$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft File: 2E55483B906244D2DA357F014F9AFA606D95C345.mft (raw, json) Hash identifier: PafMPS9gOCjTDL3NDqoGJ/NxXUgoGZGgjtv3MopHIa0= Subject key identifier: 1E:F8:AB:55:E3:C6:E6:22:11:CC:F6:6D:AF:C2:BD:01:9B:E4:80:FF Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345 Certificate serial: 2ACBBBAD488323100044701E8F625C4BD81B48A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft Manifest number: EC Signing time: Mon 20 Oct 2025 01:21:12 +0000 Manifest this update: Mon 20 Oct 2025 01:16:12 +0000 Manifest next update: Thu 23 Oct 2025 02:32:12 +0000 Files and hashes: 1: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: UMm8CVytUz3mnXPaURu9cvBWCMEG+/Kh9q1dvGzVdN0=) 2: 2E55483B906244D2DA357F014F9AFA606D95C345.crl (hash: i1j50ISjWtFNeiZvQseMaQW4mDqO8VTJn5hlL8AHRXM=) 3: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: Du41YA1NCiK2HlEV88F/QDnyK1sLmVF33xCMfe54rMI=) 4: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: d6+MpeOwnH/agtVVZkfqBxwK6cPDeJjFB6fgvTWTTwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cb:bb:ad:48:83:23:10:00:44:70:1e:8f:62:5c:4b:d8:1b:48:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345 Validity Not Before: Oct 20 01:16:12 2025 GMT Not After : Oct 23 02:32:12 2025 GMT Subject: CN=1EF8AB55E3C6E62211CCF66DAFC2BD019BE480FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:cb:67:7d:7a:18:ff:c3:ab:a1:70:58:c5: d1:35:ea:d6:ba:ce:73:d7:ae:b0:4c:8a:ef:3e:b3: a9:84:0d:9c:af:b8:6d:be:4a:27:97:6c:ee:f5:da: 7f:cd:bc:a2:a1:4a:b8:d3:b0:b0:9a:5f:41:cb:05: 91:26:3c:dc:73:d4:f4:e3:5b:72:e0:37:9d:15:0f: 7a:a9:3c:e5:0a:f7:19:d4:c3:b9:7d:97:f3:fc:5b: 7f:b1:18:eb:aa:0f:e3:fe:21:b4:70:92:fd:09:10: 9a:22:23:ed:99:62:71:c5:9b:b9:ab:13:1f:71:e0: e5:11:86:7a:f8:63:1a:4e:ff:f8:7a:2b:1e:e0:f0: 40:89:6e:26:74:71:d6:e7:46:8f:e9:f0:b1:6e:63: 88:2f:6d:fe:61:47:ec:dc:1f:d7:ed:4a:a5:ea:6a: 01:58:e8:02:f2:16:b1:10:af:b8:70:84:ba:91:42: ab:50:f7:99:ff:16:0d:f8:bc:d9:29:6e:05:13:74: a9:7b:b8:71:53:97:04:c8:6b:8a:e8:87:31:fb:d7: 3f:c4:22:00:24:85:a5:64:74:a1:37:81:6d:a4:1f: 1f:2d:7c:98:42:c4:67:05:a5:ec:a5:91:9b:b4:12: 15:13:af:fc:5a:f4:dc:3c:ca:c6:98:de:25:a1:45: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F8:AB:55:E3:C6:E6:22:11:CC:F6:6D:AF:C2:BD:01:9B:E4:80:FF X509v3 Authority Key Identifier: keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:17:a5:56:a7:a6:d7:b1:58:bd:0b:70:f1:89:29:fe:ee:22: 1c:4f:12:0d:ef:37:28:a7:60:f0:5e:7b:7d:16:c9:bb:e9:64: d5:9d:d1:4b:61:4b:f0:72:88:eb:59:02:d7:73:ee:52:ad:0b: 57:c6:67:7a:e3:37:a6:04:92:a8:cf:6b:8a:2c:7c:3c:b8:0e: c1:88:f9:d3:9d:47:54:ba:6c:e2:42:6a:e5:3a:0a:ea:5d:bc: 10:32:cb:11:cb:e7:c0:8a:9c:61:86:b0:f9:5f:7e:e0:3f:89: e6:0b:1a:c8:63:ff:c4:2f:41:8f:18:fa:22:fe:86:98:73:e9: 87:69:db:02:6d:52:79:2f:2c:a1:90:e7:1e:59:44:3b:73:c7: a0:b0:a7:5b:40:93:e7:26:8f:22:7f:1d:90:c8:4a:11:c6:81: 22:5e:0a:2d:59:89:e4:6d:21:36:a0:2b:91:df:d1:eb:77:72: de:da:c5:c2:4e:13:8b:a3:70:22:23:4d:89:33:3f:54:d8:48: 85:b9:05:0f:92:1c:8e:ae:e9:1c:21:04:08:de:66:54:13:6f: 10:f1:5b:55:b0:77:c9:23:a3:cd:50:ac:d4:21:7a:a2:bf:76: c8:80:42:73:ad:b1:31:08:f6:ad:61:09:84:e2:15:c0:50:ce: 8d:06:99:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsu7rUiDIxAARHAej2JcS9gbSKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2 RDk1QzM0NTAeFw0yNTEwMjAwMTE2MTJaFw0yNTEwMjMwMjMyMTJaMDMxMTAvBgNV BAMTKDFFRjhBQjU1RTNDNkU2MjIxMUNDRjY2REFGQzJCRDAxOUJFNDgwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1ctnfXoY/8OroXBYxdE16ta6 znPXrrBMiu8+s6mEDZyvuG2+SieXbO712n/NvKKhSrjTsLCaX0HLBZEmPNxz1PTj W3LgN50VD3qpPOUK9xnUw7l9l/P8W3+xGOuqD+P+IbRwkv0JEJoiI+2ZYnHFm7mr Ex9x4OURhnr4YxpO//h6Kx7g8ECJbiZ0cdbnRo/p8LFuY4gvbf5hR+zcH9ftSqXq agFY6ALyFrEQr7hwhLqRQqtQ95n/Fg34vNkpbgUTdKl7uHFTlwTIa4rohzH71z/E IgAkhaVkdKE3gW2kHx8tfJhCxGcFpeylkZu0EhUTr/xa9Nw8ysaY3iWhRcSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHvirVePG5iIRzPZtr8K9AZvkgP8wHwYDVR0j BBgwFoAULlVIO5BiRNLaNX8BT5r6YG2Vw0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMC8yRTU1NDgzQjkw NjI0NEQyREEzNTdGMDE0RjlBRkE2MDZEOTVDMzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2RDk1 QzM0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi NmEtNGZkYzM4N2ViYzU4LzAvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZB NjA2RDk1QzM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUXpVanptexWL0LcPGJKf7uIhxPEg3vNyin YPBee30WybvpZNWd0UthS/ByiOtZAtdz7lKtC1fGZ3rjN6YEkqjPa4osfDy4DsGI +dOdR1S6bOJCauU6CupdvBAyyxHL58CKnGGGsPlffuA/ieYLGshj/8QvQY8Y+iL+ hphz6Ydp2wJtUnkvLKGQ5x5ZRDtzx6Cwp1tAk+cmjyJ/HZDIShHGgSJeCi1ZieRt ITagK5Hf0et3ct7axcJOE4ujcCIjTYkzP1TYSIW5BQ+SHI6u6RwhBAjeZlQTbxDx W1Wwd8kjo81QrNQheqK/dsiAQnOtsTEI9q1hCYTiFcBQzo0Gmd4= -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:39 2025 by rpki-client