$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: jnauTsdpps2JZ4VkdSMCcSVZU/so9qscolWRR5PlMaw= Subject key identifier: 91:9E:0F:88:7A:32:FA:5C:AA:B3:F9:26:D7:4B:A6:7C:81:58:55:21 Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 6CDF9F8DC388EA98C4B5DAE72DD9C34560698253 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 0484 Signing time: Mon 20 Oct 2025 13:40:38 +0000 Manifest this update: Mon 20 Oct 2025 13:35:38 +0000 Manifest next update: Fri 24 Oct 2025 01:22:38 +0000 Files and hashes: 1: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=) 2: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: NkQ9eWcHVREh5sfesIOFWzh9yqFj5sw8tkhu4ZxcoSQ=) 3: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: QjlT+HARItX/XaH5MBOWloj2Es9xl+7R8dxDmhnj0mY=) 4: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: P41PFR8M2pkKOmCdUu6l5sHUIprRbj+Eb/jozno97jU=) 5: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: LTZWN20UeEpbk3/6yOOjk81arYUEDuYxFg/WlS2mmEI=) 6: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 9ga4Dz2S1yZEHVR/bNJu6K+f7jqkSZliYiYDlhJqlSc=) 7: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: /De9PraBKQ9VNMLW73eKsHyTdK5CxUO/Ms23Vqs0bog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:df:9f:8d:c3:88:ea:98:c4:b5:da:e7:2d:d9:c3:45:60:69:82:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: Oct 20 13:35:38 2025 GMT Not After : Oct 24 01:22:38 2025 GMT Subject: CN=919E0F887A32FA5CAAB3F926D74BA67C81585521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:cb:2e:d0:2d:0d:f6:21:fd:76:cb:bf:85: d3:ed:0d:22:65:a5:cd:34:cc:c4:4d:2b:db:4c:c8: 7f:06:ce:64:22:3c:4e:59:e5:66:ad:2b:a4:95:00: 27:e2:d4:45:85:2a:d7:dc:85:f7:7b:7a:a4:27:62: 77:a2:e2:68:db:4f:07:a3:3d:7d:77:6a:15:b2:ce: 12:32:63:5d:e7:85:2d:6f:9e:4e:e5:b3:0d:30:fa: 44:3a:aa:f9:5e:06:8b:71:a0:cf:fa:72:e7:ff:7e: 39:0f:f0:6a:a7:c6:e6:00:75:bf:a0:bc:7d:0f:c3: 36:a7:f3:a0:c4:2c:23:42:13:83:98:83:e2:44:ce: ec:06:fb:43:8a:03:45:3d:10:c6:57:cd:8c:a1:e0: 44:12:86:b6:b8:81:9d:de:d1:82:4d:43:cc:cc:ce: 75:ed:cd:d7:c2:82:21:d7:77:13:9a:9a:29:63:41: 41:b0:fc:bf:69:87:e3:95:08:c2:03:a9:68:99:7f: 34:79:ad:c4:a0:ef:a7:6e:8a:bb:74:ca:1c:1a:c2: c1:b5:e3:b0:b8:65:c0:95:d2:17:9c:47:75:7f:2f: 32:27:b7:5e:3d:59:e2:65:3c:de:95:a3:1f:1a:3a: 54:47:49:66:16:9b:52:77:29:d6:fc:32:e8:5d:65: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:0F:88:7A:32:FA:5C:AA:B3:F9:26:D7:4B:A6:7C:81:58:55:21 X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:45:e0:f9:77:d6:5e:49:3e:93:73:a9:1e:11:a3:bb:f1:76: ce:b7:3c:0a:a8:d5:76:98:10:89:a2:16:4a:b1:0d:7c:c1:8f: 71:6a:4e:b7:5f:24:b0:85:dc:55:8b:c4:9e:c6:ff:cd:75:d2: cd:06:4d:a9:00:d1:6a:50:3a:20:4e:fa:4d:a5:3e:dc:05:ee: 27:fc:f6:4a:10:d8:f2:1b:f9:1c:b2:c9:7f:7e:bc:01:1a:50: 96:36:78:5d:eb:d1:8f:72:d8:c8:4b:aa:ee:65:30:9b:38:74: 1d:21:f3:d9:eb:42:bc:e7:31:f3:af:90:c4:7a:d6:63:ee:7c: de:f8:4f:dd:67:bf:25:24:41:66:b6:14:21:ce:1f:fc:d8:20: c7:35:99:b1:7a:b0:9c:27:9a:b8:0f:ad:2b:b4:77:cd:4d:7e: 26:19:a5:b0:02:1c:df:c8:eb:ed:04:ae:fe:29:22:f9:70:6e: 39:3f:0f:5e:5b:b7:1c:85:86:77:06:dd:c7:46:fe:a4:1c:99: c7:1d:f8:69:bd:93:3e:57:5c:cc:08:0c:1e:e1:f1:94:f9:56: f1:7f:81:10:74:56:3d:38:cb:7f:cf:32:22:ce:df:14:a9:ec: de:d0:ab:a7:41:e8:eb:d2:d3:37:f5:cb:89:81:ce:20:a2:c1: 00:c1:34:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbN+fjcOI6pjEtdrnLdnDRWBpglMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNTEwMjAxMzM1MzhaFw0yNTEwMjQwMTIyMzhaMDMxMTAvBgNV BAMTKDkxOUUwRjg4N0EzMkZBNUNBQUIzRjkyNkQ3NEJBNjdDODE1ODU1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCMsu0C0N9iH9dsu/hdPtDSJl pc00zMRNK9tMyH8GzmQiPE5Z5WatK6SVACfi1EWFKtfchfd7eqQnYnei4mjbTwej PX13ahWyzhIyY13nhS1vnk7lsw0w+kQ6qvleBotxoM/6cuf/fjkP8GqnxuYAdb+g vH0Pwzan86DELCNCE4OYg+JEzuwG+0OKA0U9EMZXzYyh4EQShra4gZ3e0YJNQ8zM znXtzdfCgiHXdxOamiljQUGw/L9ph+OVCMIDqWiZfzR5rcSg76duirt0yhwawsG1 47C4ZcCV0hecR3V/LzInt149WeJlPN6Vox8aOlRHSWYWm1J3Kdb8MuhdZcvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkZ4PiHoy+lyqs/km10umfIFYVSEwHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVF4Pl31l5JPpNzqR4Ro7vxds63PAqo1XaY EImiFkqxDXzBj3FqTrdfJLCF3FWLxJ7G/8110s0GTakA0WpQOiBO+k2lPtwF7if8 9koQ2PIb+RyyyX9+vAEaUJY2eF3r0Y9y2MhLqu5lMJs4dB0h89nrQrznMfOvkMR6 1mPufN74T91nvyUkQWa2FCHOH/zYIMc1mbF6sJwnmrgPrSu0d81NfiYZpbACHN/I 6+0Erv4pIvlwbjk/D15btxyFhncG3cdG/qQcmccd+Gm9kz5XXMwIDB7h8ZT5VvF/ gRB0Vj04y3/PMiLO3xSp7N7Qq6dB6OvS0zf1y4mBziCiwQDBNFA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:22 2025 by rpki-client