$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft File: 11B369E1CF41EB03E35A2711FF1FE0F687242467.mft (raw, json) Hash identifier: rmcy4d6c+DGDwUfKVATTMzdEbZr9b34YxHX6hC4hAtA= Subject key identifier: 80:E8:70:21:F7:7D:E6:67:1F:B5:D3:4B:2E:41:DA:AF:DC:82:AA:76 Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Certificate serial: 1901D28B65E0B2894DF4B2A6BAC68035F946DABF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft Manifest number: 01E4 Signing time: Fri 09 May 2025 05:10:00 +0000 Manifest this update: Fri 09 May 2025 05:05:00 +0000 Manifest next update: Mon 12 May 2025 14:36:00 +0000 Files and hashes: 1: 11B369E1CF41EB03E35A2711FF1FE0F687242467.crl (hash: oJXrR6l0WT8U5kuFopDikwOhWPVJ+hNZ6QHTXViRSAo=) 2: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: n2629TM2Mi+u3aQKLNFBU1bgTuQovVtVqjfx0Z7/fDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:01:d2:8b:65:e0:b2:89:4d:f4:b2:a6:ba:c6:80:35:f9:46:da:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Validity Not Before: May 9 05:05:00 2025 GMT Not After : May 12 14:36:00 2025 GMT Subject: CN=80E87021F77DE6671FB5D34B2E41DAAFDC82AA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:4d:b6:7a:40:63:1d:1f:1b:6a:97:15:6b: be:18:0e:3e:3e:97:35:03:59:ce:8b:b8:77:f8:46: 20:4a:bf:de:88:1d:ed:63:c6:4e:47:53:1a:15:68: 89:30:ab:45:1f:a2:77:7b:6c:02:33:03:26:7b:ea: 95:60:b8:fe:07:f2:65:6b:3e:f2:9b:19:12:d1:92: 7c:c5:69:76:6a:3a:ee:1c:dd:9e:4e:0a:4b:f6:1d: cd:83:51:df:09:32:27:0f:0d:97:47:7b:5d:bd:b2: b2:2e:bf:aa:2c:16:4e:2e:c2:ab:5a:b0:ff:b0:e2: d2:64:51:01:f1:2f:ac:fb:d3:28:f7:fb:82:5e:43: b9:86:ba:28:43:4d:1a:b4:68:19:08:14:d0:64:64: e2:a9:04:d0:97:36:be:18:f5:18:be:90:cb:68:1a: 29:32:12:58:30:fc:4d:f5:73:b6:3f:00:34:77:ff: 35:d5:4b:1e:8c:4a:4b:79:5e:25:d1:ef:b3:0e:38: bd:5a:37:11:fd:8d:7b:1d:3e:8d:b2:84:fc:5f:0c: 13:62:fc:44:32:e4:32:d9:6e:71:5f:23:6a:14:c7: 5b:94:5e:93:64:0d:9f:a0:ea:a7:ed:67:6f:48:37: 2d:ef:1b:bf:48:42:e1:73:d1:b6:70:79:87:fa:9b: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E8:70:21:F7:7D:E6:67:1F:B5:D3:4B:2E:41:DA:AF:DC:82:AA:76 X509v3 Authority Key Identifier: keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:42:d0:02:fc:de:a8:7d:59:6e:8f:4e:09:ef:a9:66:ea:40: 69:49:8f:ca:d3:d9:74:2e:ff:8d:64:92:fe:12:ad:94:11:9a: d0:2e:9c:0f:4e:d5:56:81:33:8a:32:59:36:c6:34:f7:e7:4a: b9:63:53:c0:a1:46:90:fe:8f:8f:9b:0c:28:a6:cd:7a:57:e7: 1a:89:03:81:3c:c0:93:97:20:19:39:cb:73:79:90:45:4d:e0: 77:b3:66:34:06:01:17:5b:8f:d3:cb:ba:99:6a:d9:fb:7e:ee: bc:da:4f:39:a2:11:99:f1:c6:b8:22:64:1d:64:5e:84:1c:76: 3f:05:93:6d:2a:0f:c2:22:d3:8b:49:cb:a8:e0:0d:0c:bf:aa: eb:42:c8:bf:a3:c0:60:8f:a3:e2:ec:c4:48:4b:cc:ca:7c:84: 71:52:bd:ca:dd:13:cd:13:ae:c6:a5:27:47:0d:39:55:30:ab: d1:a2:90:7b:1d:52:61:c3:35:c4:77:cd:7e:84:33:3a:dd:bf: 94:95:c5:31:8f:7e:2e:3d:b4:97:20:7c:a3:de:2f:44:19:fe: 96:6c:80:12:46:74:8e:ec:8a:61:90:1d:5f:c1:dc:b7:af:9a: f2:11:ca:3d:c9:0e:80:2f:5b:7c:00:a2:eb:f2:05:a8:e6:77: 94:e7:e7:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQHSi2XgsolN9LKmusaANflG2r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4 NzI0MjQ2NzAeFw0yNTA1MDkwNTA1MDBaFw0yNTA1MTIxNDM2MDBaMDMxMTAvBgNV BAMTKDgwRTg3MDIxRjc3REU2NjcxRkI1RDM0QjJFNDFEQUFGREM4MkFBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwk22ekBjHR8bapcVa74YDj4+ lzUDWc6LuHf4RiBKv96IHe1jxk5HUxoVaIkwq0Ufond7bAIzAyZ76pVguP4H8mVr PvKbGRLRknzFaXZqOu4c3Z5OCkv2Hc2DUd8JMicPDZdHe129srIuv6osFk4uwqta sP+w4tJkUQHxL6z70yj3+4JeQ7mGuihDTRq0aBkIFNBkZOKpBNCXNr4Y9Ri+kMto GikyElgw/E31c7Y/ADR3/zXVSx6MSkt5XiXR77MOOL1aNxH9jXsdPo2yhPxfDBNi /EQy5DLZbnFfI2oUx1uUXpNkDZ+g6qftZ29INy3vG79IQuFz0bZweYf6m17dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgOhwIfd95mcftdNLLkHar9yCqnYwHwYDVR0j BBgwFoAUEbNp4c9B6wPjWicR/x/g9ockJGcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA5NjJmNy02N2VhLTQ3MGUtYTUyNC03YWUxZTQwZmQ1YjcvMC8xMUIzNjlFMUNG NDFFQjAzRTM1QTI3MTFGRjFGRTBGNjg3MjQyNDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4NzI0 MjQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUw RjY4NzI0MjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpC0AL83qh9WW6PTgnvqWbqQGlJj8rT2XQu /41kkv4SrZQRmtAunA9O1VaBM4oyWTbGNPfnSrljU8ChRpD+j4+bDCimzXpX5xqJ A4E8wJOXIBk5y3N5kEVN4HezZjQGARdbj9PLuplq2ft+7rzaTzmiEZnxxrgiZB1k XoQcdj8Fk20qD8Ii04tJy6jgDQy/qutCyL+jwGCPo+LsxEhLzMp8hHFSvcrdE80T rsalJ0cNOVUwq9GikHsdUmHDNcR3zX6EMzrdv5SVxTGPfi49tJcgfKPeL0QZ/pZs gBJGdI7simGQHV/B3LevmvIRyj3JDoAvW3wAouvyBajmd5Tn5z4= -----END CERTIFICATE-----Generated at Sat May 10 04:57:01 2025 by rpki-client