$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: pQCEAaRSPQ/93+DkGmEfe0ijzu/McbFfleRVsYYXbFc= Subject key identifier: 94:0C:4D:6F:EB:CF:1A:FC:3E:4E:B1:78:FC:C7:01:7E:6E:70:41:C1 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 568CBD082824B5212CE2BF2ADE89CF486E1B19AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: CD Signing time: Sat 18 Oct 2025 13:12:42 +0000 Manifest this update: Sat 18 Oct 2025 13:07:42 +0000 Manifest next update: Wed 22 Oct 2025 00:40:42 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: JrcHvuEqwYoS/Td0BJ5QxA3FwQBw/fX87g2fGfS+Dhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8c:bd:08:28:24:b5:21:2c:e2:bf:2a:de:89:cf:48:6e:1b:19:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Oct 18 13:07:42 2025 GMT Not After : Oct 22 00:40:42 2025 GMT Subject: CN=940C4D6FEBCF1AFC3E4EB178FCC7017E6E7041C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:2f:ea:4b:fd:9d:b6:0c:13:80:f0:cc:69: 5b:c8:49:5f:3a:49:c0:8a:fa:75:66:07:05:3a:95: 44:9d:47:98:8b:1a:17:26:f2:57:2c:1e:e1:eb:92: 70:9c:58:72:71:62:f6:23:d0:24:f4:db:1a:70:83: 9f:d8:b2:6a:59:4d:8f:4a:5d:17:71:56:47:0a:75: 00:18:a4:da:af:e0:4a:82:83:4e:0b:60:e5:1a:cf: b5:3d:10:a8:f6:7e:33:01:a6:0e:d8:c1:a4:98:96: e8:d7:c6:1e:5f:3d:6d:a1:d3:1c:3b:97:b7:b0:dd: 2e:ee:dd:9a:99:46:39:03:53:40:4e:6a:c9:3c:bf: 1e:68:ad:59:05:5d:69:5a:4c:12:40:40:d5:f6:a0: bf:56:6e:f7:a3:eb:92:5b:b9:ed:2c:c7:7b:2d:d0: 1a:2b:4b:97:1d:5b:0e:e4:39:28:31:3b:ff:0b:55: aa:fb:b8:78:98:fd:af:0f:c4:8e:78:91:28:31:a1: 9b:b5:00:ce:69:d2:08:9f:5a:f1:78:a1:8a:17:52: 3f:ce:36:89:dd:c5:ca:41:8d:7d:c3:e9:d5:c3:1e: 9d:f7:06:fd:e2:8d:41:e7:6e:b4:75:13:bc:5d:88: a4:94:f3:5f:1a:c5:66:c8:3c:2c:85:1a:10:c8:f0: 64:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0C:4D:6F:EB:CF:1A:FC:3E:4E:B1:78:FC:C7:01:7E:6E:70:41:C1 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:42:77:80:4a:23:b8:94:82:b3:71:0b:1d:be:88:33:cd:35: 90:aa:6a:89:b5:32:0b:25:28:cf:d7:8d:94:f4:d0:47:49:46: 27:2a:f8:23:c0:2b:4f:1c:44:60:32:d5:d2:52:0b:84:cf:20: 5e:11:10:35:c0:07:ec:50:e5:3b:35:28:06:4c:50:bd:80:e4: d6:e1:d5:c9:5b:7c:42:59:f5:87:63:70:07:e8:7f:4c:8d:6a: 90:42:5b:21:61:7c:6d:dd:27:4d:22:ff:e1:fb:1e:8d:c1:47: e5:3a:92:9c:59:33:ac:83:ae:5d:93:ca:82:09:61:c4:8c:2d: 3e:e5:8d:96:82:b6:3d:f5:42:11:8b:ab:ea:31:81:23:6e:d6: 8f:b7:a3:06:c5:d1:a4:fc:23:6c:74:78:c7:f8:4d:81:14:48: 13:ef:8f:fd:28:4b:b1:18:15:5e:4e:e6:c8:92:3d:19:25:25: 69:4a:38:1f:d6:9c:eb:71:4d:f0:3e:d4:ae:a4:27:7f:74:b9: dd:12:84:1a:cf:67:58:0b:7c:4a:1c:b0:2f:ea:8e:7b:b5:6b: 3a:2a:72:0e:f9:ef:f0:90:b3:82:a0:63:8f:d9:09:a9:32:dd: cc:29:f3:2f:fc:67:86:94:64:ce:ad:2a:e9:85:5c:82:0c:78: 45:3c:01:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVoy9CCgktSEs4r8q3onPSG4bGaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNTEwMTgxMzA3NDJaFw0yNTEwMjIwMDQwNDJaMDMxMTAvBgNV BAMTKDk0MEM0RDZGRUJDRjFBRkMzRTRFQjE3OEZDQzcwMTdFNkU3MDQxQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JC/qS/2dtgwTgPDMaVvISV86 ScCK+nVmBwU6lUSdR5iLGhcm8lcsHuHrknCcWHJxYvYj0CT02xpwg5/YsmpZTY9K XRdxVkcKdQAYpNqv4EqCg04LYOUaz7U9EKj2fjMBpg7YwaSYlujXxh5fPW2h0xw7 l7ew3S7u3ZqZRjkDU0BOask8vx5orVkFXWlaTBJAQNX2oL9Wbvej65Jbue0sx3st 0BorS5cdWw7kOSgxO/8LVar7uHiY/a8PxI54kSgxoZu1AM5p0gifWvF4oYoXUj/O NondxcpBjX3D6dXDHp33Bv3ijUHnbrR1E7xdiKSU818axWbIPCyFGhDI8GSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlAxNb+vPGvw+TrF4/McBfm5wQcEwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtCd4BKI7iUgrNxCx2+iDPNNZCqaom1Mgsl KM/XjZT00EdJRicq+CPAK08cRGAy1dJSC4TPIF4REDXAB+xQ5Ts1KAZMUL2A5Nbh 1clbfEJZ9YdjcAfof0yNapBCWyFhfG3dJ00i/+H7Ho3BR+U6kpxZM6yDrl2TyoIJ YcSMLT7ljZaCtj31QhGLq+oxgSNu1o+3owbF0aT8I2x0eMf4TYEUSBPvj/0oS7EY FV5O5siSPRklJWlKOB/WnOtxTfA+1K6kJ390ud0ShBrPZ1gLfEocsC/qjnu1azoq cg757/CQs4KgY4/ZCaky3cwp8y/8Z4aUZM6tKumFXIIMeEU8AbQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:03 2025 by rpki-client