$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: 6tcdh5MSwdW7+yReX/AbemVVoRPU5DKH6VvsXVYolys= Subject key identifier: 25:0A:FC:38:33:5C:9D:CD:43:8C:1D:DD:7A:6B:9E:E8:6B:E8:1E:E2 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 1DA7A551F2E24E49F3FF3F7BA377920280D749A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 04CA Signing time: Fri 05 Sep 2025 12:21:07 +0000 Manifest this update: Fri 05 Sep 2025 12:16:07 +0000 Manifest next update: Mon 08 Sep 2025 17:01:07 +0000 Files and hashes: 1: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: CvpGm/F3yHyIZGBDz/QBiptjNd4oQneKFgKtJvEudS4=) 2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: fAuWxeE7ImjYp2a97WPBMhqeHz7I3/dQp2udhbh8G2w=) 3: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pFuk/AGngpWFrOWsfA6YRJueZJFWOC8v02Ywbm8rUMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a7:a5:51:f2:e2:4e:49:f3:ff:3f:7b:a3:77:92:02:80:d7:49:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Sep 5 12:16:07 2025 GMT Not After : Sep 8 17:01:07 2025 GMT Subject: CN=250AFC38335C9DCD438C1DDD7A6B9EE86BE81EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:aa:22:46:57:99:b4:00:b1:cd:6c:d2:fc:f9: c5:e2:9e:7b:94:2d:36:fd:9e:59:07:fc:c5:03:a5: 86:75:a9:8f:89:07:3c:68:a0:50:26:39:ec:52:d2: 1b:03:84:3b:23:8e:b1:ec:d8:b5:02:8c:b2:6b:0e: ba:55:ac:28:6e:51:9d:99:bd:86:c8:68:20:de:4b: 51:c4:ee:6d:2d:d9:37:0c:20:bf:f3:7b:67:cb:e7: 6b:5c:ca:89:c4:62:3d:00:04:ea:3e:1e:6e:bf:a3: 60:8a:8a:34:68:b8:42:09:7e:a3:33:2b:0a:0d:57: 15:ee:94:7a:2d:a5:02:e9:4e:99:0c:f1:8d:5b:dd: c9:d1:41:15:d2:25:eb:b8:8d:99:79:28:95:4e:2b: 5b:20:77:a2:6e:37:ba:4f:51:d5:95:ec:e8:1a:9d: 1b:fa:76:f3:03:52:62:99:7a:a5:e8:55:45:3c:08: 75:5d:ac:fc:45:c9:53:32:19:7e:3a:b1:4c:9f:60: 06:c7:40:9c:94:9a:d4:d4:17:51:5a:e2:5f:93:83: 2b:cc:c0:86:09:74:37:96:31:4c:b9:a1:0a:18:6d: fd:3a:0d:1f:4e:3a:74:06:30:69:b4:d3:c6:91:a0: 47:57:bf:55:f6:36:51:c5:94:47:3f:df:2f:d9:3f: d5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0A:FC:38:33:5C:9D:CD:43:8C:1D:DD:7A:6B:9E:E8:6B:E8:1E:E2 X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f1:5d:a9:19:b0:f6:97:3f:58:c6:01:72:7d:c8:13:8a:28:8a: 61:9a:46:a1:a1:1b:89:61:d9:35:c6:12:cb:d1:81:30:e9:a1: 54:2b:d4:28:62:78:82:47:94:f3:7e:11:43:fc:f6:ee:5f:84: 3a:f9:6e:47:e3:5d:b3:a7:bd:ef:7c:fa:28:c3:47:46:2d:19: d3:2a:f2:d7:5d:22:56:38:89:35:70:3c:51:b3:4f:99:e0:fe: 1a:69:6d:bb:87:31:3e:8b:ff:00:07:68:60:d2:a0:94:31:25: bf:20:6a:80:cf:e5:03:91:51:9e:0f:ee:d7:94:5a:1f:38:69: d5:2b:02:84:72:31:20:e0:4b:0b:bc:1f:78:a9:e2:96:1e:4a: 25:4e:8c:4a:c0:43:8a:ae:b7:08:f1:0f:ad:60:d3:8d:41:a3: 47:d8:48:79:3a:e5:bb:72:a4:5d:95:46:da:d8:06:b1:a4:b2: 8f:bc:f4:16:42:7f:95:10:8b:27:66:db:0a:d9:5c:66:bd:e0: 64:fe:dd:cb:9a:f9:64:e1:f7:0f:5d:85:11:6d:9f:7b:7c:0c: f8:e0:b4:f4:04:b6:3c:6a:a6:00:18:87:e3:6a:25:f3:e5:79: 05:b8:ec:cc:63:5b:aa:3d:5c:c8:9d:1d:90:33:ec:33:ee:09: ee:a2:d9:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaelUfLiTknz/z97o3eSAoDXSacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTA5MDUxMjE2MDdaFw0yNTA5MDgxNzAxMDdaMDMxMTAvBgNV BAMTKDI1MEFGQzM4MzM1QzlEQ0Q0MzhDMURERDdBNkI5RUU4NkJFODFFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmqiJGV5m0ALHNbNL8+cXinnuU LTb9nlkH/MUDpYZ1qY+JBzxooFAmOexS0hsDhDsjjrHs2LUCjLJrDrpVrChuUZ2Z vYbIaCDeS1HE7m0t2TcMIL/ze2fL52tcyonEYj0ABOo+Hm6/o2CKijRouEIJfqMz KwoNVxXulHotpQLpTpkM8Y1b3cnRQRXSJeu4jZl5KJVOK1sgd6JuN7pPUdWV7Oga nRv6dvMDUmKZeqXoVUU8CHVdrPxFyVMyGX46sUyfYAbHQJyUmtTUF1Fa4l+TgyvM wIYJdDeWMUy5oQoYbf06DR9OOnQGMGm008aRoEdXv1X2NlHFlEc/3y/ZP9VDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJQr8ODNcnc1DjB3demue6GvoHuIwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPFdqRmw9pc/WMYBcn3IE4ooimGaRqGhG4lh 2TXGEsvRgTDpoVQr1ChieIJHlPN+EUP89u5fhDr5bkfjXbOnve98+ijDR0YtGdMq 8tddIlY4iTVwPFGzT5ng/hppbbuHMT6L/wAHaGDSoJQxJb8gaoDP5QORUZ4P7teU Wh84adUrAoRyMSDgSwu8H3ip4pYeSiVOjErAQ4qutwjxD61g041Bo0fYSHk65bty pF2VRtrYBrGkso+89BZCf5UQiydm2wrZXGa94GT+3cua+WTh9w9dhRFtn3t8DPjg tPQEtjxqpgAYh+NqJfPleQW47MxjW6o9XMidHZAz7DPuCe6i2RI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:05 2025 by rpki-client