$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: t5+6Kq9jQOHbsNQxkwH2paITQytmk58D3e5sBA90CgI= Subject key identifier: 57:B9:B6:41:3C:24:8F:E6:E2:CE:1B:40:14:17:7B:3C:3D:CD:95:C0 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 777D7256461C4ED7967DC9840F2FE64151FAFDC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 0264 Signing time: Tue 28 Oct 2025 19:21:58 +0000 Manifest this update: Tue 28 Oct 2025 19:16:58 +0000 Manifest next update: Sat 01 Nov 2025 01:41:58 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=) 2: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=) 3: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: kPSlIro4n3KhMSFKnC9HT6RwyiTmHhzFdOA6JzGPIqY=) 4: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 01:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7d:72:56:46:1c:4e:d7:96:7d:c9:84:0f:2f:e6:41:51:fa:fd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Oct 28 19:16:58 2025 GMT Not After : Nov 1 01:41:58 2025 GMT Subject: CN=57B9B6413C248FE6E2CE1B4014177B3C3DCD95C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:e2:3e:83:c0:4b:05:ff:12:62:18:16:d8: 9f:16:31:c8:ec:a4:ad:7f:1a:73:c7:d0:29:6e:54: db:65:ec:d8:d3:e8:cf:a1:8c:9f:31:eb:6e:82:5b: 06:5b:43:d5:02:46:a5:51:e0:05:41:c7:31:1b:ef: af:1e:14:b9:81:57:35:3f:41:11:8a:1e:11:15:f1: 93:a4:e8:9d:30:06:9e:01:9f:23:2c:25:58:c6:f0: 58:79:04:da:bb:9f:bd:2a:ee:a5:f1:88:5d:42:96: 1a:b2:6f:35:87:4c:20:3e:ab:55:0a:8c:0b:b0:2c: 47:cc:a0:98:9f:0a:ec:3c:d5:c6:83:65:32:37:26: 98:80:ed:33:03:4b:16:e5:7b:ef:8e:8d:63:00:d5: ef:11:9c:2d:a2:70:02:75:f6:43:e8:2b:7d:78:33: 8d:fe:2f:ce:13:18:d0:21:ad:9f:4d:9a:c9:74:89: 95:77:de:a9:a8:e7:05:9f:f3:76:a4:87:6d:4c:84: 35:d7:7f:55:f2:89:be:6e:94:85:16:7f:0e:b8:2b: eb:97:f6:b1:3b:2e:27:c8:37:35:0d:21:7b:43:08: 65:27:da:86:34:bd:64:0b:4b:e3:ad:c5:ff:34:e6: 35:60:a6:cc:b9:41:1d:f2:4f:4d:91:a4:68:bb:0d: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B9:B6:41:3C:24:8F:E6:E2:CE:1B:40:14:17:7B:3C:3D:CD:95:C0 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d1:0e:61:e1:06:09:e6:a2:7c:c7:6b:7e:d9:f9:7a:57:0b: a4:d8:5c:60:8a:97:f4:67:cd:6c:61:0d:d6:a0:42:a5:b0:32: 80:bb:3e:d9:60:aa:ed:80:81:df:bd:8a:1b:a7:98:84:61:b1: f2:3e:8a:af:99:30:f7:7f:32:3e:68:26:93:00:3d:76:34:8f: 2d:db:63:4c:69:60:92:b5:0e:b4:85:22:09:43:51:f3:bb:96: 04:64:75:e2:ee:75:ae:cd:32:e1:9c:80:1c:0d:8a:0d:0f:69: ee:73:8c:74:c1:3b:af:1e:15:00:db:d6:7d:be:ff:87:b9:87: ee:08:ad:48:d3:e9:93:72:e9:66:3a:2e:9c:89:cd:65:e9:e9: 85:bd:20:82:0d:eb:05:46:e3:9a:4e:0c:8a:b7:04:61:16:7e: 6a:8e:07:0e:cb:4f:78:cc:e5:b9:c5:8f:cd:ee:21:3c:ad:ec: b6:d5:7d:76:00:4a:b2:5d:3c:ff:41:90:dd:f9:c6:f5:68:69: af:f4:a0:8f:51:ee:8b:b3:ce:93:03:3f:c4:cf:d1:2e:50:5b: 2e:d1:31:25:dc:38:9c:69:83:3c:90:04:76:95:b9:dc:14:54: 91:a5:5a:97:a2:ed:cf:41:1c:e1:e8:d6:9f:88:48:45:ac:55: fd:10:20:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd31yVkYcTteWfcmEDy/mQVH6/ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTEwMjgxOTE2NThaFw0yNTExMDEwMTQxNThaMDMxMTAvBgNV BAMTKDU3QjlCNjQxM0MyNDhGRTZFMkNFMUI0MDE0MTc3QjNDM0RDRDk1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaFuI+g8BLBf8SYhgW2J8WMcjs pK1/GnPH0CluVNtl7NjT6M+hjJ8x626CWwZbQ9UCRqVR4AVBxzEb768eFLmBVzU/ QRGKHhEV8ZOk6J0wBp4BnyMsJVjG8Fh5BNq7n70q7qXxiF1ClhqybzWHTCA+q1UK jAuwLEfMoJifCuw81caDZTI3JpiA7TMDSxble++OjWMA1e8RnC2icAJ19kPoK314 M43+L84TGNAhrZ9Nmsl0iZV33qmo5wWf83akh21MhDXXf1Xyib5ulIUWfw64K+uX 9rE7LifINzUNIXtDCGUn2oY0vWQLS+Otxf805jVgpsy5QR3yT02RpGi7DZ6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV7m2QTwkj+bizhtAFBd7PD3NlcAwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfRDmHhBgnmonzHa37Z+XpXC6TYXGCKl/Rn zWxhDdagQqWwMoC7Ptlgqu2Agd+9ihunmIRhsfI+iq+ZMPd/Mj5oJpMAPXY0jy3b Y0xpYJK1DrSFIglDUfO7lgRkdeLuda7NMuGcgBwNig0Pae5zjHTBO68eFQDb1n2+ /4e5h+4IrUjT6ZNy6WY6LpyJzWXp6YW9IIIN6wVG45pODIq3BGEWfmqOBw7LT3jM 5bnFj83uITyt7LbVfXYASrJdPP9BkN35xvVoaa/0oI9R7ouzzpMDP8TP0S5QWy7R MSXcOJxpgzyQBHaVudwUVJGlWpei7c9BHOHo1p+ISEWsVf0QIF4= -----END CERTIFICATE-----Generated at Thu Oct 30 15:10:17 2025 by rpki-client