$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: BaxBuZq3yFr/2huFAm839b5R07RzbcfGX/VCOgKumkU= Subject key identifier: 7F:0D:B3:3D:0D:63:4F:FB:BC:EE:9B:33:E1:6C:72:D8:A5:80:64:40 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 7A244F0BBDB1B1D42F2818B22A9547CC50403FE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 04E4 Signing time: Sun 02 Nov 2025 18:01:08 +0000 Manifest this update: Sun 02 Nov 2025 17:56:08 +0000 Manifest next update: Wed 05 Nov 2025 23:36:08 +0000 Files and hashes: 1: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: Q+fYkikImEAmWC+K5yhAjdi0pz01N6j8k7b5f6Jy7V0=) 2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) 3: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:24:4f:0b:bd:b1:b1:d4:2f:28:18:b2:2a:95:47:cc:50:40:3f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Nov 2 17:56:08 2025 GMT Not After : Nov 5 23:36:08 2025 GMT Subject: CN=7F0DB33D0D634FFBBCEE9B33E16C72D8A5806440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:56:fd:3b:32:a6:1c:59:62:4b:a2:2e:16: 72:f8:36:4d:e6:93:5d:16:3a:a3:98:90:dd:7c:04: 14:f3:ec:dc:ec:80:f1:4b:82:fb:d4:f6:51:0c:ae: a8:d8:e7:4b:84:bc:9e:13:b4:2e:24:f2:50:a4:67: 0e:69:57:2d:b2:b0:40:b9:7d:82:b4:28:8c:d0:b3: c0:55:8c:5c:22:7d:c4:69:00:7b:ee:fa:bf:96:68: 15:c2:af:e8:27:ef:e5:46:9d:d4:f3:98:25:74:7f: a1:15:1a:72:33:c4:f6:73:de:2d:da:0f:20:85:d6: a1:d7:c6:92:9b:8d:b5:61:31:d1:46:74:0d:23:02: c1:6b:bd:f8:1a:e3:68:9c:31:1d:ee:d8:ec:e6:c2: 89:d4:65:b4:86:16:38:fe:2c:7c:d6:63:3d:ea:27: 71:a3:49:21:c1:07:8a:19:2a:55:4a:7a:aa:7e:3b: 1e:2d:45:da:4a:ff:6f:83:09:30:d7:7c:f9:e2:1c: e9:7c:15:03:55:f2:bd:c1:f6:8d:c3:bc:7e:7f:13: 33:97:1f:50:b2:4c:f1:1a:d9:d6:bd:de:bb:e7:bf: 9b:11:a6:23:f6:cc:bf:61:9d:c5:40:75:ac:86:6b: 9e:4f:c7:55:69:4a:16:81:a8:0f:3c:05:66:de:6b: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0D:B3:3D:0D:63:4F:FB:BC:EE:9B:33:E1:6C:72:D8:A5:80:64:40 X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b0:22:d8:38:5e:8c:60:3a:0f:49:b0:7e:fb:f6:bd:82:cd: a7:96:d9:78:05:01:35:4f:63:44:b9:97:e1:f2:d2:a6:d7:7e: ae:39:3f:41:f8:b7:b6:ae:a8:1d:13:79:fe:88:2a:84:2e:31: b6:f2:b5:be:5b:b9:92:e0:e2:d1:60:22:25:3b:af:05:1e:3e: ab:ed:c6:52:ad:1e:c9:af:72:ca:91:00:b3:76:b7:32:25:89: 77:9a:9b:72:c8:d8:ca:25:5d:4d:8e:6b:47:74:71:db:07:79: bf:2e:b9:39:27:73:d0:a0:23:4d:93:fd:7f:73:b1:fe:e9:67: 67:b8:32:db:6c:4f:ab:c5:b1:10:f2:68:d9:30:c4:27:d7:4b: 30:0c:db:ac:a7:c9:b6:67:3f:f0:99:43:32:b2:91:9c:cb:bb: ea:4f:f4:73:2d:d4:81:00:cc:b6:7b:0d:7f:32:ea:1d:85:13: 6a:f8:09:32:70:dc:b0:76:9b:38:85:8d:41:df:f4:3f:1e:5f: a7:a6:4a:d6:04:22:4d:20:e5:c0:10:19:67:7e:72:4b:f0:34: 95:61:18:d5:89:8f:d8:41:ac:b5:95:2c:c3:cb:b6:f3:f5:31: c3:9b:d8:3c:89:71:59:cf:30:f8:fe:c5:52:52:53:32:a0:88: e8:c4:c4:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiRPC72xsdQvKBiyKpVHzFBAP+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTExMDIxNzU2MDhaFw0yNTExMDUyMzM2MDhaMDMxMTAvBgNV BAMTKDdGMERCMzNEMEQ2MzRGRkJCQ0VFOUIzM0UxNkM3MkQ4QTU4MDY0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Z1b9OzKmHFliS6IuFnL4Nk3m k10WOqOYkN18BBTz7NzsgPFLgvvU9lEMrqjY50uEvJ4TtC4k8lCkZw5pVy2ysEC5 fYK0KIzQs8BVjFwifcRpAHvu+r+WaBXCr+gn7+VGndTzmCV0f6EVGnIzxPZz3i3a DyCF1qHXxpKbjbVhMdFGdA0jAsFrvfga42icMR3u2OzmwonUZbSGFjj+LHzWYz3q J3GjSSHBB4oZKlVKeqp+Ox4tRdpK/2+DCTDXfPniHOl8FQNV8r3B9o3DvH5/EzOX H1CyTPEa2da93rvnv5sRpiP2zL9hncVAdayGa55Px1VpShaBqA88BWbea7nZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfw2zPQ1jT/u87psz4Wxy2KWAZEAwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGwItg4XoxgOg9JsH779r2CzaeW2XgFATVP Y0S5l+Hy0qbXfq45P0H4t7auqB0Tef6IKoQuMbbytb5buZLg4tFgIiU7rwUePqvt xlKtHsmvcsqRALN2tzIliXeam3LI2MolXU2Oa0d0cdsHeb8uuTknc9CgI02T/X9z sf7pZ2e4MttsT6vFsRDyaNkwxCfXSzAM26ynybZnP/CZQzKykZzLu+pP9HMt1IEA zLZ7DX8y6h2FE2r4CTJw3LB2mziFjUHf9D8eX6emStYEIk0g5cAQGWd+ckvwNJVh GNWJj9hBrLWVLMPLtvP1McOb2DyJcVnPMPj+xVJSUzKgiOjExD4= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:36 2025 by rpki-client