$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json) Hash identifier: 2zG9DnMGNydRqC+f7pNQMsvHUWxVC//lZEB8QIb902E= Subject key identifier: 00:E4:4D:1D:93:83:62:CB:FC:0C:D7:D0:84:E1:F5:41:E0:DC:86:C8 Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248 Certificate serial: 07C5CD5DC534D13ED3C5CF864ACFB8AAB244B499 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft Manifest number: 01EC Signing time: Tue 21 Oct 2025 20:50:50 +0000 Manifest this update: Tue 21 Oct 2025 20:45:50 +0000 Manifest next update: Sat 25 Oct 2025 02:02:50 +0000 Files and hashes: 1: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: DlIdvNk5atREA0xo+RJHA4xmDZOcM7rAGmZ2t/n0cc4=) 2: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: nxYZnXzCnu/G6Di5JhS1WLXdlQHk8fuEdbh3UpU3Jf8=) 3: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: ujITe6uXtdvP5WOayQADk+Rg7asyYqwio86khyT1Nho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 02:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c5:cd:5d:c5:34:d1:3e:d3:c5:cf:86:4a:cf:b8:aa:b2:44:b4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248 Validity Not Before: Oct 21 20:45:50 2025 GMT Not After : Oct 25 02:02:50 2025 GMT Subject: CN=00E44D1D938362CBFC0CD7D084E1F541E0DC86C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:81:25:4a:c6:d6:a5:e8:07:00:b9:f3:31: b1:ba:a2:e0:ee:0c:79:50:85:a5:ec:64:60:2c:aa: 19:84:11:fe:ca:cc:20:a7:79:c1:30:07:10:05:7d: 37:2d:fb:df:d9:34:e1:18:d7:91:29:68:f8:24:32: db:fe:e9:4f:e0:b9:76:56:ff:6f:26:f7:71:56:1e: 33:c5:ad:53:fc:12:03:21:65:0d:07:1a:62:11:f4: 59:20:8a:49:1d:a6:33:34:08:9a:4a:38:71:b5:b8: f7:a2:da:e6:3b:a0:c2:39:fa:4e:c8:cd:c0:42:ae: 20:09:be:2a:1d:df:55:52:91:d7:27:a6:5f:ed:ed: bb:5d:f3:29:2e:c9:d5:df:96:ec:4a:ac:9c:0e:c9: 85:0c:88:70:76:b1:de:fb:e8:a7:83:0b:ab:d0:90: 82:c3:09:18:ba:f2:41:12:5a:6e:a6:ec:a5:f9:cc: e6:8f:8c:d8:fe:c6:d8:ed:d9:5a:9f:1a:07:d1:b8: f7:d2:ae:a5:70:09:37:47:75:0c:69:25:1e:40:0d: d7:15:ad:b8:04:91:47:19:69:a2:18:8b:12:4d:b3: e5:f5:26:f9:e8:b3:92:ac:29:c2:84:42:7d:63:c0: ff:de:b4:73:3a:76:ba:04:6e:4e:39:14:af:c0:99: d2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:4D:1D:93:83:62:CB:FC:0C:D7:D0:84:E1:F5:41:E0:DC:86:C8 X509v3 Authority Key Identifier: keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:8a:e6:20:4f:c7:f6:4e:a7:55:78:b8:a4:ce:e0:5a:19:3c: 37:f5:55:ed:a0:79:7e:84:ff:12:fb:c8:d2:57:97:46:b2:0e: 8c:36:7f:73:a6:89:ff:0c:65:88:1a:dc:21:5b:6c:25:4d:b3: 62:f5:31:b6:86:70:31:bf:ab:5f:d0:ac:ae:bd:a0:52:8d:89: 1f:a6:7d:2c:2c:e3:95:4c:b5:91:37:42:02:09:a6:3b:ec:c1: 48:75:b0:b7:55:51:da:eb:85:21:b8:bc:83:62:13:cf:ba:ce: e4:8a:d6:52:d9:2d:be:65:0d:9b:5b:36:1b:0f:f4:81:9a:90: 08:c1:d8:99:c8:27:9c:43:12:cb:6d:c4:ba:38:f7:b4:9c:2c: ba:89:67:5f:c4:4e:63:85:79:10:1c:bd:f2:c0:e8:09:3f:65: 73:20:bb:b2:c5:4f:75:17:88:28:a1:53:09:90:3d:c0:e5:3d: 26:b9:4b:56:c4:b9:95:9c:24:56:36:99:7b:30:94:1f:0d:c0: 2c:55:9a:ea:7e:30:99:4e:c7:93:62:7b:95:4b:c1:a7:99:2e: 29:aa:f5:3d:61:8c:3c:27:a6:c6:58:bf:73:d3:ab:3b:80:7b: 93:3e:92:b1:e0:d0:1e:7c:2a:e2:d4:b8:dc:d0:6d:85:d5:fc: c9:b8:a3:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8XNXcU00T7Txc+GSs+4qrJEtJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNE QTc1MzI0ODAeFw0yNTEwMjEyMDQ1NTBaFw0yNTEwMjUwMjAyNTBaMDMxMTAvBgNV BAMTKDAwRTQ0RDFEOTM4MzYyQ0JGQzBDRDdEMDg0RTFGNTQxRTBEQzg2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkU4ElSsbWpegHALnzMbG6ouDu DHlQhaXsZGAsqhmEEf7KzCCnecEwBxAFfTct+9/ZNOEY15EpaPgkMtv+6U/guXZW /28m93FWHjPFrVP8EgMhZQ0HGmIR9FkgikkdpjM0CJpKOHG1uPei2uY7oMI5+k7I zcBCriAJviod31VSkdcnpl/t7btd8ykuydXfluxKrJwOyYUMiHB2sd776KeDC6vQ kILDCRi68kESWm6m7KX5zOaPjNj+xtjt2VqfGgfRuPfSrqVwCTdHdQxpJR5ADdcV rbgEkUcZaaIYixJNs+X1Jvnos5KsKcKEQn1jwP/etHM6droEbk45FK/AmdLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAORNHZODYsv8DNfQhOH1QeDchsgwHwYDVR0j BBgwFoAULQdF0m5ZRAy3H6/ploNEk9p1MkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMC8yRDA3NDVEMjZF NTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RBNzUzMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNEQTc1 MzI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0 OTNEQTc1MzI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeK5iBPx/ZOp1V4uKTO4FoZPDf1Ve2geX6E /xL7yNJXl0ayDow2f3Omif8MZYga3CFbbCVNs2L1MbaGcDG/q1/QrK69oFKNiR+m fSws45VMtZE3QgIJpjvswUh1sLdVUdrrhSG4vINiE8+6zuSK1lLZLb5lDZtbNhsP 9IGakAjB2JnIJ5xDEsttxLo497ScLLqJZ1/ETmOFeRAcvfLA6Ak/ZXMgu7LFT3UX iCihUwmQPcDlPSa5S1bEuZWcJFY2mXswlB8NwCxVmup+MJlOx5Nie5VLwaeZLimq 9T1hjDwnpsZYv3PTqzuAe5M+krHg0B58KuLUuNzQbYXV/Mm4o3c= -----END CERTIFICATE-----Generated at Thu Oct 23 05:52:41 2025 by rpki-client