$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: FfQ9M8/SiWGCHnRovB+TdKCflUOuUDr36OdCvty349k= Subject key identifier: 3C:F1:7B:54:0C:26:04:CD:A2:2B:CA:C0:21:B0:F4:40:97:FD:52:C7 Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 4E508827B27041847DC0B80EE6A0C361432C4B90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 051A Signing time: Fri 24 Oct 2025 21:20:47 +0000 Manifest this update: Fri 24 Oct 2025 21:15:47 +0000 Manifest next update: Tue 28 Oct 2025 06:07:47 +0000 Files and hashes: 1: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: E2uu1x+I6SmKuq0aJgDdyKaobr6kyHxRsZ9a/8jvA7A=) 2: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: gVdR11t5fw1Z3vuhsrv3YNa5sWCtSlARbhSmJWiHvO4=) 3: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: nky6u5cUE2alGFzX+XUtHVvbxZsSUTfs8Af18GQEbd4=) 4: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: aTbEH2RiVh4K07qhKRGxV184e2sOPaIMjUhuR94+WEU=) 5: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: Gcf2m6wvxledkwR1qQNWFpogqDCtyqIrxx7PKSay3xY=) 6: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: MJzwkeAeDIIHbvzCyYoNIOj+cbb5++mSci1EoFNlAV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 06:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:50:88:27:b2:70:41:84:7d:c0:b8:0e:e6:a0:c3:61:43:2c:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Oct 24 21:15:47 2025 GMT Not After : Oct 28 06:07:47 2025 GMT Subject: CN=3CF17B540C2604CDA22BCAC021B0F44097FD52C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:db:61:5e:bf:8b:f7:54:43:d1:59:1b:6c: 6c:16:61:8c:49:ee:69:2f:06:8c:71:4a:1d:28:31: 02:0a:ad:30:69:33:13:15:ca:1b:2b:0d:eb:47:b9: 9d:a6:e4:e5:d9:2e:59:4c:d0:ed:77:6b:13:2a:2e: e6:a8:03:89:5c:b4:19:40:67:0f:dd:96:46:bb:81: 08:1b:1b:c3:fc:a7:b3:81:66:87:7d:99:61:ca:bf: 87:9a:fa:b5:c5:50:2a:fc:23:1d:8c:cd:fa:a4:84: 90:e0:9c:af:81:ce:1d:80:56:7c:92:e7:d9:a6:cb: 02:56:f5:8b:15:32:82:b5:ec:60:22:00:5f:eb:93: 6f:79:1a:ff:9b:db:bd:78:46:5b:26:0d:85:d2:ed: d2:c2:1f:c4:47:9b:3e:10:1b:5d:fd:9a:10:e0:df: e0:f6:65:9d:6f:4f:a6:83:3d:ce:1d:0c:09:a1:93: 34:26:a3:0f:7a:63:91:ed:76:24:1b:f3:88:87:38: 29:e7:6f:0e:3e:f5:8c:a3:77:3c:e0:25:17:79:f1: 41:99:39:d7:70:4f:b4:ea:3c:7d:90:a0:dc:92:4e: 11:b0:fe:da:8e:c1:fb:ae:d2:24:31:21:15:66:d2: bc:21:70:1e:19:a4:03:08:58:3e:11:46:e6:c4:af: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F1:7B:54:0C:26:04:CD:A2:2B:CA:C0:21:B0:F4:40:97:FD:52:C7 X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5c:85:54:b3:33:b3:e4:a8:da:0f:a1:05:30:43:6e:da:08: 9d:63:a9:fe:26:18:76:fa:7a:03:5b:ee:c9:c4:1f:94:02:34: 51:d6:46:ba:71:aa:78:53:32:be:88:41:36:af:b1:c7:a5:1a: 3b:c2:cb:1e:87:50:a6:33:9e:9b:f1:28:e2:49:c6:d5:bd:99: 0a:4f:b2:9b:77:8c:34:f1:55:ad:99:9d:2f:eb:52:0a:82:d3: be:07:4d:29:0a:d8:d9:89:b5:04:52:a9:1b:7f:bd:23:99:b5: 80:99:30:a6:83:e9:d5:8c:40:6e:f5:1e:52:28:62:0c:8e:cb: 2b:5d:03:ae:ab:89:a4:c6:5b:9a:79:fd:19:8f:3c:5c:fd:93: 3d:ca:c6:41:63:97:33:f4:30:2f:2d:b3:dc:14:00:1b:0e:00: d2:73:d5:1d:82:1c:df:86:3f:04:cb:6b:33:ac:5e:5c:77:48: f5:e0:c5:5b:57:a0:64:2b:09:28:61:a9:82:17:11:9b:db:d3: d3:96:6a:1a:d8:f7:1c:e2:59:46:2e:3e:ea:f9:55:62:15:2d: 0d:2b:81:38:64:48:75:0a:04:44:50:53:d5:dd:d1:e0:7c:ab: f6:ed:bc:fb:65:66:a0:07:88:9f:cb:b1:4c:8c:76:9a:d3:37: cb:04:a1:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlCIJ7JwQYR9wLgO5qDDYUMsS5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNTEwMjQyMTE1NDdaFw0yNTEwMjgwNjA3NDdaMDMxMTAvBgNV BAMTKDNDRjE3QjU0MEMyNjA0Q0RBMjJCQ0FDMDIxQjBGNDQwOTdGRDUyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbdthXr+L91RD0VkbbGwWYYxJ 7mkvBoxxSh0oMQIKrTBpMxMVyhsrDetHuZ2m5OXZLllM0O13axMqLuaoA4lctBlA Zw/dlka7gQgbG8P8p7OBZod9mWHKv4ea+rXFUCr8Ix2MzfqkhJDgnK+Bzh2AVnyS 59mmywJW9YsVMoK17GAiAF/rk295Gv+b2714RlsmDYXS7dLCH8RHmz4QG139mhDg 3+D2ZZ1vT6aDPc4dDAmhkzQmow96Y5HtdiQb84iHOCnnbw4+9YyjdzzgJRd58UGZ OddwT7TqPH2QoNySThGw/tqOwfuu0iQxIRVm0rwhcB4ZpAMIWD4RRubEr4kNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPPF7VAwmBM2iK8rAIbD0QJf9UscwHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1chVSzM7PkqNoPoQUwQ27aCJ1jqf4mGHb6 egNb7snEH5QCNFHWRrpxqnhTMr6IQTavscelGjvCyx6HUKYznpvxKOJJxtW9mQpP spt3jDTxVa2ZnS/rUgqC074HTSkK2NmJtQRSqRt/vSOZtYCZMKaD6dWMQG71HlIo YgyOyytdA66riaTGW5p5/RmPPFz9kz3KxkFjlzP0MC8ts9wUABsOANJz1R2CHN+G PwTLazOsXlx3SPXgxVtXoGQrCShhqYIXEZvb09OWahrY9xziWUYuPur5VWIVLQ0r gThkSHUKBERQU9Xd0eB8q/btvPtlZqAHiJ/LsUyMdprTN8sEoY8= -----END CERTIFICATE-----Generated at Sat Oct 25 12:51:07 2025 by rpki-client