$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: +vRoqI6O13Ao8s0sXuADldYuPv1Vfm+mNAisODB2fV4= Subject key identifier: 6A:31:49:B1:54:0A:36:15:38:04:A9:19:83:84:C3:B0:71:38:63:81 Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 3A1CB7E8D094A6746A00FF5EEAF98C72AAAFC384 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 052B Signing time: Mon 20 Oct 2025 05:22:00 +0000 Manifest this update: Mon 20 Oct 2025 05:17:00 +0000 Manifest next update: Thu 23 Oct 2025 09:34:00 +0000 Files and hashes: 1: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=) 2: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=) 3: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: ANYmQ9+o/0LODQjOhG6ByU9d93TmQs3sSw1oyENF2/w=) 4: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=) 5: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1c:b7:e8:d0:94:a6:74:6a:00:ff:5e:ea:f9:8c:72:aa:af:c3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Oct 20 05:17:00 2025 GMT Not After : Oct 23 09:34:00 2025 GMT Subject: CN=6A3149B1540A36153804A9198384C3B071386381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:75:f0:a0:62:79:45:95:5d:e6:3e:31:8f: ff:fd:33:b9:5b:77:90:3e:fd:e3:e7:b5:ad:3b:38: fe:d4:d5:ee:43:ba:02:6d:ff:ed:f9:d2:38:a0:3b: 37:91:ca:56:ca:5d:55:f5:cb:0c:66:68:5f:4e:da: d7:ef:56:72:68:55:e9:92:57:20:75:8f:b0:4e:e6: 73:e7:36:67:31:a6:79:35:45:dc:bf:4f:dd:f9:1b: 8a:b0:b3:fa:21:dd:f2:d6:db:b0:5f:12:54:ed:c6: ac:1f:b3:42:54:85:41:4c:91:c6:ab:51:b8:2e:e9: 97:a9:95:66:0d:5a:10:fe:20:e6:e8:67:d6:09:1d: 9c:56:4e:68:42:ff:4a:ae:c2:3e:79:96:0b:72:66: 95:41:47:bf:24:a0:f9:93:88:85:0a:3c:25:6a:9f: 85:a4:11:a5:c8:93:23:e4:65:5c:ee:9d:67:e1:4c: 51:af:64:d2:19:78:d7:92:41:c7:59:d4:de:67:99: e1:15:9b:a8:b4:82:7a:c5:b3:d4:e0:ce:7c:a0:21: 97:4d:66:1c:1a:8d:89:3c:23:67:b9:14:1c:c4:b9: 26:31:6b:cd:15:97:0a:b2:6e:e7:3d:37:0a:45:db: dc:ca:02:c9:69:a0:ad:ff:81:d8:e3:61:9a:63:7f: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:31:49:B1:54:0A:36:15:38:04:A9:19:83:84:C3:B0:71:38:63:81 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:52:8f:44:d0:b7:cf:50:62:fc:e7:83:df:d1:47:a9:91:4d: 7d:6a:f7:21:09:a4:17:4e:5e:c7:59:2c:4d:22:c1:3e:05:50: 76:d7:1a:c6:62:7b:f6:f2:6c:2a:ed:e8:cc:61:2a:48:95:a2: b9:d4:5d:d7:48:ac:a9:dc:75:14:16:48:27:33:9d:93:80:1f: a4:1a:18:0b:3d:bd:6f:b9:76:b6:0f:6d:52:3f:16:8c:cc:76: 94:b3:ba:5d:49:11:87:d6:82:ef:48:1e:e6:59:34:9f:f7:94: 49:e3:ba:75:80:e8:2a:d3:bf:0d:ab:d3:1f:d1:8e:51:4c:1c: 16:3e:42:a2:8f:91:46:c4:ed:19:9a:f1:e6:26:92:a2:79:72: 4b:09:03:eb:d1:6c:a0:c8:75:45:26:70:5b:b6:2f:0f:ca:fb: 26:5a:6e:c0:2b:68:51:24:76:a7:74:8d:c7:23:2b:70:8b:67: 38:6c:ec:9e:fa:c4:af:4e:92:28:cd:b7:31:47:0b:cb:75:3d: 3f:00:56:53:71:5f:eb:29:63:e3:f2:a4:f1:3d:12:61:7b:95: 81:1f:84:7b:04:a8:ac:1d:ab:29:1c:81:46:5b:b9:bc:49:c0: 2e:28:92:a7:38:7a:58:f7:bd:67:45:69:ac:54:ad:7d:12:7b: a9:60:6e:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhy36NCUpnRqAP9e6vmMcqqvw4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNTEwMjAwNTE3MDBaFw0yNTEwMjMwOTM0MDBaMDMxMTAvBgNV BAMTKDZBMzE0OUIxNTQwQTM2MTUzODA0QTkxOTgzODRDM0IwNzEzODYzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShHXwoGJ5RZVd5j4xj//9M7lb d5A+/ePnta07OP7U1e5DugJt/+350jigOzeRylbKXVX1ywxmaF9O2tfvVnJoVemS VyB1j7BO5nPnNmcxpnk1Rdy/T935G4qws/oh3fLW27BfElTtxqwfs0JUhUFMkcar Ubgu6ZeplWYNWhD+IOboZ9YJHZxWTmhC/0quwj55lgtyZpVBR78koPmTiIUKPCVq n4WkEaXIkyPkZVzunWfhTFGvZNIZeNeSQcdZ1N5nmeEVm6i0gnrFs9TgznygIZdN ZhwajYk8I2e5FBzEuSYxa80Vlwqybuc9NwpF29zKAslpoK3/gdjjYZpjf9+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUajFJsVQKNhU4BKkZg4TDsHE4Y4EwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpSj0TQt89QYvzng9/RR6mRTX1q9yEJpBdO XsdZLE0iwT4FUHbXGsZie/bybCrt6MxhKkiVornUXddIrKncdRQWSCcznZOAH6Qa GAs9vW+5drYPbVI/FozMdpSzul1JEYfWgu9IHuZZNJ/3lEnjunWA6CrTvw2r0x/R jlFMHBY+QqKPkUbE7Rma8eYmkqJ5cksJA+vRbKDIdUUmcFu2Lw/K+yZabsAraFEk dqd0jccjK3CLZzhs7J76xK9OkijNtzFHC8t1PT8AVlNxX+spY+PypPE9EmF7lYEf hHsEqKwdqykcgUZbubxJwC4okqc4elj3vWdFaaxUrX0Se6lgbis= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:35 2025 by rpki-client