$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: hmnuweIkW8JM8GehCXggNSiAUubaDMD6Q2moN/RougE= Subject key identifier: BD:DD:06:AC:08:E3:0F:76:A6:40:85:63:40:95:1E:92:12:D0:F3:4D Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 09C3F4552C74BBD50CF8BBE1F08DD27C1681D4F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 021C Signing time: Sat 18 Oct 2025 09:40:53 +0000 Manifest this update: Sat 18 Oct 2025 09:35:53 +0000 Manifest next update: Tue 21 Oct 2025 16:17:53 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 2: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yYJNqR/G5sUAXMOF0IPap8wZFYolAZMC0i9H8SllRlI=) 3: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: bCzkIgB70ajSSrVVAB9j10oP0ROCvNGzfg5H7ZKOAeA=) 4: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c3:f4:55:2c:74:bb:d5:0c:f8:bb:e1:f0:8d:d2:7c:16:81:d4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Oct 18 09:35:53 2025 GMT Not After : Oct 21 16:17:53 2025 GMT Subject: CN=BDDD06AC08E30F76A640856340951E9212D0F34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:75:14:a7:eb:1a:e5:7a:6a:96:13:bd:0b: a2:b3:bf:4f:bc:81:04:97:b0:07:7b:71:68:4b:3f: 2c:43:d3:c1:71:8c:23:3b:71:6b:ed:88:1b:88:7e: d1:d8:55:a0:39:74:8d:93:67:7e:3c:09:76:de:4f: 40:75:87:d5:d9:e2:19:84:19:03:5e:0e:99:63:a6: a7:e8:23:1d:c1:c7:35:94:63:6d:23:15:de:4c:f8: 0b:85:dd:5a:b0:5e:d5:ce:82:9e:83:bc:fa:95:71: dc:1d:05:a5:f5:e0:8c:32:45:c8:54:47:00:c5:25: 89:4d:e1:56:f2:0d:f5:9d:bf:93:df:c1:42:56:e0: 65:5f:53:08:a4:30:cc:c1:cc:d2:9e:7a:95:93:46: c3:6f:0d:11:0d:6f:bb:a4:69:d4:65:a8:37:24:18: c1:8f:68:cb:ef:a1:04:42:64:b7:01:10:04:cc:86: b4:8d:39:85:ee:3d:45:38:3b:28:a1:25:af:e1:0c: 2c:2e:19:4b:ae:e5:d4:c9:f4:78:0c:16:0f:db:b2: 2f:36:71:03:eb:52:d3:40:ef:e9:a7:0c:d4:b3:de: f1:79:d8:06:12:18:0e:b1:d4:8a:85:af:30:8a:41: 5c:ff:b7:87:b2:9c:1e:73:95:80:cd:fe:b9:8a:91: 33:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:06:AC:08:E3:0F:76:A6:40:85:63:40:95:1E:92:12:D0:F3:4D X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:9d:71:82:70:9c:a4:5d:b6:31:08:a7:f4:37:f7:8d:42:ae: 9c:27:8c:89:26:cd:3b:06:f6:8d:f1:c4:42:f6:16:75:0c:f7: b1:14:3b:5d:66:6e:7a:f3:b0:dd:69:8e:a7:13:b0:d5:71:51: 57:d3:7c:d0:12:cb:60:da:10:af:f1:e7:89:f0:af:1c:e8:01: b2:90:a3:79:46:50:41:66:a2:f9:f3:67:ba:d2:e1:39:4b:db: 2d:8b:9c:73:93:13:ba:ed:ec:f2:ac:ed:3b:0a:e4:4a:aa:33: bb:a0:70:44:b5:cc:6a:b4:56:d8:0d:04:f4:cb:2f:1e:36:c0: b9:b3:29:72:a2:95:e3:88:5c:3f:01:11:a7:ee:5f:11:5d:fd: 11:18:d6:f0:84:b3:c7:4c:cc:53:d5:34:40:4e:13:a6:a4:e5: da:08:0f:c3:8d:07:bf:a6:98:4e:45:b9:34:7d:24:37:76:8d: aa:da:1c:23:aa:dd:ff:c9:31:7f:27:22:33:43:90:5e:1c:de: c3:15:02:77:3a:18:7f:8f:0d:03:6a:25:10:1f:c7:dc:6e:d8: b7:be:5f:90:15:97:e5:b9:50:e7:7c:18:56:58:ff:72:98:4b: 2c:35:10:0f:52:91:1f:1c:f5:bc:c8:a8:8e:26:b9:4a:8b:2a: 91:a1:ef:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcP0VSx0u9UM+Lvh8I3SfBaB1PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTEwMTgwOTM1NTNaFw0yNTEwMjExNjE3NTNaMDMxMTAvBgNV BAMTKEJEREQwNkFDMDhFMzBGNzZBNjQwODU2MzQwOTUxRTkyMTJEMEYzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/m3UUp+sa5XpqlhO9C6Kzv0+8 gQSXsAd7cWhLPyxD08FxjCM7cWvtiBuIftHYVaA5dI2TZ348CXbeT0B1h9XZ4hmE GQNeDpljpqfoIx3BxzWUY20jFd5M+AuF3VqwXtXOgp6DvPqVcdwdBaX14IwyRchU RwDFJYlN4VbyDfWdv5PfwUJW4GVfUwikMMzBzNKeepWTRsNvDRENb7ukadRlqDck GMGPaMvvoQRCZLcBEATMhrSNOYXuPUU4OyihJa/hDCwuGUuu5dTJ9HgMFg/bsi82 cQPrUtNA7+mnDNSz3vF52AYSGA6x1IqFrzCKQVz/t4eynB5zlYDN/rmKkTOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvd0GrAjjD3amQIVjQJUekhLQ800wHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALedcYJwnKRdtjEIp/Q3941CrpwnjIkmzTsG 9o3xxEL2FnUM97EUO11mbnrzsN1pjqcTsNVxUVfTfNASy2DaEK/x54nwrxzoAbKQ o3lGUEFmovnzZ7rS4TlL2y2LnHOTE7rt7PKs7TsK5EqqM7ugcES1zGq0VtgNBPTL Lx42wLmzKXKileOIXD8BEafuXxFd/REY1vCEs8dMzFPVNEBOE6ak5doID8ONB7+m mE5FuTR9JDd2jaraHCOq3f/JMX8nIjNDkF4c3sMVAnc6GH+PDQNqJRAfx9xu2Le+ X5AVl+W5UOd8GFZY/3KYSyw1EA9SkR8c9bzIqI4muUqLKpGh79c= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:34 2025 by rpki-client