$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: pW4tc9OIeDV6yjv4Vcj6evMca4SMwbd7GbiU1e4oqSo= Subject key identifier: B0:61:9C:B6:3A:36:70:D9:04:C2:80:C7:C1:B4:FB:B8:29:03:CE:93 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 44304C1431922E53FB3BE5D850BB9AB91FD89EEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 0270 Signing time: Sun 02 Nov 2025 15:21:12 +0000 Manifest this update: Sun 02 Nov 2025 15:16:12 +0000 Manifest next update: Wed 05 Nov 2025 19:55:12 +0000 Files and hashes: 1: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: uSzBN61VjNugxnFtdmn55QCfTiv4UjZL/cWrBYUaKgE=) 2: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: spvIRAMq+mfDOuOpEcg7AdgC3e48gxyr+XYy1rBgK40=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: T//zRmtqLINvFlblPvVcdCKW6AunVea7CBpb7QBQYXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:30:4c:14:31:92:2e:53:fb:3b:e5:d8:50:bb:9a:b9:1f:d8:9e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Nov 2 15:16:12 2025 GMT Not After : Nov 5 19:55:12 2025 GMT Subject: CN=B0619CB63A3670D904C280C7C1B4FBB82903CE93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:9a:29:ae:dc:d9:c6:59:e5:1b:fa:46:8f: 00:1a:23:02:44:a9:75:07:4b:81:53:ad:76:13:d7: 28:4a:2d:d6:ee:51:c2:e3:45:b3:5a:42:93:02:8d: 71:78:2b:b8:83:3d:fe:00:2b:8a:f4:bc:d3:a4:1f: 8b:75:2e:e0:b2:b2:c7:38:ba:7a:15:7e:06:b1:72: 96:7c:7b:b3:b7:1e:83:82:2b:11:cb:4e:ee:a0:35: 3c:90:01:10:fb:20:07:5d:6f:39:8a:19:2c:2b:2f: 96:b1:d0:37:4e:a4:97:67:48:0e:4c:53:ef:e6:76: 37:94:04:63:65:e0:ce:4c:de:e3:bb:63:ca:36:3d: 3d:3c:44:9b:ad:11:5f:90:b2:91:a7:e0:a1:2f:c5: 96:0b:aa:41:7d:a7:3e:fb:73:70:c5:2c:23:c1:50: 4f:b6:cb:8d:c2:0b:0d:73:56:50:a2:16:d0:95:15: 2c:01:fd:61:8a:28:44:e0:90:64:16:6e:d9:97:bf: d6:bb:0d:f6:72:d9:e9:c6:eb:2c:43:09:25:c3:e3: ad:12:f1:5f:ef:54:18:20:d2:69:92:dc:b3:47:57: c1:ac:a7:28:70:70:f2:82:87:29:02:8f:57:fd:b7: e0:51:db:86:3f:c8:86:fc:a5:a2:60:f5:c5:5d:ba: 1a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:61:9C:B6:3A:36:70:D9:04:C2:80:C7:C1:B4:FB:B8:29:03:CE:93 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ff:9f:4f:96:8f:b2:d5:05:41:fc:62:1f:39:e7:55:8d:52: 23:c3:64:bc:d5:9f:25:4c:71:ce:d0:94:c4:2a:a8:58:fb:4c: 12:0c:79:52:41:16:50:79:6c:1e:56:ee:de:47:fc:4e:17:73: a4:d7:19:ee:d2:64:c4:f1:55:d7:5e:99:5e:41:ae:62:12:a4: b0:2a:66:46:26:0d:6d:06:04:77:d3:1f:1b:1c:f4:c4:99:f4: 54:12:2d:32:fc:35:fe:52:56:7a:d2:39:27:76:0b:06:cd:d9: 8b:93:f7:ea:0d:ae:37:c3:55:a5:01:82:c3:17:a5:a1:1a:66: 23:03:0e:32:f3:3a:58:04:90:10:59:f7:c5:55:aa:5b:94:c1: 6b:e3:e9:6e:6d:54:b2:5b:ab:d8:fd:ad:dd:a2:75:6d:2e:2b: 58:8f:cd:6b:38:65:f3:2f:be:ab:82:02:ef:69:d0:fb:7d:87: 8d:9b:a8:58:ac:ca:2c:62:3f:f6:2e:f7:07:56:e6:ae:06:b0: 00:36:4d:cd:ac:e6:90:8e:53:33:85:99:19:17:9a:8e:04:84: 99:8a:bc:b3:f8:b2:53:8d:26:48:d2:33:c2:0d:65:d1:06:15: a5:ae:63:38:f3:0d:08:6a:b1:a9:71:fa:ac:d4:41:a2:29:a2: 70:20:3a:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDBMFDGSLlP7O+XYULuauR/YnuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTExMDIxNTE2MTJaFw0yNTExMDUxOTU1MTJaMDMxMTAvBgNV BAMTKEIwNjE5Q0I2M0EzNjcwRDkwNEMyODBDN0MxQjRGQkI4MjkwM0NFOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQ5oprtzZxlnlG/pGjwAaIwJE qXUHS4FTrXYT1yhKLdbuUcLjRbNaQpMCjXF4K7iDPf4AK4r0vNOkH4t1LuCyssc4 unoVfgaxcpZ8e7O3HoOCKxHLTu6gNTyQARD7IAddbzmKGSwrL5ax0DdOpJdnSA5M U+/mdjeUBGNl4M5M3uO7Y8o2PT08RJutEV+QspGn4KEvxZYLqkF9pz77c3DFLCPB UE+2y43CCw1zVlCiFtCVFSwB/WGKKETgkGQWbtmXv9a7DfZy2enG6yxDCSXD460S 8V/vVBgg0mmS3LNHV8GspyhwcPKChykCj1f9t+BR24Y/yIb8paJg9cVduhpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsGGctjo2cNkEwoDHwbT7uCkDzpMwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn/n0+Wj7LVBUH8Yh8551WNUiPDZLzVnyVM cc7QlMQqqFj7TBIMeVJBFlB5bB5W7t5H/E4Xc6TXGe7SZMTxVddemV5BrmISpLAq ZkYmDW0GBHfTHxsc9MSZ9FQSLTL8Nf5SVnrSOSd2CwbN2YuT9+oNrjfDVaUBgsMX paEaZiMDDjLzOlgEkBBZ98VVqluUwWvj6W5tVLJbq9j9rd2idW0uK1iPzWs4ZfMv vquCAu9p0Pt9h42bqFisyixiP/Yu9wdW5q4GsAA2Tc2s5pCOUzOFmRkXmo4EhJmK vLP4slONJkjSM8INZdEGFaWuYzjzDQhqsalx+qzUQaIponAgOus= -----END CERTIFICATE-----Generated at Mon Nov 3 13:19:48 2025 by rpki-client