$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: eyz3qRz/YKJp/sWiJ6nn8m9+R/Mk3KMncxjQd8g6krA= Subject key identifier: 66:8D:FC:44:E5:B2:E7:90:9B:B4:BA:1A:88:C6:A8:68:F2:DA:AF:AD Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 1942A0DBE16ADC8C14223514EAFC9AAA103E11B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 0394 Signing time: Tue 21 Oct 2025 18:32:02 +0000 Manifest this update: Tue 21 Oct 2025 18:27:02 +0000 Manifest next update: Sat 25 Oct 2025 02:08:02 +0000 Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) 2: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: SaaSjUor24QioDilt1035JiDpiFWB1+76jC2iDvLaM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 02:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:42:a0:db:e1:6a:dc:8c:14:22:35:14:ea:fc:9a:aa:10:3e:11:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Oct 21 18:27:02 2025 GMT Not After : Oct 25 02:08:02 2025 GMT Subject: CN=668DFC44E5B2E7909BB4BA1A88C6A868F2DAAFAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:16:ff:1f:0e:c3:02:8e:32:2f:19:a9:0c:17: 81:14:ad:7c:ba:e9:76:a2:ac:e7:25:b2:63:b4:2d: 75:35:d4:ae:c5:f5:88:f6:3e:72:14:8b:07:54:91: 57:96:12:b8:04:53:f6:21:10:0b:98:8d:80:80:4a: 6a:a4:78:aa:4e:81:8f:c6:4b:ab:3e:75:c3:77:1a: eb:e2:eb:89:fd:69:ea:e1:0d:2d:0c:f1:73:c3:df: ec:04:fa:b4:b9:bf:96:67:9d:30:54:20:a6:a4:f5: cf:ed:81:01:30:35:77:b3:a2:70:4e:c5:bd:1c:8f: e4:16:b6:0d:21:89:2f:53:e1:4e:04:25:1c:71:3f: 52:7c:14:ae:54:2e:2d:b3:53:de:1d:ea:16:69:48: 0c:be:69:02:ae:9d:e4:54:9c:fe:d8:c7:60:cc:b5: 5f:8e:3f:67:81:ba:7a:d6:fa:09:fe:e2:3d:ce:93: d0:fc:ae:73:fb:c6:2f:bf:8b:2a:c2:aa:e1:33:8c: 24:2e:5e:aa:f4:e8:75:57:ee:f8:8a:91:e6:02:f1: 9d:98:5b:75:35:73:a0:18:7a:e8:6d:fe:e6:d5:a4: c0:23:30:ee:51:f5:2e:16:e9:a6:78:56:75:db:d2: 0b:cc:a8:dd:3f:ee:54:92:e3:55:9e:4d:db:a0:c5: d8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8D:FC:44:E5:B2:E7:90:9B:B4:BA:1A:88:C6:A8:68:F2:DA:AF:AD X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c2:80:75:42:33:5f:5a:35:aa:27:35:27:5c:59:b7:ab:1e: 23:00:ac:24:1c:65:63:3a:e0:c1:bf:7d:a1:9f:92:bc:a3:4d: ae:c8:0d:b9:44:e4:fe:c9:92:4c:33:17:cb:3b:94:b9:db:ce: 40:83:1d:56:b9:65:73:9c:43:a7:6c:5e:c7:02:bc:7d:63:55: 6a:11:6e:ca:b8:cf:e2:88:1a:d9:85:5c:72:ec:4d:f7:53:95: 38:09:82:3a:73:2b:52:89:1d:01:73:11:95:c2:19:f9:d0:4f: 4d:2b:38:8e:a0:81:70:45:42:f5:20:04:99:3c:95:e3:83:8c: 25:6b:c9:66:e0:9e:33:21:37:a7:3a:dc:a7:7a:53:ad:ac:ff: 62:84:94:e7:26:cb:0e:cf:16:73:6f:71:67:4f:f7:94:62:16: f4:f0:a6:2c:1d:6a:10:d9:33:da:08:74:9d:3d:58:09:a2:62: a4:5c:ca:b4:5e:be:d8:71:49:21:59:cb:90:35:e1:52:49:e5: 3e:8a:4e:b7:86:02:df:cb:a9:1f:92:ea:e2:51:9a:4c:21:9f: 5e:7f:a3:1d:9f:81:f0:7e:f9:cc:66:99:d3:05:01:95:7a:c1: 86:44:6b:5b:6e:87:8e:cc:b0:22:25:81:4c:9d:d1:61:60:98: 21:3b:82:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUKg2+Fq3IwUIjUU6vyaqhA+EbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTEwMjExODI3MDJaFw0yNTEwMjUwMjA4MDJaMDMxMTAvBgNV BAMTKDY2OERGQzQ0RTVCMkU3OTA5QkI0QkExQTg4QzZBODY4RjJEQUFGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFv8fDsMCjjIvGakMF4EUrXy6 6XairOclsmO0LXU11K7F9Yj2PnIUiwdUkVeWErgEU/YhEAuYjYCASmqkeKpOgY/G S6s+dcN3Guvi64n9aerhDS0M8XPD3+wE+rS5v5ZnnTBUIKak9c/tgQEwNXezonBO xb0cj+QWtg0hiS9T4U4EJRxxP1J8FK5ULi2zU94d6hZpSAy+aQKuneRUnP7Yx2DM tV+OP2eBunrW+gn+4j3Ok9D8rnP7xi+/iyrCquEzjCQuXqr06HVX7viKkeYC8Z2Y W3U1c6AYeuht/ubVpMAjMO5R9S4W6aZ4VnXb0gvMqN0/7lSS41WeTdugxdiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZo38ROWy55CbtLoaiMaoaPLar60wHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADCgHVCM19aNaonNSdcWberHiMArCQcZWM6 4MG/faGfkryjTa7IDblE5P7JkkwzF8s7lLnbzkCDHVa5ZXOcQ6dsXscCvH1jVWoR bsq4z+KIGtmFXHLsTfdTlTgJgjpzK1KJHQFzEZXCGfnQT00rOI6ggXBFQvUgBJk8 leODjCVryWbgnjMhN6c63Kd6U62s/2KElOcmyw7PFnNvcWdP95RiFvTwpiwdahDZ M9oIdJ09WAmiYqRcyrRevthxSSFZy5A14VJJ5T6KTreGAt/LqR+S6uJRmkwhn15/ ox2fgfB++cxmmdMFAZV6wYZEa1tuh47MsCIlgUyd0WFgmCE7gko= -----END CERTIFICATE-----Generated at Thu Oct 23 05:10:15 2025 by rpki-client