$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: myiHhmo25xmoa76YyfPgbtz2jcgfEK5hXKEx/ygABv8= Subject key identifier: 34:F7:D1:48:0C:BB:8C:8E:C9:69:68:B4:AD:75:74:4F:A3:4E:66:78 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 62ED0187D5FDE3744BC98A39DFBD5BABC360C9F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 04F3 Signing time: Mon 21 Jul 2025 05:01:00 +0000 Manifest this update: Mon 21 Jul 2025 04:56:00 +0000 Manifest next update: Thu 24 Jul 2025 08:01:00 +0000 Files and hashes: 1: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 2: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 3: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) 4: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: nXw7QP0NyBvmnFTXB98EAIPmtDEPiRJYDjNMafXLSy0=) 5: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ed:01:87:d5:fd:e3:74:4b:c9:8a:39:df:bd:5b:ab:c3:60:c9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Jul 21 04:56:00 2025 GMT Not After : Jul 24 08:01:00 2025 GMT Subject: CN=34F7D1480CBB8C8EC96968B4AD75744FA34E6678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bc:35:95:cc:6d:d5:7e:d8:22:03:f4:64:0f: c7:47:06:de:d0:a2:0c:ee:75:c6:23:0a:51:2e:af: d6:3a:b1:d5:72:f8:9b:63:f6:81:b9:94:a3:1f:ea: cd:ed:56:77:b8:3e:e0:1d:0e:5b:d1:fa:5a:be:41: c9:7e:d8:59:7e:3f:c9:a2:fd:2b:8a:a1:91:5e:3b: 70:1d:3d:08:1f:7d:cd:c5:c0:ab:e4:ef:10:3a:a2: 41:25:63:70:39:09:97:42:e9:4e:d9:83:15:9b:a4: ef:aa:64:42:bd:95:4a:84:30:69:23:af:6f:09:75: bf:81:37:19:1b:a1:da:cc:d6:69:03:e0:4b:78:05: e4:f9:f9:8c:65:11:f1:2f:16:94:27:01:b1:ab:56: 33:1b:a3:79:19:b9:61:48:18:a0:7b:a6:76:9b:21: a3:f9:09:f7:8b:b4:f9:3e:10:56:b8:93:fe:ea:4e: d2:c9:44:9e:bb:a9:5d:b3:ba:d1:86:a1:a3:19:b0: 5f:d5:fd:b4:71:f0:99:ac:9b:c6:aa:c5:e3:00:dd: 98:a6:09:81:de:a8:81:1f:4a:e1:1b:3a:37:f3:42: 0b:bc:08:63:0d:e3:da:e7:59:51:f6:25:77:1b:af: 32:ba:0f:a3:8b:f7:a4:ca:37:75:d1:ba:50:fd:86: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F7:D1:48:0C:BB:8C:8E:C9:69:68:B4:AD:75:74:4F:A3:4E:66:78 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a5:3f:e5:60:da:50:de:f9:e5:3e:72:e9:f7:b0:92:7b:a7: 8b:ac:ad:20:e6:da:26:a5:5b:a0:4d:be:e3:05:26:ac:e6:2c: 20:bd:e0:d7:ca:01:03:ba:13:fb:b4:15:b2:5d:c4:89:e5:10: d6:41:bf:33:a2:e7:0f:07:e0:79:c8:1f:79:a5:2a:aa:ab:d5: 28:40:7e:29:a4:83:69:5f:6a:9c:6f:0e:23:ef:64:e4:ed:65: 03:0c:24:bc:29:6c:b1:ef:f4:42:03:d3:c3:70:84:11:21:3e: 5d:00:46:e9:fa:dc:1d:09:46:24:fa:78:8d:07:49:1e:cb:b7: 7b:68:7c:6d:de:da:2b:44:c2:ea:88:ff:25:27:5e:ec:2a:35: b0:22:51:65:b0:81:73:12:d4:11:e5:48:c0:c6:9f:bd:db:a0: 4b:da:38:34:91:6d:ad:72:96:bd:66:de:4e:b2:65:a2:96:66: 2b:79:b1:b3:ca:9f:ea:70:c1:56:5c:76:47:60:ed:12:23:89: 09:05:f2:7f:c9:6e:7a:1f:57:d5:4b:b1:ca:e2:67:6d:99:69: c6:8c:cb:fd:fd:df:e0:2e:12:d0:fe:99:cb:bd:8d:cb:90:cb: 70:02:08:0d:90:67:da:03:2c:37:44:55:a2:10:54:0e:8e:aa: c5:3b:a6:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYu0Bh9X943RLyYo5371bq8NgyfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTA3MjEwNDU2MDBaFw0yNTA3MjQwODAxMDBaMDMxMTAvBgNV BAMTKDM0RjdEMTQ4MENCQjhDOEVDOTY5NjhCNEFENzU3NDRGQTM0RTY2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvDWVzG3VftgiA/RkD8dHBt7Q ogzudcYjClEur9Y6sdVy+Jtj9oG5lKMf6s3tVne4PuAdDlvR+lq+Qcl+2Fl+P8mi /SuKoZFeO3AdPQgffc3FwKvk7xA6okElY3A5CZdC6U7ZgxWbpO+qZEK9lUqEMGkj r28Jdb+BNxkbodrM1mkD4Et4BeT5+YxlEfEvFpQnAbGrVjMbo3kZuWFIGKB7pnab IaP5CfeLtPk+EFa4k/7qTtLJRJ67qV2zutGGoaMZsF/V/bRx8Jmsm8aqxeMA3Zim CYHeqIEfSuEbOjfzQgu8CGMN49rnWVH2JXcbrzK6D6OL96TKN3XRulD9hm85AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNPfRSAy7jI7JaWi0rXV0T6NOZngwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHClP+Vg2lDe+eU+cun3sJJ7p4usrSDm2ial W6BNvuMFJqzmLCC94NfKAQO6E/u0FbJdxInlENZBvzOi5w8H4HnIH3mlKqqr1ShA fimkg2lfapxvDiPvZOTtZQMMJLwpbLHv9EID08NwhBEhPl0ARun63B0JRiT6eI0H SR7Lt3tofG3e2itEwuqI/yUnXuwqNbAiUWWwgXMS1BHlSMDGn73boEvaODSRba1y lr1m3k6yZaKWZit5sbPKn+pwwVZcdkdg7RIjiQkF8n/JbnofV9VLscriZ22ZacaM y/393+AuEtD+mcu9jcuQy3ACCA2QZ9oDLDdEVaIQVA6OqsU7pr4= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:52 2025 by rpki-client