$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: lG/QgGDP1oAhlk4L35805z6497WpgLWmNjpv0bHqVhw= Subject key identifier: 91:72:C1:6F:91:89:B9:F3:3B:C8:43:9C:25:5B:9B:82:0B:60:D2:32 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 706D33FE7CE818370741FD671ED6DA53E1A10778 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 04DD Signing time: Mon 02 Jun 2025 01:02:39 +0000 Manifest this update: Mon 02 Jun 2025 00:57:39 +0000 Manifest next update: Thu 05 Jun 2025 03:31:39 +0000 Files and hashes: 1: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: FLTD+2Jpp1mp5koYThGmMrPDSpfNY8z0qn+l8hTwOQ8=) 2: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) 3: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: mVNrzG20qa0eCoI99rW1aiWH+6G8WyyK2ntWMeca7/I=) 4: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: XCZ6Pfn3DmLYd0Qw6YFA8fCzWIt+rnHR6KZUynga8tM=) 5: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6d:33:fe:7c:e8:18:37:07:41:fd:67:1e:d6:da:53:e1:a1:07:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Jun 2 00:57:39 2025 GMT Not After : Jun 5 03:31:39 2025 GMT Subject: CN=9172C16F9189B9F33BC8439C255B9B820B60D232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:a9:81:01:bd:06:31:04:81:bc:3d:a2:38: 5a:6d:03:bb:2e:bc:33:5b:0a:8f:b3:a2:84:24:d8: c8:3b:bf:4c:04:4f:d5:74:95:96:74:8a:7c:90:91: 19:38:03:5e:9d:c9:3c:67:58:04:3c:57:76:8b:2b: 9d:db:d6:34:66:62:b6:b5:cd:ce:6d:20:df:cb:cb: b6:05:bb:e3:ef:c1:6c:b6:1b:42:d3:c6:d7:db:9b: 7a:ef:14:0b:bd:ed:19:ae:2f:f9:35:0a:fd:2d:75: b0:1a:a7:92:51:9d:ad:51:78:2d:9a:49:8a:80:f5: 5c:19:a8:fa:22:d6:37:d9:61:62:43:b3:84:3d:16: ae:b2:70:1d:28:b2:52:b4:9b:d7:94:33:61:56:93: 7b:58:8e:c2:72:53:63:6b:17:ba:63:18:bd:5c:55: f8:05:52:74:9d:c0:20:80:0d:db:8a:42:22:69:07: 70:8a:24:74:54:c6:63:7c:41:88:3a:72:7e:ce:f4: 4a:bb:e1:73:9f:db:17:a5:05:02:ec:ac:5e:e8:db: c6:2c:6f:ed:1b:27:6a:c4:d0:32:f5:68:48:ec:d0: 3c:4c:a0:78:17:dc:81:bf:ed:d8:6e:8b:45:00:af: 10:58:55:57:8a:ba:fc:39:88:c0:be:04:b9:7f:c8: ea:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:72:C1:6F:91:89:B9:F3:3B:C8:43:9C:25:5B:9B:82:0B:60:D2:32 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:97:bb:62:61:b4:24:80:36:c5:cc:c6:21:bc:a4:f4:60:66: a6:87:12:61:48:4f:97:b1:92:b0:1c:3c:d7:5e:1e:fd:ce:7f: f7:bd:ff:b5:2a:4e:ac:a1:cb:8e:29:c0:85:f9:5f:a7:17:64: 5c:0e:71:aa:77:10:bf:29:d8:4d:55:69:4c:76:2b:c4:bb:f0: da:9c:de:b0:7b:3b:b2:e2:a3:42:24:72:db:e8:6d:da:93:92: ae:5c:57:9f:06:3a:3f:2c:60:31:3e:b5:4a:00:ac:85:56:c8: 12:9d:0b:c0:b4:cf:75:66:9b:bf:62:93:d4:9c:ab:b4:ac:7e: 3d:a5:09:93:72:88:96:40:e4:8e:28:ca:69:b4:0f:8c:63:f9: 5a:36:64:80:64:e4:0b:f7:0b:de:cf:16:62:be:bd:33:49:9c: c0:b8:e4:cf:5b:d8:d6:b1:55:8b:c4:44:81:a4:12:a3:91:83: 1e:87:65:73:d0:33:27:13:5c:d9:3a:76:bb:bc:bc:6a:59:8d: 93:76:24:e9:f6:db:5a:d1:39:62:3a:b3:f7:dd:a1:98:09:bc: 9f:cf:dd:c3:90:d1:63:db:e9:3b:66:2d:11:31:c9:1f:03:62: e5:33:ed:e8:07:83:3b:0b:e5:c6:51:a7:c7:cf:74:4f:9d:b7: 3c:0c:4b:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcG0z/nzoGDcHQf1nHtbaU+GhB3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTA2MDIwMDU3MzlaFw0yNTA2MDUwMzMxMzlaMDMxMTAvBgNV BAMTKDkxNzJDMTZGOTE4OUI5RjMzQkM4NDM5QzI1NUI5QjgyMEI2MEQyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJ6mBAb0GMQSBvD2iOFptA7su vDNbCo+zooQk2Mg7v0wET9V0lZZ0inyQkRk4A16dyTxnWAQ8V3aLK53b1jRmYra1 zc5tIN/Ly7YFu+PvwWy2G0LTxtfbm3rvFAu97RmuL/k1Cv0tdbAap5JRna1ReC2a SYqA9VwZqPoi1jfZYWJDs4Q9Fq6ycB0oslK0m9eUM2FWk3tYjsJyU2NrF7pjGL1c VfgFUnSdwCCADduKQiJpB3CKJHRUxmN8QYg6cn7O9Eq74XOf2xelBQLsrF7o28Ys b+0bJ2rE0DL1aEjs0DxMoHgX3IG/7dhui0UArxBYVVeKuvw5iMC+BLl/yOrJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkXLBb5GJufM7yEOcJVubggtg0jIwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeXu2JhtCSANsXMxiG8pPRgZqaHEmFIT5ex krAcPNdeHv3Of/e9/7UqTqyhy44pwIX5X6cXZFwOcap3EL8p2E1VaUx2K8S78Nqc 3rB7O7Lio0IkctvobdqTkq5cV58GOj8sYDE+tUoArIVWyBKdC8C0z3Vmm79ik9Sc q7Ssfj2lCZNyiJZA5I4oymm0D4xj+Vo2ZIBk5Av3C97PFmK+vTNJnMC45M9b2Nax VYvERIGkEqORgx6HZXPQMycTXNk6dru8vGpZjZN2JOn221rROWI6s/fdoZgJvJ/P 3cOQ0WPb6TtmLRExyR8DYuUz7egHgzsL5cZRp8fPdE+dtzwMS2M= -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:58 2025 by rpki-client