$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: a0GfQgtlp/kiqU41/8hhi3mpUPKi0/zDVz6dMEhyE8o= Subject key identifier: EB:B1:3A:0F:D5:99:A5:A3:16:2D:FE:CF:FA:25:29:E5:A1:51:71:D3 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 72C15F6EC1DD38D3A7BAF74FA1C45BA5B58922C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 04E3 Signing time: Sun 15 Jun 2025 11:11:36 +0000 Manifest this update: Sun 15 Jun 2025 11:06:36 +0000 Manifest next update: Wed 18 Jun 2025 15:12:36 +0000 Files and hashes: 1: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: mVNrzG20qa0eCoI99rW1aiWH+6G8WyyK2ntWMeca7/I=) 2: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 3: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: gni9eIHOqSAs8UewtbXVrKCeJF6R6WUe9PP9mFfMiJM=) 4: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: FLTD+2Jpp1mp5koYThGmMrPDSpfNY8z0qn+l8hTwOQ8=) 5: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c1:5f:6e:c1:dd:38:d3:a7:ba:f7:4f:a1:c4:5b:a5:b5:89:22:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Jun 15 11:06:36 2025 GMT Not After : Jun 18 15:12:36 2025 GMT Subject: CN=EBB13A0FD599A5A3162DFECFFA2529E5A15171D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:5a:89:00:4f:9d:aa:c0:52:8f:5b:39:1a: fe:ae:ab:8d:74:ce:f4:70:e6:8e:e8:d7:c9:35:2d: 14:81:dd:34:95:6e:9c:c4:80:af:29:f6:81:a1:e1: 63:7a:d4:0a:03:f2:73:f4:0c:28:77:b3:23:ff:a0: 4a:e5:00:a4:91:c3:44:4e:2f:52:fa:07:9b:15:3f: ed:25:dd:a9:41:6b:f7:a0:76:46:3a:5c:2b:6b:bd: 68:ab:4c:25:d9:08:bb:3d:40:9e:4f:1e:6c:6d:30: db:ac:e7:e5:40:32:9d:12:48:86:44:42:70:4c:5b: 02:b0:60:17:af:46:ca:a8:c0:6b:50:d1:f5:3b:9c: ab:03:03:5d:a4:aa:d8:d1:a2:09:24:10:0e:1a:1d: c6:78:ba:e9:c4:67:8f:f6:47:c3:e6:4d:5f:39:34: c4:24:51:49:11:22:f3:a1:02:92:04:20:95:45:1e: 97:18:3c:a2:89:68:39:26:c5:aa:83:9a:a5:0c:70: ef:73:4a:4c:d9:40:7e:43:35:6c:66:d1:f5:35:4b: ec:0d:97:84:fa:53:b5:df:61:8a:f8:1d:d5:85:73: 23:d9:77:a1:cd:74:ff:3f:01:52:76:a8:25:51:68: 0c:78:eb:72:e2:9f:40:b8:f4:bb:ae:5b:c9:1d:9b: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:3A:0F:D5:99:A5:A3:16:2D:FE:CF:FA:25:29:E5:A1:51:71:D3 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ac:f5:6d:70:6b:c7:50:e0:7d:52:dd:0e:c1:83:5d:32:e9: c3:f0:1a:9b:aa:4b:94:27:b4:f4:34:9f:f7:67:3c:5e:a2:9b: b4:ec:37:d1:03:fb:08:5a:ec:75:27:a0:a6:16:de:62:94:ad: 01:34:34:0e:bf:f8:15:22:dc:72:3c:1b:3c:ae:5f:d0:f4:80: 32:7e:38:9f:ec:01:5b:53:53:cf:e9:28:9a:df:f8:08:66:50: 97:1e:ee:5e:42:53:b1:27:3f:62:6e:ad:7e:64:03:aa:0a:4b: b8:92:c0:65:81:38:b1:4f:fe:cc:a4:b9:02:58:18:6a:55:ff: c8:b4:7a:57:da:b0:05:d9:fd:1d:f2:19:bc:e7:b2:c3:f9:02: 78:b7:01:ac:35:6f:cf:b0:87:33:b0:11:77:59:4f:aa:4d:5e: fb:0a:36:6f:5c:5b:43:d6:10:ca:04:ff:2e:5e:3c:14:a6:40: 21:a0:ca:48:3b:e8:31:e5:f4:99:6f:45:fb:c3:bc:0f:a1:b6: 70:4e:fe:d2:0f:80:66:7f:a4:12:5f:a4:3c:ee:22:d0:20:ee: c5:e2:6d:5b:e4:d5:69:ea:d0:16:7b:92:fe:07:78:c9:bb:08: d5:9c:a3:e6:e0:fa:89:d5:23:17:07:56:0d:4f:77:d6:37:1e: 70:13:59:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsFfbsHdONOnuvdPocRbpbWJIsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTA2MTUxMTA2MzZaFw0yNTA2MTgxNTEyMzZaMDMxMTAvBgNV BAMTKEVCQjEzQTBGRDU5OUE1QTMxNjJERkVDRkZBMjUyOUU1QTE1MTcxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aFqJAE+dqsBSj1s5Gv6uq410 zvRw5o7o18k1LRSB3TSVbpzEgK8p9oGh4WN61AoD8nP0DCh3syP/oErlAKSRw0RO L1L6B5sVP+0l3alBa/egdkY6XCtrvWirTCXZCLs9QJ5PHmxtMNus5+VAMp0SSIZE QnBMWwKwYBevRsqowGtQ0fU7nKsDA12kqtjRogkkEA4aHcZ4uunEZ4/2R8PmTV85 NMQkUUkRIvOhApIEIJVFHpcYPKKJaDkmxaqDmqUMcO9zSkzZQH5DNWxm0fU1S+wN l4T6U7XfYYr4HdWFcyPZd6HNdP8/AVJ2qCVRaAx463Lin0C49LuuW8kdm3f5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU67E6D9WZpaMWLf7P+iUp5aFRcdMwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6s9W1wa8dQ4H1S3Q7Bg10y6cPwGpuqS5Qn tPQ0n/dnPF6im7TsN9ED+wha7HUnoKYW3mKUrQE0NA6/+BUi3HI8GzyuX9D0gDJ+ OJ/sAVtTU8/pKJrf+AhmUJce7l5CU7EnP2JurX5kA6oKS7iSwGWBOLFP/sykuQJY GGpV/8i0elfasAXZ/R3yGbznssP5Ani3Aaw1b8+whzOwEXdZT6pNXvsKNm9cW0PW EMoE/y5ePBSmQCGgykg76DHl9JlvRfvDvA+htnBO/tIPgGZ/pBJfpDzuItAg7sXi bVvk1Wnq0BZ7kv4HeMm7CNWco+bg+onVIxcHVg1Pd9Y3HnATWbg= -----END CERTIFICATE-----Generated at Tue Jun 17 15:38:44 2025 by rpki-client