$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: NKkM9/KW0Ep2gmCXPvWeubDFmYA1rQL7w+BBTu873KU= Subject key identifier: 53:78:16:AB:62:BE:A7:98:AB:F2:08:2F:BD:84:C3:E6:91:E5:92:7B Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 32C810E6574481FDAC246E55D25C2F19153100BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 0469 Signing time: Fri 22 Aug 2025 19:01:15 +0000 Manifest this update: Fri 22 Aug 2025 18:56:15 +0000 Manifest next update: Mon 25 Aug 2025 22:52:15 +0000 Files and hashes: 1: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=) 2: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: /De9PraBKQ9VNMLW73eKsHyTdK5CxUO/Ms23Vqs0bog=) 3: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: pbptzbuOalIu4g6EBTk1Hf5iY+nFXqv+7IJZhSllhjA=) 4: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: RLjDgS7MtF3tPcpoTSb39JP1PHPvNJRDVIHMYjPpYko=) 5: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: a4x9EBaX7dSSx1aLuOw3Xhl8HrxJYGDZahgVe/Loub4=) 6: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: jZ2VCixJokCjVkqlhzv/JzHDhAkV+oo6GioQBGOSoX4=) 7: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: Riw6dcMVfaMH7YcdR5/8rwW9Lvi4KEfM0QRQa87aMxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c8:10:e6:57:44:81:fd:ac:24:6e:55:d2:5c:2f:19:15:31:00:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: Aug 22 18:56:15 2025 GMT Not After : Aug 25 22:52:15 2025 GMT Subject: CN=537816AB62BEA798ABF2082FBD84C3E691E5927B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:fd:54:70:46:c3:e6:bf:18:2b:4e:b3:0d: 3b:ab:6e:d7:56:3c:5f:5e:96:32:d6:87:2b:98:cf: a8:2a:42:3d:8d:6e:7d:1d:ea:36:f1:ab:89:1b:3c: 0b:26:0b:38:e1:d0:33:21:ed:b6:41:11:3b:01:9b: 08:cd:9f:42:61:15:82:9e:c2:49:fc:62:9c:02:33: 71:97:f6:e8:77:16:ac:84:ca:98:f1:fb:b7:d9:be: 75:36:ba:b3:0f:af:e6:e3:78:eb:e5:ee:f3:99:31: 55:43:31:bc:4b:8e:88:a4:11:6b:99:64:92:17:da: 4d:f1:a4:08:10:7d:f9:3d:bd:e8:7f:7f:a1:ec:cd: 27:fd:9b:81:5b:11:9c:11:e3:a0:3f:20:50:6e:2e: a2:92:bb:9b:7f:47:43:0b:34:a6:65:70:47:b8:ae: 05:ef:0a:60:00:23:ca:39:9f:0f:1e:71:da:35:32: 8e:fe:6b:5c:13:b1:86:08:10:69:16:f4:a6:f6:f2: 0f:35:5f:89:ea:de:dd:4b:ee:de:d5:25:d1:4d:08: 19:f5:75:b8:19:29:65:7f:ee:3b:90:b8:7b:51:6b: ed:7b:c4:03:d8:b8:39:cd:e6:09:bb:4d:33:53:e1: 91:92:27:a9:4f:46:23:fb:42:03:1a:bd:18:43:2a: 58:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:16:AB:62:BE:A7:98:AB:F2:08:2F:BD:84:C3:E6:91:E5:92:7B X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:dd:d1:b6:39:98:11:98:8a:51:79:c7:1f:c6:ba:f3:e5:9d: 9b:59:db:d0:26:41:bf:9f:92:20:44:57:9e:41:cc:c4:fb:fd: f2:9c:fb:bc:12:16:10:ef:8b:a8:8d:ce:bf:b1:1a:3c:70:59: 23:65:5c:71:b3:1c:aa:cb:d9:dd:30:c7:ab:3e:f7:06:d7:85: 66:81:7b:41:d9:b2:09:0a:f2:9a:d7:b2:a4:7d:8a:b5:ea:35: 35:07:44:98:3b:07:ed:4b:bb:58:43:d8:f1:ba:50:39:c2:b9: 4b:36:3f:ce:49:af:2a:19:ed:b9:84:0b:98:d8:aa:b6:3a:b7: 1e:3a:34:69:82:d7:6a:6c:f4:3e:10:ca:8c:8e:77:29:62:07: 92:99:f3:22:c2:29:93:7e:0e:61:54:fb:8b:f4:34:6a:08:33: 8b:86:48:8b:f5:0f:d9:f1:e6:e7:b1:99:55:2e:9d:81:61:5c: ea:4a:99:b0:2d:3e:d9:4e:0f:95:84:7c:23:34:82:ce:5d:9e: c8:84:9e:4c:c2:4c:3d:a7:ef:2e:50:8e:3d:11:74:e4:28:79: f8:d5:b7:bb:6b:47:19:5f:98:53:8e:4d:25:4d:c5:f6:76:48: 39:80:f7:21:1e:1d:f2:20:4c:06:50:17:d1:52:50:5e:bf:86: fa:1f:15:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsgQ5ldEgf2sJG5V0lwvGRUxALwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNTA4MjIxODU2MTVaFw0yNTA4MjUyMjUyMTVaMDMxMTAvBgNV BAMTKDUzNzgxNkFCNjJCRUE3OThBQkYyMDgyRkJEODRDM0U2OTFFNTkyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vf1UcEbD5r8YK06zDTurbtdW PF9eljLWhyuYz6gqQj2Nbn0d6jbxq4kbPAsmCzjh0DMh7bZBETsBmwjNn0JhFYKe wkn8YpwCM3GX9uh3FqyEypjx+7fZvnU2urMPr+bjeOvl7vOZMVVDMbxLjoikEWuZ ZJIX2k3xpAgQffk9veh/f6HszSf9m4FbEZwR46A/IFBuLqKSu5t/R0MLNKZlcEe4 rgXvCmAAI8o5nw8ecdo1Mo7+a1wTsYYIEGkW9Kb28g81X4nq3t1L7t7VJdFNCBn1 dbgZKWV/7juQuHtRa+17xAPYuDnN5gm7TTNT4ZGSJ6lPRiP7QgMavRhDKlg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU3gWq2K+p5ir8ggvvYTD5pHlknswHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7d0bY5mBGYilF5xx/GuvPlnZtZ29AmQb+f kiBEV55BzMT7/fKc+7wSFhDvi6iNzr+xGjxwWSNlXHGzHKrL2d0wx6s+9wbXhWaB e0HZsgkK8prXsqR9irXqNTUHRJg7B+1Lu1hD2PG6UDnCuUs2P85JryoZ7bmEC5jY qrY6tx46NGmC12ps9D4QyoyOdyliB5KZ8yLCKZN+DmFU+4v0NGoIM4uGSIv1D9nx 5uexmVUunYFhXOpKmbAtPtlOD5WEfCM0gs5dnsiEnkzCTD2n7y5Qjj0RdOQoefjV t7trRxlfmFOOTSVNxfZ2SDmA9yEeHfIgTAZQF9FSUF6/hvofFTE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:52 2025 by rpki-client