$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: qATDTcS7vye/zGb581XugxhQzoARKIfrWQvdRt24nWs= Subject key identifier: F2:F0:DA:75:2B:7A:F2:60:03:33:F6:44:0C:38:D4:07:F9:BF:ED:77 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 756203D8326184C9D3DA662CF2C6FB3B2882EC94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 024B Signing time: Mon 20 Oct 2025 16:40:04 +0000 Manifest this update: Mon 20 Oct 2025 16:35:04 +0000 Manifest next update: Thu 23 Oct 2025 19:39:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: bNS0+Yx5jaUQXiEG5DTSUK/tJpi+HoC3cPRX5rEfSGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:62:03:d8:32:61:84:c9:d3:da:66:2c:f2:c6:fb:3b:28:82:ec:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Oct 20 16:35:04 2025 GMT Not After : Oct 23 19:39:04 2025 GMT Subject: CN=F2F0DA752B7AF2600333F6440C38D407F9BFED77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:46:d2:69:36:fe:f1:01:5f:79:ee:87:70:5e: 95:88:25:ac:96:21:17:86:40:6a:f8:03:35:d7:96: e3:f3:4f:72:6c:5d:33:c2:f7:1c:0f:b2:81:3e:ae: 05:ee:e9:26:c0:42:40:41:65:c1:ec:6d:c0:f5:16: a4:d0:88:6c:1c:24:53:36:71:b8:b0:6c:a4:ca:71: ee:27:49:21:3a:a0:c1:54:ed:b1:52:d8:9a:d1:d3: 1b:63:64:4b:be:25:2e:7d:32:86:a3:bf:a7:01:49: 3e:75:d7:49:5e:6e:07:b5:d3:d0:5e:08:d7:53:07: 2a:73:a9:e1:f5:46:e1:b5:3e:e2:cb:95:86:ff:2e: 4e:93:95:3c:cd:60:d7:8b:1c:64:b1:b6:d4:1d:8c: 16:db:5e:90:4c:7a:2e:f2:2b:5d:52:ee:47:7d:62: dc:96:3d:5c:3b:87:d5:37:40:e5:3f:7a:e0:57:38: b1:49:ef:2b:3a:51:cf:46:9c:1e:93:f8:b4:28:22: 06:56:a4:cc:41:5b:97:52:3f:b6:92:42:df:7e:74: 4a:c4:a1:30:70:38:ff:84:6e:3a:77:95:42:bf:6b: 55:35:d7:04:96:06:8e:96:ff:ec:b5:5c:23:09:24: 44:ce:c9:f7:8c:46:81:c7:9b:2a:6a:64:0e:67:06: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F0:DA:75:2B:7A:F2:60:03:33:F6:44:0C:38:D4:07:F9:BF:ED:77 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:26:bc:8b:81:17:cf:52:c5:05:42:50:1a:7d:59:dd:a9:ad: 91:02:c1:f6:18:b1:43:1e:03:0e:85:0e:73:e9:8b:48:8d:03: cd:af:7d:3d:76:8d:0c:c8:27:3a:c0:dd:06:61:9a:33:a5:56: e0:ce:58:6a:78:f9:a1:c0:1c:6f:32:4e:53:5d:82:aa:83:3a: cb:3a:9b:09:c8:54:2b:39:14:c6:24:9f:35:fe:5f:53:6e:6e: f3:5b:a6:7e:8c:f6:18:03:bd:e9:37:89:7e:40:50:c5:28:d8: 6a:2d:71:35:67:de:27:37:68:79:f8:2f:e9:ee:e1:2c:3a:f1: b8:a2:42:0d:77:d6:58:b3:35:85:df:42:45:87:05:66:04:8f: aa:f3:99:9d:1e:56:59:69:67:8f:74:62:23:07:e7:05:30:42: 8c:7a:e8:10:b6:08:b8:39:a7:9a:6c:60:32:cd:ca:2d:6c:1b: 78:1d:9d:f2:27:7e:1e:63:82:bf:3b:12:f7:b9:6c:6e:31:ab: 3c:f0:7e:a8:3e:0c:b9:65:cb:4a:48:26:a0:6a:0c:cd:47:c9: 7f:24:8f:01:a9:19:f4:5b:b5:e2:9f:9a:38:a2:37:7e:57:47: 81:aa:de:06:71:b2:1a:3d:22:a8:b0:91:af:93:fd:70:5f:94: 3d:2b:a8:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdWID2DJhhMnT2mYs8sb7OyiC7JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTEwMjAxNjM1MDRaFw0yNTEwMjMxOTM5MDRaMDMxMTAvBgNV BAMTKEYyRjBEQTc1MkI3QUYyNjAwMzMzRjY0NDBDMzhENDA3RjlCRkVENzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuRtJpNv7xAV957odwXpWIJayW IReGQGr4AzXXluPzT3JsXTPC9xwPsoE+rgXu6SbAQkBBZcHsbcD1FqTQiGwcJFM2 cbiwbKTKce4nSSE6oMFU7bFS2JrR0xtjZEu+JS59Moajv6cBST5110lebge109Be CNdTBypzqeH1RuG1PuLLlYb/Lk6TlTzNYNeLHGSxttQdjBbbXpBMei7yK11S7kd9 YtyWPVw7h9U3QOU/euBXOLFJ7ys6Uc9GnB6T+LQoIgZWpMxBW5dSP7aSQt9+dErE oTBwOP+Ebjp3lUK/a1U11wSWBo6W/+y1XCMJJETOyfeMRoHHmypqZA5nBgefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8vDadSt68mADM/ZEDDjUB/m/7XcwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAmvIuBF89SxQVCUBp9Wd2prZECwfYYsUMe Aw6FDnPpi0iNA82vfT12jQzIJzrA3QZhmjOlVuDOWGp4+aHAHG8yTlNdgqqDOss6 mwnIVCs5FMYknzX+X1NubvNbpn6M9hgDvek3iX5AUMUo2GotcTVn3ic3aHn4L+nu 4Sw68biiQg131lizNYXfQkWHBWYEj6rzmZ0eVllpZ490YiMH5wUwQox66BC2CLg5 p5psYDLNyi1sG3gdnfInfh5jgr87Eve5bG4xqzzwfqg+DLlly0pIJqBqDM1HyX8k jwGpGfRbteKfmjiiN35XR4Gq3gZxsho9Iqiwka+T/XBflD0rqHQ= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:04 2025 by rpki-client