$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: uUnEDKqpLlk4Vjc+pXpAZf66eZFwG4BZi3v+8TTFOkY= Subject key identifier: F8:5E:D4:26:9B:AC:49:5A:CD:81:84:73:78:AD:7B:C8:A0:44:5A:0F Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 547B17532BA9915F4DD50AE84DEAA51A5FCAF931 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: 0106 Signing time: Sun 19 Oct 2025 05:40:01 +0000 Manifest this update: Sun 19 Oct 2025 05:35:01 +0000 Manifest next update: Wed 22 Oct 2025 15:07:01 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: Jwv0gA8fk3yoBN8wNHBZ8Dx27fR4hWBf2um8D+vcr6o=) 2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: yQvltRoFYJmsAsArTzFlmlNHBksT5eVHJ1Ws++Otuy4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7b:17:53:2b:a9:91:5f:4d:d5:0a:e8:4d:ea:a5:1a:5f:ca:f9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: Oct 19 05:35:01 2025 GMT Not After : Oct 22 15:07:01 2025 GMT Subject: CN=F85ED4269BAC495ACD81847378AD7BC8A0445A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:2c:e7:9c:a4:94:3a:17:49:04:4a:db:85: 86:c1:e1:84:c0:ec:c6:2c:24:4e:00:34:91:97:2d: 61:09:e2:6d:a2:99:13:32:3e:68:f9:d5:9d:09:36: 84:d6:d4:a9:54:a0:49:b4:6d:c7:1e:7c:26:9d:3a: aa:da:c4:88:dd:9d:96:1c:33:64:5e:7d:c7:4b:63: 30:cb:bc:91:47:26:5f:e7:40:3b:c8:b0:8d:88:44: 55:01:73:d2:76:b6:15:b1:24:36:1c:cc:26:5e:7b: f6:c3:df:b8:d3:b6:81:e2:d1:4c:21:75:99:7c:c9: 69:17:08:08:c3:f8:6f:86:73:43:ef:97:f1:e8:65: c2:46:51:ae:46:2d:36:70:3e:46:41:31:4b:5f:17: 7a:29:94:1a:20:bf:a7:fb:70:0c:ad:d4:12:e3:72: c8:1e:f7:52:9d:26:f0:d3:30:b0:45:7b:cd:45:90: 88:e6:ea:b5:ba:fb:20:b1:38:ba:ce:dc:5a:92:77: 71:e9:3c:d8:36:07:dd:28:e3:57:ec:01:23:ee:e8: 51:1b:d3:58:72:a0:23:fe:81:b1:8a:3a:81:d5:0d: 37:d8:ce:66:f2:c7:93:6a:94:b0:07:e5:10:d0:89: 66:53:7c:d5:b6:c8:09:7f:64:08:e5:be:5f:6a:0d: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5E:D4:26:9B:AC:49:5A:CD:81:84:73:78:AD:7B:C8:A0:44:5A:0F X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d5:1d:ac:fe:b4:dc:30:01:ba:52:2d:c1:29:9b:d9:5e:3a: 07:ca:ef:17:af:67:47:e0:57:5c:75:5b:39:8d:fd:64:13:68: 17:88:93:e9:a8:a6:65:9e:63:c3:f9:7b:e2:27:9f:bb:aa:d7: 93:78:04:55:dd:3a:89:c5:8a:e6:c4:89:bc:ab:e8:22:34:2f: ec:95:4a:d5:9b:85:44:63:eb:ac:6a:3f:25:d0:f7:ce:8b:16: 9e:fb:79:7e:68:88:4a:2e:de:50:4e:79:34:fe:d8:9d:de:d4: 13:74:f2:9f:ae:29:d7:44:b3:fb:be:75:90:9e:2a:27:ea:43: 4f:35:c6:69:2f:94:a8:c7:f6:ea:f9:54:dc:46:6c:1c:0b:e7: b1:c8:51:bd:35:0e:4e:b5:bf:78:84:25:98:11:41:bb:42:67: 79:9d:26:2b:5f:98:89:09:aa:df:23:31:fb:43:00:45:d3:81: c7:dd:5b:23:bf:7e:94:3d:5f:b3:f6:99:37:f2:eb:c7:0d:c4: ce:58:df:d7:15:a9:b9:29:8d:10:aa:c3:fd:3e:cd:96:b6:6f: ee:53:56:57:89:b9:17:23:e5:da:36:ba:2c:f6:5d:5b:d4:1d: 5c:28:0e:ca:68:cc:42:37:b6:43:f4:81:63:ce:5b:b1:ed:93: 99:a9:2b:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVHsXUyupkV9N1QroTeqlGl/K+TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNTEwMTkwNTM1MDFaFw0yNTEwMjIxNTA3MDFaMDMxMTAvBgNV BAMTKEY4NUVENDI2OUJBQzQ5NUFDRDgxODQ3Mzc4QUQ3QkM4QTA0NDVBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApyznnKSUOhdJBErbhYbB4YTA 7MYsJE4ANJGXLWEJ4m2imRMyPmj51Z0JNoTW1KlUoEm0bccefCadOqraxIjdnZYc M2RefcdLYzDLvJFHJl/nQDvIsI2IRFUBc9J2thWxJDYczCZee/bD37jTtoHi0Uwh dZl8yWkXCAjD+G+Gc0Pvl/HoZcJGUa5GLTZwPkZBMUtfF3oplBogv6f7cAyt1BLj csge91KdJvDTMLBFe81FkIjm6rW6+yCxOLrO3FqSd3HpPNg2B90o41fsASPu6FEb 01hyoCP+gbGKOoHVDTfYzmbyx5NqlLAH5RDQiWZTfNW2yAl/ZAjlvl9qDZDLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+F7UJpusSVrNgYRzeK17yKBEWg8wHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrVHaz+tNwwAbpSLcEpm9leOgfK7xevZ0fg V1x1WzmN/WQTaBeIk+mopmWeY8P5e+Inn7uq15N4BFXdOonFiubEibyr6CI0L+yV StWbhURj66xqPyXQ986LFp77eX5oiEou3lBOeTT+2J3e1BN08p+uKddEs/u+dZCe KifqQ081xmkvlKjH9ur5VNxGbBwL57HIUb01Dk61v3iEJZgRQbtCZ3mdJitfmIkJ qt8jMftDAEXTgcfdWyO/fpQ9X7P2mTfy68cNxM5Y39cVqbkpjRCqw/0+zZa2b+5T VleJuRcj5do2uiz2XVvUHVwoDspozEI3tkP0gWPOW7Htk5mpKxU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:25 2025 by rpki-client