$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: FcdPBbOSccpMUbvL+jxhUAm8BjU0TXlEkqOCEoeEJY8= Subject key identifier: C6:E5:50:6B:EF:2C:9C:D8:FB:86:AE:84:59:3B:78:EC:7A:27:86:98 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 34BDEBBE4EB1159C025892E0068DA92CA95D3E29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02BB Signing time: Fri 22 Aug 2025 02:50:47 +0000 Manifest this update: Fri 22 Aug 2025 02:45:47 +0000 Manifest next update: Mon 25 Aug 2025 10:19:47 +0000 Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: tXcQSjFRgRXWYm56Zc7JHT0yut/bAGiDVFBVYQq84Lg=) 2: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: kBtHdH4ndv73QdF3d2F5tkZFGAfiVAjUfoodjrRpysk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:bd:eb:be:4e:b1:15:9c:02:58:92:e0:06:8d:a9:2c:a9:5d:3e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Aug 22 02:45:47 2025 GMT Not After : Aug 25 10:19:47 2025 GMT Subject: CN=C6E5506BEF2C9CD8FB86AE84593B78EC7A278698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:21:8a:d5:f4:42:16:f6:a9:2d:e2:73:57: 26:c9:07:3e:65:df:01:b0:f3:58:3e:20:5c:00:c6: 70:f1:77:e3:57:6d:ac:da:c8:8d:e6:d5:c8:ba:82: 25:d2:bd:d8:d3:e7:d9:83:b0:22:4d:bb:2e:7e:de: a8:f5:33:71:9e:01:31:c8:91:2d:48:de:53:7a:ea: 4d:f5:de:85:f7:5d:26:9f:6f:bc:01:a9:79:37:3a: b4:d0:fd:49:ce:84:b6:b1:a1:43:d8:70:e6:14:cc: 8e:71:39:b5:c5:be:eb:63:a0:17:91:58:e8:66:f3: 3c:8b:fa:95:fa:12:4b:bd:37:42:2f:a5:d5:6c:57: 2b:09:dc:bd:81:46:34:52:ac:14:3b:2f:b9:d2:d6: ec:7a:87:dc:0e:9b:f3:1c:e5:25:2c:ea:c9:d0:ec: e6:10:45:bd:97:aa:30:ff:27:fe:19:8f:47:04:47: 05:1f:61:97:74:0b:9d:fc:6c:ed:ca:49:83:e7:31: 07:7b:b9:6e:c8:49:5f:8a:b2:5c:c3:3f:8c:1e:39: 4b:ad:91:81:b7:90:ae:b9:64:1a:8a:8a:f3:36:9f: 8e:f5:2f:38:a9:75:f2:93:20:92:ac:2b:ee:fd:97: a0:a6:af:d6:1e:0e:cb:01:d7:e2:74:12:88:8a:8e: d5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E5:50:6B:EF:2C:9C:D8:FB:86:AE:84:59:3B:78:EC:7A:27:86:98 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9a:88:2d:a5:09:bb:9b:c7:6a:84:a4:f5:a5:df:74:49:a6: 7e:5e:6e:54:c5:6b:c3:d3:ac:b3:f7:8f:be:00:63:50:03:0c: b8:d3:22:46:d1:c1:41:09:ea:50:19:89:aa:eb:07:04:28:c5: ea:b3:5c:f9:a7:d0:1b:d7:44:ca:92:45:22:91:a2:9e:6f:b1: 59:af:ca:4e:6d:e5:2b:3f:c9:ae:c2:7d:5c:f5:4d:2c:ab:84: 85:8b:4b:ab:92:0c:e6:27:53:f2:0e:1e:a9:dc:ba:60:89:8a: fa:ca:95:d6:06:65:4d:15:d1:70:24:8f:1c:ac:25:32:ca:48: 7a:28:f9:d4:2a:1a:b9:7e:e9:59:46:07:f0:d3:d5:6f:bb:50: e7:c9:9b:c4:1a:30:6f:cc:5a:e8:2f:ca:5c:ee:0c:ed:54:55: 58:b3:d5:06:e7:19:7e:32:8b:da:69:e8:5d:c4:1d:49:ed:4d: 4c:08:56:1e:16:ed:94:0f:0c:92:20:54:da:4f:cd:46:b6:59: ce:8a:60:2a:c9:ac:7e:7f:94:fe:6c:47:b2:10:f4:90:fe:69: 57:39:d1:a8:20:4d:0c:a0:56:75:87:9a:3d:a7:4b:88:31:a5: 09:b9:35:9d:27:61:08:a9:96:5b:88:2d:49:45:d0:2c:09:ee: da:bd:ea:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNL3rvk6xFZwCWJLgBo2pLKldPikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTA4MjIwMjQ1NDdaFw0yNTA4MjUxMDE5NDdaMDMxMTAvBgNV BAMTKEM2RTU1MDZCRUYyQzlDRDhGQjg2QUU4NDU5M0I3OEVDN0EyNzg2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgiGK1fRCFvapLeJzVybJBz5l 3wGw81g+IFwAxnDxd+NXbazayI3m1ci6giXSvdjT59mDsCJNuy5+3qj1M3GeATHI kS1I3lN66k313oX3XSafb7wBqXk3OrTQ/UnOhLaxoUPYcOYUzI5xObXFvutjoBeR WOhm8zyL+pX6Eku9N0IvpdVsVysJ3L2BRjRSrBQ7L7nS1ux6h9wOm/Mc5SUs6snQ 7OYQRb2XqjD/J/4Zj0cERwUfYZd0C538bO3KSYPnMQd7uW7ISV+KslzDP4weOUut kYG3kK65ZBqKivM2n471LzipdfKTIJKsK+79l6Cmr9YeDssB1+J0EoiKjtU3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxuVQa+8snNj7hq6EWTt47HonhpgwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmaiC2lCbubx2qEpPWl33RJpn5eblTFa8PT rLP3j74AY1ADDLjTIkbRwUEJ6lAZiarrBwQoxeqzXPmn0BvXRMqSRSKRop5vsVmv yk5t5Ss/ya7CfVz1TSyrhIWLS6uSDOYnU/IOHqncumCJivrKldYGZU0V0XAkjxys JTLKSHoo+dQqGrl+6VlGB/DT1W+7UOfJm8QaMG/MWugvylzuDO1UVViz1QbnGX4y i9pp6F3EHUntTUwIVh4W7ZQPDJIgVNpPzUa2Wc6KYCrJrH5/lP5sR7IQ9JD+aVc5 0aggTQygVnWHmj2nS4gxpQm5NZ0nYQiplluILUlF0CwJ7tq96tw= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:31 2025 by rpki-client