$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: z0B+xDdrGKkr5fn+4XZ411oS7px6iaxBGPWbGlkYx94= Subject key identifier: C0:DA:76:F4:3C:50:52:94:E0:D0:1D:80:5C:4C:CD:B8:0C:1C:3F:03 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 2E407B4A3ACAD876E73D0EAB7FEC66F11F29D744 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 04A4 Signing time: Sun 15 Jun 2025 18:01:04 +0000 Manifest this update: Sun 15 Jun 2025 17:56:04 +0000 Manifest next update: Wed 18 Jun 2025 19:25:04 +0000 Files and hashes: 1: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pdookKLKBtLoDCva66o7DDtyvwgfA1hrwrmWSeoqnqY=) 2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: s8lHN6mCeR+HJshcEVWQRH0RHZcp4BOPgK7V87vFKcA=) 3: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: JdzWDA0Gz6NYUDNxHqAylnC9PB9lG3Am54pMMUKfEsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 19:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:40:7b:4a:3a:ca:d8:76:e7:3d:0e:ab:7f:ec:66:f1:1f:29:d7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Jun 15 17:56:04 2025 GMT Not After : Jun 18 19:25:04 2025 GMT Subject: CN=C0DA76F43C505294E0D01D805C4CCDB80C1C3F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:57:e3:0f:2f:98:c8:69:c4:e8:77:77:a3: 52:dd:09:62:6e:06:94:f4:f3:3e:63:d9:e2:56:68: a2:d4:1b:e3:b5:19:22:0c:a6:9e:7c:a2:82:d1:91: 04:01:b8:4f:24:5a:4d:49:bd:57:b9:9d:4b:4d:23: 16:3f:6b:d1:0e:29:4a:c7:91:bb:d9:75:62:1e:e0: 6d:20:83:1d:74:97:24:4b:f8:fb:33:64:ca:dc:61: 4e:62:3b:bf:c8:3e:ca:50:b2:11:68:16:db:d0:20: d5:6f:9b:84:86:7f:5b:18:d9:6c:28:5c:1c:3a:fb: a4:46:94:1b:0e:be:04:f5:97:7a:fb:81:e5:8a:b8: 8f:04:61:7e:41:38:17:1d:01:64:34:58:28:4d:bc: 9f:0d:8a:4d:75:81:81:c7:a8:dd:6f:fc:66:f7:1e: 06:86:22:38:2b:41:d5:9f:31:34:33:4d:6a:29:a5: cd:81:29:ee:76:c7:7e:b1:2a:c0:f8:ef:df:9b:b3: c1:36:4c:25:f8:d8:11:0c:e2:01:bd:bf:09:ba:4c: 66:df:0a:70:9f:13:7c:6b:e9:b6:62:76:94:f3:9f: 4e:c2:92:de:bd:eb:7d:bb:f2:e0:6d:a3:80:f6:ce: a3:18:ed:78:2b:54:7f:bf:fc:12:bc:c5:a2:09:8c: 1c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:76:F4:3C:50:52:94:E0:D0:1D:80:5C:4C:CD:B8:0C:1C:3F:03 X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:50:a4:a6:3b:4e:34:d8:d4:32:86:62:42:70:49:17:9f:38: 53:a7:5d:18:c0:d1:a5:f5:a5:a7:6f:73:e7:0e:bd:45:a5:19: fd:df:0d:f5:d0:37:29:ae:a7:b1:8b:7f:c9:6e:4f:bb:21:27: b4:84:65:09:24:12:2b:8e:4f:b4:22:e9:17:72:1f:37:c0:db: ce:be:01:b3:a6:a7:c7:65:cd:6a:36:e7:28:74:32:f4:34:f8: e0:a0:ff:44:c9:b7:2a:b9:45:ea:e1:5b:57:ef:ee:3f:90:35: 30:26:89:52:c8:c4:35:2a:3f:0f:62:d6:af:3c:de:2c:12:9d: 42:09:8f:f5:57:ad:7a:0c:29:b6:fa:35:a9:c1:e7:cf:22:61: 39:e0:e3:6c:b8:5f:1e:8e:bb:7e:9e:f0:74:6d:ac:70:d8:ea: 31:12:82:7e:45:e7:1f:1c:21:fe:3d:0a:f4:79:10:3c:bc:54: 8a:40:c9:d1:78:61:a9:f1:2e:03:99:0a:f0:9f:ab:23:98:7e: 3a:79:4c:33:1d:53:48:b7:51:f2:82:b4:1a:3b:2d:c7:2d:ea: 62:4b:82:18:13:29:0b:57:a6:bb:8c:01:f6:66:d7:26:4c:ce: 6b:1d:ec:bb:37:22:32:89:f1:a6:3d:00:8c:21:b0:f5:11:55: 20:cc:2c:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkB7SjrK2HbnPQ6rf+xm8R8p10QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTA2MTUxNzU2MDRaFw0yNTA2MTgxOTI1MDRaMDMxMTAvBgNV BAMTKEMwREE3NkY0M0M1MDUyOTRFMEQwMUQ4MDVDNENDREI4MEMxQzNGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPlfjDy+YyGnE6Hd3o1LdCWJu BpT08z5j2eJWaKLUG+O1GSIMpp58ooLRkQQBuE8kWk1JvVe5nUtNIxY/a9EOKUrH kbvZdWIe4G0ggx10lyRL+PszZMrcYU5iO7/IPspQshFoFtvQINVvm4SGf1sY2Wwo XBw6+6RGlBsOvgT1l3r7geWKuI8EYX5BOBcdAWQ0WChNvJ8Nik11gYHHqN1v/Gb3 HgaGIjgrQdWfMTQzTWoppc2BKe52x36xKsD479+bs8E2TCX42BEM4gG9vwm6TGbf CnCfE3xr6bZidpTzn07Ckt6963278uBto4D2zqMY7XgrVH+//BK8xaIJjBwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwNp29DxQUpTg0B2AXEzNuAwcPwMwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVQpKY7TjTY1DKGYkJwSRefOFOnXRjA0aX1 padvc+cOvUWlGf3fDfXQNymup7GLf8luT7shJ7SEZQkkEiuOT7Qi6RdyHzfA286+ AbOmp8dlzWo25yh0MvQ0+OCg/0TJtyq5RerhW1fv7j+QNTAmiVLIxDUqPw9i1q88 3iwSnUIJj/VXrXoMKbb6NanB588iYTng42y4Xx6Ou36e8HRtrHDY6jESgn5F5x8c If49CvR5EDy8VIpAydF4YanxLgOZCvCfqyOYfjp5TDMdU0i3UfKCtBo7Lcct6mJL ghgTKQtXpruMAfZm1yZMzmsd7Ls3IjKJ8aY9AIwhsPURVSDMLIE= -----END CERTIFICATE-----Generated at Mon Jun 16 11:17:49 2025 by rpki-client