$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: KNq31/zMnwpvq4uumGmcEVB8dUNpO+LlcrQOG1o131A= Subject key identifier: EA:32:47:DC:EC:A1:F4:70:07:29:60:A2:36:27:6C:FA:2E:8C:D1:8B Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 67BAF39C6644BF19B6A9FE7B2DADB237CCA67D01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 033A Signing time: Sun 19 Oct 2025 01:42:20 +0000 Manifest this update: Sun 19 Oct 2025 01:37:20 +0000 Manifest next update: Wed 22 Oct 2025 06:56:20 +0000 Files and hashes: 1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: HGio08hE7LEg+r+CtigJxKye/Fmdlrl8U5ZiOSKdDNU=) 2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ba:f3:9c:66:44:bf:19:b6:a9:fe:7b:2d:ad:b2:37:cc:a6:7d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Oct 19 01:37:20 2025 GMT Not After : Oct 22 06:56:20 2025 GMT Subject: CN=EA3247DCECA1F470072960A236276CFA2E8CD18B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:09:f3:65:9e:7d:84:a7:aa:0b:61:21:40: 8d:c1:5d:cc:dd:23:75:5b:76:0a:a5:48:b7:11:56: 22:64:17:cd:d9:87:b4:63:0f:91:39:e9:a3:3c:88: f1:b9:ab:ea:0e:c6:ec:32:27:63:d8:c8:e7:62:e1: 46:f9:37:7e:ec:0c:8d:68:95:97:11:93:b1:fe:81: 5d:dd:50:86:e0:7b:c6:54:1c:2d:d4:c3:d0:fa:88: ac:3d:9b:81:aa:27:10:a8:b2:25:be:b6:be:ab:3a: 9f:6f:23:79:de:f2:19:39:fb:56:52:5f:79:21:4b: 2a:de:e6:c9:79:98:d2:07:94:23:d1:33:02:96:df: 5a:16:ea:54:f7:47:57:74:be:6c:59:94:98:85:af: d1:c5:8a:23:ff:23:ba:b9:81:59:81:5a:eb:81:f7: ca:f2:99:8e:6f:89:0e:c9:c6:1f:10:da:fa:92:53: 84:c3:59:88:c0:84:8d:8c:cd:ad:25:a7:ba:2e:f8: 84:86:13:ab:bd:6a:45:f5:34:6a:9e:6c:dd:3f:9b: 3f:5e:b1:92:02:69:f7:3e:a7:58:e2:cc:b5:76:22: 3f:8c:65:2e:33:35:3a:d5:b0:67:2d:9b:2a:d7:56: 07:65:02:49:26:b8:09:c6:d3:76:6f:00:bc:29:d7: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:32:47:DC:EC:A1:F4:70:07:29:60:A2:36:27:6C:FA:2E:8C:D1:8B X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:30:fa:df:a9:ec:1c:fe:dc:8b:a7:c3:a9:5a:bc:79:33:d3: 63:35:e7:10:d4:62:94:59:c6:55:14:41:32:7b:3c:6f:15:ac: f9:0a:b9:d6:6a:ff:8a:9a:b6:d8:61:f1:4a:94:32:81:2b:49: 71:76:82:f3:60:cf:2c:ab:17:cb:c6:0c:25:bb:2a:0c:fb:29: d7:21:36:60:78:4b:ef:b3:c1:dd:bb:d2:48:3b:de:24:5d:3b: 72:ba:5a:bf:25:d1:0c:94:c6:fc:a0:30:56:f9:a2:9e:92:6c: 42:7b:1d:7c:0a:d4:3b:0e:8b:d4:8a:05:1d:d4:ff:7a:e9:0a: f4:72:52:ac:13:19:4f:fb:80:03:be:83:7f:46:93:11:91:9c: 30:d5:5b:96:56:b0:1f:82:66:ad:1c:a4:2d:e5:0c:95:d5:80: 2b:9f:b8:db:24:ce:da:67:77:ca:85:77:bb:cf:50:ad:48:e2: 3b:21:8d:b4:6b:f1:6b:a8:3d:51:94:51:46:a4:62:56:5c:8c: fc:ac:64:93:77:43:ae:d0:c6:62:a4:50:1f:d7:e0:87:b6:fe: 8b:0f:51:30:e2:ce:3b:29:0c:13:8b:42:77:af:22:e5:3e:44: a6:d9:a3:17:1f:72:11:bd:e7:1d:92:40:2e:05:de:34:15:db: 5d:32:30:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7rznGZEvxm2qf57La2yN8ymfQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTEwMTkwMTM3MjBaFw0yNTEwMjIwNjU2MjBaMDMxMTAvBgNV BAMTKEVBMzI0N0RDRUNBMUY0NzAwNzI5NjBBMjM2Mjc2Q0ZBMkU4Q0QxOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFgnzZZ59hKeqC2EhQI3BXczd I3VbdgqlSLcRViJkF83Zh7RjD5E56aM8iPG5q+oOxuwyJ2PYyOdi4Ub5N37sDI1o lZcRk7H+gV3dUIbge8ZUHC3Uw9D6iKw9m4GqJxCosiW+tr6rOp9vI3ne8hk5+1ZS X3khSyre5sl5mNIHlCPRMwKW31oW6lT3R1d0vmxZlJiFr9HFiiP/I7q5gVmBWuuB 98rymY5viQ7Jxh8Q2vqSU4TDWYjAhI2Mza0lp7ou+ISGE6u9akX1NGqebN0/mz9e sZICafc+p1jizLV2Ij+MZS4zNTrVsGctmyrXVgdlAkkmuAnG03ZvALwp14y3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6jJH3Oyh9HAHKWCiNids+i6M0YswHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMw+t+p7Bz+3Iunw6lavHkz02M15xDUYpRZ xlUUQTJ7PG8VrPkKudZq/4qatthh8UqUMoErSXF2gvNgzyyrF8vGDCW7Kgz7Kdch NmB4S++zwd270kg73iRdO3K6Wr8l0QyUxvygMFb5op6SbEJ7HXwK1DsOi9SKBR3U /3rpCvRyUqwTGU/7gAO+g39GkxGRnDDVW5ZWsB+CZq0cpC3lDJXVgCufuNskztpn d8qFd7vPUK1I4jshjbRr8WuoPVGUUUakYlZcjPysZJN3Q67QxmKkUB/X4Ie2/osP UTDizjspDBOLQnevIuU+RKbZoxcfchG95x2SQC4F3jQV210yMBk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:30 2025 by rpki-client