$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: AIJBv3Fzz6yZpg5mMdPWcHQRVibWiFMErxIXgI7KPz8= Subject key identifier: 39:45:C4:4C:EA:67:8A:DA:5C:B5:7A:48:1E:4E:A2:1D:91:40:08:2D Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 034E82BA4C8368DFE8753B6F4C43E15173205090 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 0491 Signing time: Sun 04 May 2025 02:51:05 +0000 Manifest this update: Sun 04 May 2025 02:46:05 +0000 Manifest next update: Wed 07 May 2025 12:02:05 +0000 Files and hashes: 1: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pdookKLKBtLoDCva66o7DDtyvwgfA1hrwrmWSeoqnqY=) 2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: s8lHN6mCeR+HJshcEVWQRH0RHZcp4BOPgK7V87vFKcA=) 3: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: yQlZj+UgqxLFQWh3u71fPJRSmh4NM/h4q3YDUjGMX4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 12:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4e:82:ba:4c:83:68:df:e8:75:3b:6f:4c:43:e1:51:73:20:50:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: May 4 02:46:05 2025 GMT Not After : May 7 12:02:05 2025 GMT Subject: CN=3945C44CEA678ADA5CB57A481E4EA21D9140082D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:0f:8b:b1:07:30:74:b3:f9:80:fc:ed:e1: bb:10:16:c6:e6:f3:ee:67:55:d9:d9:94:94:ae:84: d1:a9:ed:08:4e:bf:a8:c0:9f:77:cb:a2:2a:5c:f2: 4d:7c:2a:e4:60:55:63:92:97:59:c0:14:08:fc:c0: 07:a2:46:4b:ce:8c:9e:98:66:98:8f:4e:03:9e:fa: b1:fa:bc:98:be:66:fe:c9:0c:e4:0a:1c:aa:2d:5b: b5:12:e6:69:af:09:55:05:e1:41:43:70:b9:61:e3: dc:e3:45:20:ce:0e:a9:4e:5b:0e:92:70:21:00:eb: ce:0b:cc:76:84:1b:46:be:98:06:29:42:10:d2:34: dd:43:03:35:80:c9:91:5e:45:b3:1b:5a:2d:e6:77: a6:e4:3a:3b:47:30:36:a6:ed:6b:76:60:d7:08:71: a6:53:a6:17:ce:39:c1:c1:3c:6a:e1:85:88:c7:76: 2a:01:75:51:5a:7f:5d:37:d8:72:a4:b7:5b:d8:04: 55:4c:e3:a4:ff:17:84:4c:04:af:9b:7f:81:7f:ba: ad:2f:4d:64:8e:e5:38:97:79:72:cc:2f:0d:6a:f6: 54:0b:c0:fa:cf:19:c6:7c:c8:fa:78:8f:98:e2:2d: ca:a1:e0:b5:9f:82:a3:c4:83:17:33:53:24:58:97: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:45:C4:4C:EA:67:8A:DA:5C:B5:7A:48:1E:4E:A2:1D:91:40:08:2D X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:24:48:a5:49:95:7f:e2:1d:42:32:e1:83:2f:cd:35:ea:bb: 6c:0a:a1:15:de:b7:83:9c:03:ed:7d:6d:88:1f:53:0a:96:5b: 9d:0c:d9:19:e6:92:d7:79:74:44:f3:e3:77:4f:36:af:bc:6a: b3:f0:f4:75:f6:9c:f9:31:38:e3:53:c7:af:b8:9b:ec:86:d0: 4c:29:02:95:78:bc:7d:64:84:ec:b2:6d:de:28:5c:22:dd:03: e7:07:77:62:63:c3:75:05:87:09:7c:94:a0:40:06:60:9f:c7: 55:28:2a:ce:32:f6:9c:54:0c:92:4c:e7:55:2c:81:b2:02:99: 78:59:7d:4d:df:fc:b7:d2:0d:89:85:3e:d4:ca:f7:f8:35:95: 1b:e2:6b:4e:a4:0d:4d:d6:96:40:eb:9c:52:53:51:fb:34:a9: 6a:b6:5e:24:24:68:3a:ae:c1:90:16:e3:66:50:7a:e8:2e:07: af:b4:24:37:8f:71:2a:81:12:db:03:dd:f6:c2:77:50:4d:28: df:ee:55:c6:de:d1:98:58:96:86:da:71:b9:a0:57:38:7a:17: 68:79:f5:37:12:cc:75:f1:b7:86:17:fb:eb:37:55:bb:f5:a1: 19:1e:ab:34:52:ad:e5:f8:b9:9c:fc:fc:0a:d6:23:38:2c:f9: 04:c2:9f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA06CukyDaN/odTtvTEPhUXMgUJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTA1MDQwMjQ2MDVaFw0yNTA1MDcxMjAyMDVaMDMxMTAvBgNV BAMTKDM5NDVDNDRDRUE2NzhBREE1Q0I1N0E0ODFFNEVBMjFEOTE0MDA4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLg+LsQcwdLP5gPzt4bsQFsbm 8+5nVdnZlJSuhNGp7QhOv6jAn3fLoipc8k18KuRgVWOSl1nAFAj8wAeiRkvOjJ6Y ZpiPTgOe+rH6vJi+Zv7JDOQKHKotW7US5mmvCVUF4UFDcLlh49zjRSDODqlOWw6S cCEA684LzHaEG0a+mAYpQhDSNN1DAzWAyZFeRbMbWi3md6bkOjtHMDam7Wt2YNcI caZTphfOOcHBPGrhhYjHdioBdVFaf1032HKkt1vYBFVM46T/F4RMBK+bf4F/uq0v TWSO5TiXeXLMLw1q9lQLwPrPGcZ8yPp4j5jiLcqh4LWfgqPEgxczUyRYl1cJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOUXETOpnitpctXpIHk6iHZFACC0wHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQkSKVJlX/iHUIy4YMvzTXqu2wKoRXet4Oc A+19bYgfUwqWW50M2Rnmktd5dETz43dPNq+8arPw9HX2nPkxOONTx6+4m+yG0Ewp ApV4vH1khOyybd4oXCLdA+cHd2Jjw3UFhwl8lKBABmCfx1UoKs4y9pxUDJJM51Us gbICmXhZfU3f/LfSDYmFPtTK9/g1lRvia06kDU3WlkDrnFJTUfs0qWq2XiQkaDqu wZAW42ZQeuguB6+0JDePcSqBEtsD3fbCd1BNKN/uVcbe0ZhYlobacbmgVzh6F2h5 9TcSzHXxt4YX++s3Vbv1oRkeqzRSreX4uZz8/ArWIzgs+QTCn38= -----END CERTIFICATE-----Generated at Tue May 6 05:34:33 2025 by rpki-client