$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: X1/8g+CgUy8XRKsCfAw6xvHsE9m7dfjW7PxsUte2BkI= Subject key identifier: DE:3B:E5:5B:DA:43:C4:15:D8:FE:06:A5:3D:CD:C4:D5:96:94:E1:81 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 61FD3211823327E6BE66DA0DC3B9DB9D3E12203E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: EA Signing time: Wed 29 Oct 2025 12:12:04 +0000 Manifest this update: Wed 29 Oct 2025 12:07:04 +0000 Manifest next update: Sat 01 Nov 2025 14:30:04 +0000 Files and hashes: 1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8=) 2: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) 3: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: QTXd0c0tPNhSZD1dG2H4TY1t7MaaGqXivOk4q9a46QE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fd:32:11:82:33:27:e6:be:66:da:0d:c3:b9:db:9d:3e:12:20:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Oct 29 12:07:04 2025 GMT Not After : Nov 1 14:30:04 2025 GMT Subject: CN=DE3BE55BDA43C415D8FE06A53DCDC4D59694E181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:5f:ab:04:ab:87:d2:26:c7:15:b8:8b:82: 5b:08:7c:8d:bc:d2:9f:c4:4c:00:a3:c6:86:11:e2: 16:df:57:63:98:39:2a:5b:b4:ee:a5:d8:78:8a:5d: 0f:c6:fb:a5:42:55:fe:58:3f:49:6a:0f:14:14:50: c0:cb:68:6b:89:71:d2:ff:41:c6:4f:d8:1c:1e:d8: 51:91:00:77:e7:28:10:04:7c:e5:57:d1:5b:4c:ed: 0d:c5:0a:a7:bd:25:b0:13:26:de:48:d6:fe:f9:3b: 2b:20:2a:83:41:6a:b8:84:3e:94:40:c9:9b:4c:fa: 2a:8e:e2:d8:fd:31:74:a3:34:fc:ce:b1:ee:cf:dd: 8c:75:26:9b:a2:90:f5:8e:91:91:02:3a:51:f9:5f: 3c:12:29:a5:bb:bd:47:c9:fd:42:32:11:54:a8:51: b2:50:95:3f:b9:5c:e1:c7:67:d1:2e:c0:05:80:08: a2:9a:d6:79:68:4a:fe:66:8d:c1:a3:99:f4:62:7b: 56:a9:42:06:d9:4c:71:d6:87:31:85:78:5e:2b:b2: 80:f3:f7:0a:50:d4:e8:9a:35:ac:4c:13:7d:ba:a0: bd:6b:da:47:04:c9:91:62:44:c5:73:d6:9f:69:e3: 5d:40:c1:97:36:65:66:4b:42:0e:23:e6:29:b8:d9: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3B:E5:5B:DA:43:C4:15:D8:FE:06:A5:3D:CD:C4:D5:96:94:E1:81 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:d7:6b:c3:82:d6:83:44:19:aa:5e:ae:89:9c:6b:a0:48:7a: 55:25:e7:b0:24:cf:78:fd:95:b0:ef:ca:63:8d:aa:46:ca:2f: af:d7:42:80:07:29:9e:7e:db:a0:ff:64:aa:3b:54:af:6f:a7: 16:07:05:de:59:ea:b9:3b:54:30:65:fb:19:ac:b3:f8:6f:64: 6f:d5:33:f2:52:57:e6:93:32:6f:4b:84:47:aa:4b:55:87:9a: 6d:ff:bd:67:54:22:14:e9:4a:01:11:d6:36:6f:f8:af:fd:00: 55:65:37:20:11:5b:89:38:a4:00:5a:c9:f1:46:36:a1:91:e7: 5f:40:af:6a:ef:b7:b7:b2:64:a8:dc:31:a8:68:07:0b:47:c9: 28:9d:2d:75:7d:3f:30:10:2d:7b:3c:15:56:32:af:98:e1:fb: eb:c3:86:21:c3:e5:90:20:4a:b8:87:ef:2e:0c:8b:7e:ac:24: 96:3f:77:ed:bc:2d:92:fe:42:47:03:b8:a4:4a:65:dc:80:d5: c6:37:14:22:be:b7:c8:89:54:a3:0f:37:bd:87:f9:e4:0d:4e: 5d:5f:ee:fa:9c:61:b1:1a:a7:8d:7d:a9:89:7a:54:75:47:14: 19:00:ed:e2:54:2a:bf:a8:c1:97:97:8a:df:f4:6d:a8:26:89: 58:87:4c:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYf0yEYIzJ+a+ZtoNw7nbnT4SID4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTEwMjkxMjA3MDRaFw0yNTExMDExNDMwMDRaMDMxMTAvBgNV BAMTKERFM0JFNTVCREE0M0M0MTVEOEZFMDZBNTNEQ0RDNEQ1OTY5NEUxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QF+rBKuH0ibHFbiLglsIfI28 0p/ETACjxoYR4hbfV2OYOSpbtO6l2HiKXQ/G+6VCVf5YP0lqDxQUUMDLaGuJcdL/ QcZP2Bwe2FGRAHfnKBAEfOVX0VtM7Q3FCqe9JbATJt5I1v75OysgKoNBariEPpRA yZtM+iqO4tj9MXSjNPzOse7P3Yx1JpuikPWOkZECOlH5XzwSKaW7vUfJ/UIyEVSo UbJQlT+5XOHHZ9EuwAWACKKa1nloSv5mjcGjmfRie1apQgbZTHHWhzGFeF4rsoDz 9wpQ1OiaNaxME326oL1r2kcEyZFiRMVz1p9p411AwZc2ZWZLQg4j5im42aExAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3jvlW9pDxBXY/galPc3E1ZaU4YEwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANPXa8OC1oNEGaperomca6BIelUl57Akz3j9 lbDvymONqkbKL6/XQoAHKZ5+26D/ZKo7VK9vpxYHBd5Z6rk7VDBl+xmss/hvZG/V M/JSV+aTMm9LhEeqS1WHmm3/vWdUIhTpSgER1jZv+K/9AFVlNyARW4k4pABayfFG NqGR519Ar2rvt7eyZKjcMahoBwtHySidLXV9PzAQLXs8FVYyr5jh++vDhiHD5ZAg SriH7y4Mi36sJJY/d+28LZL+QkcDuKRKZdyA1cY3FCK+t8iJVKMPN72H+eQNTl1f 7vqcYbEap419qYl6VHVHFBkA7eJUKr+owZeXit/0bagmiViHTFU= -----END CERTIFICATE-----Generated at Thu Oct 30 15:03:43 2025 by rpki-client