$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: ySOYFJBkF4FoV4SKYvnwoWo7PHhNhxlObE0KA8TWIRs= Subject key identifier: 36:12:A1:51:66:0A:C1:B2:C7:9C:75:35:38:5F:BB:2D:8F:6A:84:8A Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 75AD425ABE6F0F73DD0960C6C1E08D1253921D59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 0507 Signing time: Thu 04 Sep 2025 19:11:41 +0000 Manifest this update: Thu 04 Sep 2025 19:06:41 +0000 Manifest next update: Sun 07 Sep 2025 21:53:41 +0000 Files and hashes: 1: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: XajCqvNmZgpmoW4s5SNJF0ZXRDEXr+55fvy39swAhqM=) 2: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) 3: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) 4: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 5: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 21:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ad:42:5a:be:6f:0f:73:dd:09:60:c6:c1:e0:8d:12:53:92:1d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Sep 4 19:06:41 2025 GMT Not After : Sep 7 21:53:41 2025 GMT Subject: CN=3612A151660AC1B2C79C7535385FBB2D8F6A848A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:86:e2:a4:00:8a:06:41:3d:cb:15:72:ab:69: cf:e6:4e:59:82:73:4d:fc:38:b3:38:55:ee:b4:52: 50:50:e6:b6:7e:ef:07:dd:84:f0:40:c9:01:5b:1f: a5:20:cb:2d:59:7b:45:a3:78:91:31:45:bb:f3:3a: 71:c9:a4:32:57:db:53:69:45:d4:54:5b:29:da:88: a4:e3:7c:4a:bc:33:a9:e3:df:8a:4e:53:02:97:0a: 65:8c:80:38:10:71:d3:82:4c:aa:4a:33:7b:64:53: a0:4b:8a:06:af:23:2e:4c:d3:22:c4:a5:eb:d3:6c: c1:e1:4c:29:ac:51:f5:73:3e:22:f1:07:95:f2:54: cc:80:cb:4f:ef:71:ba:e2:9e:18:08:df:76:e9:63: 71:6a:27:46:d9:3d:17:60:a4:da:89:20:65:4b:1a: eb:ee:2c:be:ef:28:60:2a:ee:5f:73:c1:d8:c0:0d: 63:32:4c:f5:da:46:30:16:f3:98:9d:47:bc:de:88: f5:34:83:6b:30:53:2d:0f:9e:d9:c5:1f:ba:4b:40: 89:ab:21:88:5f:70:97:20:b5:09:a5:42:86:6b:49: 39:c5:0c:67:5a:16:70:16:00:b3:5c:76:6d:8d:37: 4e:2a:55:f6:15:b9:ff:e0:8e:20:83:ae:d4:ce:2c: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:12:A1:51:66:0A:C1:B2:C7:9C:75:35:38:5F:BB:2D:8F:6A:84:8A X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cb:c2:6c:25:80:51:82:9a:e4:7d:79:b7:46:55:73:e9:5f: d7:38:15:d4:5d:3c:2c:e7:c2:52:f0:45:00:1d:c9:d7:4e:d2: 34:30:5d:d5:cb:03:43:d8:1e:ae:db:c4:ca:94:54:05:2f:46: 39:7c:63:eb:e9:16:33:d1:c4:39:26:38:85:ff:84:32:aa:75: 41:a9:85:c5:66:1d:bf:1d:c4:66:3c:9d:1b:fc:69:2c:7b:a3: 14:f2:59:f2:42:8e:93:a4:d9:8c:d0:1b:cd:3a:0b:35:a4:78: 59:e9:2c:6f:6c:e9:ca:1f:f1:e4:c6:94:20:69:22:dc:a4:7e: a0:b7:8b:58:86:98:89:8c:0a:dd:f9:be:e0:59:b1:41:34:3d: 24:0c:58:c4:a5:6e:4f:80:26:5a:46:7e:46:65:4f:04:0b:26: a7:ec:50:e7:91:7c:71:ae:96:f8:19:0d:7a:46:e4:a2:48:2d: 94:36:6d:ec:7d:4b:b0:43:2b:a0:88:1f:f3:94:0d:41:0b:78: 58:ef:e5:6c:3d:69:bc:98:f7:9f:74:ac:0a:db:73:de:74:d3: 16:05:58:99:64:94:cb:12:b9:79:3a:b8:c6:6d:52:fc:d3:fb: 2f:c3:2d:a8:11:00:2c:d7:d0:a2:9f:fc:37:c9:1d:4d:f5:ce: 45:f8:69:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUda1CWr5vD3PdCWDGweCNElOSHVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTA5MDQxOTA2NDFaFw0yNTA5MDcyMTUzNDFaMDMxMTAvBgNV BAMTKDM2MTJBMTUxNjYwQUMxQjJDNzlDNzUzNTM4NUZCQjJEOEY2QTg0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohuKkAIoGQT3LFXKrac/mTlmC c038OLM4Ve60UlBQ5rZ+7wfdhPBAyQFbH6Ugyy1Ze0WjeJExRbvzOnHJpDJX21Np RdRUWynaiKTjfEq8M6nj34pOUwKXCmWMgDgQcdOCTKpKM3tkU6BLigavIy5M0yLE pevTbMHhTCmsUfVzPiLxB5XyVMyAy0/vcbrinhgI33bpY3FqJ0bZPRdgpNqJIGVL GuvuLL7vKGAq7l9zwdjADWMyTPXaRjAW85idR7zeiPU0g2swUy0PntnFH7pLQImr IYhfcJcgtQmlQoZrSTnFDGdaFnAWALNcdm2NN04qVfYVuf/gjiCDrtTOLHv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNhKhUWYKwbLHnHU1OF+7LY9qhIowHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDLwmwlgFGCmuR9ebdGVXPpX9c4FdRdPCzn wlLwRQAdyddO0jQwXdXLA0PYHq7bxMqUVAUvRjl8Y+vpFjPRxDkmOIX/hDKqdUGp hcVmHb8dxGY8nRv8aSx7oxTyWfJCjpOk2YzQG806CzWkeFnpLG9s6cof8eTGlCBp ItykfqC3i1iGmImMCt35vuBZsUE0PSQMWMSlbk+AJlpGfkZlTwQLJqfsUOeRfHGu lvgZDXpG5KJILZQ2bex9S7BDK6CIH/OUDUELeFjv5Ww9abyY9590rArbc9500xYF WJlklMsSuXk6uMZtUvzT+y/DLagRACzX0KKf/DfJHU31zkX4afU= -----END CERTIFICATE-----Generated at Fri Sep 5 12:13:56 2025 by rpki-client