$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json) Hash identifier: Gnyx7N/BufbS3gqdeAmg9zr5TesC1z9DfdAkI+wliBI= Subject key identifier: DA:9D:23:4E:82:4E:5F:BF:6B:01:E3:D5:61:8A:B3:4F:23:52:2D:4D Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Certificate serial: 3F9B7322B4D75CFDE73D9F06B9A1A48AB0FE033B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft Manifest number: AF Signing time: Sat 28 Jun 2025 07:20:49 +0000 Manifest this update: Sat 28 Jun 2025 07:15:49 +0000 Manifest next update: Tue 01 Jul 2025 16:44:49 +0000 Files and hashes: 1: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=) 2: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: jQJJN/tKaGlEtrKQE3MhKGsHeIkVb7FKWmSRzRFOD9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9b:73:22:b4:d7:5c:fd:e7:3d:9f:06:b9:a1:a4:8a:b0:fe:03:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Validity Not Before: Jun 28 07:15:49 2025 GMT Not After : Jul 1 16:44:49 2025 GMT Subject: CN=DA9D234E824E5FBF6B01E3D5618AB34F23522D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:06:ad:c2:46:3c:db:1f:ae:28:59:ce:38: 67:df:98:9f:e9:5e:5f:97:45:99:62:b7:91:04:1d: 43:78:76:46:10:8f:4b:78:30:6a:db:96:15:a7:a9: b9:a8:41:03:f9:cd:73:86:7e:2f:45:00:39:ce:ea: 34:68:90:ce:cb:f8:37:07:1f:e4:a3:4a:cf:62:b5: 4a:43:8a:8c:fa:4f:93:d3:ef:7b:19:68:76:d2:7b: e2:4d:f6:0c:95:98:b7:e4:f9:83:00:2d:6a:79:03: c8:71:cd:ee:39:34:ad:88:d4:89:7e:dd:49:8e:0f: 98:da:da:d0:b1:47:83:5c:64:41:33:20:28:bc:8a: 00:64:2c:e7:49:77:29:54:20:40:cb:5e:62:e6:a5: 24:95:56:81:9f:3d:67:7d:18:85:38:03:1d:35:53: 71:2b:af:d6:e7:ca:3a:4b:3e:6d:1c:12:90:f1:3f: 1f:45:4b:ab:f9:23:c9:d5:26:54:1c:b1:b8:78:6b: 23:08:1e:ff:38:e4:75:f9:e4:75:24:b4:05:0f:58: e6:e2:b9:69:4f:3c:a5:f1:1f:3e:af:7e:e4:b6:1b: b3:98:30:15:57:d6:54:e3:6c:8f:71:78:35:7b:f1: 74:39:13:e3:33:e9:d5:15:53:8d:c0:12:db:d4:3b: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9D:23:4E:82:4E:5F:BF:6B:01:E3:D5:61:8A:B3:4F:23:52:2D:4D X509v3 Authority Key Identifier: keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ae:01:56:37:1f:50:c9:22:53:81:e0:9e:af:42:3f:34:22: cb:88:6f:12:88:24:63:e8:e7:72:da:33:8b:0f:16:44:11:ea: c3:16:60:56:1b:1b:ba:f8:0c:28:cd:1c:1c:5b:58:52:91:5c: 3c:1b:6f:b4:5a:a0:e5:ec:c4:a1:d0:b6:66:c2:03:ed:c9:d0: 4d:26:d8:b5:7b:2e:55:f4:cf:35:13:13:15:ad:6b:9f:51:17: d6:ed:f8:0b:d2:80:72:47:f1:74:a6:3d:f3:3c:10:b5:ad:8b: 2e:9e:7e:f7:2a:c7:61:29:0e:89:eb:81:fb:11:af:46:f9:52: 22:24:b6:5c:06:ac:35:29:f5:53:68:c1:ee:d1:b0:24:40:66: a6:f9:a0:c6:d6:d7:34:76:e1:07:da:d4:9d:c1:1e:ec:56:17: d0:b8:ef:5e:d4:75:60:ea:29:3b:fc:3f:e2:55:fe:27:d9:a1: 28:88:77:d0:cd:66:2c:de:5a:ff:51:c1:fc:e9:61:fc:e6:bf: 1a:6b:fe:af:f4:98:03:82:54:a0:2a:af:89:0f:9a:ca:cf:3e: 06:24:3c:2a:21:f2:86:cb:ed:58:4a:49:ec:09:87:a5:3b:2a: fe:61:db:d5:a1:dc:51:12:11:ef:bf:ed:ce:19:32:16:a0:dc: 8e:59:73:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5tzIrTXXP3nPZ8GuaGkirD+AzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgw MDI2QUI3RTAeFw0yNTA2MjgwNzE1NDlaFw0yNTA3MDExNjQ0NDlaMDMxMTAvBgNV BAMTKERBOUQyMzRFODI0RTVGQkY2QjAxRTNENTYxOEFCMzRGMjM1MjJENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10QatwkY82x+uKFnOOGffmJ/p Xl+XRZlit5EEHUN4dkYQj0t4MGrblhWnqbmoQQP5zXOGfi9FADnO6jRokM7L+DcH H+SjSs9itUpDioz6T5PT73sZaHbSe+JN9gyVmLfk+YMALWp5A8hxze45NK2I1Il+ 3UmOD5ja2tCxR4NcZEEzICi8igBkLOdJdylUIEDLXmLmpSSVVoGfPWd9GIU4Ax01 U3Err9bnyjpLPm0cEpDxPx9FS6v5I8nVJlQcsbh4ayMIHv845HX55HUktAUPWObi uWlPPKXxHz6vfuS2G7OYMBVX1lTjbI9xeDV78XQ5E+Mz6dUVU43AEtvUO6yPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2p0jToJOX79rAePVYYqzTyNSLU0wHwYDVR0j BBgwFoAUEag59ftrNF+xWGxW8UbA2AAmq34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS8xMUE4MzlGNUZC NkIzNDVGQjE1ODZDNTZGMTQ2QzBEODAwMjZBQjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgwMDI2 QUI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzEvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMw RDgwMDI2QUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2uAVY3H1DJIlOB4J6vQj80IsuIbxKIJGPo 53LaM4sPFkQR6sMWYFYbG7r4DCjNHBxbWFKRXDwbb7RaoOXsxKHQtmbCA+3J0E0m 2LV7LlX0zzUTExWta59RF9bt+AvSgHJH8XSmPfM8ELWtiy6efvcqx2EpDonrgfsR r0b5UiIktlwGrDUp9VNowe7RsCRAZqb5oMbW1zR24Qfa1J3BHuxWF9C4717UdWDq KTv8P+JV/ifZoSiId9DNZizeWv9RwfzpYfzmvxpr/q/0mAOCVKAqr4kPmsrPPgYk PCoh8obL7VhKSewJh6U7Kv5h29Wh3FESEe+/7c4ZMhag3I5Zc4o= -----END CERTIFICATE-----Generated at Sun Jun 29 22:29:40 2025 by rpki-client