$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: WpIjOqJEsKUKh5g4MDpBGH4T1oZX3380GD6/ffl66Gs= Subject key identifier: 9F:39:33:54:94:40:5E:47:2E:8C:A6:BA:4B:E6:B9:84:63:FC:9A:25 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 0154FCAE643E5DA02470E91E36511BCBAE501DB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 0501 Signing time: Fri 22 Aug 2025 08:31:39 +0000 Manifest this update: Fri 22 Aug 2025 08:26:39 +0000 Manifest next update: Mon 25 Aug 2025 11:17:39 +0000 Files and hashes: 1: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 2: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) 3: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: x+lHMIHmweP9VL1SV1HDEaX5KRcS+ScgKxYqmGkCVvc=) 4: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) 5: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:54:fc:ae:64:3e:5d:a0:24:70:e9:1e:36:51:1b:cb:ae:50:1d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Aug 22 08:26:39 2025 GMT Not After : Aug 25 11:17:39 2025 GMT Subject: CN=9F39335494405E472E8CA6BA4BE6B98463FC9A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:ea:84:cc:8d:86:04:8d:6d:de:86:a4:c4: f9:07:6c:0e:a4:d3:c7:60:14:c0:f3:8d:a4:ef:15: 54:88:b6:ae:3c:fb:0f:27:8e:db:74:60:02:e5:6e: 02:c5:1d:7f:bb:eb:7b:3e:c3:21:33:9e:7e:2c:13: c7:b7:d9:8e:9b:1c:6d:ea:bd:41:b1:ac:54:a2:6b: 78:d7:5d:df:c8:42:88:80:12:d1:f1:45:8d:fc:52: 75:8e:4e:1d:87:a0:b5:04:56:c1:32:13:28:4f:e7: 8d:0b:c8:39:f3:91:3d:74:5c:60:24:a5:ef:2f:54: c5:d0:74:88:55:9f:e7:bc:05:3b:8a:62:80:15:68: 93:68:4c:35:24:3c:66:c9:a0:81:68:20:64:bd:52: cf:b6:67:0e:92:9b:c7:ab:ce:0b:19:10:9c:68:cb: ca:04:fa:11:18:53:52:8c:6d:a8:5f:12:72:ec:2f: 4c:e0:72:eb:a5:d3:d6:bd:89:d9:2a:e8:b7:5a:74: 1a:3e:eb:6b:16:d5:45:7a:98:cc:9f:d4:37:0f:c3: e1:89:33:57:ad:b7:f4:c8:9f:2d:00:c0:aa:7a:57: 69:d5:d0:2b:83:03:7a:33:71:80:78:96:ae:7c:cf: ad:0b:2a:74:3d:f4:cb:9d:54:a4:fc:03:f4:21:39: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:39:33:54:94:40:5E:47:2E:8C:A6:BA:4B:E6:B9:84:63:FC:9A:25 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:61:21:88:67:d8:9e:8b:df:4d:27:ca:e6:8e:af:99:b1:a3: 18:fc:47:06:24:aa:57:1f:1e:29:bd:e3:d4:cc:d3:2f:4b:b0: eb:9c:e1:0a:09:2e:95:7a:eb:08:dc:ba:66:68:ee:e4:ff:86: ec:5e:16:ae:85:e0:ca:97:67:8a:81:a0:8f:7c:97:24:2e:bf: b1:8c:10:0b:c1:d7:6b:dc:87:bf:b7:eb:84:d9:ee:d5:92:54: a8:db:66:9f:76:1d:e7:5e:21:83:e9:ac:32:3f:37:bc:17:c0: 8c:1b:26:e6:19:c8:63:ca:5b:4b:69:fd:83:34:33:6d:43:70: 8c:92:2c:18:6a:d3:89:c9:14:94:b3:4a:46:50:aa:52:05:1b: fe:c8:38:55:ad:11:ec:54:da:92:44:fa:e5:a2:a0:c0:02:98: 16:ce:5c:7c:77:aa:f4:40:d6:6f:b4:fe:45:6c:de:9d:dd:ff: 2f:f6:ee:a7:34:bb:9c:9b:48:99:fa:75:68:d3:0f:c0:cb:36: 39:59:44:6c:f6:cd:91:76:ae:40:5c:ea:07:cc:78:bb:e5:fe: bb:aa:c5:cb:5d:46:c3:3b:46:c0:87:f5:06:bb:48:3e:c3:a9: 8a:55:02:be:1b:62:38:9d:d2:d2:7e:07:ee:de:2e:4a:b3:c1: e5:7c:0f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVT8rmQ+XaAkcOkeNlEby65QHbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTA4MjIwODI2MzlaFw0yNTA4MjUxMTE3MzlaMDMxMTAvBgNV BAMTKDlGMzkzMzU0OTQ0MDVFNDcyRThDQTZCQTRCRTZCOTg0NjNGQzlBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkuqEzI2GBI1t3oakxPkHbA6k 08dgFMDzjaTvFVSItq48+w8njtt0YALlbgLFHX+763s+wyEznn4sE8e32Y6bHG3q vUGxrFSia3jXXd/IQoiAEtHxRY38UnWOTh2HoLUEVsEyEyhP540LyDnzkT10XGAk pe8vVMXQdIhVn+e8BTuKYoAVaJNoTDUkPGbJoIFoIGS9Us+2Zw6Sm8erzgsZEJxo y8oE+hEYU1KMbahfEnLsL0zgcuul09a9idkq6LdadBo+62sW1UV6mMyf1DcPw+GJ M1ett/TIny0AwKp6V2nV0CuDA3ozcYB4lq58z60LKnQ99MudVKT8A/QhOV+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnzkzVJRAXkcujKa6S+a5hGP8miUwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClhIYhn2J6L300nyuaOr5mxoxj8RwYkqlcf Him949TM0y9LsOuc4QoJLpV66wjcumZo7uT/huxeFq6F4MqXZ4qBoI98lyQuv7GM EAvB12vch7+364TZ7tWSVKjbZp92HedeIYPprDI/N7wXwIwbJuYZyGPKW0tp/YM0 M21DcIySLBhq04nJFJSzSkZQqlIFG/7IOFWtEexU2pJE+uWioMACmBbOXHx3qvRA 1m+0/kVs3p3d/y/27qc0u5ybSJn6dWjTD8DLNjlZRGz2zZF2rkBc6gfMeLvl/ruq xctdRsM7RsCH9Qa7SD7DqYpVAr4bYjid0tJ+B+7eLkqzweV8D74= -----END CERTIFICATE-----Generated at Sat Aug 23 12:01:56 2025 by rpki-client