$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: DGaaDl17Cvmur32Gc11YHVn9IavyWR87DOMyQKzyrLw= Subject key identifier: 87:89:01:A3:1F:25:E1:DA:68:F6:9B:2B:3F:4D:FA:0E:7E:60:B9:CB Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 6A6147F34967191F0479F76F0F269DACD7556648 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: B5 Signing time: Mon 20 Oct 2025 02:31:07 +0000 Manifest this update: Mon 20 Oct 2025 02:26:07 +0000 Manifest next update: Thu 23 Oct 2025 03:44:07 +0000 Files and hashes: 1: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ=) 2: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: fw34EUStmPJJwkSgSszKgUzoCw+aIbVSKi4fGq2c8xw=) 3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 4bpu+mggFbzvJDFJ5R6f3m5fTkhrxUM9zXGsoRvy4HQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:61:47:f3:49:67:19:1f:04:79:f7:6f:0f:26:9d:ac:d7:55:66:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Oct 20 02:26:07 2025 GMT Not After : Oct 23 03:44:07 2025 GMT Subject: CN=878901A31F25E1DA68F69B2B3F4DFA0E7E60B9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:5e:4e:9d:3b:83:26:27:ae:fb:96:ff:08: 4c:89:04:f5:01:1e:d3:55:d6:62:1a:cf:03:00:19: c4:49:81:24:2f:90:ca:ee:da:7e:b1:31:0d:94:5a: 68:81:27:8e:f9:9c:ec:17:a8:40:76:2a:1b:2a:3f: fe:30:ed:46:3f:94:d7:6e:6e:53:5a:f8:6a:46:6e: 60:c5:fc:47:3c:fe:c3:d9:af:d7:a8:b2:63:60:af: 46:27:ff:40:74:67:4c:9d:33:be:9a:ab:a3:d2:e7: a2:3e:a3:6f:32:de:bb:4a:6d:ea:6e:29:73:f5:8b: e5:e7:23:b0:35:67:0b:5a:e8:b5:54:4d:d2:09:80: 8c:99:53:4c:22:23:dc:ac:ca:e3:99:6d:86:08:44: bd:81:6e:c8:46:8c:ec:5a:99:5c:a7:0d:ca:49:4b: e3:02:3e:ab:5c:06:9e:77:aa:73:fc:33:01:f5:de: dd:f4:d6:4e:9e:59:44:1d:62:b4:11:79:c9:27:f3: a8:17:59:da:dd:b2:44:b8:85:87:58:82:db:9f:1e: ab:17:c3:e0:1d:35:02:47:9f:61:23:0b:f7:2c:e1: ab:32:ef:93:c7:6c:1f:1d:99:45:ef:61:43:81:6f: 92:01:cd:19:a6:68:2a:80:4f:07:db:bf:e8:81:9c: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:89:01:A3:1F:25:E1:DA:68:F6:9B:2B:3F:4D:FA:0E:7E:60:B9:CB X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5d:47:cc:b2:97:b4:91:fc:bb:fa:63:c3:cc:3f:81:31:af: 7b:ba:f0:fb:77:5a:99:b0:cc:1c:c2:ca:51:e3:a6:f7:19:a6: 78:76:06:d0:a7:c5:b4:e2:94:a7:da:d1:52:57:d8:21:88:36: 78:65:5c:74:cd:83:a2:c9:a8:4d:bb:e2:aa:17:01:c9:20:79: 13:2a:03:06:33:28:22:f4:be:ea:11:b3:16:e9:a4:af:de:21: 36:76:24:81:c7:3a:3f:f2:d7:38:bc:d9:60:2d:38:df:55:80: 5c:e4:aa:28:90:c3:40:28:04:36:ac:69:12:c1:07:47:2d:4e: d8:45:40:a8:6b:43:f3:4b:1c:d8:74:04:23:b5:b0:24:09:93: de:32:c3:8c:e0:de:82:de:27:0f:a7:7c:94:87:17:14:28:ff: 5a:4d:c0:cf:14:a1:44:0c:c7:f0:1a:eb:5e:e9:8e:5c:ca:a5: 7d:b7:3b:6d:e9:dc:26:0d:3f:09:e7:8e:0b:e6:17:70:c2:df: 1e:bd:ea:66:df:22:b5:40:85:de:1e:4b:98:5e:53:87:a4:5f: 45:92:a0:21:52:74:7c:fb:35:87:6f:4a:56:82:93:12:1a:49: f7:a0:71:f4:f4:52:59:ae:2c:d9:3a:6a:13:47:f6:36:40:8a: 3d:8d:51:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamFH80lnGR8EefdvDyadrNdVZkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNTEwMjAwMjI2MDdaFw0yNTEwMjMwMzQ0MDdaMDMxMTAvBgNV BAMTKDg3ODkwMUEzMUYyNUUxREE2OEY2OUIyQjNGNERGQTBFN0U2MEI5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAz15OnTuDJieu+5b/CEyJBPUB HtNV1mIazwMAGcRJgSQvkMru2n6xMQ2UWmiBJ475nOwXqEB2KhsqP/4w7UY/lNdu blNa+GpGbmDF/Ec8/sPZr9eosmNgr0Yn/0B0Z0ydM76aq6PS56I+o28y3rtKbepu KXP1i+XnI7A1Zwta6LVUTdIJgIyZU0wiI9ysyuOZbYYIRL2BbshGjOxamVynDcpJ S+MCPqtcBp53qnP8MwH13t301k6eWUQdYrQReckn86gXWdrdskS4hYdYgtufHqsX w+AdNQJHn2EjC/cs4asy75PHbB8dmUXvYUOBb5IBzRmmaCqATwfbv+iBnO35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh4kBox8l4dpo9psrP036Dn5gucswHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtdR8yyl7SR/Lv6Y8PMP4Exr3u68Pt3Wpmw zBzCylHjpvcZpnh2BtCnxbTilKfa0VJX2CGINnhlXHTNg6LJqE274qoXAckgeRMq AwYzKCL0vuoRsxbppK/eITZ2JIHHOj/y1zi82WAtON9VgFzkqiiQw0AoBDasaRLB B0ctTthFQKhrQ/NLHNh0BCO1sCQJk94yw4zg3oLeJw+nfJSHFxQo/1pNwM8UoUQM x/Aa617pjlzKpX23O23p3CYNPwnnjgvmF3DC3x696mbfIrVAhd4eS5heU4ekX0WS oCFSdHz7NYdvSlaCkxIaSfegcfT0UlmuLNk6ahNH9jZAij2NUYE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:19:00 2025 by rpki-client