$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json) Hash identifier: Jd9yxtVD+uE8qhJNFb7opRn2Km2Y9DAk2pq/H+Jfbps= Subject key identifier: 57:5C:47:34:05:D1:7B:51:73:CF:17:E7:F8:EB:AA:6F:E5:B3:75:A6 Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Certificate serial: 64CCECF68FDABBE947C8ECD3C71A3B524FF66C42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft Manifest number: 0200 Signing time: Sun 19 Oct 2025 12:02:16 +0000 Manifest this update: Sun 19 Oct 2025 11:57:16 +0000 Manifest next update: Wed 22 Oct 2025 12:07:16 +0000 Files and hashes: 1: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: Mq4MVaBaSG6/faiiw+ltHUL1lE9B1vG/CMZhMtucH4A=) 2: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: uCH9lDerQdFQ/l7AJLrH17X+KKc/atw4mRmUrn5AhX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cc:ec:f6:8f:da:bb:e9:47:c8:ec:d3:c7:1a:3b:52:4f:f6:6c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Validity Not Before: Oct 19 11:57:16 2025 GMT Not After : Oct 22 12:07:16 2025 GMT Subject: CN=575C473405D17B5173CF17E7F8EBAA6FE5B375A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:3f:cc:93:11:f2:bc:ff:7a:2d:88:d2:cb: 2e:37:15:14:88:f1:a2:da:3b:f5:6c:5c:64:e8:9a: ab:a7:54:95:bb:b6:71:61:a3:e1:96:03:9a:97:39: 5c:76:08:cc:1f:75:01:02:54:14:fb:b3:bd:bb:b7: e7:25:38:b7:18:16:5a:de:e1:0f:9a:90:7b:65:ad: 7c:af:ea:41:65:d0:d2:43:ac:1f:5c:42:11:d3:d5: 64:8a:43:a4:be:39:9f:2e:aa:22:c5:64:69:83:61: 94:87:dc:36:84:f4:74:58:57:80:52:db:13:32:23: 3f:56:90:04:c3:a4:27:05:45:4b:e5:02:c4:87:57: e8:50:0c:f8:53:a0:ad:55:7f:18:72:02:d8:3d:e7: f2:ad:e6:29:45:e1:4c:0e:04:e7:c1:9a:b5:59:e9: 45:49:dd:9e:f8:a3:74:1d:19:ae:54:2b:41:3d:8f: 5f:56:94:ad:e8:bc:b6:bd:c5:8d:d1:59:80:ec:e7: 8d:49:2e:e0:66:6f:06:17:db:4f:1a:c7:a7:a4:c4: 76:c7:2c:fb:f0:a4:7f:32:23:9a:9a:f3:e0:e3:dc: ed:bb:e5:66:e9:86:4b:b8:ff:40:da:2a:d4:b8:7f: 14:7a:5f:04:a8:0b:d4:68:b1:17:e8:4b:6a:40:c6: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5C:47:34:05:D1:7B:51:73:CF:17:E7:F8:EB:AA:6F:E5:B3:75:A6 X509v3 Authority Key Identifier: keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6c:e4:4f:1a:58:1c:39:70:a9:86:a3:4a:d0:85:1c:32:8b: 15:59:19:1c:17:e4:fb:31:e7:3a:21:37:63:7a:97:e5:c2:44: b6:bd:3f:55:b4:aa:24:7c:b8:b2:8a:fa:18:c6:ec:a8:54:0e: 99:c5:bb:68:cb:a1:cc:b9:02:a0:b6:63:11:42:4a:55:39:cf: a6:2d:80:f6:45:2d:ba:dd:3d:e5:10:27:07:9c:77:b3:79:e9: ab:a8:87:b7:45:52:3b:96:35:60:5f:1c:34:e2:dc:fb:b4:5a: 6b:ca:71:35:3b:de:24:94:ad:a4:51:96:ef:73:32:c5:b6:b8: 55:af:1b:ad:23:69:c7:76:c4:0c:72:52:86:0e:98:f1:6e:72: 6b:a7:cd:54:a2:38:db:9f:4f:74:0f:e3:ed:e6:3c:ec:bf:8a: b7:80:40:18:f3:1f:4b:d9:ed:5a:fb:75:fe:22:fe:6d:95:65: 2d:7d:a4:bf:23:7f:6d:89:55:b0:82:7f:dd:72:f9:16:7f:10: 60:e3:02:2d:0d:bf:e2:9b:83:be:84:79:fc:0e:ab:1a:b4:4a: 03:35:b3:95:38:b8:97:08:7c:2e:22:e9:4a:9c:72:da:6d:a4: 31:ba:0c:08:9c:7a:e3:e7:c6:9b:26:f8:68:64:48:9a:2a:74: 14:c4:74:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMzs9o/au+lHyOzTxxo7Uk/2bEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FD N0EzNTE1QzAeFw0yNTEwMTkxMTU3MTZaFw0yNTEwMjIxMjA3MTZaMDMxMTAvBgNV BAMTKDU3NUM0NzM0MDVEMTdCNTE3M0NGMTdFN0Y4RUJBQTZGRTVCMzc1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIj/MkxHyvP96LYjSyy43FRSI 8aLaO/VsXGTomqunVJW7tnFho+GWA5qXOVx2CMwfdQECVBT7s727t+clOLcYFlre 4Q+akHtlrXyv6kFl0NJDrB9cQhHT1WSKQ6S+OZ8uqiLFZGmDYZSH3DaE9HRYV4BS 2xMyIz9WkATDpCcFRUvlAsSHV+hQDPhToK1VfxhyAtg95/Kt5ilF4UwOBOfBmrVZ 6UVJ3Z74o3QdGa5UK0E9j19WlK3ovLa9xY3RWYDs541JLuBmbwYX208ax6ekxHbH LPvwpH8yI5qa8+Dj3O275Wbphku4/0DaKtS4fxR6XwSoC9RosRfoS2pAxhDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV1xHNAXRe1Fzzxfn+Ouqb+WzdaYwHwYDVR0j BBgwFoAUEaycrM6ar9ZuQYPm4OWZOsejUVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWJiZTVjMC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC8xMUFDOUNBQ0NF OUFBRkQ2NkU0MTgzRTZFMEU1OTkzQUM3QTM1MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FDN0Ez NTE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5 M0FDN0EzNTE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBs5E8aWBw5cKmGo0rQhRwyixVZGRwX5Psx 5zohN2N6l+XCRLa9P1W0qiR8uLKK+hjG7KhUDpnFu2jLocy5AqC2YxFCSlU5z6Yt gPZFLbrdPeUQJwecd7N56auoh7dFUjuWNWBfHDTi3Pu0WmvKcTU73iSUraRRlu9z MsW2uFWvG60jacd2xAxyUoYOmPFucmunzVSiONufT3QP4+3mPOy/ireAQBjzH0vZ 7Vr7df4i/m2VZS19pL8jf22JVbCCf91y+RZ/EGDjAi0Nv+Kbg76EefwOqxq0SgM1 s5U4uJcIfC4i6UqcctptpDG6DAiceuPnxpsm+GhkSJoqdBTEdOw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:35 2025 by rpki-client