$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: AhpVXt4N2l1FyPzm+6kTzIrKFojxCgrNs3kQTz5gWbg= Subject key identifier: EE:70:DB:D1:4D:AF:72:3F:19:7A:0A:F0:78:50:19:E1:36:78:C4:7B Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 7867529F2371BD37A9BB9E46E38CFE8030F41FDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 04DD Signing time: Sat 18 Oct 2025 03:11:07 +0000 Manifest this update: Sat 18 Oct 2025 03:06:07 +0000 Manifest next update: Tue 21 Oct 2025 12:47:07 +0000 Files and hashes: 1: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) 2: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: ik8OcHtHAztON8c8SGyk4ll7QMGhPzMb8000t9dl38Y=) 3: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:67:52:9f:23:71:bd:37:a9:bb:9e:46:e3:8c:fe:80:30:f4:1f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Oct 18 03:06:07 2025 GMT Not After : Oct 21 12:47:07 2025 GMT Subject: CN=EE70DBD14DAF723F197A0AF0785019E13678C47B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e2:b5:aa:8d:5d:ad:01:db:6f:85:ed:79:e4: bf:40:bd:5e:4e:70:71:d1:bd:ee:78:20:19:32:99: ab:fe:71:e5:18:b6:9d:14:a1:f7:04:33:22:ec:d9: 5c:b4:15:cb:4c:24:30:01:8b:98:a7:7c:20:e8:da: 49:72:97:58:5e:e0:f9:d1:8f:e7:1f:ad:89:54:de: b3:1e:d9:65:79:c7:51:fa:f2:d2:07:a6:4b:ad:81: 17:e4:2c:2b:ec:ee:36:12:5a:8c:79:33:bd:59:fe: 8f:23:fb:8d:0e:5e:ec:92:07:aa:c2:bb:b4:80:5d: 0c:e1:64:0b:74:29:0d:ce:91:44:da:20:c5:7b:f9: 93:f4:ba:14:84:41:a0:71:8c:81:dc:10:b3:49:d3: 66:8f:2a:30:e7:a7:ba:17:17:35:25:3d:c9:bf:db: 37:06:50:8c:0d:81:7b:0b:c9:3d:de:ec:6b:e2:7d: 64:6a:ad:73:dd:78:dc:5c:59:6d:4b:80:1a:32:da: f9:dc:7e:02:41:c1:4a:8a:f3:67:be:ae:31:95:05: 38:cf:2b:e7:a3:d3:cc:34:e0:df:e5:80:5b:46:42: 1c:b4:5f:26:6d:ba:d3:9c:36:ec:8a:1c:b5:35:20: 5d:e8:5a:cb:ae:15:5b:e8:a4:3f:60:00:27:e5:ad: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:70:DB:D1:4D:AF:72:3F:19:7A:0A:F0:78:50:19:E1:36:78:C4:7B X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:9a:b3:80:30:50:51:89:6d:87:c4:36:9f:2c:8d:bc:a7:14: 8d:13:da:59:e4:94:ac:38:91:45:63:96:40:79:6f:60:6b:27: 18:f8:c9:22:b2:62:83:83:7b:85:d8:51:a4:67:58:d2:06:f2: c8:cc:53:ab:bb:aa:0f:16:7c:ab:62:8d:a8:84:f1:53:d1:35: 1d:f1:f5:3e:66:eb:33:02:df:d2:9b:bb:33:33:aa:ae:4a:af: d9:ab:3f:38:1b:86:49:c3:a0:a3:a8:fe:f1:d7:0a:f4:57:fc: 3e:1d:59:c8:0c:e1:dc:f3:d5:48:86:07:3a:41:ed:80:56:e7: 21:e3:5e:af:f0:0b:cc:f0:08:9b:41:df:fd:69:61:6a:f0:2e: de:2f:eb:38:63:4e:56:66:db:9d:55:c6:ac:07:9f:f6:8b:c0: 2e:ca:fa:94:0a:b9:c4:4c:d0:d8:15:a7:6e:17:2b:87:0b:c8: 98:5c:0c:39:6f:ab:c4:67:fd:90:09:dd:dd:6d:a4:d6:13:65: 93:04:08:f4:3b:e9:29:fd:ce:8c:e1:3e:40:5c:10:55:07:fc: c3:92:cb:e0:e4:4a:9b:f1:ae:ae:b3:54:10:b2:cb:b3:9c:64: 8a:2d:83:43:34:66:a2:48:ba:cd:37:ed:6a:45:aa:68:2d:49: af:e6:1a:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGdSnyNxvTepu55G44z+gDD0H9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTEwMTgwMzA2MDdaFw0yNTEwMjExMjQ3MDdaMDMxMTAvBgNV BAMTKEVFNzBEQkQxNERBRjcyM0YxOTdBMEFGMDc4NTAxOUUxMzY3OEM0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4rWqjV2tAdtvhe155L9AvV5O cHHRve54IBkymav+ceUYtp0UofcEMyLs2Vy0FctMJDABi5infCDo2klyl1he4PnR j+cfrYlU3rMe2WV5x1H68tIHpkutgRfkLCvs7jYSWox5M71Z/o8j+40OXuySB6rC u7SAXQzhZAt0KQ3OkUTaIMV7+ZP0uhSEQaBxjIHcELNJ02aPKjDnp7oXFzUlPcm/ 2zcGUIwNgXsLyT3e7GvifWRqrXPdeNxcWW1LgBoy2vncfgJBwUqK82e+rjGVBTjP K+ej08w04N/lgFtGQhy0XyZtutOcNuyKHLU1IF3oWsuuFVvopD9gACflrW9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7nDb0U2vcj8ZegrweFAZ4TZ4xHswHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGas4AwUFGJbYfENp8sjbynFI0T2lnklKw4 kUVjlkB5b2BrJxj4ySKyYoODe4XYUaRnWNIG8sjMU6u7qg8WfKtijaiE8VPRNR3x 9T5m6zMC39KbuzMzqq5Kr9mrPzgbhknDoKOo/vHXCvRX/D4dWcgM4dzz1UiGBzpB 7YBW5yHjXq/wC8zwCJtB3/1pYWrwLt4v6zhjTlZm251VxqwHn/aLwC7K+pQKucRM 0NgVp24XK4cLyJhcDDlvq8Rn/ZAJ3d1tpNYTZZMECPQ76Sn9zozhPkBcEFUH/MOS y+DkSpvxrq6zVBCyy7OcZIotg0M0ZqJIus037WpFqmgtSa/mGpk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:37 2025 by rpki-client