$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: XqI0StjP9hyvGhuFXxkTIaOYoIhyBw5fN3YQlrn+tmA= Subject key identifier: AD:96:AA:38:BC:B1:ED:A6:62:3B:5B:61:FF:63:6F:F4:DB:AF:84:54 Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 78A7C8986F1295B8370F84E2343463A9788D437F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 0216 Signing time: Sat 18 Oct 2025 06:41:53 +0000 Manifest this update: Sat 18 Oct 2025 06:36:53 +0000 Manifest next update: Tue 21 Oct 2025 11:36:53 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: Pi8eKZW1pVHRNrnaYFGihs861mhgMOfL7xKhUyuosQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a7:c8:98:6f:12:95:b8:37:0f:84:e2:34:34:63:a9:78:8d:43:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Oct 18 06:36:53 2025 GMT Not After : Oct 21 11:36:53 2025 GMT Subject: CN=AD96AA38BCB1EDA6623B5B61FF636FF4DBAF8454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:5d:21:97:c5:4f:f1:ac:9c:e9:61:62:fc: 4b:3f:8a:0e:54:2c:ed:13:d9:46:53:00:30:fa:f2: f0:51:1a:36:71:25:93:b8:b9:be:14:2a:dd:8c:63: c1:d8:af:16:53:7d:e1:99:9c:ca:e9:d9:07:8e:2a: 33:cd:8f:dc:08:f7:75:78:23:4a:66:6c:32:6d:c6: d4:1b:83:e6:5e:8f:74:34:61:b4:a0:db:41:11:bd: 2b:30:e9:79:23:97:bf:94:0c:36:35:f5:eb:bc:19: 40:59:69:0d:ea:22:cf:62:2f:9b:70:e5:da:b3:33: da:b2:53:16:74:9f:4e:a8:38:30:d0:4f:e5:cf:c1: 70:bb:09:4b:52:4d:8d:d0:3b:4a:0c:29:26:f9:72: 3b:77:75:dd:46:5a:e1:a7:6f:81:64:5e:03:0c:06: 13:9a:e6:5d:fe:1c:60:9d:42:d6:f9:4e:b7:27:ed: 71:b7:dd:19:78:88:41:69:88:b7:8a:aa:63:46:32: 3f:69:9b:17:75:80:69:21:6c:55:2b:38:c9:ac:bc: a0:84:b0:91:74:1c:97:61:74:9f:7c:ef:f8:67:65: b2:5f:6b:7f:8f:b3:08:40:9e:7c:8f:d6:9d:42:3d: 0c:6d:7e:47:a5:04:30:0b:bc:b1:a1:cf:c7:0d:59: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:AA:38:BC:B1:ED:A6:62:3B:5B:61:FF:63:6F:F4:DB:AF:84:54 X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c3:77:60:2c:7c:f6:4d:db:a2:71:21:a9:df:18:72:57:b0: 3b:6e:01:c7:da:2a:4c:35:13:b3:47:88:f8:2d:0e:15:72:51: 04:0a:fd:c6:4f:69:73:32:77:22:be:ba:37:01:a5:f7:6f:dc: c8:a9:fd:5a:12:c7:37:95:7d:96:aa:eb:cf:3c:f4:5a:07:75: 29:16:d6:06:56:a7:11:9d:f6:6c:e1:fd:76:55:80:94:ae:31: 15:c8:7e:7c:78:1e:cb:62:12:8d:80:2b:f8:90:2a:8f:a5:8f: 9d:8e:63:ef:30:ae:50:e9:57:84:38:75:83:51:91:37:df:42: bc:17:13:eb:73:08:60:18:64:71:08:bf:68:13:a7:f7:a6:8c: 64:ae:d8:89:f8:7b:07:81:30:e8:e9:17:ba:3e:ff:d1:ad:e3: 02:e3:16:c6:7d:7a:cc:0d:4f:c8:91:15:25:dc:ac:5b:1b:9d: eb:4f:3c:d1:e6:7d:bd:73:4e:84:d8:7d:5f:d0:ef:43:b8:d1: 61:5d:d8:32:3d:11:cb:58:c7:9a:62:96:15:ec:c3:6b:44:05: ee:f1:ba:3a:91:fa:05:ac:5c:bd:30:ed:37:8a:d4:d5:93:85: 7c:57:3f:ba:4b:4d:9b:b1:18:1b:bc:20:59:33:82:17:58:a3: 88:1d:54:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKfImG8Slbg3D4TiNDRjqXiNQ38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTEwMTgwNjM2NTNaFw0yNTEwMjExMTM2NTNaMDMxMTAvBgNV BAMTKEFEOTZBQTM4QkNCMUVEQTY2MjNCNUI2MUZGNjM2RkY0REJBRjg0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sV0hl8VP8ayc6WFi/Es/ig5U LO0T2UZTADD68vBRGjZxJZO4ub4UKt2MY8HYrxZTfeGZnMrp2QeOKjPNj9wI93V4 I0pmbDJtxtQbg+Zej3Q0YbSg20ERvSsw6Xkjl7+UDDY19eu8GUBZaQ3qIs9iL5tw 5dqzM9qyUxZ0n06oODDQT+XPwXC7CUtSTY3QO0oMKSb5cjt3dd1GWuGnb4FkXgMM BhOa5l3+HGCdQtb5Trcn7XG33Rl4iEFpiLeKqmNGMj9pmxd1gGkhbFUrOMmsvKCE sJF0HJdhdJ987/hnZbJfa3+PswhAnnyP1p1CPQxtfkelBDALvLGhz8cNWZXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZaqOLyx7aZiO1th/2Nv9NuvhFQwHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvDd2AsfPZN26JxIanfGHJXsDtuAcfaKkw1 E7NHiPgtDhVyUQQK/cZPaXMydyK+ujcBpfdv3Mip/VoSxzeVfZaq68889FoHdSkW 1gZWpxGd9mzh/XZVgJSuMRXIfnx4HstiEo2AK/iQKo+lj52OY+8wrlDpV4Q4dYNR kTffQrwXE+tzCGAYZHEIv2gTp/emjGSu2In4eweBMOjpF7o+/9Gt4wLjFsZ9eswN T8iRFSXcrFsbnetPPNHmfb1zToTYfV/Q70O40WFd2DI9EctYx5pilhXsw2tEBe7x ujqR+gWsXL0w7TeK1NWThXxXP7pLTZuxGBu8IFkzghdYo4gdVGI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:10:51 2025 by rpki-client