$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: BJLtzWFFmEOa9t4UvJihOq9BQ9aza9tuvLHvQ46xgDg= Subject key identifier: D6:F4:D3:01:70:2B:FF:AF:94:D3:34:74:22:04:F6:16:CB:19:CF:87 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 51F7262704B7C2B404B313E6532ACA75395C03A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02D6 Signing time: Mon 20 Oct 2025 14:30:48 +0000 Manifest this update: Mon 20 Oct 2025 14:25:48 +0000 Manifest next update: Thu 23 Oct 2025 15:23:48 +0000 Files and hashes: 1: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: +WCBaXjQDRrzD1TLsxySOyErXwpvyAmN0wcbo9il9ek=) 2: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f7:26:27:04:b7:c2:b4:04:b3:13:e6:53:2a:ca:75:39:5c:03:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Oct 20 14:25:48 2025 GMT Not After : Oct 23 15:23:48 2025 GMT Subject: CN=D6F4D301702BFFAF94D334742204F616CB19CF87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:7e:f2:cb:a1:37:94:d5:6c:f2:41:5e:e7: 0a:4a:c1:c5:ab:f0:5f:51:55:c6:f5:d4:8f:b1:71: 2f:37:78:58:22:77:de:43:8a:a2:40:f4:1a:1f:a9: 44:f8:a4:3c:d7:3f:4e:f3:0f:ea:0a:62:31:2c:ed: 82:b0:a8:bc:82:aa:a4:67:bc:2d:c7:d7:9c:ae:a9: 78:cd:64:06:2f:b8:71:15:ef:ab:ff:d5:d3:64:eb: 1c:c7:66:b4:63:39:df:b7:77:09:6e:53:33:32:8e: 42:a4:d0:ba:f2:3e:c1:27:11:b5:b6:1e:6e:8d:e7: b7:9f:29:b3:e6:39:28:8d:03:5b:7a:b2:e6:03:77: a0:bd:3d:42:14:5b:41:0a:7e:21:66:d6:d7:ef:1a: 34:da:6d:30:13:ff:c0:fa:ae:6e:66:b0:f9:69:5a: c9:7f:92:28:a9:cb:39:fc:f3:17:08:51:64:ca:f8: a5:be:d4:8c:64:4f:2a:0d:a8:78:0e:dc:a4:63:cb: fb:a2:15:d2:18:bb:75:44:53:00:98:6d:9c:34:11: ff:fd:00:a5:97:b5:33:bc:0d:7d:dc:80:75:c3:80: 5d:56:69:23:92:48:72:68:0e:0b:36:fc:4f:6f:b3: 18:c9:5a:21:4b:ae:d7:cd:fd:74:2e:c3:d0:91:c2: e7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F4:D3:01:70:2B:FF:AF:94:D3:34:74:22:04:F6:16:CB:19:CF:87 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:56:7a:b4:e0:8b:26:03:bd:80:ee:95:64:b0:c9:0f:ca:2a: 8d:5d:17:c3:34:24:7d:a7:05:68:0f:1d:57:cf:8d:13:33:41: 05:ab:c2:21:0c:40:e0:85:c9:b1:07:76:b1:46:6d:3f:18:35: 26:a6:c2:4b:2f:dc:ef:53:7f:5d:55:38:d6:4c:14:b4:88:75: 16:9d:85:be:f8:98:6b:cf:e8:01:69:74:60:9d:2f:62:b2:88: 15:17:74:68:41:26:7c:b5:ac:33:b6:a7:ff:f9:c6:e8:cc:f0: e6:69:ee:27:47:86:bb:17:d7:f1:b7:77:fd:e6:8a:dc:08:d6: 33:bc:d5:76:c2:0b:06:fd:e3:b4:73:eb:ef:fc:08:fb:7a:55: 06:08:57:97:98:29:3d:f0:6e:27:51:61:fa:6c:fb:28:76:f6: 7c:c8:43:7a:d1:e8:4e:be:cc:2f:ec:2e:68:a6:c6:ee:bc:2e: ca:be:d6:b1:11:72:8f:9f:87:9b:8d:75:bc:ac:5d:20:35:3f: 19:1e:19:5f:81:41:89:2d:d0:8c:52:0b:66:76:7e:8c:dd:43: 68:d3:f5:0b:17:5a:50:6a:56:0b:ae:33:d5:a7:fc:92:3d:3d: 40:ad:62:c3:31:f7:71:4c:e9:70:37:90:3a:2b:7b:35:c4:60: 48:fc:6a:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfcmJwS3wrQEsxPmUyrKdTlcA6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTEwMjAxNDI1NDhaFw0yNTEwMjMxNTIzNDhaMDMxMTAvBgNV BAMTKEQ2RjREMzAxNzAyQkZGQUY5NEQzMzQ3NDIyMDRGNjE2Q0IxOUNGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91X7yy6E3lNVs8kFe5wpKwcWr 8F9RVcb11I+xcS83eFgid95DiqJA9BofqUT4pDzXP07zD+oKYjEs7YKwqLyCqqRn vC3H15yuqXjNZAYvuHEV76v/1dNk6xzHZrRjOd+3dwluUzMyjkKk0LryPsEnEbW2 Hm6N57efKbPmOSiNA1t6suYDd6C9PUIUW0EKfiFm1tfvGjTabTAT/8D6rm5msPlp Wsl/kiipyzn88xcIUWTK+KW+1IxkTyoNqHgO3KRjy/uiFdIYu3VEUwCYbZw0Ef/9 AKWXtTO8DX3cgHXDgF1WaSOSSHJoDgs2/E9vsxjJWiFLrtfN/XQuw9CRwue5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1vTTAXAr/6+U0zR0IgT2FssZz4cwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtWerTgiyYDvYDulWSwyQ/KKo1dF8M0JH2n BWgPHVfPjRMzQQWrwiEMQOCFybEHdrFGbT8YNSamwksv3O9Tf11VONZMFLSIdRad hb74mGvP6AFpdGCdL2KyiBUXdGhBJny1rDO2p//5xujM8OZp7idHhrsX1/G3d/3m itwI1jO81XbCCwb947Rz6+/8CPt6VQYIV5eYKT3wbidRYfps+yh29nzIQ3rR6E6+ zC/sLmimxu68Lsq+1rERco+fh5uNdbysXSA1PxkeGV+BQYkt0IxSC2Z2fozdQ2jT 9QsXWlBqVguuM9Wn/JI9PUCtYsMx93FM6XA3kDorezXEYEj8alM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:39 2025 by rpki-client