$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: y6VHkHZ5oy8rWEvAbTHAywajTRnlJkMzXWjXeIgeOuY= Subject key identifier: B8:D8:1B:A1:81:89:9C:16:EB:EC:02:D9:18:22:9F:FC:5E:85:16:88 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 2F8DB120763708CC34D70B3C16D57FCAE4EA3979 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 04FA Signing time: Wed 06 Aug 2025 16:21:38 +0000 Manifest this update: Wed 06 Aug 2025 16:16:38 +0000 Manifest next update: Sat 09 Aug 2025 19:43:38 +0000 Files and hashes: 1: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: AKY4m1eLROLmw45bJ39eGbVepAwZ99k62WC1902HPRM=) 2: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) 3: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 4: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 5: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8d:b1:20:76:37:08:cc:34:d7:0b:3c:16:d5:7f:ca:e4:ea:39:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Aug 6 16:16:38 2025 GMT Not After : Aug 9 19:43:38 2025 GMT Subject: CN=B8D81BA181899C16EBEC02D918229FFC5E851688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:b0:56:08:17:af:6d:66:d2:6a:6b:ac:d1: 52:8a:68:ac:85:3a:1e:f3:d5:bd:fd:ce:e5:97:1a: 71:4c:f7:52:3f:1f:ff:e3:dd:58:b6:85:d4:9f:b6: ca:72:12:fb:d4:74:cc:94:b6:25:24:3e:3f:c5:4c: 99:0c:59:35:91:18:f6:57:82:54:3b:fa:c2:84:bc: df:19:a1:ca:5b:b2:1b:5c:6b:b9:ce:4a:0c:14:1c: 2d:72:58:4d:2c:be:4f:b2:6d:22:d4:31:c1:7e:82: 21:be:0a:73:63:e7:c6:fd:23:da:ae:b6:13:78:36: 90:a1:38:c7:22:49:47:c8:76:36:4a:24:2d:eb:b8: 38:fb:34:07:9c:ca:41:e0:57:89:76:f6:c7:cf:f0: 45:59:07:cc:75:e8:da:19:3a:64:71:df:30:62:32: 29:a8:84:d2:5d:4c:69:68:55:65:d9:4b:23:9f:d4: 19:3c:d7:97:1f:05:47:2b:cc:c2:d2:a9:07:5d:5e: 80:8f:b5:e6:22:91:54:bc:70:02:e8:91:fc:ba:99: ca:19:00:e1:e1:98:27:15:8e:ae:67:62:72:08:cb: 0c:c3:98:99:2e:82:19:42:4f:1b:3b:3c:9d:12:aa: 39:cc:ab:14:5c:e3:48:6b:7a:d5:aa:b9:ae:b5:e2: b8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D8:1B:A1:81:89:9C:16:EB:EC:02:D9:18:22:9F:FC:5E:85:16:88 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:30:3e:61:1d:74:12:89:f7:58:3f:56:f0:54:85:05:d6:1a: 02:1d:f4:95:3b:62:01:c6:76:20:7d:81:06:42:d3:49:79:e5: 9e:ff:42:7c:d2:19:76:71:e9:5b:29:2b:f6:18:7c:4e:b6:45: 08:3d:f7:82:8b:e7:bf:e0:67:cf:fa:2e:79:35:cc:7e:df:c4: d5:5e:3a:02:20:76:6b:ad:05:40:9d:c4:c5:68:16:66:53:8c: 32:69:f7:97:99:a5:c9:de:2f:20:69:f9:1d:ad:9a:da:17:29: a4:67:21:7e:56:c2:9c:e4:f1:f8:9d:4a:63:4e:61:8d:ce:10: 74:f4:2c:e4:79:d3:a9:4e:49:d4:4d:6c:46:ec:56:b5:8c:58: 35:b1:70:5d:ee:e9:9c:9d:e3:b2:70:c3:6e:23:36:4a:2e:9d: da:50:e8:d0:47:fc:4b:41:fc:79:62:b7:0e:67:a8:a3:0b:80: bb:45:f5:07:07:9b:63:0d:a6:36:d1:6e:ba:c7:e4:80:0d:0f: 60:04:0b:01:eb:e5:5b:eb:66:2b:da:fd:48:61:a8:5d:0e:fb: 3a:b5:da:40:bb:77:21:43:65:2d:7c:32:10:53:a2:95:63:e2: f6:d2:7a:95:90:80:01:2e:6b:7b:46:8b:de:ec:df:e8:54:6b: 7b:99:25:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL42xIHY3CMw01ws8FtV/yuTqOXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTA4MDYxNjE2MzhaFw0yNTA4MDkxOTQzMzhaMDMxMTAvBgNV BAMTKEI4RDgxQkExODE4OTlDMTZFQkVDMDJEOTE4MjI5RkZDNUU4NTE2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAt7BWCBevbWbSamus0VKKaKyF Oh7z1b39zuWXGnFM91I/H//j3Vi2hdSftspyEvvUdMyUtiUkPj/FTJkMWTWRGPZX glQ7+sKEvN8Zocpbshtca7nOSgwUHC1yWE0svk+ybSLUMcF+giG+CnNj58b9I9qu thN4NpChOMciSUfIdjZKJC3ruDj7NAecykHgV4l29sfP8EVZB8x16NoZOmRx3zBi MimohNJdTGloVWXZSyOf1Bk815cfBUcrzMLSqQddXoCPteYikVS8cALokfy6mcoZ AOHhmCcVjq5nYnIIywzDmJkughlCTxs7PJ0SqjnMqxRc40hretWqua614rgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuNgboYGJnBbr7ALZGCKf/F6FFogwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEwPmEddBKJ91g/VvBUhQXWGgId9JU7YgHG diB9gQZC00l55Z7/QnzSGXZx6VspK/YYfE62RQg994KL57/gZ8/6Lnk1zH7fxNVe OgIgdmutBUCdxMVoFmZTjDJp95eZpcneLyBp+R2tmtoXKaRnIX5Wwpzk8fidSmNO YY3OEHT0LOR506lOSdRNbEbsVrWMWDWxcF3u6Zyd47Jww24jNkoundpQ6NBH/EtB /Hlitw5nqKMLgLtF9QcHm2MNpjbRbrrH5IAND2AECwHr5VvrZiva/UhhqF0O+zq1 2kC7dyFDZS18MhBTopVj4vbSepWQgAEua3tGi97s3+hUa3uZJc4= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:33 2025 by rpki-client