$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: eRdhdQcjNmTYGWXAq+jFkoCJAmmA+htYXH7RqSXzmFs= Subject key identifier: EF:03:51:AF:E5:DA:CC:3C:73:18:C8:85:5E:A4:D5:E7:A5:53:E0:3B Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 227F342042FAE366E47B7D9B36385DCA4C7A7333 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 04F8 Signing time: Sat 28 Jun 2025 02:21:58 +0000 Manifest this update: Sat 28 Jun 2025 02:16:58 +0000 Manifest next update: Tue 01 Jul 2025 09:14:58 +0000 Files and hashes: 1: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=) 2: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: p9nIhhAXDA1VGK03OeTNU5iCdtRuqI9pYS72qu+FFmM=) 3: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=) 4: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=) 5: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: ZypwYrBg4XYyzkf2tAFWTX6dVQILw0FszteZEqHxwF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 09:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7f:34:20:42:fa:e3:66:e4:7b:7d:9b:36:38:5d:ca:4c:7a:73:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Jun 28 02:16:58 2025 GMT Not After : Jul 1 09:14:58 2025 GMT Subject: CN=EF0351AFE5DACC3C7318C8855EA4D5E7A553E03B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:c1:70:04:55:b3:3a:96:91:3e:7b:78:ea: 13:38:5d:94:25:5f:a7:7c:61:d6:e8:39:91:98:80: 3a:eb:70:70:55:88:a4:05:48:a7:d3:c8:e5:55:f4: 84:65:07:3d:25:aa:1b:fb:c8:ac:bd:52:28:18:8d: 31:bb:83:be:5b:76:f3:52:db:c7:c9:aa:59:59:ae: fb:29:aa:f0:5b:d8:9d:5b:b7:43:03:59:03:f6:a2: 53:31:5b:82:4b:d6:8b:38:12:fd:a9:cc:7c:8d:20: d9:72:9c:d7:02:c3:81:ca:ca:41:f1:11:ef:10:66: ec:81:c3:80:8f:36:2d:44:39:16:65:e5:1d:e3:2e: 92:6a:82:a0:28:14:69:a8:33:c8:42:af:d9:5d:cb: e7:d3:e8:db:4b:6e:c1:cb:90:5e:30:d2:75:84:2c: e6:1c:9c:ed:ac:f8:af:d8:c4:93:39:8e:be:bc:64: 36:12:2d:6c:39:b7:9a:aa:f8:b9:f1:5e:76:d6:a5: 02:4a:3d:d4:43:6b:0f:73:a2:6a:db:f2:b6:e8:fa: 3c:b2:5f:cf:77:0e:49:59:95:90:8d:77:c2:2c:d1: d1:91:a6:38:b3:b1:c7:81:1d:f8:52:b8:f8:4c:35: 4d:86:c5:4f:4e:c1:19:81:f4:fd:cc:f7:39:c1:16: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:03:51:AF:E5:DA:CC:3C:73:18:C8:85:5E:A4:D5:E7:A5:53:E0:3B X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ed:0e:d8:0f:b3:ec:88:f0:49:5c:bd:b1:16:1b:1e:50:2c: e7:85:b9:74:d3:3b:b1:68:64:08:a9:c0:0f:c3:46:9c:5f:68: ea:b0:1f:50:32:44:a3:f3:a5:d2:39:8e:24:7e:ab:fa:b6:eb: f0:5e:c2:8d:e8:fa:cd:04:b2:fc:80:45:84:e2:33:d3:c3:7a: 75:73:93:ee:cd:e7:5b:de:9a:29:07:da:1c:75:49:d1:bf:bd: 44:f1:51:f4:70:31:fc:3a:d6:7e:cd:72:7e:18:90:cd:ed:37: 18:2d:a4:a7:73:b4:db:9c:47:8d:b5:75:b0:39:11:ee:ac:d7: 8f:41:43:12:45:de:45:80:a8:98:82:b3:2a:49:be:42:4d:f6: ed:a8:e1:7c:6a:3b:dc:1d:06:6a:7b:c0:b3:65:37:63:65:d6: 7b:72:d2:1f:82:ff:f0:77:cb:49:98:5c:88:8c:08:85:d7:48: 33:f5:ff:bb:31:5a:b8:6e:3b:95:72:d6:d1:d2:98:5c:24:18: e0:fd:e8:41:94:3d:88:30:8f:d4:ab:3b:24:f1:a2:a7:11:6a: 0f:f4:70:f6:28:8d:9b:bf:76:de:c5:c2:72:39:19:b0:56:5e: 1f:e9:74:32:46:64:6f:89:e4:4c:61:69:76:8a:9e:cf:5b:51: b3:2b:c9:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIn80IEL642bke32bNjhdykx6czMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNTA2MjgwMjE2NThaFw0yNTA3MDEwOTE0NThaMDMxMTAvBgNV BAMTKEVGMDM1MUFGRTVEQUNDM0M3MzE4Qzg4NTVFQTRENUU3QTU1M0UwM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFicFwBFWzOpaRPnt46hM4XZQl X6d8YdboOZGYgDrrcHBViKQFSKfTyOVV9IRlBz0lqhv7yKy9UigYjTG7g75bdvNS 28fJqllZrvspqvBb2J1bt0MDWQP2olMxW4JL1os4Ev2pzHyNINlynNcCw4HKykHx Ee8QZuyBw4CPNi1EORZl5R3jLpJqgqAoFGmoM8hCr9ldy+fT6NtLbsHLkF4w0nWE LOYcnO2s+K/YxJM5jr68ZDYSLWw5t5qq+LnxXnbWpQJKPdRDaw9zomrb8rbo+jyy X893DklZlZCNd8Is0dGRpjizsceBHfhSuPhMNU2GxU9OwRmB9P3M9znBFhxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7wNRr+XazDxzGMiFXqTV56VT4DswHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDtDtgPs+yI8ElcvbEWGx5QLOeFuXTTO7Fo ZAipwA/DRpxfaOqwH1AyRKPzpdI5jiR+q/q26/Bewo3o+s0EsvyARYTiM9PDenVz k+7N51vemikH2hx1SdG/vUTxUfRwMfw61n7Ncn4YkM3tNxgtpKdztNucR421dbA5 Ee6s149BQxJF3kWAqJiCsypJvkJN9u2o4XxqO9wdBmp7wLNlN2Nl1nty0h+C//B3 y0mYXIiMCIXXSDP1/7sxWrhuO5Vy1tHSmFwkGOD96EGUPYgwj9SrOyTxoqcRag/0 cPYojZu/dt7FwnI5GbBWXh/pdDJGZG+J5ExhaXaKns9bUbMryUM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:34 2025 by rpki-client