$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: jrW1N0+VyKmRKeFrixhtofe8vfvy5H+KiJoufoy7t4M= Subject key identifier: 96:94:E0:98:4E:2A:E4:E2:3C:A9:68:19:A1:44:BC:83:2C:E0:FB:C6 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 074AA51231D5B7270BBAE18F0D96B5CC7F2E6540 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02A3 Signing time: Sat 28 Jun 2025 09:40:45 +0000 Manifest this update: Sat 28 Jun 2025 09:35:45 +0000 Manifest next update: Tue 01 Jul 2025 18:55:45 +0000 Files and hashes: 1: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: crJaiQYd/URqvu6KhW8yH52JBBuNV8cFVVsC9puZ+Yo=) 2: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: tXcQSjFRgRXWYm56Zc7JHT0yut/bAGiDVFBVYQq84Lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4a:a5:12:31:d5:b7:27:0b:ba:e1:8f:0d:96:b5:cc:7f:2e:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Jun 28 09:35:45 2025 GMT Not After : Jul 1 18:55:45 2025 GMT Subject: CN=9694E0984E2AE4E23CA96819A144BC832CE0FBC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:30:2b:41:0e:d9:ed:b2:25:dd:47:17:3d: dc:ab:b2:5e:d9:48:96:6f:d8:eb:60:24:5f:c6:e3: 8b:b7:d1:d8:10:37:0a:9e:b8:7c:2a:9d:f0:30:31: 44:6c:f6:6d:81:43:c7:c4:28:24:30:7b:ad:71:32: 5b:1d:48:06:d2:91:3a:2e:cc:a9:7d:47:81:83:ef: 5d:8e:e5:0e:2c:d7:38:18:f8:af:0b:98:7c:33:60: 35:41:14:71:ac:21:4c:5d:e0:57:f1:ed:22:d7:d5: 02:7b:08:38:db:23:c2:34:a2:13:c8:72:ce:7a:bc: ab:21:1b:5c:e6:08:02:db:7c:9d:d7:52:49:16:a2: 8d:60:e3:ea:0a:98:46:07:5d:66:ba:a5:6c:d8:39: 27:77:a8:cf:0c:45:cb:74:53:43:80:93:99:8a:30: db:3d:a5:8b:48:24:89:10:05:2c:fe:e3:27:5e:a5: b8:f0:90:e6:5b:88:86:05:8f:e8:02:4e:9c:f2:1e: 34:cf:9d:8d:c4:e9:d4:48:24:b7:a4:92:0c:5d:53: 45:95:7f:6c:c9:3c:c4:5c:dd:2a:64:fb:86:15:fe: 96:36:e9:81:ef:c3:b6:2d:b5:88:39:fc:b2:1b:91: 3c:fc:40:5e:30:84:fb:29:01:45:ba:ea:db:06:0a: 4b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:94:E0:98:4E:2A:E4:E2:3C:A9:68:19:A1:44:BC:83:2C:E0:FB:C6 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ef:a3:a9:25:1f:7e:03:30:a3:71:f7:ac:15:00:9f:eb:e4: 87:91:62:dd:2b:fe:d3:b8:b1:cb:f4:73:93:ff:0e:3c:f2:2c: dc:f1:98:8d:73:e3:26:55:1b:f1:f1:bd:2b:7f:ec:c2:6b:40: a7:7c:2f:a2:4e:33:a2:81:ca:6e:81:04:ba:89:06:73:bc:de: 48:be:49:2a:23:1f:8e:55:50:6d:95:43:25:85:d0:c1:af:c1: 04:b2:48:40:04:0b:bf:71:7f:cd:11:b6:9d:42:33:8c:f1:a7: 56:15:80:36:06:98:0e:43:fa:90:5e:a3:fe:b5:71:e4:9e:64: 07:e5:f8:00:6b:6b:b5:7f:05:88:4a:63:d1:41:d4:46:5f:e8: 09:42:67:13:cf:4d:c7:f5:c4:ff:1f:27:57:ce:f1:4f:ba:00: 70:f5:be:a4:e2:d8:42:e9:ec:7e:9d:80:92:ed:0b:43:ed:c4: f4:c2:71:e8:00:12:00:27:fc:15:de:40:ec:01:28:4d:b5:0d: fb:98:5c:73:f9:f1:4c:0d:7e:40:d3:92:60:bf:91:36:df:6b: a8:7c:e9:3c:0c:97:f7:bf:4b:84:44:c0:4a:e5:e6:0d:6b:ac: 7f:0c:6f:3b:3d:0d:4e:fd:b6:88:7a:b2:0e:fd:4a:31:d6:3e: bb:45:9b:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB0qlEjHVtycLuuGPDZa1zH8uZUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTA2MjgwOTM1NDVaFw0yNTA3MDExODU1NDVaMDMxMTAvBgNV BAMTKDk2OTRFMDk4NEUyQUU0RTIzQ0E5NjgxOUExNDRCQzgzMkNFMEZCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7DArQQ7Z7bIl3UcXPdyrsl7Z SJZv2OtgJF/G44u30dgQNwqeuHwqnfAwMURs9m2BQ8fEKCQwe61xMlsdSAbSkTou zKl9R4GD712O5Q4s1zgY+K8LmHwzYDVBFHGsIUxd4Ffx7SLX1QJ7CDjbI8I0ohPI cs56vKshG1zmCALbfJ3XUkkWoo1g4+oKmEYHXWa6pWzYOSd3qM8MRct0U0OAk5mK MNs9pYtIJIkQBSz+4ydepbjwkOZbiIYFj+gCTpzyHjTPnY3E6dRIJLekkgxdU0WV f2zJPMRc3Spk+4YV/pY26YHvw7YttYg5/LIbkTz8QF4whPspAUW66tsGCkuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlpTgmE4q5OI8qWgZoUS8gyzg+8YwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzvo6klH34DMKNx96wVAJ/r5IeRYt0r/tO4 scv0c5P/DjzyLNzxmI1z4yZVG/HxvSt/7MJrQKd8L6JOM6KBym6BBLqJBnO83ki+ SSojH45VUG2VQyWF0MGvwQSySEAEC79xf80Rtp1CM4zxp1YVgDYGmA5D+pBeo/61 ceSeZAfl+ABra7V/BYhKY9FB1EZf6AlCZxPPTcf1xP8fJ1fO8U+6AHD1vqTi2ELp 7H6dgJLtC0PtxPTCcegAEgAn/BXeQOwBKE21DfuYXHP58UwNfkDTkmC/kTbfa6h8 6TwMl/e/S4REwErl5g1rrH8Mbzs9DU79toh6sg79SjHWPrtFm1o= -----END CERTIFICATE-----Generated at Mon Jun 30 13:25:29 2025 by rpki-client