$ rpki-client -vvf repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.mft File: 2858C74CC23A557C73F59051B7FE8638AA491C94.mft (raw, json) Hash identifier: 9RooOIwtdDycT+ccLhUZJA3enEYJCaAvrXHI0yUrGY4= Subject key identifier: BB:CB:89:7E:1F:F7:C9:56:26:28:78:F0:81:27:9B:AE:4C:C0:76:C4 Authority key identifier: 28:58:C7:4C:C2:3A:55:7C:73:F5:90:51:B7:FE:86:38:AA:49:1C:94 Certificate issuer: /CN=2858C74CC23A557C73F59051B7FE8638AA491C94 Certificate serial: 2ABB64BD28D14615BCE15162617DC7438A68DC87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2858C74CC23A557C73F59051B7FE8638AA491C94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.mft Manifest number: 2E Signing time: Sun 26 Oct 2025 12:31:25 +0000 Manifest this update: Sun 26 Oct 2025 12:26:25 +0000 Manifest next update: Wed 29 Oct 2025 15:37:25 +0000 Files and hashes: 1: 2858C74CC23A557C73F59051B7FE8638AA491C94.crl (hash: DYwBVlwgTbIqsGr12VQ95B+jWu4GUId7y2YEyhW8peI=) 2: 323430303a366632303a3a2f33322d3438203d3e20313333383039.roa (hash: 8MTe8KcDcB0X2kj+3dmF5RSp4lHPV4hialaox1IdvHk=) 3: 3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (hash: IB02l7aeS1Ctr7m+n8ymFsmUvTLgjo3obFTTz15X/C8=) 4: 323430303a366632303a353a3a2f34382d3438203d3e20313333383039.roa (hash: KGGUUPJetYRovMai9BvuYsEqHu8TgW6bYg4Sm8JWJcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.crl rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2858C74CC23A557C73F59051B7FE8638AA491C94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bb:64:bd:28:d1:46:15:bc:e1:51:62:61:7d:c7:43:8a:68:dc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2858C74CC23A557C73F59051B7FE8638AA491C94 Validity Not Before: Oct 26 12:26:25 2025 GMT Not After : Oct 29 15:37:25 2025 GMT Subject: CN=BBCB897E1FF7C956262878F081279BAE4CC076C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:ef:23:33:aa:b1:af:ef:d9:c5:89:1b:30: 14:9d:ff:cd:c2:b5:65:45:66:92:26:a9:8f:6e:4c: 54:33:b2:a7:45:15:ca:3a:73:c0:af:cb:b6:81:fc: 05:e3:b7:46:1b:c2:a5:a3:7e:86:eb:c5:17:25:50: de:92:b2:83:d0:5f:48:c6:25:d3:1d:74:42:bf:d9: 9e:28:26:ec:e9:cf:5b:1c:9d:cd:40:51:91:1d:67: 41:12:0e:1e:e6:48:9d:b4:9f:08:c7:aa:9a:03:4e: 40:7e:10:97:8d:e7:74:27:73:b3:93:38:58:95:3a: 49:a0:2f:c5:0c:e4:4c:ff:c1:28:f3:8c:ac:21:48: 63:a4:6e:3a:24:c4:9d:a4:14:5a:ab:f9:46:e1:68: 86:5f:15:71:fe:aa:40:56:12:95:e4:bb:42:c8:60: e5:e9:76:2f:ec:7d:20:8a:93:f2:49:36:96:80:9b: 3f:5d:da:51:5f:5d:d6:3f:fe:d8:27:ad:27:f0:a4: 9b:5a:60:34:bc:39:65:15:99:ab:2b:fa:c4:76:ff: 89:92:13:ec:6a:67:80:5f:2d:37:6b:26:f9:f2:37: dc:ed:af:14:18:cf:1e:41:d9:f3:13:90:c2:ba:6d: 57:33:a1:28:b8:e7:16:18:9f:ea:e5:c6:44:3b:84: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:89:7E:1F:F7:C9:56:26:28:78:F0:81:27:9B:AE:4C:C0:76:C4 X509v3 