$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: uaPEJnCfjmwmSfQm7z1lDPsEi25NeXpi6YABhvGG1JQ= Subject key identifier: D4:C7:8D:13:0D:8F:13:0F:81:DA:9A:2D:84:D8:47:8C:BE:A4:F4:FE Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 285CA94C3FFB4513642A56411EAEB63CAB4E60AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 047B Signing time: Mon 20 Oct 2025 08:31:10 +0000 Manifest this update: Mon 20 Oct 2025 08:26:10 +0000 Manifest next update: Thu 23 Oct 2025 10:30:10 +0000 Files and hashes: 1: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: 4Nyf95sTRdqoKN64WuRTyc5m5hoROhK6oFKdH03e8KY=) 2: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 9ih//U/iPAsPFZQIcxukFDIuvhJTLAD0tRGBXhc3tOc=) 3: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: Mw3b8MoCpqH7cqyOFAxcpLnFa6KNwpxwHxF1pAX+vV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5c:a9:4c:3f:fb:45:13:64:2a:56:41:1e:ae:b6:3c:ab:4e:60:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Oct 20 08:26:10 2025 GMT Not After : Oct 23 10:30:10 2025 GMT Subject: CN=D4C78D130D8F130F81DA9A2D84D8478CBEA4F4FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:25:d2:99:91:57:71:ee:5c:ce:a8:03:cd: 33:55:9a:3e:3e:86:39:54:94:46:f1:5b:cd:1a:fb: 96:9d:15:01:57:71:81:8d:aa:54:d8:4c:ff:e2:b8: c4:6d:6a:bd:78:6b:8e:ef:59:82:6b:5f:d4:3d:62: ae:95:92:ee:8a:b2:29:e1:bb:db:b6:8a:87:60:55: 33:05:1b:b4:d7:de:11:8f:2f:a2:b6:00:b0:9a:1f: e7:a0:0c:19:96:d7:8b:cf:b3:fe:62:7c:ac:5c:d8: 11:4f:b7:d8:5d:b7:15:1e:39:23:4b:ee:cb:1a:df: e3:d6:cb:21:c7:6e:ee:55:59:0a:78:16:fb:60:1d: 72:a9:5e:ea:f4:bf:00:55:39:79:1b:fb:ec:82:c6: 58:21:63:a6:ac:6d:4e:e3:70:54:0a:6d:68:71:37: ae:0a:da:6a:95:0a:d3:a9:4f:44:c0:c7:16:44:73: 3f:1d:38:5c:a0:34:01:aa:9a:76:59:7b:dd:79:0a: bf:03:70:4a:40:2b:72:0f:12:a7:1b:d7:53:70:ed: 2a:c3:b5:fa:45:6f:7d:ba:69:29:9c:e7:61:b3:2f: 38:2e:fe:46:c7:11:33:8e:28:6f:bd:92:9f:ec:e3: e7:00:d4:2e:25:e8:f3:93:ea:c7:55:be:f8:86:61: ee:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C7:8D:13:0D:8F:13:0F:81:DA:9A:2D:84:D8:47:8C:BE:A4:F4:FE X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6e:46:1d:74:08:70:e1:63:04:83:92:b0:af:b0:64:be:67: c4:a1:db:c1:55:ed:e6:e2:56:ce:33:fb:46:8b:c9:99:9d:3c: 76:1c:eb:d1:85:eb:9e:aa:87:b3:1f:1e:b3:72:b2:b5:d1:06: c6:a7:28:3a:1e:9a:52:8c:55:91:ca:42:48:7e:91:3a:62:b4: 77:99:9e:d0:7b:8f:47:09:01:68:bf:23:62:82:3c:d3:ed:4e: 00:52:b3:86:88:80:e9:13:86:f4:1f:0b:39:eb:c0:2c:ad:80: 2a:7c:7b:40:8f:40:a8:20:0a:bb:6c:fa:96:c4:c9:b3:55:13: 49:41:c3:d6:a9:b6:13:be:4c:f7:31:a5:c0:97:c9:d7:c8:85: 75:ea:bb:f6:e1:4f:66:08:b8:53:b2:f2:19:c7:80:45:05:74: a9:5d:db:f7:e7:bd:72:ee:4b:83:fa:a5:f0:95:a2:4f:b6:80: d3:78:95:23:7d:cd:37:1d:ae:6b:a9:a9:f8:f6:bd:0b:24:6f: 9f:5c:73:83:b6:27:a0:aa:bb:d9:aa:08:03:09:45:8f:06:68: 73:de:7f:48:84:5f:c7:61:ed:36:4c:6c:09:06:a9:09:ff:33: 8e:3f:ba:3f:b4:56:a4:9f:2e:88:72:9b:d0:a1:eb:67:8f:c6: 76:1b:db:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKFypTD/7RRNkKlZBHq62PKtOYKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTEwMjAwODI2MTBaFw0yNTEwMjMxMDMwMTBaMDMxMTAvBgNV BAMTKEQ0Qzc4RDEzMEQ4RjEzMEY4MURBOUEyRDg0RDg0NzhDQkVBNEY0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CiXSmZFXce5czqgDzTNVmj4+ hjlUlEbxW80a+5adFQFXcYGNqlTYTP/iuMRtar14a47vWYJrX9Q9Yq6Vku6Ksinh u9u2iodgVTMFG7TX3hGPL6K2ALCaH+egDBmW14vPs/5ifKxc2BFPt9hdtxUeOSNL 7ssa3+PWyyHHbu5VWQp4FvtgHXKpXur0vwBVOXkb++yCxlghY6asbU7jcFQKbWhx N64K2mqVCtOpT0TAxxZEcz8dOFygNAGqmnZZe915Cr8DcEpAK3IPEqcb11Nw7SrD tfpFb326aSmc52GzLzgu/kbHETOOKG+9kp/s4+cA1C4l6POT6sdVvviGYe6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MeNEw2PEw+B2pothNhHjL6k9P4wHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxuRh10CHDhYwSDkrCvsGS+Z8Sh28FV7ebi Vs4z+0aLyZmdPHYc69GF656qh7MfHrNysrXRBsanKDoemlKMVZHKQkh+kTpitHeZ ntB7j0cJAWi/I2KCPNPtTgBSs4aIgOkThvQfCznrwCytgCp8e0CPQKggCrts+pbE ybNVE0lBw9apthO+TPcxpcCXydfIhXXqu/bhT2YIuFOy8hnHgEUFdKld2/fnvXLu S4P6pfCVok+2gNN4lSN9zTcdrmupqfj2vQskb59cc4O2J6Cqu9mqCAMJRY8GaHPe f0iEX8dh7TZMbAkGqQn/M44/uj+0VqSfLohym9Ch62ePxnYb2xQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:28 2025 by rpki-client