$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: aUbOdUZivcn4L64cB7BVk1VwXyBJIYgdzTvpR2IZboM= Subject key identifier: FA:47:A2:C2:77:27:B1:C0:E0:24:4F:F0:2F:20:5B:78:69:3B:11:CD Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 2DCBFEB06365F5ADBA03F939E1848976713F6DEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 04AA Signing time: Sun 29 Jun 2025 02:11:05 +0000 Manifest this update: Sun 29 Jun 2025 02:06:05 +0000 Manifest next update: Wed 02 Jul 2025 09:31:05 +0000 Files and hashes: 1: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pdookKLKBtLoDCva66o7DDtyvwgfA1hrwrmWSeoqnqY=) 2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: s8lHN6mCeR+HJshcEVWQRH0RHZcp4BOPgK7V87vFKcA=) 3: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: iVXc+9ZXpKNK+sVne0GsK/gIeekry2/h6Xfec9ScC9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cb:fe:b0:63:65:f5:ad:ba:03:f9:39:e1:84:89:76:71:3f:6d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Jun 29 02:06:05 2025 GMT Not After : Jul 2 09:31:05 2025 GMT Subject: CN=FA47A2C27727B1C0E0244FF02F205B78693B11CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:14:62:e0:b3:f0:98:04:5d:18:ac:cd:af: 20:f6:3b:d1:c8:b4:43:ca:9a:04:00:79:e5:9c:f3: 95:f0:eb:f2:5e:eb:40:d1:5b:7c:13:84:0a:fd:45: 2e:d8:52:ab:40:36:b6:4a:0e:23:98:4d:17:68:07: 8f:9f:9b:4a:62:e1:92:75:85:56:16:51:fe:63:ba: 10:e1:ae:74:29:b8:ee:42:08:15:d3:1f:a5:b7:99: 93:04:2b:67:80:a4:0d:bb:f5:e2:bc:17:a7:8e:d9: 23:bb:3a:ef:25:a6:82:85:cf:61:19:4e:03:b8:79: 2e:bd:8a:34:ee:7b:80:0a:16:0d:e8:98:16:34:22: 74:7d:03:3d:0f:43:6a:c4:28:f9:c6:49:47:db:6b: 36:84:a2:75:4c:6b:8f:d5:d4:c1:58:b5:1a:dd:b8: df:d4:f1:56:3c:50:eb:ec:46:80:bf:dd:60:44:ae: d9:04:8d:96:05:a6:72:4d:ea:fd:80:c3:d7:a8:bc: a0:6c:78:84:d7:16:e5:36:33:6f:73:f7:e1:55:aa: a2:61:8e:ea:d1:d3:a7:26:d0:81:05:0b:14:9e:47: b6:e2:32:8d:52:23:c6:a3:6b:63:fa:5b:00:af:82: 38:fc:30:1d:66:96:6a:6e:db:de:68:86:9f:9d:e9: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:47:A2:C2:77:27:B1:C0:E0:24:4F:F0:2F:20:5B:78:69:3B:11:CD X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:63:6c:45:2b:5a:25:40:e6:df:a3:26:7b:62:8d:bb:42:df: 3a:75:17:2f:e0:cb:fc:14:da:3e:30:c9:96:b0:47:4d:b2:6a: cd:a0:59:45:1b:e2:f7:3f:63:4d:0d:cc:5f:69:64:38:55:e3: 7b:39:26:c1:fa:7b:97:31:5f:86:01:03:28:03:0e:d7:60:e6: ab:36:09:0a:0d:42:d3:d4:02:97:b0:d2:c4:18:e1:22:bf:70: 95:7c:bd:aa:a5:9f:d1:d7:4f:97:f3:5d:c4:ad:fb:7f:61:0c: 80:2d:f6:35:75:55:d1:8d:f5:28:84:6b:8d:42:b1:9a:d9:3f: 40:b3:ce:95:9a:d2:95:96:84:cd:0e:f4:1c:55:ad:a4:b9:1f: d6:35:c1:38:09:3d:05:6e:42:c4:15:ce:15:ad:63:95:c4:49: 12:99:c5:19:42:e6:c2:af:cc:7d:6f:8f:ec:a7:ea:19:59:7c: 8d:46:92:c1:f7:46:c6:83:6d:aa:fb:eb:17:b2:e9:21:07:c7: 38:a3:50:a6:a3:03:e7:29:8e:ad:c0:b5:26:4c:8c:03:db:24: ea:fe:ca:ee:41:65:70:11:48:74:1e:85:15:c6:11:b1:09:d2: b4:17:6c:e4:84:8a:52:9d:78:1c:2e:01:7f:ae:24:7c:10:fb: 9c:90:3d:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcv+sGNl9a26A/k54YSJdnE/bewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTA2MjkwMjA2MDVaFw0yNTA3MDIwOTMxMDVaMDMxMTAvBgNV BAMTKEZBNDdBMkMyNzcyN0IxQzBFMDI0NEZGMDJGMjA1Qjc4NjkzQjExQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzBRi4LPwmARdGKzNryD2O9HI tEPKmgQAeeWc85Xw6/Je60DRW3wThAr9RS7YUqtANrZKDiOYTRdoB4+fm0pi4ZJ1 hVYWUf5juhDhrnQpuO5CCBXTH6W3mZMEK2eApA279eK8F6eO2SO7Ou8lpoKFz2EZ TgO4eS69ijTue4AKFg3omBY0InR9Az0PQ2rEKPnGSUfbazaEonVMa4/V1MFYtRrd uN/U8VY8UOvsRoC/3WBErtkEjZYFpnJN6v2Aw9eovKBseITXFuU2M29z9+FVqqJh jurR06cm0IEFCxSeR7biMo1SI8aja2P6WwCvgjj8MB1mlmpu295ohp+d6Y6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+keiwncnscDgJE/wLyBbeGk7Ec0wHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOtjbEUrWiVA5t+jJntijbtC3zp1Fy/gy/wU 2j4wyZawR02yas2gWUUb4vc/Y00NzF9pZDhV43s5JsH6e5cxX4YBAygDDtdg5qs2 CQoNQtPUApew0sQY4SK/cJV8vaqln9HXT5fzXcSt+39hDIAt9jV1VdGN9SiEa41C sZrZP0CzzpWa0pWWhM0O9BxVraS5H9Y1wTgJPQVuQsQVzhWtY5XESRKZxRlC5sKv zH1vj+yn6hlZfI1GksH3RsaDbar76xey6SEHxzijUKajA+cpjq3AtSZMjAPbJOr+ yu5BZXARSHQehRXGEbEJ0rQXbOSEilKdeBwuAX+uJHwQ+5yQPRM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:34 2025 by rpki-client