$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: 4/JJnfxRhs3hbVT/37MZamI91ZP+lejXA2ui7rLkkCk= Subject key identifier: 64:E0:3B:00:8A:D1:2A:C4:B5:3F:A7:3D:AE:B8:C7:20:C8:50:79:AE Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 24CCDA68C3940E9D02AA325CE41F6BA97496B087 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 04E9 Signing time: Sun 29 Jun 2025 04:21:37 +0000 Manifest this update: Sun 29 Jun 2025 04:16:37 +0000 Manifest next update: Wed 02 Jul 2025 08:34:37 +0000 Files and hashes: 1: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) 2: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 3: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: DLarU1zX8vV+4nkvMt2wKzTzKceHg9Os7pbm6YxiDIY=) 4: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: mVNrzG20qa0eCoI99rW1aiWH+6G8WyyK2ntWMeca7/I=) 5: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: FLTD+2Jpp1mp5koYThGmMrPDSpfNY8z0qn+l8hTwOQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cc:da:68:c3:94:0e:9d:02:aa:32:5c:e4:1f:6b:a9:74:96:b0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Jun 29 04:16:37 2025 GMT Not After : Jul 2 08:34:37 2025 GMT Subject: CN=64E03B008AD12AC4B53FA73DAEB8C720C85079AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:5c:2a:27:34:8f:b5:8f:dc:5c:f2:2a:74: 00:f8:5c:43:39:97:05:ba:03:a0:72:4e:d4:a4:2f: 56:a4:e1:fd:34:4d:a3:b7:eb:37:69:d3:ee:6b:cb: 62:bb:66:e4:dc:c0:1a:64:c9:a7:d3:42:76:73:45: 5d:5c:75:29:a5:52:8b:d3:3c:68:25:e9:50:0a:6c: e2:61:51:8e:56:d0:85:d1:f4:d3:37:47:58:94:77: d3:0e:52:b9:78:68:ca:d3:77:34:dd:b0:6b:d7:bf: 80:71:b1:e1:fd:13:02:12:e7:fa:0d:ee:ab:8e:f8: 03:dc:d1:fb:7e:52:6c:73:3b:27:36:ef:f9:24:20: e0:36:06:d6:a7:00:78:90:87:c5:aa:0d:43:4f:41: 44:20:8c:e8:21:83:81:16:8d:ac:27:3e:2b:b8:7e: 09:65:9f:7a:99:b0:01:67:2d:1d:27:74:8b:ad:73: fd:b5:b7:4d:93:d0:cd:fd:bc:32:3f:87:1e:79:c9: 14:be:66:ad:67:5b:62:74:9e:92:e5:69:e3:59:6c: ed:04:0b:a4:03:f9:a3:13:a3:52:c9:83:54:52:16: 02:a1:2b:5e:83:2b:d2:9e:d5:50:6c:a5:8f:b4:d3: 6e:a8:f9:92:63:01:52:25:32:d4:f5:ba:5b:3b:e0: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E0:3B:00:8A:D1:2A:C4:B5:3F:A7:3D:AE:B8:C7:20:C8:50:79:AE X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2f:85:19:71:4a:ea:79:e5:73:a5:05:ae:8c:95:59:d7:b2: 1d:10:bc:45:84:19:bb:80:b5:c1:fa:09:e7:f1:30:2a:68:60: 48:5a:4d:7c:89:b8:e2:b4:cf:61:3b:3f:5a:d1:21:e1:c0:a0: 91:a3:8b:1d:97:08:1b:5f:58:05:1d:f5:2a:c2:fa:bd:f3:61: 86:7a:0a:54:6d:9c:d0:24:18:a5:65:b7:61:ec:be:97:51:6c: d2:25:c5:26:5f:45:b9:b1:6c:39:2b:e0:9f:01:f5:3f:eb:e2: ae:99:fe:22:3b:77:c5:ca:e7:07:f1:74:87:b4:6a:3e:f5:54: bd:a0:a5:c3:4e:01:7d:b9:8a:82:57:5f:2e:39:7b:23:47:6b: 17:a6:05:76:85:ca:ab:6a:fb:da:1d:91:f5:de:19:82:b9:40: 8b:31:80:7f:e9:be:ab:75:24:fe:df:fb:43:66:00:b5:7b:2d: 76:88:1a:e9:7c:a6:f6:68:2a:90:5f:81:0d:2a:47:ef:31:e5: fb:4b:4c:ce:a9:3d:2d:11:3e:92:e4:3d:24:d2:cc:0c:50:8e: 61:4a:7f:26:bf:cf:40:fd:7f:fd:78:ac:a2:8c:21:87:ab:8b: 9f:2a:fa:bc:54:03:d5:2a:56:86:58:61:19:e5:a5:69:02:9a: ca:73:8f:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMzaaMOUDp0CqjJc5B9rqXSWsIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTA2MjkwNDE2MzdaFw0yNTA3MDIwODM0MzdaMDMxMTAvBgNV BAMTKDY0RTAzQjAwOEFEMTJBQzRCNTNGQTczREFFQjhDNzIwQzg1MDc5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeoVwqJzSPtY/cXPIqdAD4XEM5 lwW6A6ByTtSkL1ak4f00TaO36zdp0+5ry2K7ZuTcwBpkyafTQnZzRV1cdSmlUovT PGgl6VAKbOJhUY5W0IXR9NM3R1iUd9MOUrl4aMrTdzTdsGvXv4BxseH9EwIS5/oN 7quO+APc0ft+UmxzOyc27/kkIOA2BtanAHiQh8WqDUNPQUQgjOghg4EWjawnPiu4 fglln3qZsAFnLR0ndIutc/21t02T0M39vDI/hx55yRS+Zq1nW2J0npLlaeNZbO0E C6QD+aMTo1LJg1RSFgKhK16DK9Ke1VBspY+0026o+ZJjAVIlMtT1uls74JGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZOA7AIrRKsS1P6c9rrjHIMhQea4wHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8vhRlxSup55XOlBa6MlVnXsh0QvEWEGbuA tcH6CefxMCpoYEhaTXyJuOK0z2E7P1rRIeHAoJGjix2XCBtfWAUd9SrC+r3zYYZ6 ClRtnNAkGKVlt2HsvpdRbNIlxSZfRbmxbDkr4J8B9T/r4q6Z/iI7d8XK5wfxdIe0 aj71VL2gpcNOAX25ioJXXy45eyNHaxemBXaFyqtq+9odkfXeGYK5QIsxgH/pvqt1 JP7f+0NmALV7LXaIGul8pvZoKpBfgQ0qR+8x5ftLTM6pPS0RPpLkPSTSzAxQjmFK fya/z0D9f/14rKKMIYeri58q+rxUA9UqVoZYYRnlpWkCmspzj7o= -----END CERTIFICATE-----Generated at Mon Jun 30 07:06:52 2025 by rpki-client