$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: fg1RTcUWnj5DH/MuYNaiMwhCZbwicQ4bqTRsvCQOVqY= Subject key identifier: 33:1D:27:1F:BE:5A:59:EA:49:8A:11:37:0E:87:70:A9:E9:5D:AB:4F Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 25C04D035D215FA702329F472069AAAE8DD23835 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 0521 Signing time: Mon 03 Nov 2025 23:41:40 +0000 Manifest this update: Mon 03 Nov 2025 23:36:40 +0000 Manifest next update: Fri 07 Nov 2025 02:53:40 +0000 Files and hashes: 1: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) 2: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 3: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: LGebLcdg1GIE4S77lVKERXxA05eR2tY3kV88xPo/elo=) 4: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 5: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c0:4d:03:5d:21:5f:a7:02:32:9f:47:20:69:aa:ae:8d:d2:38:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Nov 3 23:36:40 2025 GMT Not After : Nov 7 02:53:40 2025 GMT Subject: CN=331D271FBE5A59EA498A11370E8770A9E95DAB4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:51:6c:b8:58:9b:54:7e:fb:31:f5:24:7a: a6:e8:ec:ce:2d:53:0c:bd:a2:32:c7:de:d6:9e:75: ce:57:cd:7d:05:c0:77:59:ea:db:5b:5d:04:c0:b3: d2:fe:4c:77:5a:6c:ee:04:10:ad:4c:62:90:64:22: 49:6c:55:55:0c:17:01:7d:b5:9d:f6:10:56:a5:ed: 59:b1:ef:1f:d8:f9:ef:81:75:b3:a5:85:a3:3a:d3: f9:30:cc:57:fa:32:46:7a:e8:d5:7a:c6:b6:6d:26: 96:31:80:1d:86:63:63:41:36:50:9e:8e:ad:c3:47: 5d:3f:02:84:b9:4b:d1:49:71:fc:99:e6:99:4c:c9: a0:ed:80:6c:5a:e6:70:b6:2e:4f:32:eb:82:4c:b8: 30:43:b5:be:ba:e1:99:33:4e:2c:46:5c:0f:86:11: c0:a0:5f:11:a0:97:b5:c0:25:b3:b2:26:14:35:47: f3:a7:3e:95:72:78:47:56:bf:74:d7:d1:6c:49:13: f2:ea:aa:af:d6:7c:0d:77:19:1f:6b:c2:49:35:a4: 63:e7:77:14:0d:bb:5f:11:b9:b4:53:a0:e7:da:dc: 62:ff:5a:7b:a5:ef:52:39:7d:7f:b5:b3:c1:d8:83: 3c:a0:96:81:c4:e8:6a:d0:61:5e:52:0c:e6:ab:da: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1D:27:1F:BE:5A:59:EA:49:8A:11:37:0E:87:70:A9:E9:5D:AB:4F X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cb:d7:59:a2:f6:19:22:05:b8:6c:b0:79:0e:1f:41:f9:aa: 93:dc:89:eb:20:3d:17:8d:94:2e:80:d4:e7:76:01:37:54:a8: 6d:22:aa:10:21:f7:9c:de:28:2a:ac:18:e1:06:e3:d6:07:f8: c6:e9:62:14:57:5b:37:90:a2:4f:76:71:b3:3e:37:53:00:8a: 01:b9:da:c0:0f:ce:66:1d:93:7f:1d:71:07:5e:1f:f0:76:f9: af:98:41:44:3d:3d:05:49:79:ce:ef:ff:e5:01:b9:2b:c4:7a: ee:18:48:3e:06:a7:f9:c5:93:50:20:31:66:79:ba:e5:4b:3a: 78:eb:05:65:b5:a9:5c:9c:38:4e:3a:2f:02:47:75:8e:db:1e: 88:31:ea:bc:c7:9f:9e:9e:9d:c4:d4:82:8f:80:3b:7f:ea:68: f3:24:c2:0c:c5:d7:51:7c:a9:01:49:6f:bd:f6:96:50:70:f1: 68:3b:75:eb:01:6c:a1:64:aa:6f:a8:1c:4f:d7:5d:fc:50:9e: 80:8e:70:24:5d:03:19:7a:70:aa:6f:ee:03:b3:82:67:2c:bd: c2:69:97:51:36:fd:e6:24:9b:2a:e5:6c:b3:f8:9d:23:c2:ea: bc:4d:f4:0d:5f:a3:08:8e:a7:d0:ad:11:28:e8:8b:61:c3:d7: 56:bd:83:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcBNA10hX6cCMp9HIGmqro3SODUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTExMDMyMzM2NDBaFw0yNTExMDcwMjUzNDBaMDMxMTAvBgNV BAMTKDMzMUQyNzFGQkU1QTU5RUE0OThBMTEzNzBFODc3MEE5RTk1REFCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFy1FsuFibVH77MfUkeqbo7M4t Uwy9ojLH3taedc5XzX0FwHdZ6ttbXQTAs9L+THdabO4EEK1MYpBkIklsVVUMFwF9 tZ32EFal7Vmx7x/Y+e+BdbOlhaM60/kwzFf6MkZ66NV6xrZtJpYxgB2GY2NBNlCe jq3DR10/AoS5S9FJcfyZ5plMyaDtgGxa5nC2Lk8y64JMuDBDtb664ZkzTixGXA+G EcCgXxGgl7XAJbOyJhQ1R/OnPpVyeEdWv3TX0WxJE/Lqqq/WfA13GR9rwkk1pGPn dxQNu18RubRToOfa3GL/Wnul71I5fX+1s8HYgzygloHE6GrQYV5SDOar2g4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMx0nH75aWepJihE3Dodwqeldq08wHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvL11mi9hkiBbhssHkOH0H5qpPciesgPReN lC6A1Od2ATdUqG0iqhAh95zeKCqsGOEG49YH+MbpYhRXWzeQok92cbM+N1MAigG5 2sAPzmYdk38dcQdeH/B2+a+YQUQ9PQVJec7v/+UBuSvEeu4YSD4Gp/nFk1AgMWZ5 uuVLOnjrBWW1qVycOE46LwJHdY7bHogx6rzHn56encTUgo+AO3/qaPMkwgzF11F8 qQFJb732llBw8Wg7desBbKFkqm+oHE/XXfxQnoCOcCRdAxl6cKpv7gOzgmcsvcJp l1E2/eYkmyrlbLP4nSPC6rxN9A1fowiOp9CtESjoi2HD11a9gwA= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:55 2025 by rpki-client