$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: Rps3TwDmXnSZw4D92WP3p6WUOL6rDkntNx5itrBvEKI= Subject key identifier: 3D:AA:7C:4E:96:C4:6E:96:14:01:AC:A1:17:4E:A2:F0:C6:96:FE:6E Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 3257798CDB2BFF3AC449563D043ABBFAE58F2738 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 049F Signing time: Wed 04 Jun 2025 20:01:09 +0000 Manifest this update: Wed 04 Jun 2025 19:56:09 +0000 Manifest next update: Sun 08 Jun 2025 06:09:09 +0000 Files and hashes: 1: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: AcgL7RAT9my49wSIG9b1OPo9PeR5+7eKtrbJsb+9Oxo=) 2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: s8lHN6mCeR+HJshcEVWQRH0RHZcp4BOPgK7V87vFKcA=) 3: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pdookKLKBtLoDCva66o7DDtyvwgfA1hrwrmWSeoqnqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:57:79:8c:db:2b:ff:3a:c4:49:56:3d:04:3a:bb:fa:e5:8f:27:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Jun 4 19:56:09 2025 GMT Not After : Jun 8 06:09:09 2025 GMT Subject: CN=3DAA7C4E96C46E961401ACA1174EA2F0C696FE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:4a:93:f7:e1:08:d3:00:e7:d3:d5:dd:6d: 22:70:0e:bf:04:22:25:84:a0:f2:85:11:73:4c:22: 8a:83:76:d5:8c:a4:96:ae:17:3d:3c:7e:d7:95:d3: 95:cb:cd:78:4f:8c:be:94:2b:09:10:58:73:fe:f8: b6:d2:d3:e9:bf:ca:4b:37:95:a7:17:e0:2b:f3:15: 91:06:1c:62:7d:aa:a6:1a:3e:29:ee:76:9f:87:00: 2f:ce:51:c4:aa:b5:cb:01:85:07:de:50:c6:9d:31: af:24:28:47:10:40:ab:1b:cc:dc:1a:34:0a:90:a1: ff:77:ef:bc:02:32:a7:cc:0a:77:55:bf:19:0b:94: 88:9d:52:0d:53:39:d1:54:bd:0a:a6:a9:72:9a:a2: bc:c8:41:f3:16:42:03:12:00:27:19:c2:b3:5b:ae: 14:6b:53:c1:71:70:75:ce:aa:c8:6f:01:ae:ac:f6: 25:4f:3e:77:b6:d5:16:d0:bb:c5:a7:8b:f4:12:7f: c7:e2:f8:b9:c2:ef:b4:06:cf:a5:f8:e7:62:62:f7: 5a:56:91:e8:0b:4c:63:31:c5:73:00:00:a6:60:32: d4:56:61:dc:6a:9a:b1:fd:f4:00:ae:9f:77:13:d2: d5:fd:f4:5d:45:b5:a8:6e:b5:08:c5:83:d2:f7:3f: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AA:7C:4E:96:C4:6E:96:14:01:AC:A1:17:4E:A2:F0:C6:96:FE:6E X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:ac:e2:df:80:55:84:a5:0b:5b:3a:aa:ba:d0:7f:c0:5e:51: 8b:13:67:bf:37:b7:ec:d7:b3:35:9e:29:72:96:76:04:58:fb: ce:80:ea:f6:ed:2d:e9:87:64:5d:55:12:1c:02:0d:c3:62:2f: 0c:84:f5:46:c0:7e:92:33:66:d1:6f:5d:ab:c2:be:ca:1c:4e: c6:f9:a1:8d:b8:72:c7:c1:fb:a0:f0:d9:42:60:43:a1:3a:65: 88:d2:b7:57:24:34:ae:fe:40:c6:e1:a5:6e:d4:c8:07:52:01: 41:4e:15:a0:f6:7d:dd:0b:9e:97:6f:3d:ec:48:7f:4e:70:e1: 7d:d2:a8:c0:4a:34:a3:ee:f4:d7:7c:6e:8d:3e:57:da:41:ca: 62:eb:0e:bb:30:df:fd:66:b4:5b:32:65:78:30:31:2a:ff:dc: dc:17:74:38:ab:b1:86:e0:6e:94:0c:97:dc:3e:1b:c3:9a:d9: 22:54:b3:51:3f:d7:e7:a2:b3:7d:bb:10:59:70:be:86:96:a3: 2c:a0:d7:3b:5b:3c:12:fc:97:c1:8e:1a:21:08:b6:51:0f:5c: 2f:88:ee:7b:bd:4f:22:2a:7a:f6:4f:29:9e:35:46:f8:aa:98: f0:f5:b2:04:23:49:4f:9b:b8:ed:ca:b9:cd:ae:75:f6:4f:66: 56:a2:92:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMld5jNsr/zrESVY9BDq7+uWPJzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTA2MDQxOTU2MDlaFw0yNTA2MDgwNjA5MDlaMDMxMTAvBgNV BAMTKDNEQUE3QzRFOTZDNDZFOTYxNDAxQUNBMTE3NEVBMkYwQzY5NkZFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0EqT9+EI0wDn09XdbSJwDr8E IiWEoPKFEXNMIoqDdtWMpJauFz08fteV05XLzXhPjL6UKwkQWHP++LbS0+m/yks3 lacX4CvzFZEGHGJ9qqYaPinudp+HAC/OUcSqtcsBhQfeUMadMa8kKEcQQKsbzNwa NAqQof9377wCMqfMCndVvxkLlIidUg1TOdFUvQqmqXKaorzIQfMWQgMSACcZwrNb rhRrU8FxcHXOqshvAa6s9iVPPne21RbQu8Wni/QSf8fi+LnC77QGz6X452Ji91pW kegLTGMxxXMAAKZgMtRWYdxqmrH99ACun3cT0tX99F1FtahutQjFg9L3P8abAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPap8TpbEbpYUAayhF06i8MaW/m4wHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALes4t+AVYSlC1s6qrrQf8BeUYsTZ783t+zX szWeKXKWdgRY+86A6vbtLemHZF1VEhwCDcNiLwyE9UbAfpIzZtFvXavCvsocTsb5 oY24csfB+6Dw2UJgQ6E6ZYjSt1ckNK7+QMbhpW7UyAdSAUFOFaD2fd0LnpdvPexI f05w4X3SqMBKNKPu9Nd8bo0+V9pBymLrDrsw3/1mtFsyZXgwMSr/3NwXdDirsYbg bpQMl9w+G8Oa2SJUs1E/1+eis327EFlwvoaWoyyg1ztbPBL8l8GOGiEItlEPXC+I 7nu9TyIqevZPKZ41RviqmPD1sgQjSU+buO3Kuc2udfZPZlaikiQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:59 2025 by rpki-client