA1C8C8D4CFBA200D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b9:ff:85:d6:47:3e:32:c7:8a:76:ba:8c:bb: 90:13:ae:84:b4:09:6e:46:f3:38:6f:d0:b1:63:be: f8:2a:b1:14:2a:3f:6f:8d:ff:97:45:19:68:bd:1f: aa:aa:cf:60:ee:b8:c6:4b:0d:75:d0:ac:0d:11:97: 28:43:54:1e:16:89:21:98:30:49:da:ae:b1:ff:f1: e1:66:3c:31:93:71:f3:c4:7d:24:48:d8:ae:fa:4e: c3:92:f6:0d:ca:a9:63:8e:c9:d2:4d:36:0a:bd:b9: 2b:31:f3:83:1e:da:9a:cb:7a:94:7c:4d:37:48:d9: a9:0f:9c:90:84:fc:ec:61:19:58:3d:f8:30:a8:df: ef:f3:d4:d7:33:87:01:5b:94:42:83:bd:d2:ea:cf: d9:6c:d8:2f:d1:bf:8f:44:f4:80:04:20:9d:9d:9b: 60:a2:06:f5:3d:48:fd:98:61:e9:58:f2:87:2e:6c: 4f:4a:e5:b2:fb:08:99:ce:80:d9:aa:91:b1:34:a6: a4:79:52:04:17:8b:52:3a:14:9c:f8:7a:52:c5:53: f5:74:3a:a2:31:50:6b:f9:a6:82:94:b0:5b:b1:ad: 23:0f:5f:1c:ca:bc:39:8e:80:0a:65:d4:0a:2c:47: 02:bd:fb:73:40:86:a3:a2:32:3a:0b:79:c8:9a:d4: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EF:DB:2D:E1:8B:31:D6:A8:4F:D4:7C:A1:C8:C8:D4:CF:BA:20:0D X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:98:8b:4f:75:bc:ca:cc:33:9a:be:9c:b9:5c:ad:18:4d:97: a3:38:0c:84:fc:cd:63:ce:6d:2a:1e:bd:77:1b:09:8f:64:3a: 1e:f1:dd:6a:28:0f:34:8e:84:ca:cf:4e:33:08:b2:6a:23:e2: 04:91:8f:05:67:62:2c:83:80:86:bd:27:55:c2:e5:b8:84:81: ec:d2:32:e0:74:d2:ff:6c:12:03:85:2d:ee:48:b1:68:0b:0a: ff:52:eb:14:27:5b:c3:a7:f9:e2:5d:76:ce:7f:63:b4:aa:02: de:62:8f:fb:b4:c7:aa:28:50:55:74:64:2e:96:b0:e0:c5:45: ce:c0:53:6f:3e:9b:96:80:25:00:12:63:ab:c0:e9:fd:97:b3: a2:9a:30:eb:95:b1:9b:cb:32:db:c8:c3:7d:7e:f7:09:4e:7a: ae:4e:c6:ad:11:55:af:9e:53:b1:8a:ee:13:f8:6c:b7:b6:7c: 32:3e:5a:f5:fb:de:5d:cc:40:7d:b6:7e:55:4d:9d:5e:87:41: b3:ed:84:da:49:ac:48:b9:be:37:71:24:d0:e4:c1:25:4f:b4: ec:ba:be:21:6c:16:99:5a:f3:f7:95:bc:9d:45:38:58:11:2b: 69:94:03:92:32:b9:6c:44:b0:26:9a:36:7c:37:02:3b:d2:01: 16:48:ad:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8W1bgh00tz2zfrJAgSvCRHW6ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNTEwMjAwNjE2NTFaFw0yNTEwMjMxMTM2NTFaMDMxMTAvBgNV BAMTKEQyRUZEQjJERTE4QjMxRDZBODRGRDQ3Q0ExQzhDOEQ0Q0ZCQTIwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuf+F1kc+MseKdrqMu5ATroS0 CW5G8zhv0LFjvvgqsRQqP2+N/5dFGWi9H6qqz2DuuMZLDXXQrA0RlyhDVB4WiSGY MEnarrH/8eFmPDGTcfPEfSRI2K76TsOS9g3KqWOOydJNNgq9uSsx84Me2prLepR8 TTdI2akPnJCE/OxhGVg9+DCo3+/z1NczhwFblEKDvdLqz9ls2C/Rv49E9IAEIJ2d m2CiBvU9SP2YYelY8ocubE9K5bL7CJnOgNmqkbE0pqR5UgQXi1I6FJz4elLFU/V0 OqIxUGv5poKUsFuxrSMPXxzKvDmOgApl1AosRwK9+3NAhqOiMjoLecia1MzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0u/bLeGLMdaoT9R8ocjI1M+6IA0wHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaYi091vMrMM5q+nLlcrRhNl6M4DIT8zWPO bSoevXcbCY9kOh7x3WooDzSOhMrPTjMIsmoj4gSRjwVnYiyDgIa9J1XC5biEgezS MuB00v9sEgOFLe5IsWgLCv9S6xQnW8On+eJdds5/Y7SqAt5ij/u0x6ooUFV0ZC6W sODFRc7AU28+m5aAJQASY6vA6f2Xs6KaMOuVsZvLMtvIw31+9wlOeq5Oxq0RVa+e U7GK7hP4bLe2fDI+WvX73l3MQH22flVNnV6HQbPthNpJrEi5vjdxJNDkwSVPtOy6 viFsFpla8/eVvJ1FOFgRK2mUA5IyuWxEsCaaNnw3AjvSARZIrXE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:06 2025 by rpki-client