$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json) Hash identifier: 3J2GxOG2shnmvM08D6AYrSG+T2gm/D45rsTsnVeSZ+0= Subject key identifier: 10:AB:11:A1:78:04:F1:3E:34:92:3B:6F:32:20:40:B6:E7:D9:44:CE Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Certificate serial: 5A098B1396AE88229AF96FCD7877C367A9B3A2EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft Manifest number: E1 Signing time: Sun 19 Oct 2025 06:10:51 +0000 Manifest this update: Sun 19 Oct 2025 06:05:51 +0000 Manifest next update: Wed 22 Oct 2025 10:43:51 +0000 Files and hashes: 1: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=) 2: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: jOFvMOMupXUEhidD1uPWEn9qq4XRyIbDNxERBb88Ejs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:09:8b:13:96:ae:88:22:9a:f9:6f:cd:78:77:c3:67:a9:b3:a2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Validity Not Before: Oct 19 06:05:51 2025 GMT Not After : Oct 22 10:43:51 2025 GMT Subject: CN=10AB11A17804F13E34923B6F322040B6E7D944CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:fa:e9:d5:c3:dc:e3:2b:57:c1:7f:f6:dd: ee:e8:db:9f:de:aa:81:2c:69:8e:0b:3f:11:45:4f: 4a:8f:15:bb:e7:88:f4:02:c7:8c:72:e9:4f:f2:53: 0d:be:d1:e7:2a:d0:c7:9c:48:5e:a9:76:3b:7b:7c: 87:ad:be:f5:1c:f0:c4:1f:6e:79:28:4a:32:b8:85: 39:09:e9:4e:fd:ba:fc:3b:25:a9:d5:86:5b:a2:7a: c9:42:cf:b4:6a:3c:68:f7:b9:d4:15:a0:2d:61:f5: 2d:f4:eb:7e:3e:8f:d3:58:4f:14:e9:c4:9d:1e:5e: d2:b1:99:20:42:62:20:8d:74:84:e4:c6:22:78:db: 69:48:bc:c3:54:cd:c2:19:32:e8:93:15:47:ee:7b: 3f:7f:ab:81:4b:cb:82:1f:39:10:3d:63:a6:ad:28: 8d:95:03:ad:76:92:7d:bf:bc:be:73:26:bc:98:92: c8:fc:41:24:b5:e0:ef:25:a8:26:79:45:9a:fc:78: 9e:6e:b3:ac:e4:fb:1c:78:92:04:6b:86:f7:76:91: 7c:1d:45:6f:3b:c8:7e:0e:6e:a2:35:5d:6e:47:e5: 6c:9a:a3:9c:4d:be:42:82:97:ad:d6:c0:41:e1:25: b3:83:98:1b:15:ec:87:4e:53:13:24:0f:d5:23:77: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:11:A1:78:04:F1:3E:34:92:3B:6F:32:20:40:B6:E7:D9:44:CE X509v3 Authority Key Identifier: keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ea:ec:a7:68:09:62:48:e2:f6:54:ea:7a:0e:ce:13:2a:0d: ef:20:d4:12:21:e2:19:ea:d9:d9:8d:4d:b6:05:22:77:78:4a: fc:5e:e7:a0:65:56:05:55:21:a4:b3:26:11:68:c5:61:9f:8b: 3e:ac:18:66:55:a3:74:9d:5f:1c:4f:e1:72:7a:cd:8e:95:ea: 8a:c1:6d:64:2b:9d:2b:2b:d7:c8:b0:46:f7:3c:29:a9:3b:2f: 8a:c6:4a:31:2a:84:ee:aa:d5:30:98:ba:17:ea:97:5d:b5:e5: 96:c2:01:5f:41:46:9a:ee:e1:51:0d:55:e4:93:27:1c:c5:f3: cd:5d:6f:32:b9:5c:29:c1:dc:6e:0a:0e:03:30:50:d4:5e:fb: 15:c6:4b:0d:a0:6f:50:a3:a9:fc:c7:37:20:c4:ff:2b:56:61: c7:8e:ca:ff:1f:de:2d:1a:8e:f4:0e:83:65:47:da:29:41:92: 56:a0:32:d5:0b:89:38:0e:d4:bc:e7:71:3b:88:fb:d3:00:80: af:8f:d0:bc:54:e6:3d:53:3f:4c:94:32:a4:4f:b1:2f:0f:84: f6:21:60:84:59:8f:21:0a:34:88:88:90:c2:a5:e9:ca:62:03: ad:f0:ec:09:e2:e3:3c:9b:5d:8d:28:f6:86:39:58:47:10:84: 7f:71:f1:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgmLE5auiCKa+W/NeHfDZ6mzou4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgw MDI2QUI3RTAeFw0yNTEwMTkwNjA1NTFaFw0yNTEwMjIxMDQzNTFaMDMxMTAvBgNV BAMTKDEwQUIxMUExNzgwNEYxM0UzNDkyM0I2RjMyMjA0MEI2RTdEOTQ0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIvrp1cPc4ytXwX/23e7o25/e qoEsaY4LPxFFT0qPFbvniPQCx4xy6U/yUw2+0ecq0MecSF6pdjt7fIetvvUc8MQf bnkoSjK4hTkJ6U79uvw7JanVhluieslCz7RqPGj3udQVoC1h9S30634+j9NYTxTp xJ0eXtKxmSBCYiCNdITkxiJ422lIvMNUzcIZMuiTFUfuez9/q4FLy4IfORA9Y6at KI2VA612kn2/vL5zJryYksj8QSS14O8lqCZ5RZr8eJ5us6zk+xx4kgRrhvd2kXwd RW87yH4ObqI1XW5H5Wyao5xNvkKCl63WwEHhJbODmBsV7IdOUxMkD9Ujd3hVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEKsRoXgE8T40kjtvMiBAtufZRM4wHwYDVR0j BBgwFoAUEag59ftrNF+xWGxW8UbA2AAmq34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS8xMUE4MzlGNUZC NkIzNDVGQjE1ODZDNTZGMTQ2QzBEODAwMjZBQjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgwMDI2 QUI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzEvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMw RDgwMDI2QUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvq7KdoCWJI4vZU6noOzhMqDe8g1BIh4hnq 2dmNTbYFInd4Svxe56BlVgVVIaSzJhFoxWGfiz6sGGZVo3SdXxxP4XJ6zY6V6orB bWQrnSsr18iwRvc8Kak7L4rGSjEqhO6q1TCYuhfql1215ZbCAV9BRpru4VENVeST JxzF881dbzK5XCnB3G4KDgMwUNRe+xXGSw2gb1CjqfzHNyDE/ytWYceOyv8f3i0a jvQOg2VH2ilBklagMtULiTgO1LzncTuI+9MAgK+P0LxU5j1TP0yUMqRPsS8PhPYh YIRZjyEKNIiIkMKl6cpiA63w7Ani4zybXY0o9oY5WEcQhH9x8dg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:36 2025 by rpki-client