$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: qDg4tOZVJ4ysxcr0hLGrSBx98C5JvUMap6/Nfq9B3jM= Subject key identifier: E9:99:20:19:75:B1:0F:7F:1E:99:8F:2D:B0:6A:E9:3E:59:68:84:AB Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 08DB2CA075791F5C1C88AAC0651635CDA15CFACD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 033E Signing time: Tue 28 Oct 2025 02:22:18 +0000 Manifest this update: Tue 28 Oct 2025 02:17:18 +0000 Manifest next update: Fri 31 Oct 2025 12:58:18 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: P75CwQtx5ZoJ1bQzhWss5CJxCPu5gToFBEFiKjKUkdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:db:2c:a0:75:79:1f:5c:1c:88:aa:c0:65:16:35:cd:a1:5c:fa:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Oct 28 02:17:18 2025 GMT Not After : Oct 31 12:58:18 2025 GMT Subject: CN=E999201975B10F7F1E998F2DB06AE93E596884AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:3d:2f:c6:f4:3f:9f:30:db:b5:09:70:d3: 72:3e:12:f3:01:45:71:2c:e7:52:9b:7f:9d:bd:27: 67:63:4a:59:b5:a0:15:02:f3:78:03:79:f3:8c:02: e1:be:a1:c7:b9:8e:03:c8:0b:37:2e:fb:e3:18:88: cc:e1:c7:4f:0c:98:f2:7e:b3:79:23:6d:2e:a2:2f: 97:b4:2d:74:bd:a3:1c:bf:a3:0a:a8:90:8c:53:ed: 4b:9a:f6:f1:67:7d:17:20:0f:0c:8d:a0:7d:dc:3b: 80:cf:28:73:33:cb:9e:07:6c:83:a8:e6:6c:52:f5: 32:d1:d3:a6:3d:5b:f4:69:d8:2e:a0:9c:f9:6c:be: ae:b1:b6:df:37:9e:49:8a:6f:80:f0:5b:35:c1:cc: b2:a8:60:ff:8b:e9:c6:a9:06:66:20:fa:64:ca:46: 2b:7f:79:c2:04:9f:4c:7a:4f:d4:67:a3:f9:ac:c7: 25:34:9e:fe:24:90:a9:d0:12:b2:78:d9:95:bf:69: 3c:37:f6:93:20:4f:a2:e7:e5:8b:c5:fd:e5:eb:3d: d3:54:97:62:87:06:60:67:b6:b9:a3:0b:ee:70:67: 7f:24:a1:db:68:06:fc:e9:0f:94:36:8d:13:fc:94: 57:a4:bb:68:9a:17:1c:f2:1b:30:5c:49:1e:c1:6f: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:99:20:19:75:B1:0F:7F:1E:99:8F:2D:B0:6A:E9:3E:59:68:84:AB X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:75:04:fd:79:eb:e0:db:dc:b5:44:87:00:bf:33:5d:5c:8b: 6f:ef:b7:35:99:93:ec:a3:f6:3a:87:5f:e5:75:d5:0a:66:18: fb:60:77:22:60:03:dc:de:a0:ed:4a:d2:4c:13:8c:7f:29:cb: a9:68:ed:ed:f8:f5:95:be:a7:e3:83:82:18:ae:a2:d5:6e:9c: 12:3b:81:5b:7a:d6:97:d4:fb:8e:24:77:49:2d:33:a7:cb:13: 72:95:d1:4b:21:d0:45:f0:2a:ad:08:cd:25:0b:9a:3f:4b:9a: 87:49:b5:44:0c:b1:50:5a:67:d1:49:cc:1f:d5:b3:42:ee:c8: 96:db:2f:c6:06:c5:a5:6b:2f:f5:6e:b7:3a:31:1e:0d:a4:5b: fb:5c:96:9e:62:7c:7e:22:33:5e:b6:6b:eb:e8:d4:f1:79:eb: 4c:4c:b9:f1:d7:de:94:f0:f1:20:a0:01:ed:77:ba:1f:a2:56: 8f:bd:66:c1:9c:d1:94:9a:4d:e2:27:9b:f3:00:8f:28:a9:b4: a8:7b:2a:5d:de:cc:2f:8d:be:e6:29:3f:16:5a:b0:ac:1f:ce: 4b:5e:16:2f:06:99:14:ba:91:e5:ab:6e:aa:50:a8:95:25:fc: 01:03:0f:7b:73:a0:d9:e8:a3:55:08:03:a7:a1:04:ad:a6:06: f0:47:ed:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNssoHV5H1wciKrAZRY1zaFc+s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTEwMjgwMjE3MThaFw0yNTEwMzExMjU4MThaMDMxMTAvBgNV BAMTKEU5OTkyMDE5NzVCMTBGN0YxRTk5OEYyREIwNkFFOTNFNTk2ODg0QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0D0vxvQ/nzDbtQlw03I+EvMB RXEs51Kbf529J2djSlm1oBUC83gDefOMAuG+oce5jgPICzcu++MYiMzhx08MmPJ+ s3kjbS6iL5e0LXS9oxy/owqokIxT7Uua9vFnfRcgDwyNoH3cO4DPKHMzy54HbIOo 5mxS9TLR06Y9W/Rp2C6gnPlsvq6xtt83nkmKb4DwWzXBzLKoYP+L6capBmYg+mTK Rit/ecIEn0x6T9Rno/msxyU0nv4kkKnQErJ42ZW/aTw39pMgT6Ln5YvF/eXrPdNU l2KHBmBntrmjC+5wZ38kodtoBvzpD5Q2jRP8lFeku2iaFxzyGzBcSR7Bb5TXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ZkgGXWxD38emY8tsGrpPllohKswHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZ1BP156+Db3LVEhwC/M11ci2/vtzWZk+yj 9jqHX+V11QpmGPtgdyJgA9zeoO1K0kwTjH8py6lo7e349ZW+p+ODghiuotVunBI7 gVt61pfU+44kd0ktM6fLE3KV0Ush0EXwKq0IzSULmj9LmodJtUQMsVBaZ9FJzB/V s0LuyJbbL8YGxaVrL/VutzoxHg2kW/tclp5ifH4iM162a+vo1PF560xMufHX3pTw 8SCgAe13uh+iVo+9ZsGc0ZSaTeInm/MAjyiptKh7Kl3ezC+NvuYpPxZasKwfzkte Fi8GmRS6keWrbqpQqJUl/AEDD3tzoNnoo1UIA6ehBK2mBvBH7QE= -----END CERTIFICATE-----Generated at Wed Oct 29 21:52:09 2025 by rpki-client