$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: SyHpHnxF87KHTptxRKTtjm8FCE+xofkI0KgwPg/csZ4= Subject key identifier: 8E:89:B4:B8:CD:02:A6:73:20:BB:48:9D:62:C7:8F:EB:1E:51:08:88 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 24B8CB1DF94E63ACBF3E0154DD3D5D969E654028 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 04D1 Signing time: Tue 06 May 2025 19:01:46 +0000 Manifest this update: Tue 06 May 2025 18:56:46 +0000 Manifest next update: Fri 09 May 2025 20:36:46 +0000 Files and hashes: 1: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: 35E4UlqdBUYnnMY7Jpoh0Eg3oe/ZchB5ctSGR7BqZWM=) 2: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: U1le6HmfhNXh3uDoBprzUB/GbdiVtl5syDPCsFAVER0=) 3: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: mVNrzG20qa0eCoI99rW1aiWH+6G8WyyK2ntWMeca7/I=) 4: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: d5sXhags8sP5mv+Vz5MQF5IS93+gTn8jrEC15lLJp7Q=) 5: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: FLTD+2Jpp1mp5koYThGmMrPDSpfNY8z0qn+l8hTwOQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b8:cb:1d:f9:4e:63:ac:bf:3e:01:54:dd:3d:5d:96:9e:65:40:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: May 6 18:56:46 2025 GMT Not After : May 9 20:36:46 2025 GMT Subject: CN=8E89B4B8CD02A67320BB489D62C78FEB1E510888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:92:02:d3:8f:85:7c:77:a7:2a:47:3a:ba: 05:21:ad:6c:10:ff:13:67:6d:9b:89:b9:a5:7e:63: 9f:41:1f:fb:b6:a7:90:51:07:68:1b:9c:47:54:69: 5e:f5:f3:bd:62:60:b1:e4:85:3e:2b:56:da:db:e0: ee:58:ed:b5:4b:72:57:2a:30:aa:8e:c3:2d:8a:cc: 21:a5:ec:7e:c1:05:ea:43:2f:6a:e8:99:24:89:6d: c1:22:6f:ce:f7:7c:50:d3:af:66:53:15:88:30:a3: c2:7d:ed:7b:7d:52:98:46:f0:16:2c:02:45:71:47: bd:19:1a:1e:0e:0b:5d:69:93:22:3f:81:9e:71:90: 03:ac:d2:05:ef:41:f8:29:62:e5:a2:05:ac:bf:f3: 2a:1a:72:16:1d:c4:54:5a:a1:a1:61:bd:54:3a:49: 1d:7d:02:4d:14:8e:79:5d:26:91:b3:e1:d4:05:36: 72:a9:2f:9b:4e:df:9d:61:48:08:f5:dc:ea:cb:73: 36:2e:e2:f8:f8:70:a0:76:4a:e7:05:d2:27:9f:6c: c4:3d:1f:de:17:48:ab:0d:66:75:5e:63:04:d8:c9: d5:04:62:78:30:a9:fe:12:be:39:01:26:06:3a:53: 63:d5:f3:02:b2:29:c7:d4:ed:81:c2:b2:71:8d:ec: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:89:B4:B8:CD:02:A6:73:20:BB:48:9D:62:C7:8F:EB:1E:51:08:88 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b9:51:ef:41:87:31:de:5e:91:df:64:c9:d8:10:de:a7:c8: d5:ee:89:84:1a:b2:20:bd:b0:02:76:a7:cd:3c:79:61:c9:ee: 75:30:21:5d:56:5c:11:f7:74:57:44:20:98:72:b4:e7:5c:62: b7:12:e6:99:1d:48:66:a1:26:42:4f:ae:dc:9d:ec:3e:1f:58: a7:79:6f:f6:b5:7d:6d:d7:a8:38:95:14:f9:5d:f6:9a:17:cf: 3b:eb:03:ae:d3:f6:bf:5b:b1:ae:90:b6:2b:05:00:50:ff:2f: 5c:8f:0d:b7:df:70:66:1d:1a:8c:7d:bb:e2:67:d5:9e:ed:07: 54:eb:1c:11:3e:40:fc:f4:d9:89:61:ad:84:a4:31:00:b6:28: 0b:9a:d2:96:7b:5a:7a:d7:47:84:72:7d:23:e2:72:a8:09:ae: f0:9f:c3:16:03:4b:52:27:6c:fa:d5:dd:08:dc:2e:a9:6f:18: 5a:52:54:ae:9a:a9:54:93:a1:e1:6d:ab:03:79:1e:21:c3:c3: 51:b9:7a:52:25:ad:6f:44:0d:fc:57:4a:34:86:f4:ed:50:ee: f5:d2:5e:f6:9b:71:f4:a1:dc:a9:55:1b:c2:09:10:2d:f8:35: 1a:b4:0b:ee:0c:fc:21:13:31:00:2e:98:9b:88:41:42:ac:b3: 2a:57:8d:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLjLHflOY6y/PgFU3T1dlp5lQCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTA1MDYxODU2NDZaFw0yNTA1MDkyMDM2NDZaMDMxMTAvBgNV BAMTKDhFODlCNEI4Q0QwMkE2NzMyMEJCNDg5RDYyQzc4RkVCMUU1MTA4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3d5IC04+FfHenKkc6ugUhrWwQ /xNnbZuJuaV+Y59BH/u2p5BRB2gbnEdUaV71871iYLHkhT4rVtrb4O5Y7bVLclcq MKqOwy2KzCGl7H7BBepDL2romSSJbcEib873fFDTr2ZTFYgwo8J97Xt9UphG8BYs AkVxR70ZGh4OC11pkyI/gZ5xkAOs0gXvQfgpYuWiBay/8yoachYdxFRaoaFhvVQ6 SR19Ak0UjnldJpGz4dQFNnKpL5tO351hSAj13OrLczYu4vj4cKB2SucF0iefbMQ9 H94XSKsNZnVeYwTYydUEYngwqf4SvjkBJgY6U2PV8wKyKcfU7YHCsnGN7PinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjom0uM0CpnMgu0idYseP6x5RCIgwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA65Ue9BhzHeXpHfZMnYEN6nyNXuiYQasiC9 sAJ2p808eWHJ7nUwIV1WXBH3dFdEIJhytOdcYrcS5pkdSGahJkJPrtyd7D4fWKd5 b/a1fW3XqDiVFPld9poXzzvrA67T9r9bsa6QtisFAFD/L1yPDbffcGYdGox9u+Jn 1Z7tB1TrHBE+QPz02YlhrYSkMQC2KAua0pZ7WnrXR4RyfSPicqgJrvCfwxYDS1In bPrV3QjcLqlvGFpSVK6aqVSToeFtqwN5HiHDw1G5elIlrW9EDfxXSjSG9O1Q7vXS XvabcfSh3KlVG8IJEC34NRq0C+4M/CETMQAumJuIQUKssypXjUA= -----END CERTIFICATE-----Generated at Thu May 8 10:44:42 2025 by rpki-client