$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: gddiHFitx/KORPo4KGvPgVLvfniQlt0WTYzMjubHLss= Subject key identifier: EB:45:6B:BF:8E:BC:D3:30:1B:66:40:2D:73:A3:89:3E:06:6F:83:A6 Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 7E5E3A6B5C3B559EEF99B747FA1B6F57A2107A0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 0348 Signing time: Sat 18 Oct 2025 12:12:00 +0000 Manifest this update: Sat 18 Oct 2025 12:07:00 +0000 Manifest next update: Tue 21 Oct 2025 14:05:00 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) 2: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: 8Swx6sDoZVf0Khj3/osa+9Z3f70ePdTLoKOFx5h1pTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5e:3a:6b:5c:3b:55:9e:ef:99:b7:47:fa:1b:6f:57:a2:10:7a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Oct 18 12:07:00 2025 GMT Not After : Oct 21 14:05:00 2025 GMT Subject: CN=EB456BBF8EBCD3301B66402D73A3893E066F83A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ec:e7:b2:df:68:09:b8:1a:c0:e9:35:82:a4: 94:02:c8:e2:ee:eb:f9:74:32:01:8f:95:e7:db:a1: 74:72:89:97:6d:c9:2a:c3:b0:05:75:e1:44:d2:64: ac:00:43:e3:4d:32:ba:a8:6f:89:99:73:be:3e:cc: 39:ad:68:b7:4f:1c:d7:42:64:c1:26:79:8d:11:54: 65:dd:5e:72:5e:40:b2:69:c6:5d:b8:bd:bd:c2:93: 48:27:55:cc:8e:dd:47:af:38:c2:54:bc:29:d6:c9: 12:e3:3c:a0:3d:c3:46:40:5d:89:e5:d8:83:40:db: 42:7e:d9:47:58:69:eb:30:a2:9d:a5:e5:34:e2:4c: 4c:df:df:15:77:62:2a:36:bb:ed:1e:da:7d:e8:b1: f3:c0:50:e0:fe:61:d4:fd:f5:d8:97:f7:e6:61:ad: 67:7b:0d:c0:2a:69:fd:98:39:ee:89:9a:b5:b3:30: 55:6d:46:0d:cb:0e:da:b5:d1:f5:55:e4:96:d7:de: f9:b2:02:2d:c0:86:ea:89:2d:71:90:b2:8d:af:d2: 80:8f:ed:8e:22:cc:34:c8:42:da:03:db:f3:c9:a6: e4:8a:33:99:f7:07:c6:0a:aa:3f:cf:f6:b6:bf:a5: 78:a1:c3:db:3c:0a:82:be:44:c9:3c:18:92:13:67: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:45:6B:BF:8E:BC:D3:30:1B:66:40:2D:73:A3:89:3E:06:6F:83:A6 X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d9:88:c8:da:c3:58:86:cd:02:12:93:38:8c:5a:ea:99:75: 58:be:4e:99:1d:f9:11:5f:db:ad:c4:c6:08:0c:36:34:7b:6e: 95:33:b5:c9:cc:17:b8:6a:0e:a6:e0:bd:3b:5c:2a:20:5b:98: 10:ad:f7:6b:29:c7:e4:21:f2:4d:27:91:ab:73:8a:fc:bf:4c: 10:25:c7:9e:bc:06:2e:9e:ad:5f:08:12:ce:92:7f:e0:45:a0: e6:eb:4f:ee:15:a6:3c:c1:83:5b:15:ac:bc:df:f9:47:06:f5: 2e:9b:b4:f6:9b:90:39:cf:9c:0f:03:1a:5e:b6:90:91:ee:0a: 7d:9e:01:18:ac:c8:47:0e:d9:b8:f0:23:13:71:9f:12:1c:82: 05:2e:ef:0d:37:90:6f:a6:9a:81:70:71:1c:52:f7:80:e7:d1: 77:e3:24:ce:6a:ad:bf:9a:0e:67:da:a0:b6:d6:18:37:4a:0d: 82:6c:94:81:ba:dd:86:93:48:c7:ed:45:db:00:94:17:55:d5: 76:5d:00:01:bf:96:9c:a6:ba:25:45:cd:d0:33:b9:93:6a:7f: dc:70:81:bd:65:ef:af:84:44:e4:e7:7b:61:92:53:9e:fc:1b: 13:ae:ec:a2:26:c6:ea:c1:ab:dd:99:67:75:5c:f5:b6:1c:59: 79:84:06:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfl46a1w7VZ7vmbdH+htvV6IQeg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNTEwMTgxMjA3MDBaFw0yNTEwMjExNDA1MDBaMDMxMTAvBgNV BAMTKEVCNDU2QkJGOEVCQ0QzMzAxQjY2NDAyRDczQTM4OTNFMDY2RjgzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7Oey32gJuBrA6TWCpJQCyOLu 6/l0MgGPlefboXRyiZdtySrDsAV14UTSZKwAQ+NNMrqob4mZc74+zDmtaLdPHNdC ZMEmeY0RVGXdXnJeQLJpxl24vb3Ck0gnVcyO3UevOMJUvCnWyRLjPKA9w0ZAXYnl 2INA20J+2UdYaeswop2l5TTiTEzf3xV3Yio2u+0e2n3osfPAUOD+YdT99diX9+Zh rWd7DcAqaf2YOe6JmrWzMFVtRg3LDtq10fVV5JbX3vmyAi3AhuqJLXGQso2v0oCP 7Y4izDTIQtoD2/PJpuSKM5n3B8YKqj/P9ra/pXihw9s8CoK+RMk8GJITZxnpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU60Vrv4680zAbZkAtc6OJPgZvg6YwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzZiMjaw1iGzQISkziMWuqZdVi+Tpkd+RFf 263ExggMNjR7bpUztcnMF7hqDqbgvTtcKiBbmBCt92spx+Qh8k0nkatzivy/TBAl x568Bi6erV8IEs6Sf+BFoObrT+4VpjzBg1sVrLzf+UcG9S6btPabkDnPnA8DGl62 kJHuCn2eARisyEcO2bjwIxNxnxIcggUu7w03kG+mmoFwcRxS94Dn0XfjJM5qrb+a DmfaoLbWGDdKDYJslIG63YaTSMftRdsAlBdV1XZdAAG/lpymuiVFzdAzuZNqf9xw gb1l76+EROTne2GSU578GxOu7KImxurBq92ZZ3Vc9bYcWXmEBhQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:05 2025 by rpki-client