$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: g9JhIme64BuE0LzKXrBeA+pglexe67ZGPZC9d+rrk/U= Subject key identifier: 36:37:A9:2C:3A:37:8E:11:7B:E6:8A:06:92:F9:5F:6F:B1:9E:96:07 Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 3D286C1556DF841F14257681230B49297040BB37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 0201 Signing time: Tue 04 Nov 2025 09:30:55 +0000 Manifest this update: Tue 04 Nov 2025 09:25:55 +0000 Manifest next update: Fri 07 Nov 2025 10:44:55 +0000 Files and hashes: 1: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: 6aQx1SevyHn78owDaRv7hPypYlzMS3tI8vJYugWzC5k=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:28:6c:15:56:df:84:1f:14:25:76:81:23:0b:49:29:70:40:bb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Nov 4 09:25:55 2025 GMT Not After : Nov 7 10:44:55 2025 GMT Subject: CN=3637A92C3A378E117BE68A0692F95F6FB19E9607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:15:ff:24:83:00:24:ba:bb:f3:f6:af:32: c6:1f:5c:b9:62:d3:3a:0e:39:2b:f8:49:68:b7:a1: 1e:12:7a:07:c7:c8:21:03:9a:bb:15:f0:f9:d8:0d: 15:c8:eb:49:15:c8:94:4e:c7:0d:76:78:d6:d0:17: 33:9b:d8:e9:a3:96:c5:58:50:e6:41:c8:48:1a:72: ed:3f:9b:a3:1b:e7:0c:f2:2c:27:65:6d:54:2e:6a: e3:0a:62:64:42:f4:a0:0c:69:ad:e2:00:50:7e:18: ab:fd:29:0a:23:85:34:f1:bc:7f:ea:ef:dc:af:df: 66:a8:dd:4e:c6:41:ca:6c:2e:63:91:7b:65:ca:c7: c8:90:04:a3:70:34:2d:c4:08:84:94:06:ed:42:f7: 7a:d4:51:7e:6a:ff:59:a4:40:2a:00:2d:d6:b5:eb: 9e:e4:c3:96:0b:35:30:ff:2a:f6:f1:aa:3c:c6:8f: b7:77:f3:65:f2:31:7b:36:3a:bf:3c:ef:e9:5a:aa: 3e:29:84:dd:3b:5c:9e:f7:02:7c:67:4a:45:2b:fb: ef:fb:d0:c3:28:70:a4:56:e2:ad:5e:7d:62:78:a9: f8:1f:ec:10:8b:b2:4a:49:ab:f0:02:8c:6c:e3:b0: ab:3c:21:34:79:22:74:8c:51:f0:33:58:9d:67:0f: ad:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:37:A9:2C:3A:37:8E:11:7B:E6:8A:06:92:F9:5F:6F:B1:9E:96:07 X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:af:45:4a:8f:30:ae:96:1c:62:4a:64:11:fb:1d:03:73:20: 9e:6c:90:56:12:5d:b8:3a:98:ec:4e:a2:6a:93:b3:21:df:13: 0a:f0:7c:01:97:11:4a:cf:27:ed:36:22:fe:2e:06:4e:ce:8c: a2:35:cd:b0:8b:e9:58:17:83:3b:a0:0d:95:a3:51:81:e6:dc: 41:1c:8b:ca:4d:78:e1:9d:68:9d:ab:cb:24:f7:ec:96:af:43: 77:96:d5:d8:5b:05:a0:76:2b:e2:b3:fe:08:86:3d:da:61:d3: 87:54:5f:d6:5f:e6:98:77:3c:b7:dc:cf:ba:4e:9f:51:ae:e7: 46:73:78:f8:d4:5c:8e:1b:ff:7b:70:a1:cc:1f:0b:56:a7:aa: d3:38:62:be:59:f6:d6:66:b6:f4:d9:2f:05:f7:c5:8b:88:da: f9:43:52:3a:17:78:68:0d:94:e4:8e:c5:8e:5d:4d:13:f5:32: 62:26:51:3a:13:d7:09:4c:f3:82:c5:c8:5f:9c:97:6a:25:ec: 60:a2:33:90:37:44:28:b3:a6:98:52:cc:c8:bb:4c:e4:81:ab: 68:17:d2:83:32:8b:b5:2b:57:79:51:40:3a:72:a6:08:46:59: c1:7b:a5:e2:04:6d:ad:60:9a:38:74:76:f9:c1:fc:a6:f6:df: 13:99:df:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPShsFVbfhB8UJXaBIwtJKXBAuzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTExMDQwOTI1NTVaFw0yNTExMDcxMDQ0NTVaMDMxMTAvBgNV BAMTKDM2MzdBOTJDM0EzNzhFMTE3QkU2OEEwNjkyRjk1RjZGQjE5RTk2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIRX/JIMAJLq78/avMsYfXLli 0zoOOSv4SWi3oR4SegfHyCEDmrsV8PnYDRXI60kVyJROxw12eNbQFzOb2OmjlsVY UOZByEgacu0/m6Mb5wzyLCdlbVQuauMKYmRC9KAMaa3iAFB+GKv9KQojhTTxvH/q 79yv32ao3U7GQcpsLmORe2XKx8iQBKNwNC3ECISUBu1C93rUUX5q/1mkQCoALda1 657kw5YLNTD/KvbxqjzGj7d382XyMXs2Or887+laqj4phN07XJ73AnxnSkUr++/7 0MMocKRW4q1efWJ4qfgf7BCLskpJq/ACjGzjsKs8ITR5InSMUfAzWJ1nD63DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjepLDo3jhF75ooGkvlfb7GelgcwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmvRUqPMK6WHGJKZBH7HQNzIJ5skFYSXbg6 mOxOomqTsyHfEwrwfAGXEUrPJ+02Iv4uBk7OjKI1zbCL6VgXgzugDZWjUYHm3EEc i8pNeOGdaJ2ryyT37JavQ3eW1dhbBaB2K+Kz/giGPdph04dUX9Zf5ph3PLfcz7pO n1Gu50ZzePjUXI4b/3twocwfC1anqtM4Yr5Z9tZmtvTZLwX3xYuI2vlDUjoXeGgN lOSOxY5dTRP1MmImUToT1wlM84LFyF+cl2ol7GCiM5A3RCizpphSzMi7TOSBq2gX 0oMyi7UrV3lRQDpypghGWcF7peIEba1gmjh0dvnB/Kb23xOZ314= -----END CERTIFICATE-----Generated at Wed Nov 5 19:11:07 2025 by rpki-client