$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft File: 11B369E1CF41EB03E35A2711FF1FE0F687242467.mft (raw, json) Hash identifier: /23/0yvUrr1DVuIz/nBJC7ZKHJgj6RW3uV797JY5qpI= Subject key identifier: 8A:8C:C7:48:E7:34:5A:42:C1:C2:2B:CA:8E:42:6F:0D:32:4C:0C:AA Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Certificate serial: 59AEBAB7F618106E092389896A81B76AD44C6CE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft Manifest number: 0273 Signing time: Wed 25 Mar 2026 17:50:01 +0000 Manifest this update: Wed 25 Mar 2026 17:45:01 +0000 Manifest next update: Sun 29 Mar 2026 01:09:01 +0000 Files and hashes: 1: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: nafgZnAsM444PZpRUGJ2jDID9gOrDEkaukgW0FDatiE=) 2: 11B369E1CF41EB03E35A2711FF1FE0F687242467.crl (hash: AMa0CjYrmsG72TYqk1yL4StrRLPxb/APA0rRtol8xo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ae:ba:b7:f6:18:10:6e:09:23:89:89:6a:81:b7:6a:d4:4c:6c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Validity Not Before: Mar 25 17:45:01 2026 GMT Not After : Mar 29 01:09:01 2026 GMT Subject: CN=8A8CC748E7345A42C1C22BCA8E426F0D324C0CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:c0:a1:f8:e0:f3:60:c6:34:f3:04:3b:2d: 5b:da:18:d9:ac:77:ab:ea:94:26:21:c4:9b:6e:4c: 3f:0a:e2:77:fc:c2:cb:be:5e:b6:59:33:fb:bb:22: 46:0d:27:de:d8:65:0d:7f:f3:b3:00:e1:83:1d:50: 9a:62:f1:40:75:3a:84:7d:0b:b1:a1:e6:5e:a6:50: 64:f9:5b:7c:c9:71:ef:d0:11:58:9a:25:19:2f:1a: 46:fa:98:74:df:62:fc:5a:44:cb:6d:04:95:b1:8b: 70:45:1e:96:da:96:80:86:08:0e:93:68:e6:a7:fd: d9:8a:13:7e:ca:d7:b7:d0:23:3c:cd:82:3b:5f:91: 68:79:a1:9d:9e:c0:64:a7:90:1b:61:0a:80:6d:a0: bf:b4:68:e4:a8:ad:13:05:f5:fb:ee:ca:fb:49:1c: 86:50:0f:15:05:75:4a:7f:b2:0f:3b:f0:ef:e1:6b: 2a:da:d7:e8:11:7d:fb:c1:31:fc:15:97:85:7e:11: ed:f5:ab:45:d0:7d:18:d4:29:19:78:88:bd:ba:c0: b5:5d:23:7e:c0:b7:a8:dd:2a:1c:b1:6d:3a:af:a3: 67:c0:ea:54:7e:bd:d4:1f:2c:02:ec:07:f4:af:f9: ae:53:d3:b6:99:e3:e9:88:ab:3a:5f:57:a3:86:0e: 16:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8C:C7:48:E7:34:5A:42:C1:C2:2B:CA:8E:42:6F:0D:32:4C:0C:AA X509v3 Authority Key Identifier: keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2f:0d:f5:6c:3c:e1:b9:ab:04:10:34:fe:ab:b7:38:9c:7b: d3:30:3e:49:bf:af:46:40:88:ab:4f:29:11:70:f2:a1:9a:3b: bd:f6:e3:4a:cf:00:e3:8f:4f:41:e3:a8:2f:c1:28:fc:89:a2: 04:13:ad:f1:49:a0:d8:5e:26:77:e0:a0:7b:d3:a6:f9:fd:60: 87:9d:e9:85:3b:4f:4e:d9:ab:ee:4d:62:fd:c7:5d:5a:c7:a6: fc:16:31:04:c3:22:8f:cc:8d:94:5b:c1:0f:ec:1a:44:7d:ea: fb:da:63:cf:55:0d:c1:cb:fa:5c:0a:58:f6:be:fb:96:b4:03: 1c:25:0f:e0:17:b5:cc:61:46:aa:22:12:0e:36:84:20:6d:c9: 7f:3a:b2:7b:db:dd:fd:9f:cd:51:4b:ba:ef:a4:ce:6a:c1:2d: 8c:31:03:f5:9e:96:85:8b:8f:78:86:48:e3:1a:03:9e:e6:72: e8:c1:b3:22:c3:72:9d:ef:6b:d2:8f:08:c4:50:e6:ba:20:6b: b1:18:ab:60:15:fc:2f:c3:d4:03:66:67:8f:23:ca:07:39:c7: d7:3a:9c:26:a3:ad:12:e5:fa:3f:e0:3a:0d:6f:e7:18:1f:c8: b3:93:7a:b9:fe:44:9b:9e:a0:03:52:5b:a8:6b:c1:c2:b1:82: 04:b2:4c:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWa66t/YYEG4JI4mJaoG3atRMbOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4 NzI0MjQ2NzAeFw0yNjAzMjUxNzQ1MDFaFw0yNjAzMjkwMTA5MDFaMDMxMTAvBgNV BAMTKDhBOENDNzQ4RTczNDVBNDJDMUMyMkJDQThFNDI2RjBEMzI0QzBDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcS8Ch+ODzYMY08wQ7LVvaGNms d6vqlCYhxJtuTD8K4nf8wsu+XrZZM/u7IkYNJ97YZQ1/87MA4YMdUJpi8UB1OoR9 C7Gh5l6mUGT5W3zJce/QEViaJRkvGkb6mHTfYvxaRMttBJWxi3BFHpbaloCGCA6T aOan/dmKE37K17fQIzzNgjtfkWh5oZ2ewGSnkBthCoBtoL+0aOSorRMF9fvuyvtJ HIZQDxUFdUp/sg878O/hayra1+gRffvBMfwVl4V+Ee31q0XQfRjUKRl4iL26wLVd I37At6jdKhyxbTqvo2fA6lR+vdQfLALsB/Sv+a5T07aZ4+mIqzpfV6OGDhYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiozHSOc0WkLBwivKjkJvDTJMDKowHwYDVR0j BBgwFoAUEbNp4c9B6wPjWicR/x/g9ockJGcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA5NjJmNy02N2VhLTQ3MGUtYTUyNC03YWUxZTQwZmQ1YjcvMC8xMUIzNjlFMUNG NDFFQjAzRTM1QTI3MTFGRjFGRTBGNjg3MjQyNDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4NzI0 MjQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUw RjY4NzI0MjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4vDfVsPOG5qwQQNP6rtzice9MwPkm/r0ZA iKtPKRFw8qGaO73240rPAOOPT0HjqC/BKPyJogQTrfFJoNheJnfgoHvTpvn9YIed 6YU7T07Zq+5NYv3HXVrHpvwWMQTDIo/MjZRbwQ/sGkR96vvaY89VDcHL+lwKWPa+ +5a0AxwlD+AXtcxhRqoiEg42hCBtyX86snvb3f2fzVFLuu+kzmrBLYwxA/WeloWL j3iGSOMaA57mcujBsyLDcp3va9KPCMRQ5roga7EYq2AV/C/D1ANmZ48jygc5x9c6 nCajrRLl+j/gOg1v5xgfyLOTern+RJueoANSW6hrwcKxggSyTI8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:25 2026 by rpki-client