$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: TZX08sF6Yf0REIEa45rU2jMEhDAFte3POG0bu/stPds= Subject key identifier: 07:EF:9C:E0:1A:93:A4:1D:F3:B8:12:70:56:09:D0:BF:E7:1A:30:14 Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 7577633BED137BBB19649E9A8D2B12F290337403 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 023F Signing time: Sat 18 Oct 2025 12:52:16 +0000 Manifest this update: Sat 18 Oct 2025 12:47:16 +0000 Manifest next update: Wed 22 Oct 2025 00:34:16 +0000 Files and hashes: 1: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: 1ohXfgQVLOVqfzLUY6nq2zHsOKGWcr19CJg3R6qlyZU=) 2: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: f/dxscBtW6aGrUDQFix2xb4ahwSsHrrm2l/EclzBKx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:77:63:3b:ed:13:7b:bb:19:64:9e:9a:8d:2b:12:f2:90:33:74:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Oct 18 12:47:16 2025 GMT Not After : Oct 22 00:34:16 2025 GMT Subject: CN=07EF9CE01A93A41DF3B812705609D0BFE71A3014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:fe:b1:d8:db:e8:17:3d:2e:11:20:55:cf: ed:33:90:6a:6a:a6:2b:15:d5:06:e7:96:98:40:f2: 11:fe:dc:47:9a:82:a0:b2:e6:c4:c6:d9:fa:32:e6: a9:01:f3:ae:d5:62:c4:c9:70:5d:cb:4c:3e:c9:7d: 37:7c:a8:0d:f1:32:91:ea:32:d9:ac:43:56:3f:59: a8:f0:b5:00:81:3c:9f:a6:9f:b6:f0:75:1e:c8:bd: 63:7f:7e:e0:48:a4:16:88:85:e5:e1:8a:8d:2b:68: fe:d4:de:39:cc:53:2a:4b:a2:68:27:ff:57:c1:d7: fc:c6:0f:35:f2:62:e6:21:9c:86:ea:fe:61:3c:e4: 59:73:c7:66:31:5f:7e:4e:a5:db:38:58:5b:38:4c: a5:2f:d2:64:53:7e:ce:2b:52:73:73:7d:53:f0:48: 1b:5c:2e:99:69:e5:7e:e8:2c:6e:01:ea:73:06:0b: 45:02:60:a9:78:b7:bf:27:24:41:88:e8:d8:a5:e2: 1b:1f:70:c6:8c:60:ca:01:4d:9c:8f:7a:5e:b2:8b: d0:b3:60:af:9f:d3:0f:c7:a3:fb:12:42:e5:67:77: 4f:6b:37:14:4f:7f:4c:8a:f6:44:f2:c2:1f:fd:b5: 95:2d:46:84:f4:c5:f6:b5:61:84:a9:7c:b9:75:ce: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EF:9C:E0:1A:93:A4:1D:F3:B8:12:70:56:09:D0:BF:E7:1A:30:14 X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:16:47:34:cd:69:6f:79:2e:ae:14:1a:fd:20:c1:03:05:44: 26:d8:66:82:f5:3c:f9:9e:72:25:72:6b:98:23:86:14:ff:20: 2b:1e:4f:64:8a:90:f7:54:59:27:1b:e7:42:b6:89:58:a6:53: 9f:3a:75:45:c3:91:41:22:af:6f:fb:9a:57:9b:fa:f1:01:1b: dc:28:bb:31:18:5e:e9:82:fe:45:58:5d:84:75:1d:c4:b7:a3: b6:ba:2d:af:ef:78:85:45:ad:c9:d5:6b:f3:f0:2f:64:4b:bf: be:0b:64:9e:5b:03:99:47:b9:e3:f5:25:33:c2:8b:71:9a:ac: 21:09:5b:51:bd:db:db:ae:3e:e5:4a:c1:86:74:9d:a8:41:78: 8c:7b:bd:d1:ae:26:95:12:f2:be:cf:5d:87:95:97:83:2f:a3: b4:a7:72:c9:99:20:6c:48:0c:ac:3c:f3:46:eb:ce:28:6f:a2: 24:2a:e3:06:80:7f:c9:db:08:82:69:d5:80:6a:78:9e:64:1a: d5:f1:1b:fe:8b:b4:4c:d7:7a:98:35:f0:55:dd:dd:b4:4a:e4: cc:6d:c8:46:39:53:28:39:30:22:51:46:9c:3b:01:7d:fc:df: 93:fa:70:25:4a:1e:cf:5d:b9:6b:db:60:33:17:a2:96:5e:91: c9:db:ac:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXdjO+0Te7sZZJ6ajSsS8pAzdAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNTEwMTgxMjQ3MTZaFw0yNTEwMjIwMDM0MTZaMDMxMTAvBgNV BAMTKDA3RUY5Q0UwMUE5M0E0MURGM0I4MTI3MDU2MDlEMEJGRTcxQTMwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Nf6x2NvoFz0uESBVz+0zkGpq pisV1QbnlphA8hH+3EeagqCy5sTG2foy5qkB867VYsTJcF3LTD7JfTd8qA3xMpHq MtmsQ1Y/WajwtQCBPJ+mn7bwdR7IvWN/fuBIpBaIheXhio0raP7U3jnMUypLomgn /1fB1/zGDzXyYuYhnIbq/mE85Flzx2YxX35Opds4WFs4TKUv0mRTfs4rUnNzfVPw SBtcLplp5X7oLG4B6nMGC0UCYKl4t78nJEGI6Nil4hsfcMaMYMoBTZyPel6yi9Cz YK+f0w/Ho/sSQuVnd09rNxRPf0yK9kTywh/9tZUtRoT0xfa1YYSpfLl1zvzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB++c4BqTpB3zuBJwVgnQv+caMBQwHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMWRzTNaW95Lq4UGv0gwQMFRCbYZoL1PPme ciVya5gjhhT/ICseT2SKkPdUWScb50K2iVimU586dUXDkUEir2/7mleb+vEBG9wo uzEYXumC/kVYXYR1HcS3o7a6La/veIVFrcnVa/PwL2RLv74LZJ5bA5lHueP1JTPC i3GarCEJW1G929uuPuVKwYZ0nahBeIx7vdGuJpUS8r7PXYeVl4Mvo7SncsmZIGxI DKw880brzihvoiQq4waAf8nbCIJp1YBqeJ5kGtXxG/6LtEzXepg18FXd3bRK5Mxt yEY5Uyg5MCJRRpw7AX3835P6cCVKHs9duWvbYDMXopZekcnbrHY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:33 2025 by rpki-client