$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: ZQCNM5v7e0pyhBXJhXWuqtsafWx4NmVMzdMnsjmMWF0= Subject key identifier: 34:6E:D2:65:50:8A:95:0A:2F:22:83:23:CE:29:92:70:FF:E4:DB:F6 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 11A4DBEFCA30C5722D3271E3B1AD27764009C5F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 037B Signing time: Sun 19 Oct 2025 19:21:28 +0000 Manifest this update: Sun 19 Oct 2025 19:16:28 +0000 Manifest next update: Thu 23 Oct 2025 04:06:28 +0000 Files and hashes: 1: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: YZybnatuJeh7u2fO8F7JgRUQIZRxK+OuEy6fQVB7To4=) 2: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 3: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) 4: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 5: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a4:db:ef:ca:30:c5:72:2d:32:71:e3:b1:ad:27:76:40:09:c5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Oct 19 19:16:28 2025 GMT Not After : Oct 23 04:06:28 2025 GMT Subject: CN=346ED265508A950A2F228323CE299270FFE4DBF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:b0:2a:ff:67:a1:ab:b1:b6:5b:da:5f:2a: bf:30:65:50:a8:16:45:bb:46:e5:48:7f:6a:d7:9a: aa:95:cf:d7:f9:ed:ab:37:a7:a5:c0:8a:9c:88:3e: 68:b6:2f:67:10:f6:a3:fa:2e:98:f8:4c:c7:9f:b4: da:7d:3b:d5:b8:b1:f9:d6:54:26:b3:b5:64:8a:dd: d8:1c:f4:15:70:09:2b:09:2c:7a:c0:35:55:08:f6: ba:3a:64:f3:1a:23:5c:66:44:9b:7f:8e:d1:1b:55: af:e5:fa:59:94:ba:b1:15:0c:79:c4:2b:70:0a:90: 93:d3:07:0e:cd:67:ec:24:90:c6:e8:98:c0:ca:81: 2f:7a:4f:53:30:93:d1:a5:de:20:bd:f8:b0:80:b0: d2:2f:f9:ad:cb:df:04:6b:bb:bd:bc:93:d7:82:c3: 48:f3:fc:bb:30:d1:17:d0:77:25:45:83:55:a4:6d: 88:5f:53:ec:1a:5e:41:a6:a7:3f:f2:a1:a8:c0:60: f8:95:6a:a8:f9:32:77:93:34:78:19:68:40:a8:75: 52:24:97:6e:bb:5b:c4:f9:f4:ee:6c:ce:38:3a:14: b3:e7:59:f9:46:f3:a9:b3:25:09:91:39:6d:db:83: af:36:bb:e9:3e:00:ea:f7:81:be:92:87:25:34:11: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6E:D2:65:50:8A:95:0A:2F:22:83:23:CE:29:92:70:FF:E4:DB:F6 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d2:b8:3b:bb:b6:27:c0:7f:ba:34:02:81:26:75:41:27:c9: f4:d8:20:db:6d:0d:12:b9:00:d1:03:76:d8:7d:71:3e:cc:71: 4e:15:66:50:73:3a:3e:bb:d0:ea:6f:92:54:3b:ba:2b:c7:dc: 45:a0:c5:21:c7:6b:57:55:e6:cf:be:bb:65:bc:55:0f:22:39: e0:97:bc:0f:1e:5f:78:24:e0:da:fb:e5:c9:20:a4:d1:16:ce: 7c:f5:1d:bf:f8:fa:d6:3b:e0:fb:be:ce:56:eb:5d:4b:1e:7f: 82:ca:12:78:8d:87:1d:ee:4a:9b:5e:6a:90:92:20:ea:07:fc: 91:b1:d4:0e:31:89:47:0f:2a:3b:e8:02:1f:c2:ab:d6:7c:04: 25:b8:7b:c0:96:f7:1a:8d:a4:f8:11:5a:9f:2e:00:b2:66:48: f7:fb:67:b8:31:40:f6:c7:4f:17:45:bf:ad:31:d2:94:c3:70: f8:b9:9d:a8:53:fb:6e:6a:f5:6b:bc:b4:67:7f:99:a6:e1:9e: 3f:49:4d:4b:d7:54:e6:8e:41:70:07:1a:88:21:9d:4e:1e:56: 19:b6:bf:bb:a0:0e:b4:e4:1c:ab:f7:41:77:74:b2:45:19:87: 37:b6:23:d6:b1:c4:04:ff:29:62:84:e3:42:21:d8:a2:64:d9: 4f:ad:76:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEaTb78owxXItMnHjsa0ndkAJxfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTEwMTkxOTE2MjhaFw0yNTEwMjMwNDA2MjhaMDMxMTAvBgNV BAMTKDM0NkVEMjY1NTA4QTk1MEEyRjIyODMyM0NFMjk5MjcwRkZFNERCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Q7Aq/2ehq7G2W9pfKr8wZVCo FkW7RuVIf2rXmqqVz9f57as3p6XAipyIPmi2L2cQ9qP6Lpj4TMeftNp9O9W4sfnW VCaztWSK3dgc9BVwCSsJLHrANVUI9ro6ZPMaI1xmRJt/jtEbVa/l+lmUurEVDHnE K3AKkJPTBw7NZ+wkkMbomMDKgS96T1Mwk9Gl3iC9+LCAsNIv+a3L3wRru728k9eC w0jz/Lsw0RfQdyVFg1WkbYhfU+waXkGmpz/yoajAYPiVaqj5MneTNHgZaECodVIk l267W8T59O5szjg6FLPnWflG86mzJQmROW3bg682u+k+AOr3gb6ShyU0EZuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNG7SZVCKlQovIoMjzimScP/k2/YwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnSuDu7tifAf7o0AoEmdUEnyfTYINttDRK5 ANEDdth9cT7McU4VZlBzOj670OpvklQ7uivH3EWgxSHHa1dV5s++u2W8VQ8iOeCX vA8eX3gk4Nr75ckgpNEWznz1Hb/4+tY74Pu+zlbrXUsef4LKEniNhx3uSpteapCS IOoH/JGx1A4xiUcPKjvoAh/Cq9Z8BCW4e8CW9xqNpPgRWp8uALJmSPf7Z7gxQPbH TxdFv60x0pTDcPi5nahT+25q9Wu8tGd/mabhnj9JTUvXVOaOQXAHGoghnU4eVhm2 v7ugDrTkHKv3QXd0skUZhze2I9axxAT/KWKE40Ih2KJk2U+tdiI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:42 2025 by rpki-client