$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: 0sTHlRA/68I3a991HDVFQWqD65JqL3lV2gZSs2yukKM= Subject key identifier: 25:DD:0D:57:AF:A5:BF:B8:D3:F4:CE:E2:A6:CE:49:C4:CC:70:C5:DA Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 3A9101809B8DB85C69329CA1BD8619B9B624ACAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 01FA Signing time: Sun 19 Oct 2025 15:30:55 +0000 Manifest this update: Sun 19 Oct 2025 15:25:55 +0000 Manifest next update: Thu 23 Oct 2025 02:07:55 +0000 Files and hashes: 1: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: tBggkZOSwgRIT2Ks8KFLhEnpS9mZvNRaeI4/gQNjngc=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:91:01:80:9b:8d:b8:5c:69:32:9c:a1:bd:86:19:b9:b6:24:ac:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Oct 19 15:25:55 2025 GMT Not After : Oct 23 02:07:55 2025 GMT Subject: CN=25DD0D57AFA5BFB8D3F4CEE2A6CE49C4CC70C5DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:04:cf:fa:5c:45:71:0f:cc:ce:ee:18:4a: c2:b8:cd:a7:80:b0:5c:77:3a:74:ff:de:95:30:11: 26:ea:be:8e:07:74:6f:35:6e:26:49:23:37:55:25: 33:b0:b5:b0:3f:dc:a5:d8:c6:65:f4:49:2c:78:a8: 1f:2f:d9:8f:d8:c1:d7:19:05:a6:19:ce:8c:bf:94: 2d:52:c9:b0:06:8d:66:25:1e:cc:0f:a2:97:19:92: 6f:da:f4:19:91:a9:1d:01:1e:7d:43:6a:65:6d:29: 6e:ec:e9:65:ad:2d:0e:bb:f2:06:58:04:dc:7e:e9: 92:09:23:b7:51:84:a0:e8:ac:dc:67:f0:e0:08:5d: ca:fc:a0:11:e8:12:9e:7f:4a:41:fa:a2:7f:be:61: cb:f1:20:7d:88:e8:63:1c:ec:9b:68:20:70:7e:07: 10:98:09:2c:a5:30:b6:2a:89:e2:14:d6:60:f4:18: 11:32:81:e9:78:23:58:db:6f:79:1a:85:0b:91:2e: 84:6f:78:e9:e3:6b:47:75:c3:e1:db:70:94:1a:39: 69:37:03:5c:29:81:7f:cb:14:09:04:c1:a6:de:e9: 09:e0:05:92:48:5f:bb:64:be:09:7b:23:74:77:b5: d9:20:66:f3:ae:0f:99:bc:58:14:16:6a:f4:56:00: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DD:0D:57:AF:A5:BF:B8:D3:F4:CE:E2:A6:CE:49:C4:CC:70:C5:DA X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:79:02:10:a3:d7:45:7a:01:3e:3b:38:8e:50:80:64:8c:f7: 30:69:75:12:76:a5:f1:eb:be:11:7e:d6:c3:0f:fd:8e:45:02: 6b:b1:87:dc:07:7a:ea:60:94:38:f2:15:aa:72:e5:a7:d7:9a: 16:d7:df:dc:0e:ba:f6:fd:c3:78:47:6a:71:45:6e:af:cf:d2: 32:a3:75:aa:0c:c0:c2:51:2b:56:61:c3:9d:94:de:bc:bc:ea: bc:5d:2d:73:42:80:13:ac:dd:29:e0:f2:02:d1:f6:7c:f8:11: a2:8e:b5:88:2f:aa:e6:7a:12:31:8a:61:27:ed:1a:8d:a6:23: f8:62:70:af:fd:a9:73:f2:bb:d2:05:29:eb:63:c7:b1:b5:e2: 24:5a:92:a4:89:b9:bb:43:55:50:af:76:59:6a:d8:11:68:55: 22:62:2e:72:bf:be:67:4b:32:f0:43:36:f8:26:02:4f:98:c2: 7f:18:a2:05:4e:cb:d7:97:78:c1:96:1e:55:28:db:7e:99:03: f6:d1:4a:d2:0d:ca:01:c6:93:f1:af:2a:e6:0a:b7:77:26:ba: 9f:ee:ba:9d:48:fd:6e:5d:68:58:a5:91:bd:b7:a2:ae:61:72: 44:b7:b6:bc:f3:27:83:2f:2a:3c:cb:13:29:d6:04:7c:8a:67: a9:8b:80:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpEBgJuNuFxpMpyhvYYZubYkrKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTEwMTkxNTI1NTVaFw0yNTEwMjMwMjA3NTVaMDMxMTAvBgNV BAMTKDI1REQwRDU3QUZBNUJGQjhEM0Y0Q0VFMkE2Q0U0OUM0Q0M3MEM1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWATP+lxFcQ/Mzu4YSsK4zaeA sFx3OnT/3pUwESbqvo4HdG81biZJIzdVJTOwtbA/3KXYxmX0SSx4qB8v2Y/YwdcZ BaYZzoy/lC1SybAGjWYlHswPopcZkm/a9BmRqR0BHn1DamVtKW7s6WWtLQ678gZY BNx+6ZIJI7dRhKDorNxn8OAIXcr8oBHoEp5/SkH6on++YcvxIH2I6GMc7JtoIHB+ BxCYCSylMLYqieIU1mD0GBEygel4I1jbb3kahQuRLoRveOnja0d1w+HbcJQaOWk3 A1wpgX/LFAkEwabe6QngBZJIX7tkvgl7I3R3tdkgZvOuD5m8WBQWavRWAH6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJd0NV6+lv7jT9M7ips5JxMxwxdowHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV5AhCj10V6AT47OI5QgGSM9zBpdRJ2pfHr vhF+1sMP/Y5FAmuxh9wHeupglDjyFapy5afXmhbX39wOuvb9w3hHanFFbq/P0jKj daoMwMJRK1Zhw52U3ry86rxdLXNCgBOs3Sng8gLR9nz4EaKOtYgvquZ6EjGKYSft Go2mI/hicK/9qXPyu9IFKetjx7G14iRakqSJubtDVVCvdllq2BFoVSJiLnK/vmdL MvBDNvgmAk+Ywn8YogVOy9eXeMGWHlUo236ZA/bRStINygHGk/GvKuYKt3cmup/u up1I/W5daFilkb23oq5hckS3trzzJ4MvKjzLEynWBHyKZ6mLgAk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:46 2025 by rpki-client