$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: AU+xvVtEGhJYgiQwRK9fOIxjmvAjtqRH+AJcow8y3UU= Subject key identifier: EB:10:D5:6E:EF:8C:71:40:1F:67:58:3E:2A:D2:DA:DC:55:AA:0E:B0 Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 7261D8C857C6DB5A119A5E6A1184D7154E9714C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 0519 Signing time: Sun 19 Oct 2025 15:00:50 +0000 Manifest this update: Sun 19 Oct 2025 14:55:50 +0000 Manifest next update: Wed 22 Oct 2025 18:16:50 +0000 Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) 2: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: MX+22j04WP6acdlrAYZeh6HUAlqpR64LnDkJDCma3H0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:61:d8:c8:57:c6:db:5a:11:9a:5e:6a:11:84:d7:15:4e:97:14:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Oct 19 14:55:50 2025 GMT Not After : Oct 22 18:16:50 2025 GMT Subject: CN=EB10D56EEF8C71401F67583E2AD2DADC55AA0EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:ff:33:24:09:dc:45:1c:e3:66:bd:0d:99: 15:39:0c:ec:1a:04:e1:f1:4e:d2:48:00:c0:d3:26: 23:11:0e:63:9d:87:27:92:6d:3e:33:ae:f0:75:4e: 9e:2b:df:2b:21:5d:6e:2e:1b:73:4a:9d:9e:93:f5: 4c:e5:9b:5e:b5:dd:62:50:95:4c:35:19:7f:71:ea: 6a:3e:f1:d6:03:5f:9f:59:ed:9c:41:c7:2d:86:54: 14:cc:21:26:1e:06:42:c2:7c:92:ea:6e:df:fb:f7: 1b:71:96:e4:f9:1d:3d:84:38:d1:d4:68:80:a9:29: bd:fe:f3:4b:60:c4:72:c4:1c:cf:60:26:24:34:ed: fa:8e:cf:fa:7c:53:8a:c8:63:34:46:57:3b:27:7c: 78:74:16:eb:29:68:b2:2e:98:bd:22:ba:94:41:bb: 2f:fd:09:c4:a5:c2:c0:20:8f:c5:98:84:52:f6:e7: b0:9e:c2:f2:a1:d2:fd:69:ed:98:09:37:24:77:00: 3c:d3:68:f3:68:b5:bf:bf:82:27:b9:71:f2:d9:57: a0:bb:af:11:9f:02:06:20:0b:9f:f2:6d:57:20:5b: 32:93:81:fc:d0:a4:d8:78:c3:77:14:f5:5a:33:d9: 65:5d:46:54:e9:3b:28:f7:ce:30:c4:0f:51:18:07: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:10:D5:6E:EF:8C:71:40:1F:67:58:3E:2A:D2:DA:DC:55:AA:0E:B0 X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:22:60:28:bd:47:3b:9e:c0:ec:fa:bf:76:dd:2e:b5:52:3c: 68:e1:c9:e2:f6:6f:62:e7:d2:b3:ff:3f:12:7e:fd:b5:19:cf: 85:f5:ea:94:02:4d:f8:66:aa:d5:a0:2b:d5:f7:f2:e0:bf:dc: 5c:b2:3e:4e:20:0e:c0:0c:64:0b:69:14:f5:39:56:72:0e:9e: d9:ad:29:42:ec:18:eb:ef:21:32:3f:67:04:8d:cb:ac:5b:d3: 7e:06:62:87:a4:c6:0e:77:e4:da:20:e6:dc:c4:7d:17:ee:33: 1d:4c:76:27:17:08:56:10:f4:14:51:8b:28:96:d9:c4:73:a1: b7:10:d6:6d:d0:09:29:3c:3a:f1:82:f7:3d:16:fd:b4:02:9a: 05:b5:5e:fe:61:e9:f6:81:96:0a:2e:fd:70:12:4d:65:b2:be: ae:d3:0d:4f:a6:8d:b5:46:0a:dc:4e:a0:c5:04:ef:bb:fb:ed: 68:be:22:a5:dd:08:71:7c:dd:4a:09:76:71:07:72:6a:97:6e: b9:67:e3:8b:12:90:c9:f1:d4:47:0f:2c:da:d3:47:17:14:08: 8c:67:4b:4b:c0:f1:c3:f6:25:a3:55:2e:0f:af:b7:f0:59:20: ed:59:55:be:b5:97:73:f7:ba:44:e9:f5:c5:7f:6e:57:ec:70: 64:bd:11:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmHYyFfG21oRml5qEYTXFU6XFMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNTEwMTkxNDU1NTBaFw0yNTEwMjIxODE2NTBaMDMxMTAvBgNV BAMTKEVCMTBENTZFRUY4QzcxNDAxRjY3NTgzRTJBRDJEQURDNTVBQTBFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yf8zJAncRRzjZr0NmRU5DOwa BOHxTtJIAMDTJiMRDmOdhyeSbT4zrvB1Tp4r3yshXW4uG3NKnZ6T9Uzlm1613WJQ lUw1GX9x6mo+8dYDX59Z7ZxBxy2GVBTMISYeBkLCfJLqbt/79xtxluT5HT2EONHU aICpKb3+80tgxHLEHM9gJiQ07fqOz/p8U4rIYzRGVzsnfHh0FuspaLIumL0iupRB uy/9CcSlwsAgj8WYhFL257CewvKh0v1p7ZgJNyR3ADzTaPNotb+/gie5cfLZV6C7 rxGfAgYgC5/ybVcgWzKTgfzQpNh4w3cU9Voz2WVdRlTpOyj3zjDED1EYB9XnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6xDVbu+McUAfZ1g+KtLa3FWqDrAwHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIiYCi9RzuewOz6v3bdLrVSPGjhyeL2b2Ln 0rP/PxJ+/bUZz4X16pQCTfhmqtWgK9X38uC/3FyyPk4gDsAMZAtpFPU5VnIOntmt KULsGOvvITI/ZwSNy6xb034GYoekxg535Nog5tzEfRfuMx1MdicXCFYQ9BRRiyiW 2cRzobcQ1m3QCSk8OvGC9z0W/bQCmgW1Xv5h6faBlgou/XASTWWyvq7TDU+mjbVG CtxOoMUE77v77Wi+IqXdCHF83UoJdnEHcmqXbrln44sSkMnx1EcPLNrTRxcUCIxn S0vA8cP2JaNVLg+vt/BZIO1ZVb61l3P3ukTp9cV/blfscGS9EVg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:49 2025 by rpki-client