$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft File: 11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json) Hash identifier: QNtdaZl1KJ4CXfZbNgQHxY09tNdeZxGFMhXHk5qP468= Subject key identifier: 71:27:5A:F0:A0:97:25:7C:3E:37:8C:F8:F4:7C:6D:B3:43:3A:D7:0D Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 Certificate issuer: /CN=11D0290B4630192458231FFEA93A463483E71D15 Certificate serial: 60BD70FF9236BCD1CD3D7AAF053C287F42FC82DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft Manifest number: 01A2 Signing time: Fri 22 Aug 2025 12:32:08 +0000 Manifest this update: Fri 22 Aug 2025 12:27:08 +0000 Manifest next update: Mon 25 Aug 2025 12:57:08 +0000 Files and hashes: 1: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: 9YGXvAsh3xzkZwF2WFxmwcckLlzN0eWV4Ky/1uitm38=) 2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: /J/AyxIihV7qP8j8os+4Ddk4t0/H8+IlrTHn+dTyHr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:bd:70:ff:92:36:bc:d1:cd:3d:7a:af:05:3c:28:7f:42:fc:82:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15 Validity Not Before: Aug 22 12:27:08 2025 GMT Not After : Aug 25 12:57:08 2025 GMT Subject: CN=71275AF0A097257C3E378CF8F47C6DB3433AD70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:73:00:e7:a2:1b:f4:45:82:63:75:d3:cd: b0:fb:88:83:05:15:de:6e:74:4b:17:b6:1d:95:2a: 02:ae:d7:bf:fc:d3:66:ea:80:87:97:11:6d:1a:2b: cb:a4:0c:47:59:b1:0f:d4:2d:49:69:ab:32:81:9c: 96:e8:fd:9d:fa:96:f1:af:02:c9:53:ff:b4:da:94: f2:a8:fb:fb:b2:a2:89:a9:ac:fe:88:7b:37:b5:cf: c7:bb:1c:60:82:50:70:57:8f:ad:8e:96:ef:85:c8: 5a:c7:ea:f8:f1:4d:5e:fd:48:a0:9b:e9:a8:2a:71: 7c:d9:95:76:8b:8b:f8:92:9d:78:18:aa:6d:df:19: 9a:5f:3b:e8:ee:70:73:71:b1:12:0e:44:fb:53:a1: f3:74:eb:0e:57:5f:d7:6a:95:ff:c4:ad:1d:25:d4: 94:28:74:39:56:5a:21:70:ec:e7:14:09:cc:22:a2: 58:ea:6d:74:c3:99:ca:e1:47:71:c9:66:22:fe:ec: 8f:75:1b:a2:a1:ee:fe:64:0b:c4:c6:dc:ed:97:4c: 39:3c:25:8e:15:dd:59:fb:a8:10:2b:46:55:2b:5e: 79:46:ed:ac:75:4e:59:1a:4a:74:8c:f6:03:84:85: db:28:fa:f6:02:9b:5e:1b:02:b1:91:f6:c8:2d:64: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:5A:F0:A0:97:25:7C:3E:37:8C:F8:F4:7C:6D:B3:43:3A:D7:0D X509v3 Authority Key Identifier: keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:be:40:6d:db:b0:16:95:69:a2:36:e1:a6:79:11:f9:68:0c: 3f:e3:4b:5e:46:9d:a3:ba:8e:64:05:75:13:31:d0:a0:5b:df: 31:45:87:a0:c8:61:8f:5c:e0:9b:8e:78:cc:80:19:39:b4:c1: 55:2f:f3:a5:3c:c4:81:56:68:4d:95:31:7a:f3:5a:29:b3:70: ce:3b:53:a8:bc:72:c1:b9:ca:78:5e:f7:af:ae:a4:61:ad:b9: a3:b4:27:ed:d8:57:2d:09:64:27:c6:c1:50:3b:f4:97:7c:ab: 18:24:00:e6:00:78:d5:8c:27:55:87:f0:55:dc:b8:8e:b2:64: a4:03:5a:9c:1f:d8:8f:9d:7d:b5:14:3c:69:6a:ab:66:da:e0: 4d:e0:7e:5d:2f:b7:03:1c:88:86:96:35:67:c2:2d:54:63:94: e4:f0:02:2c:c6:6b:1f:64:21:04:2b:33:19:fc:f7:72:9f:68: 91:2e:cc:7f:52:96:62:60:4f:eb:38:2d:d0:5b:6e:b3:68:81: 8d:d1:9a:8e:3a:fa:73:b6:4b:c3:85:9c:1e:ca:f4:b2:91:ff: 9a:8b:93:8f:e8:56:34:95:fa:ca:5d:96:04:88:03:c3:9f:8e: f7:b7:d8:73:c4:0d:02:27:f6:4d:fd:05:ac:15:c0:30:dd:ad: 55:69:ee:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYL1w/5I2vNHNPXqvBTwof0L8gtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4 M0U3MUQxNTAeFw0yNTA4MjIxMjI3MDhaFw0yNTA4MjUxMjU3MDhaMDMxMTAvBgNV BAMTKDcxMjc1QUYwQTA5NzI1N0MzRTM3OENGOEY0N0M2REIzNDMzQUQ3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6HMA56Ib9EWCY3XTzbD7iIMF Fd5udEsXth2VKgKu17/802bqgIeXEW0aK8ukDEdZsQ/ULUlpqzKBnJbo/Z36lvGv AslT/7TalPKo+/uyoomprP6Ieze1z8e7HGCCUHBXj62Olu+FyFrH6vjxTV79SKCb 6agqcXzZlXaLi/iSnXgYqm3fGZpfO+jucHNxsRIORPtTofN06w5XX9dqlf/ErR0l 1JQodDlWWiFw7OcUCcwioljqbXTDmcrhR3HJZiL+7I91G6Kh7v5kC8TG3O2XTDk8 JY4V3Vn7qBArRlUrXnlG7ax1TlkaSnSM9gOEhdso+vYCm14bArGR9sgtZOO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSda8KCXJXw+N4z49Hxts0M61w0wHwYDVR0j BBgwFoAUEdApC0YwGSRYIx/+qTpGNIPnHRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdlY2NmZi1jZTliLTQxZGEtYjk4YS1hYmNmZTQ5MjUzYWYvMC8xMUQwMjkwQjQ2 MzAxOTI0NTgyMzFGRkVBOTNBNDYzNDgzRTcxRDE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4M0U3 MUQxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2 MzQ4M0U3MUQxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKS+QG3bsBaVaaI24aZ5EfloDD/jS15GnaO6 jmQFdRMx0KBb3zFFh6DIYY9c4JuOeMyAGTm0wVUv86U8xIFWaE2VMXrzWimzcM47 U6i8csG5ynhe96+upGGtuaO0J+3YVy0JZCfGwVA79Jd8qxgkAOYAeNWMJ1WH8FXc uI6yZKQDWpwf2I+dfbUUPGlqq2ba4E3gfl0vtwMciIaWNWfCLVRjlOTwAizGax9k IQQrMxn893KfaJEuzH9SlmJgT+s4LdBbbrNogY3Rmo46+nO2S8OFnB7K9LKR/5qL k4/oVjSV+spdlgSIA8Ofjve32HPEDQIn9k39BawVwDDdrVVp7pA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:50 2025 by rpki-client