$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json) Hash identifier: xqlxoQFWVWEl2683gG2SX+tPXEahqJlftKNyLlrNMfc= Subject key identifier: CA:90:E4:DD:50:4A:CA:E1:DC:AB:C9:DF:4D:74:8D:CC:07:D7:EE:E3 Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Certificate serial: 3D736523E0001518ECCBB460C0ED701A5CA6618C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft Manifest number: 01E6 Signing time: Fri 22 Aug 2025 15:42:14 +0000 Manifest this update: Fri 22 Aug 2025 15:37:14 +0000 Manifest next update: Mon 25 Aug 2025 18:17:14 +0000 Files and hashes: 1: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: cfN7Qd2PYQ7hIntsoWDRQIosFOE2nquhn1qMKZ5/D/s=) 2: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: Mq4MVaBaSG6/faiiw+ltHUL1lE9B1vG/CMZhMtucH4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:73:65:23:e0:00:15:18:ec:cb:b4:60:c0:ed:70:1a:5c:a6:61:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Validity Not Before: Aug 22 15:37:14 2025 GMT Not After : Aug 25 18:17:14 2025 GMT Subject: CN=CA90E4DD504ACAE1DCABC9DF4D748DCC07D7EEE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:4e:c5:fb:1f:e6:1a:c7:94:ab:5a:19:9e: 6b:bb:c0:e8:bf:21:56:f5:bc:e5:74:03:f4:d8:e9: a2:2b:1f:15:15:ec:c9:8e:de:44:d3:bd:e4:df:51: 91:a5:66:ca:0a:f6:7d:72:81:d9:f3:6c:8a:c2:ca: 58:1b:33:65:e2:ba:60:68:4c:28:84:c4:63:1b:e7: 18:80:a9:20:fe:1e:a0:74:44:8a:1b:78:40:10:8e: 9f:80:43:31:8f:45:72:21:8e:00:c4:6c:50:d0:60: ec:2e:92:f9:a3:29:f1:ae:bc:e6:99:50:c6:0f:3e: 24:e1:9a:09:57:d7:7f:bd:68:5b:af:9f:6b:5c:13: 93:80:c3:98:8c:4e:4a:a1:e4:db:70:cc:6c:54:38: 55:54:c1:6d:11:f7:f6:2d:be:7b:aa:ad:35:21:01: 4a:83:04:39:a0:13:18:13:6c:fd:1e:cc:e3:89:cd: 9a:39:a2:ff:b2:de:bd:9a:b2:4a:63:a5:d9:cb:1d: c6:7b:35:40:67:63:8d:a3:81:5c:b2:44:00:f5:0f: d7:ab:be:49:fc:17:ad:52:b1:bf:35:ce:42:89:3e: 88:52:ef:1e:b2:ec:76:8f:99:4f:bc:89:e3:0c:0d: 11:12:04:3c:bf:0b:63:44:b5:6c:97:84:96:e3:fe: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:90:E4:DD:50:4A:CA:E1:DC:AB:C9:DF:4D:74:8D:CC:07:D7:EE:E3 X509v3 Authority Key Identifier: keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d7:34:89:4d:7b:66:70:58:21:1b:f8:c6:8d:8b:ce:82:62: a6:6c:71:f2:c6:1f:23:cf:37:e5:dd:f3:b1:7f:6d:4f:c7:f7: 94:c5:15:fd:60:14:37:93:51:2a:aa:ca:8b:49:3d:da:4b:72: 63:88:ee:ec:4a:64:d6:14:c6:4e:13:97:d9:1b:6b:7c:61:21: 44:26:67:71:a7:96:bb:e2:5e:b2:94:e2:7e:0c:2c:a5:f1:76: 66:92:ce:7f:e4:fe:1b:db:16:9d:4d:83:3f:b5:fd:d5:3a:08: b5:bd:c2:47:87:37:c8:e5:2f:6a:da:60:f8:56:a9:38:33:28: 37:58:ed:3b:c0:a6:94:99:5b:e2:83:e3:c1:b8:94:d7:b7:d1: 58:36:79:ec:a2:95:d0:e7:0f:7b:25:d1:75:30:87:be:d4:35: 68:13:86:ab:77:6e:db:6d:6c:ed:e4:cb:a9:b8:b4:4d:3f:b7: ac:84:74:59:b4:9f:7b:4b:d3:e7:08:1b:2e:6f:14:42:07:e0: 22:80:e5:59:f9:99:bb:43:c0:4d:c4:46:53:34:8d:ad:28:27: 26:57:c5:ff:97:60:8e:36:46:16:fa:56:f3:5c:e5:52:f6:93: 6e:92:3e:07:df:35:11:8a:33:d5:0c:16:21:38:78:7e:c4:3e: ff:a4:9d:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXNlI+AAFRjsy7RgwO1wGlymYYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FD N0EzNTE1QzAeFw0yNTA4MjIxNTM3MTRaFw0yNTA4MjUxODE3MTRaMDMxMTAvBgNV BAMTKENBOTBFNERENTA0QUNBRTFEQ0FCQzlERjRENzQ4RENDMDdEN0VFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gk7F+x/mGseUq1oZnmu7wOi/ IVb1vOV0A/TY6aIrHxUV7MmO3kTTveTfUZGlZsoK9n1ygdnzbIrCylgbM2XiumBo TCiExGMb5xiAqSD+HqB0RIobeEAQjp+AQzGPRXIhjgDEbFDQYOwukvmjKfGuvOaZ UMYPPiThmglX13+9aFuvn2tcE5OAw5iMTkqh5NtwzGxUOFVUwW0R9/YtvnuqrTUh AUqDBDmgExgTbP0ezOOJzZo5ov+y3r2askpjpdnLHcZ7NUBnY42jgVyyRAD1D9er vkn8F61Ssb81zkKJPohS7x6y7HaPmU+8ieMMDRESBDy/C2NEtWyXhJbj/s3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUypDk3VBKyuHcq8nfTXSNzAfX7uMwHwYDVR0j BBgwFoAUEaycrM6ar9ZuQYPm4OWZOsejUVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWJiZTVjMC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC8xMUFDOUNBQ0NF OUFBRkQ2NkU0MTgzRTZFMEU1OTkzQUM3QTM1MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FDN0Ez NTE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5 M0FDN0EzNTE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTXNIlNe2ZwWCEb+MaNi86CYqZscfLGHyPP N+Xd87F/bU/H95TFFf1gFDeTUSqqyotJPdpLcmOI7uxKZNYUxk4Tl9kba3xhIUQm Z3GnlrviXrKU4n4MLKXxdmaSzn/k/hvbFp1Ngz+1/dU6CLW9wkeHN8jlL2raYPhW qTgzKDdY7TvAppSZW+KD48G4lNe30Vg2eeyildDnD3sl0XUwh77UNWgThqt3bttt bO3ky6m4tE0/t6yEdFm0n3tL0+cIGy5vFEIH4CKA5Vn5mbtDwE3ERlM0ja0oJyZX xf+XYI42Rhb6VvNc5VL2k26SPgffNRGKM9UMFiE4eH7EPv+knZQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:40:41 2025 by rpki-client