$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: pBQH1xlx5i2724F6/JCghsrEoHiD6QGHs5CYUmxpKdU= Subject key identifier: 19:F2:D7:D2:1B:1F:E4:A5:3D:36:4E:43:4F:FE:76:20:E0:48:AF:72 Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 0467755CA8334B671888186A5780E6F95C0CC813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: 010F Signing time: Mon 20 Oct 2025 05:31:16 +0000 Manifest this update: Mon 20 Oct 2025 05:26:16 +0000 Manifest next update: Thu 23 Oct 2025 13:09:16 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: 0epgyb0/ZO4uCzoUAkeLXyuZEAuGyz7OYirnOBmdUtg=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:67:75:5c:a8:33:4b:67:18:88:18:6a:57:80:e6:f9:5c:0c:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Oct 20 05:26:16 2025 GMT Not After : Oct 23 13:09:16 2025 GMT Subject: CN=19F2D7D21B1FE4A53D364E434FFE7620E048AF72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fa:4b:57:5e:68:34:6f:38:68:f1:ac:10:64: a9:4e:b6:7b:d2:4c:be:c9:cb:cf:17:1a:6c:c5:91: 27:d6:a8:28:17:07:1a:b9:ee:4f:5f:31:b1:56:65: 76:ab:d3:98:c2:1c:11:55:a5:6e:22:86:ce:f0:ca: b2:46:0c:ea:bb:87:7f:1b:48:b9:e3:07:ac:0f:f9: 6e:07:bb:fc:8a:0f:ec:3e:5f:d1:6b:a6:ab:cc:24: 9d:d0:69:5c:ec:7e:41:7e:9b:47:2d:2a:09:17:8e: f1:06:8a:c6:44:01:f7:27:a3:c3:47:73:9d:37:6b: 6a:72:a8:b8:22:3e:93:39:d7:fc:0e:61:23:77:e1: d3:f4:8c:a3:a8:4b:56:74:d8:15:b4:06:4b:6b:3a: e0:59:2f:3f:cc:e9:12:73:48:c5:08:57:66:34:2b: e7:27:23:1d:47:0c:cd:6c:ed:b7:51:d6:a9:01:9b: 73:a8:86:83:8e:65:c9:90:17:b7:38:e2:3f:e5:70: 30:67:02:29:8a:f4:59:53:22:1e:79:71:d0:c5:73: 0f:51:28:d0:44:78:b1:da:ec:76:ba:d7:0f:07:20: 11:e5:a5:62:29:23:37:f9:c5:0d:71:74:14:9d:cd: be:e3:ab:c3:64:70:08:4c:34:5e:19:a8:4d:36:59: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F2:D7:D2:1B:1F:E4:A5:3D:36:4E:43:4F:FE:76:20:E0:48:AF:72 X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:29:8f:53:a1:f1:c6:5a:b5:b7:55:52:07:63:e5:dc:81:c9: 74:a1:2b:82:e5:34:53:44:bd:46:22:3b:cd:f3:62:28:63:21: 06:c8:a0:82:48:74:54:c9:29:cb:19:a2:f5:e1:ef:9b:cc:ac: 4d:93:73:e3:c7:6a:3a:df:bf:40:ef:cb:30:f3:7a:8a:2d:23: ae:40:29:17:64:58:a9:b8:b4:94:25:a4:8d:b8:f9:16:00:8b: ae:12:d9:54:14:26:c5:b1:7e:f4:7a:87:18:a0:29:b7:f5:5a: a1:a8:1a:66:a9:cf:9d:7b:2a:6a:32:f7:04:b0:fd:cc:57:a1: aa:e7:9c:37:46:0c:bd:00:2f:87:d9:c2:91:24:32:d1:e6:38: 83:c5:74:33:3b:b5:5e:10:2a:ac:34:37:b5:03:73:53:b9:4d: d2:5c:d8:d8:86:0f:65:ff:ea:44:8f:e8:5b:9a:8c:a4:fd:f2: f0:1c:0d:df:9f:38:75:be:a8:02:c7:f5:16:bf:77:71:63:ab: 81:e2:7c:6f:21:17:b8:a7:59:5b:3a:77:76:e9:bc:78:35:2a: 70:fe:cc:91:f9:ef:eb:f1:d6:d8:d6:46:ee:e8:84:24:c1:ac: a9:cd:f3:c1:5c:34:bf:09:4b:49:c1:14:c4:39:f0:5d:8f:92: 5f:e2:f9:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBGd1XKgzS2cYiBhqV4Dm+VwMyBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTEwMjAwNTI2MTZaFw0yNTEwMjMxMzA5MTZaMDMxMTAvBgNV BAMTKDE5RjJEN0QyMUIxRkU0QTUzRDM2NEU0MzRGRkU3NjIwRTA0OEFGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+ktXXmg0bzho8awQZKlOtnvS TL7Jy88XGmzFkSfWqCgXBxq57k9fMbFWZXar05jCHBFVpW4ihs7wyrJGDOq7h38b SLnjB6wP+W4Hu/yKD+w+X9FrpqvMJJ3QaVzsfkF+m0ctKgkXjvEGisZEAfcno8NH c503a2pyqLgiPpM51/wOYSN34dP0jKOoS1Z02BW0BktrOuBZLz/M6RJzSMUIV2Y0 K+cnIx1HDM1s7bdR1qkBm3OohoOOZcmQF7c44j/lcDBnAimK9FlTIh55cdDFcw9R KNBEeLHa7Ha61w8HIBHlpWIpIzf5xQ1xdBSdzb7jq8NkcAhMNF4ZqE02WQ8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGfLX0hsf5KU9Nk5DT/52IOBIr3IwHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKopj1Oh8cZatbdVUgdj5dyByXShK4LlNFNE vUYiO83zYihjIQbIoIJIdFTJKcsZovXh75vMrE2Tc+PHajrfv0DvyzDzeootI65A KRdkWKm4tJQlpI24+RYAi64S2VQUJsWxfvR6hxigKbf1WqGoGmapz517Kmoy9wSw /cxXoarnnDdGDL0AL4fZwpEkMtHmOIPFdDM7tV4QKqw0N7UDc1O5TdJc2NiGD2X/ 6kSP6FuajKT98vAcDd+fOHW+qALH9Ra/d3Fjq4HifG8hF7inWVs6d3bpvHg1KnD+ zJH57+vx1tjWRu7ohCTBrKnN88FcNL8JS0nBFMQ58F2Pkl/i+R0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:22 2025 by rpki-client