$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json) Hash identifier: bPGgHSQgx1aqYzcE1YrEGlVYfMXCWoxyE05cgdNoZYk= Subject key identifier: 0F:D7:C9:ED:D5:F2:B6:80:6F:37:CC:84:1C:72:14:BC:AA:5B:CE:E3 Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Certificate serial: 08C674799A9FB9B55DBE2380E6CC445676C5307B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft Manifest number: C7 Signing time: Thu 21 Aug 2025 15:10:50 +0000 Manifest this update: Thu 21 Aug 2025 15:05:50 +0000 Manifest next update: Sun 24 Aug 2025 20:45:50 +0000 Files and hashes: 1: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=) 2: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: Ttzp/J4XoCGKR8VRqaN0fx3mIG7vm7fHdjlcgQp11a8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c6:74:79:9a:9f:b9:b5:5d:be:23:80:e6:cc:44:56:76:c5:30:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Validity Not Before: Aug 21 15:05:50 2025 GMT Not After : Aug 24 20:45:50 2025 GMT Subject: CN=0FD7C9EDD5F2B6806F37CC841C7214BCAA5BCEE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:27:7a:e8:df:5b:fd:61:69:59:05:9f:db: 73:4a:8c:b4:36:36:1c:fa:d6:dc:e7:76:f9:87:25: a5:a7:c9:e9:07:7c:62:2c:8b:cc:9a:d3:92:40:76: e2:8d:53:96:b5:e7:09:54:5c:5d:cc:f8:c5:0e:1f: 1f:04:5c:0d:e8:51:3f:73:4b:c5:d9:cd:8d:d1:37: e7:01:10:96:db:3e:0b:2f:70:87:4a:1c:5b:da:ee: 56:81:14:74:f2:eb:f9:4b:a0:25:2c:db:5d:d0:d6: a7:c8:33:48:10:9a:18:4c:3a:f3:83:2a:99:8c:4d: 85:fb:6d:06:30:54:f9:1f:5d:23:c5:1d:54:f1:c0: 43:4e:9b:80:ff:6a:0d:56:d6:65:33:0f:38:4a:f7: c9:b6:f6:de:d7:ff:8b:0a:db:b4:6f:04:af:f1:1a: e5:40:93:0d:68:71:5e:79:dc:13:33:68:85:8d:36: 78:f6:ba:b6:a4:9a:dc:28:bc:7c:38:1a:bc:09:2b: bb:26:0d:ed:4e:d8:08:dc:53:a9:2a:ad:ad:dd:cb: 98:38:75:b1:d1:3c:f8:fd:b4:97:b9:08:06:21:3f: 48:a3:c6:2e:d1:91:26:1b:ca:88:b5:cf:02:bf:bd: 7e:9f:71:e0:5b:e5:1a:3e:0f:36:83:71:08:9b:d8: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D7:C9:ED:D5:F2:B6:80:6F:37:CC:84:1C:72:14:BC:AA:5B:CE:E3 X509v3 Authority Key Identifier: keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:dd:83:8c:af:28:bc:26:a7:c5:64:c1:56:e8:b1:92:30:20: 0b:bb:bc:2e:31:60:0a:12:86:f5:9e:61:0c:20:9e:17:2d:de: 4f:3c:83:92:e9:e9:aa:8d:97:60:69:de:3d:7b:d4:14:01:69: 7a:35:08:7b:26:28:b6:0d:da:bf:4b:81:d0:d6:87:e5:7c:f6: 0d:0d:0c:85:95:b5:43:d9:46:df:e2:59:ed:25:0f:09:55:c2: 9f:aa:7c:37:df:ad:8c:ca:82:97:c1:79:d4:d4:7f:bf:96:46: 23:fa:e7:68:cd:90:ea:72:7d:d3:ab:a4:8a:b0:d0:0e:3c:9b: a0:44:25:fd:d3:75:ad:cc:b4:16:26:aa:bd:cd:03:04:1d:bf: 2e:c3:aa:10:b5:74:cc:d5:48:3b:cb:42:2c:52:93:6b:85:49: 34:7b:00:b7:c3:a9:5a:28:9e:2e:df:ba:83:00:d9:82:47:2c: 15:e0:38:0f:01:0f:6a:f0:a7:6a:b5:2a:13:45:d4:5a:92:46: d1:8e:59:67:4b:9e:a3:9d:5b:09:f0:b3:1e:82:10:8c:fc:14: df:d9:33:d4:64:4a:4c:39:25:3d:3d:9d:80:29:d8:9a:2b:f5: c5:34:d7:b8:9a:c3:da:9b:f7:71:e9:40:00:21:ba:50:2d:67: f5:5e:29:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMZ0eZqfubVdviOA5sxEVnbFMHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgw MDI2QUI3RTAeFw0yNTA4MjExNTA1NTBaFw0yNTA4MjQyMDQ1NTBaMDMxMTAvBgNV BAMTKDBGRDdDOUVERDVGMkI2ODA2RjM3Q0M4NDFDNzIxNEJDQUE1QkNFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImCd66N9b/WFpWQWf23NKjLQ2 Nhz61tzndvmHJaWnyekHfGIsi8ya05JAduKNU5a15wlUXF3M+MUOHx8EXA3oUT9z S8XZzY3RN+cBEJbbPgsvcIdKHFva7laBFHTy6/lLoCUs213Q1qfIM0gQmhhMOvOD KpmMTYX7bQYwVPkfXSPFHVTxwENOm4D/ag1W1mUzDzhK98m29t7X/4sK27RvBK/x GuVAkw1ocV553BMzaIWNNnj2urakmtwovHw4GrwJK7smDe1O2AjcU6kqra3dy5g4 dbHRPPj9tJe5CAYhP0ijxi7RkSYbyoi1zwK/vX6fceBb5Ro+DzaDcQib2CJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD9fJ7dXytoBvN8yEHHIUvKpbzuMwHwYDVR0j BBgwFoAUEag59ftrNF+xWGxW8UbA2AAmq34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS8xMUE4MzlGNUZC NkIzNDVGQjE1ODZDNTZGMTQ2QzBEODAwMjZBQjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgwMDI2 QUI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzEvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMw RDgwMDI2QUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXdg4yvKLwmp8VkwVbosZIwIAu7vC4xYAoS hvWeYQwgnhct3k88g5Lp6aqNl2Bp3j171BQBaXo1CHsmKLYN2r9LgdDWh+V89g0N DIWVtUPZRt/iWe0lDwlVwp+qfDffrYzKgpfBedTUf7+WRiP652jNkOpyfdOrpIqw 0A48m6BEJf3Tda3MtBYmqr3NAwQdvy7DqhC1dMzVSDvLQixSk2uFSTR7ALfDqVoo ni7fuoMA2YJHLBXgOA8BD2rwp2q1KhNF1FqSRtGOWWdLnqOdWwnwsx6CEIz8FN/Z M9RkSkw5JT09nYAp2Jor9cU017iaw9qb93HpQAAhulAtZ/VeKU0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:48 2025 by rpki-client