$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft File: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json) Hash identifier: 8hv+Kh3FczchaMQxyJ5zqTwSH6wAvVC5NvQI8SRIN84= Subject key identifier: 81:91:D7:F3:75:35:15:D1:1D:1A:B0:D0:3B:B2:A6:AE:7F:A6:22:F4 Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 07C8B14F12924928BCDF3E0D63467F77E2548449 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft Manifest number: 04EB Signing time: Sat 18 Oct 2025 21:32:01 +0000 Manifest this update: Sat 18 Oct 2025 21:27:01 +0000 Manifest next update: Tue 21 Oct 2025 21:35:01 +0000 Files and hashes: 1: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: 1MuWl4R2LfAc9czxG6/QjtCE9g5QKK5BETiXC4FMLHs=) 2: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: LrRa5/YbMQIirnwavEqQmjlSXIv4GPDAL8XSH/RPz2k=) 3: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: 3p6KpA6/uKsXu1iiVTHxP1H1aKBvRxURT7LJ3HzRuNw=) 4: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: 02thuytAoNovhJMettDEBeuOAsyVfPjVifPSC8ytExA=) 5: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: KRbdEJvKURW+VgG7P6m8/xbRP6/xVRqHAh+GE/ZxmJg=) 6: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: Cf4F1dHsLMAEwRXj/sLvggNAyN9aUktmarNyz8vl8uk=) 7: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: pAsXLpsnvtFY9CiLQfO4MgBTQXdXjfq9fjmjjZL7V7Y=) 8: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: D6GCo3ceVvJhAX1b+afxEUHTBD9rmTcpfSp7SCURViA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c8:b1:4f:12:92:49:28:bc:df:3e:0d:63:46:7f:77:e2:54:84:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Oct 18 21:27:01 2025 GMT Not After : Oct 21 21:35:01 2025 GMT Subject: CN=8191D7F3753515D11D1AB0D03BB2A6AE7FA622F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:27:c6:37:87:94:21:0b:97:5d:a7:df:8a:9f: f4:8f:f0:b9:a7:27:bf:a0:44:2d:fd:df:52:13:13: f3:98:cc:3f:e0:cf:2a:1f:83:1a:2f:fe:dd:fb:4a: 5c:25:5b:8c:b7:d1:86:5f:b8:39:3a:da:e5:13:ee: 2b:f6:3a:29:a4:d0:1d:69:78:e2:1b:d9:0d:25:7b: ba:85:9d:7a:d5:9e:3a:e2:39:56:0a:b0:f7:0c:4f: d0:41:f8:56:ec:6b:16:26:fa:f3:1f:06:98:eb:3b: e5:59:1a:a4:b9:d1:9f:5b:f0:44:1c:bb:7e:12:29: 7a:a2:6e:49:50:de:7d:ad:37:d1:2b:66:30:3b:03: 65:1c:29:59:36:30:89:82:9b:c7:4d:c5:bb:9f:5e: bb:3a:5c:b4:9e:30:a5:40:82:0e:12:2d:4f:45:8a: 57:24:3e:86:7d:fc:33:52:8b:a4:06:87:ee:dc:30: e5:4a:e9:34:aa:79:b4:36:73:5a:f4:94:6c:55:00: 1e:3c:c1:e6:83:dc:26:ed:12:07:84:7b:6c:ca:19: 9e:0d:5f:0c:fd:50:e5:30:3c:41:43:93:43:94:c9: a7:80:de:d2:3c:bd:ac:df:9c:1d:27:13:46:d7:91: b6:49:d3:7a:98:2b:9b:68:38:99:b2:2e:fa:d1:22: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:91:D7:F3:75:35:15:D1:1D:1A:B0:D0:3B:B2:A6:AE:7F:A6:22:F4 X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:04:ad:65:11:09:8a:1e:0b:d5:ee:7d:1a:9d:82:91:16:ea: 4a:36:37:d6:d6:e4:ae:83:61:c0:1a:e6:64:2d:10:6d:e9:3b: 05:30:c7:3d:80:1f:1f:c1:f4:02:b3:31:5c:f9:d8:8a:4f:17: 93:0f:35:c5:ee:c0:77:b5:6d:b2:5e:c1:0d:af:a2:77:2b:6a: 02:e6:6c:3d:dc:44:a5:a6:e4:aa:52:83:61:a5:2a:b0:43:5b: 85:30:96:2c:2c:87:32:ee:2e:de:dc:d7:b3:1b:52:b7:12:37: 2a:2b:d0:63:5e:69:d2:4e:2f:93:73:0f:9d:83:4e:6a:78:2d: b2:76:9d:66:4e:f3:57:42:f5:33:31:b0:55:d3:86:8a:c6:54: b5:d2:7b:28:c9:79:39:8d:ed:9b:33:d5:f7:8e:d9:50:12:a5: 9a:4a:44:d1:03:6e:1f:6a:57:7f:f3:0c:fa:52:87:e5:3d:c8: f2:ac:e4:17:a1:1d:07:95:39:5e:a8:a5:62:8e:a7:b8:78:96: 35:aa:fe:2a:b3:e3:0d:2f:39:a2:e7:48:b3:cc:0c:1e:b2:6c: b8:0d:bb:47:d3:2c:1c:7c:92:6c:18:65:9f:3c:6d:a5:26:a8: d5:a3:f0:e6:6c:1e:d5:b6:7b:cc:6e:c4:ca:d7:36:fa:6d:1f: 13:81:e1:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8ixTxKSSSi83z4NY0Z/d+JUhEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNTEwMTgyMTI3MDFaFw0yNTEwMjEyMTM1MDFaMDMxMTAvBgNV BAMTKDgxOTFEN0YzNzUzNTE1RDExRDFBQjBEMDNCQjJBNkFFN0ZBNjIyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuJ8Y3h5QhC5ddp9+Kn/SP8Lmn J7+gRC3931ITE/OYzD/gzyofgxov/t37SlwlW4y30YZfuDk62uUT7iv2Oimk0B1p eOIb2Q0le7qFnXrVnjriOVYKsPcMT9BB+FbsaxYm+vMfBpjrO+VZGqS50Z9b8EQc u34SKXqibklQ3n2tN9ErZjA7A2UcKVk2MImCm8dNxbufXrs6XLSeMKVAgg4SLU9F ilckPoZ9/DNSi6QGh+7cMOVK6TSqebQ2c1r0lGxVAB48weaD3CbtEgeEe2zKGZ4N Xwz9UOUwPEFDk0OUyaeA3tI8vazfnB0nE0bXkbZJ03qYK5toOJmyLvrRIiIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgZHX83U1FdEdGrDQO7Kmrn+mIvQwHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2 QjVERDc4QzVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoErWURCYoeC9XufRqdgpEW6ko2N9bW5K6D YcAa5mQtEG3pOwUwxz2AHx/B9AKzMVz52IpPF5MPNcXuwHe1bbJewQ2voncragLm bD3cRKWm5KpSg2GlKrBDW4UwliwshzLuLt7c17MbUrcSNyor0GNeadJOL5NzD52D Tmp4LbJ2nWZO81dC9TMxsFXThorGVLXSeyjJeTmN7Zsz1feO2VASpZpKRNEDbh9q V3/zDPpSh+U9yPKs5BehHQeVOV6opWKOp7h4ljWq/iqz4w0vOaLnSLPMDB6ybLgN u0fTLBx8kmwYZZ88baUmqNWj8OZsHtW2e8xuxMrXNvptHxOB4fQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:39:03 2025 by rpki-client