$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft File: 11B369E1CF41EB03E35A2711FF1FE0F687242467.mft (raw, json) Hash identifier: eBCDveerWAFzlZ+q05bM7yCiQraGOoFWcoqdnaQo0Ik= Subject key identifier: BA:4A:D4:FA:97:12:AF:4A:51:0F:5E:CD:62:1E:AF:5F:49:DA:C8:BE Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Certificate serial: 3D64835F688D61E08C46260B7890D22BD8328D46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft Manifest number: 022D Signing time: Sun 19 Oct 2025 08:30:00 +0000 Manifest this update: Sun 19 Oct 2025 08:25:00 +0000 Manifest next update: Wed 22 Oct 2025 12:21:00 +0000 Files and hashes: 1: 11B369E1CF41EB03E35A2711FF1FE0F687242467.crl (hash: RJ7kfW3hvcm12GW/bFcyMWTwmtt+Hzaegm3qbJh9WZI=) 2: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: nafgZnAsM444PZpRUGJ2jDID9gOrDEkaukgW0FDatiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:64:83:5f:68:8d:61:e0:8c:46:26:0b:78:90:d2:2b:d8:32:8d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Validity Not Before: Oct 19 08:25:00 2025 GMT Not After : Oct 22 12:21:00 2025 GMT Subject: CN=BA4AD4FA9712AF4A510F5ECD621EAF5F49DAC8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:67:49:ac:8c:90:42:d7:77:5d:51:03:7c: 30:21:e5:d1:00:da:fc:b2:d5:a7:27:9d:92:38:88: 9f:e3:a5:5b:77:c3:b1:be:f5:24:e1:33:a5:ed:48: d5:5b:d1:26:36:a2:e3:62:96:35:fc:d9:5e:33:af: e8:82:da:85:5a:3d:d0:f6:59:af:c4:bf:e6:a4:1f: c9:f4:9a:67:28:bc:3a:24:85:bc:c2:3e:0b:3b:8b: da:da:ed:6f:02:5e:de:8f:bc:fe:35:eb:cb:6d:2f: 46:46:16:31:9e:3c:b9:64:7f:ea:e9:1a:22:b5:35: 6d:05:93:b6:8e:df:54:0c:41:70:3c:78:62:4d:54: 95:a4:e0:3b:3a:76:2c:25:ed:68:35:b3:02:79:2d: 32:d2:e5:af:1f:2f:5b:03:39:55:e5:22:64:70:c2: 4f:c0:54:7c:f6:db:14:6f:6f:86:43:9d:a9:32:7e: 7c:e3:85:d7:77:a8:a3:5d:d4:c4:1e:30:37:6b:b2: fc:3f:ea:db:81:c4:6d:2c:91:01:2c:bb:d9:cb:fb: 66:e0:a0:a4:3e:6b:ff:6e:0f:fe:46:08:a5:c7:be: 3f:5a:76:cc:87:56:6a:dc:0a:bf:57:53:dc:ba:d6: e2:06:1e:0b:71:01:8e:99:9f:3b:10:ba:99:c6:ff: 9f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4A:D4:FA:97:12:AF:4A:51:0F:5E:CD:62:1E:AF:5F:49:DA:C8:BE X509v3 Authority Key Identifier: keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4d:74:d6:2d:ca:64:35:9e:5e:15:52:cf:d6:d1:85:94:0a: 0f:ce:92:8b:f6:8c:08:f5:87:eb:29:d1:c4:79:f1:e1:7f:59: f9:0f:40:87:32:f0:79:8d:7b:d7:2f:15:73:df:e6:52:21:94: c5:44:9e:08:97:e5:f9:ff:83:12:bb:c8:6c:3e:f6:99:53:65: 75:ca:ac:55:c2:d7:9f:c3:fd:ea:d3:68:0a:ce:28:55:a1:e8: 91:0b:b2:23:66:e1:38:f1:50:a9:5b:0f:e5:7b:d0:96:cf:07: cd:f2:6c:5f:cc:80:a0:c7:7f:35:63:e9:51:db:73:d1:fc:9b: 2d:40:50:db:a1:ac:71:df:a9:d3:6b:35:e2:9d:f9:d7:49:ef: 2e:4c:9e:fa:51:a8:f3:83:03:73:82:4a:f1:a1:cf:45:1d:9f: 74:98:1e:57:b6:d4:d3:37:ce:40:86:ad:8d:bb:f7:3b:35:e0: 53:20:d9:e1:f0:19:aa:26:75:65:91:e3:b2:56:ea:76:73:35: a6:72:53:4f:2d:f8:0a:44:73:6e:c9:6c:34:4e:dd:b7:15:91: a9:4d:e0:8b:e6:be:ac:a7:0c:aa:7f:de:ee:42:ed:ea:a1:07: 72:3f:e3:2f:ab:a5:3c:61:37:95:0c:5b:26:89:1e:fc:5c:ad: 19:16:d2:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWSDX2iNYeCMRiYLeJDSK9gyjUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4 NzI0MjQ2NzAeFw0yNTEwMTkwODI1MDBaFw0yNTEwMjIxMjIxMDBaMDMxMTAvBgNV BAMTKEJBNEFENEZBOTcxMkFGNEE1MTBGNUVDRDYyMUVBRjVGNDlEQUM4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbW2dJrIyQQtd3XVEDfDAh5dEA 2vyy1acnnZI4iJ/jpVt3w7G+9SThM6XtSNVb0SY2ouNiljX82V4zr+iC2oVaPdD2 Wa/Ev+akH8n0mmcovDokhbzCPgs7i9ra7W8CXt6PvP4168ttL0ZGFjGePLlkf+rp GiK1NW0Fk7aO31QMQXA8eGJNVJWk4Ds6diwl7Wg1swJ5LTLS5a8fL1sDOVXlImRw wk/AVHz22xRvb4ZDnakyfnzjhdd3qKNd1MQeMDdrsvw/6tuBxG0skQEsu9nL+2bg oKQ+a/9uD/5GCKXHvj9adsyHVmrcCr9XU9y61uIGHgtxAY6ZnzsQupnG/59PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUukrU+pcSr0pRD17NYh6vX0nayL4wHwYDVR0j BBgwFoAUEbNp4c9B6wPjWicR/x/g9ockJGcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA5NjJmNy02N2VhLTQ3MGUtYTUyNC03YWUxZTQwZmQ1YjcvMC8xMUIzNjlFMUNG NDFFQjAzRTM1QTI3MTFGRjFGRTBGNjg3MjQyNDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4NzI0 MjQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUw RjY4NzI0MjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxNdNYtymQ1nl4VUs/W0YWUCg/Okov2jAj1 h+sp0cR58eF/WfkPQIcy8HmNe9cvFXPf5lIhlMVEngiX5fn/gxK7yGw+9plTZXXK rFXC15/D/erTaArOKFWh6JELsiNm4TjxUKlbD+V70JbPB83ybF/MgKDHfzVj6VHb c9H8my1AUNuhrHHfqdNrNeKd+ddJ7y5MnvpRqPODA3OCSvGhz0Udn3SYHle21NM3 zkCGrY279zs14FMg2eHwGaomdWWR47JW6nZzNaZyU08t+ApEc27JbDRO3bcVkalN 4IvmvqynDKp/3u5C7eqhB3I/4y+rpTxhN5UMWyaJHvxcrRkW0p8= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:13 2025 by rpki-client