$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: DDQPQn8k8TSuEmxFth4a47M8wa29Mofo7LknQqlbBN4= Subject key identifier: F2:2A:F1:57:45:B5:16:BB:B5:5A:2B:B1:94:D6:64:21:3B:0A:11:4F Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 7147F88E8F664FA58CD2BA0EA8E95C8D4BD37C29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 034E Signing time: Sat 01 Nov 2025 01:21:59 +0000 Manifest this update: Sat 01 Nov 2025 01:16:59 +0000 Manifest next update: Tue 04 Nov 2025 09:30:59 +0000 Files and hashes: 1: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: J8RRXhOHYJrR7kdiJxmxW59TRno/xqhuiqKmlrBa0Cw=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:47:f8:8e:8f:66:4f:a5:8c:d2:ba:0e:a8:e9:5c:8d:4b:d3:7c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Nov 1 01:16:59 2025 GMT Not After : Nov 4 09:30:59 2025 GMT Subject: CN=F22AF15745B516BBB55A2BB194D664213B0A114F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:2c:f9:f7:39:5b:22:d5:83:1e:49:cc:4d: 90:bd:18:89:f1:05:18:4f:b1:ef:b0:e2:78:39:d3: c2:82:3b:cf:ae:6d:1a:09:3f:4e:01:04:1a:30:3d: 00:f7:b2:1b:c1:17:47:b9:63:96:da:bb:b7:1a:fd: 45:14:87:7d:46:ee:e4:4f:7c:fa:e9:8d:0f:9f:68: 3a:81:04:9a:c9:76:c3:e3:e1:d5:3a:d7:60:f8:72: 18:df:37:00:ec:23:9b:ec:f2:19:49:d0:4a:47:62: 4d:a0:29:3b:d1:4a:05:9b:8c:8a:71:aa:3e:8e:8d: c0:48:6d:3f:9c:35:ed:ac:3a:a8:cd:61:47:36:04: bd:50:7f:3d:e3:b6:ce:19:24:6b:54:e0:14:f3:c3: 75:a7:46:54:37:0a:51:6c:5c:47:1d:63:f2:2e:80: 74:87:b4:fe:d6:88:4f:b8:9a:4a:10:0f:fe:07:bc: dd:ed:e9:f3:9f:85:99:a6:d8:b8:c5:34:a8:77:39: 73:b0:4b:33:b4:c9:6f:09:26:a5:84:3c:34:09:24: 8d:12:3e:7a:04:3a:43:99:67:d4:57:22:94:8f:a2: c5:4e:54:f8:cc:02:3d:3a:55:a3:c6:11:32:c7:5f: 3d:a0:25:57:a7:af:25:14:93:5d:b3:ae:81:11:b2: c4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2A:F1:57:45:B5:16:BB:B5:5A:2B:B1:94:D6:64:21:3B:0A:11:4F X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:71:dc:4e:df:36:31:61:ce:a5:7b:e7:b2:ca:da:08:73:e8: bb:63:91:86:86:0e:a6:6e:fa:fc:7f:52:50:c4:9b:2b:b4:c5: 6d:05:ca:6f:eb:11:46:a6:13:07:28:12:45:e7:a0:a7:b0:48: c7:95:28:2c:3d:f7:76:b1:b3:82:c6:9f:1c:72:51:c4:3f:19: ee:dc:09:5b:14:b4:40:52:a7:08:b2:65:d9:30:35:ce:a3:57: 96:36:00:5f:ad:2d:74:c2:68:60:9a:c8:47:b9:13:ee:43:ae: f8:96:b7:bd:6e:8f:b8:41:bb:a9:bc:70:28:5d:3b:eb:45:c4: ac:ad:e5:4f:da:2c:9a:a1:e4:36:c8:cf:23:3a:3f:93:97:0d: fb:b0:01:ce:84:7f:23:4c:32:0e:f1:90:40:11:0a:6a:ea:3e: 89:28:f3:0c:1f:cb:4f:28:47:a3:c9:5a:d7:9b:06:37:b8:df: 12:10:81:c1:55:38:57:21:26:64:7f:96:4b:29:a5:6e:34:14: c2:5f:19:a3:98:17:8d:f8:15:3c:71:31:0f:58:68:b7:86:c2: 58:87:6a:a5:02:16:f0:e8:82:fd:d6:0b:f0:6c:c4:e0:ca:51: 0a:d6:f2:6e:b5:b9:a5:5d:91:fe:5b:b5:6e:4c:d2:93:b4:72: 05:bb:cc:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUf4jo9mT6WM0roOqOlcjUvTfCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNTExMDEwMTE2NTlaFw0yNTExMDQwOTMwNTlaMDMxMTAvBgNV BAMTKEYyMkFGMTU3NDVCNTE2QkJCNTVBMkJCMTk0RDY2NDIxM0IwQTExNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJriz59zlbItWDHknMTZC9GInx BRhPse+w4ng508KCO8+ubRoJP04BBBowPQD3shvBF0e5Y5bau7ca/UUUh31G7uRP fPrpjQ+faDqBBJrJdsPj4dU612D4chjfNwDsI5vs8hlJ0EpHYk2gKTvRSgWbjIpx qj6OjcBIbT+cNe2sOqjNYUc2BL1Qfz3jts4ZJGtU4BTzw3WnRlQ3ClFsXEcdY/Iu gHSHtP7WiE+4mkoQD/4HvN3t6fOfhZmm2LjFNKh3OXOwSzO0yW8JJqWEPDQJJI0S PnoEOkOZZ9RXIpSPosVOVPjMAj06VaPGETLHXz2gJVenryUUk12zroERssQxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8irxV0W1Fru1WiuxlNZkITsKEU8wHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBx3E7fNjFhzqV757LK2ghz6LtjkYaGDqZu +vx/UlDEmyu0xW0Fym/rEUamEwcoEkXnoKewSMeVKCw993axs4LGnxxyUcQ/Ge7c CVsUtEBSpwiyZdkwNc6jV5Y2AF+tLXTCaGCayEe5E+5DrviWt71uj7hBu6m8cChd O+tFxKyt5U/aLJqh5DbIzyM6P5OXDfuwAc6EfyNMMg7xkEARCmrqPoko8wwfy08o R6PJWtebBje43xIQgcFVOFchJmR/lksppW40FMJfGaOYF434FTxxMQ9YaLeGwliH aqUCFvDogv3WC/BsxODKUQrW8m61uaVdkf5btW5M0pO0cgW7zLs= -----END CERTIFICATE-----Generated at Sun Nov 2 04:48:25 2025 by rpki-client