Authority Key Identifier: keyid:28:58:C7:4C:C2:3A:55:7C:73:F5:90:51:B7:FE:86:38:AA:49:1C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2858C74CC23A557C73F59051B7FE8638AA491C94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:21:d3:14:bf:9a:da:7a:2a:46:32:fa:60:3a:e6:25:36:b1: f8:5a:b0:50:58:28:ce:fc:cf:60:ab:a1:ae:a0:58:d2:af:7c: df:ba:b5:3d:60:53:5e:4a:9b:f6:2a:36:af:2b:d7:b2:d1:d7: ce:65:67:a9:0c:3c:b9:c9:67:6d:0b:0c:91:ac:c3:ea:57:cf: ab:5c:a7:09:df:0b:7e:a9:80:c9:12:8c:76:00:e9:a3:ef:0d: 6e:8e:76:1f:a2:13:0d:bb:30:c6:18:3c:4f:47:74:65:c8:88: 17:c0:cd:77:ce:36:75:8e:7d:67:17:ae:1e:aa:9f:48:97:3e: fe:15:cb:03:80:17:d1:b6:f1:1b:d2:f7:33:ff:45:6b:56:ea: 7e:7d:a4:7a:a7:71:7f:b5:ed:fd:4f:24:6c:56:ca:bb:a0:56: 5f:29:17:9e:39:1c:e2:bb:ad:83:b2:ed:9a:61:35:bd:fd:28: 31:e1:be:75:a4:83:18:84:18:48:58:29:47:dd:1b:3b:7f:03: 9e:38:19:35:65:a4:b1:8f:f9:73:a1:a1:17:00:f2:57:01:24: 43:8c:2e:30:78:bd:d4:f0:91:44:ca:58:03:80:79:0c:9b:71: f2:10:1f:70:6f:89:ad:cb:45:a9:90:d0:88:6d:a6:d5:41:ce: 74:5b:53:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrtkvSjRRhW84VFiYX3HQ4po3IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1OEM3NENDMjNBNTU3QzczRjU5MDUxQjdGRTg2MzhB QTQ5MUM5NDAeFw0yNTEwMjYxMjI2MjVaFw0yNTEwMjkxNTM3MjVaMDMxMTAvBgNV BAMTKEJCQ0I4OTdFMUZGN0M5NTYyNjI4NzhGMDgxMjc5QkFFNENDMDc2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40e8jM6qxr+/ZxYkbMBSd/83C tWVFZpImqY9uTFQzsqdFFco6c8Cvy7aB/AXjt0YbwqWjfobrxRclUN6SsoPQX0jG JdMddEK/2Z4oJuzpz1scnc1AUZEdZ0ESDh7mSJ20nwjHqpoDTkB+EJeN53Qnc7OT OFiVOkmgL8UM5Ez/wSjzjKwhSGOkbjokxJ2kFFqr+UbhaIZfFXH+qkBWEpXku0LI YOXpdi/sfSCKk/JJNpaAmz9d2lFfXdY//tgnrSfwpJtaYDS8OWUVmasr+sR2/4mS E+xqZ4BfLTdrJvnyN9ztrxQYzx5B2fMTkMK6bVczoSi45xYYn+rlxkQ7hFGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8uJfh/3yVYmKHjwgSebrkzAdsQwHwYDVR0j BBgwFoAUKFjHTMI6VXxz9ZBRt/6GOKpJHJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNlZjhiMC1iYTY0LTRjMGMtOGRlOC0xZjUwYTg1ZDVmZGUvMC8yODU4Qzc0Q0My M0E1NTdDNzNGNTkwNTFCN0ZFODYzOEFBNDkxQzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1OEM3NENDMjNBNTU3QzczRjU5MDUxQjdGRTg2MzhBQTQ5 MUM5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljZWY4YjAtYmE2NC00YzBjLThk ZTgtMWY1MGE4NWQ1ZmRlLzAvMjg1OEM3NENDMjNBNTU3QzczRjU5MDUxQjdGRTg2 MzhBQTQ5MUM5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwh0xS/mtp6KkYy+mA65iU2sfhasFBYKM78 z2Croa6gWNKvfN+6tT1gU15Km/YqNq8r17LR185lZ6kMPLnJZ20LDJGsw+pXz6tc pwnfC36pgMkSjHYA6aPvDW6Odh+iEw27MMYYPE9HdGXIiBfAzXfONnWOfWcXrh6q n0iXPv4VywOAF9G28RvS9zP/RWtW6n59pHqncX+17f1PJGxWyrugVl8pF545HOK7 rYOy7ZphNb39KDHhvnWkgxiEGEhYKUfdGzt/A544GTVlpLGP+XOhoRcA8lcBJEOM LjB4vdTwkUTKWAOAeQybcfIQH3Bvia3LRamQ0IhtptVBznRbU6M= -----END CERTIFICATE-----Generated at Tue Oct 28 15:53:01 2025 by rpki-client