$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: VpBRx5FjUUqc4ZIFbCfdsbwTV8HkQGzFfGVAly++XgM= Subject key identifier: 04:0F:C1:49:1D:CD:30:5A:2F:FF:C2:3E:64:A1:3E:61:BF:19:01:F9 Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 3365B5101CF30FAD509A48851359700E6A491D7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: EC Signing time: Fri 22 Aug 2025 12:20:01 +0000 Manifest this update: Fri 22 Aug 2025 12:15:01 +0000 Manifest next update: Mon 25 Aug 2025 12:46:01 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: Jwv0gA8fk3yoBN8wNHBZ8Dx27fR4hWBf2um8D+vcr6o=) 2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: h8iGDVcv1Hmq4reawRpiQdKRmov9GtKZxgXiYLM/6kU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:65:b5:10:1c:f3:0f:ad:50:9a:48:85:13:59:70:0e:6a:49:1d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: Aug 22 12:15:01 2025 GMT Not After : Aug 25 12:46:01 2025 GMT Subject: CN=040FC1491DCD305A2FFFC23E64A13E61BF1901F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:37:fe:7b:a5:d7:f6:d5:b9:8c:bb:69:35: ca:1c:dc:a5:13:5d:40:ca:56:bd:42:cd:d3:37:dc: 73:b4:b5:0b:0d:f1:da:13:8d:ff:52:66:d9:ef:32: ce:83:34:fa:bb:a9:c4:f1:c8:f6:0f:37:55:99:a5: 37:21:27:eb:74:5d:a3:cb:14:3d:77:3d:86:bb:7a: aa:f8:08:9d:3a:a8:09:34:a7:72:1c:3f:58:dc:a9: 5b:70:2e:c6:a8:a8:4f:c8:a2:43:fc:74:61:6e:8d: 58:3a:ec:cb:68:18:a6:85:38:48:0e:03:48:9c:b2: 88:0f:52:b6:7c:68:b5:a1:9d:6f:9a:1b:ac:ec:75: aa:d6:b2:b2:aa:37:af:28:e9:42:aa:23:f6:6c:fe: b8:52:d9:4f:65:f6:d6:eb:ab:b6:57:19:7b:dd:df: 98:f7:56:fd:d3:ae:79:8c:e3:ec:05:57:e2:57:b5: cb:b2:2d:50:e9:38:83:dd:a7:0b:e7:d5:dd:e7:91: 72:df:23:53:c6:06:f3:e6:e2:92:36:ed:af:aa:c4: 00:71:c8:2d:f4:56:2b:47:84:12:a7:65:f4:c1:d5: 70:7c:2a:9d:41:44:fb:ec:bd:7a:82:93:06:43:75: 3a:5a:fa:98:03:eb:68:7f:0a:27:f6:23:97:72:93: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0F:C1:49:1D:CD:30:5A:2F:FF:C2:3E:64:A1:3E:61:BF:19:01:F9 X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:87:bb:ee:6b:09:f1:2a:01:36:61:aa:7e:c6:c2:2a:24:7e: 4e:87:c8:b6:c5:57:c1:a6:d8:af:20:21:6c:e7:24:72:85:b1: 46:0c:a2:61:7d:44:e0:ea:5f:b4:b1:d6:11:c3:97:d9:d2:c7: 03:13:18:d9:62:95:bc:24:83:ae:25:f5:7f:76:8b:be:22:81: bf:cc:f6:a7:c7:bb:e9:96:4e:9a:a5:ad:93:a1:7d:6b:9b:f1: b9:ab:cb:96:46:00:7c:60:e9:32:4b:2e:e0:2f:b4:70:44:0b: bb:b5:fc:48:cc:c6:72:3c:32:27:ce:d2:1b:84:60:12:93:50: 4b:e8:97:f5:cd:2a:72:83:e8:82:5e:77:f0:c7:c8:1a:1b:36: ab:a4:ab:20:23:94:fe:ab:7e:60:06:61:a3:a8:a4:98:c0:94: fc:86:5a:02:ad:63:09:df:bc:1b:da:d7:ca:fb:b5:d8:d9:a5: e7:ac:38:dd:f7:99:a9:e3:a5:0a:ee:fc:94:80:74:38:dd:1b: b1:62:6d:cc:28:5d:39:7f:e1:cd:3d:67:cc:39:5c:7f:86:46: 59:e2:ef:7f:0f:5b:05:9e:73:c9:5e:80:67:d5:de:7f:52:f9: 07:40:6c:15:98:e0:97:8f:e8:98:5c:24:0d:90:93:04:e2:2d: a4:8f:e9:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM2W1EBzzD61QmkiFE1lwDmpJHXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNTA4MjIxMjE1MDFaFw0yNTA4MjUxMjQ2MDFaMDMxMTAvBgNV BAMTKDA0MEZDMTQ5MURDRDMwNUEyRkZGQzIzRTY0QTEzRTYxQkYxOTAxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Kjf+e6XX9tW5jLtpNcoc3KUT XUDKVr1CzdM33HO0tQsN8doTjf9SZtnvMs6DNPq7qcTxyPYPN1WZpTchJ+t0XaPL FD13PYa7eqr4CJ06qAk0p3IcP1jcqVtwLsaoqE/IokP8dGFujVg67MtoGKaFOEgO A0icsogPUrZ8aLWhnW+aG6zsdarWsrKqN68o6UKqI/Zs/rhS2U9l9tbrq7ZXGXvd 35j3Vv3TrnmM4+wFV+JXtcuyLVDpOIPdpwvn1d3nkXLfI1PGBvPm4pI27a+qxABx yC30VitHhBKnZfTB1XB8Kp1BRPvsvXqCkwZDdTpa+pgD62h/Cif2I5dyk9inAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBA/BSR3NMFov/8I+ZKE+Yb8ZAfkwHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuHu+5rCfEqATZhqn7Gwiokfk6HyLbFV8Gm 2K8gIWznJHKFsUYMomF9RODqX7Sx1hHDl9nSxwMTGNlilbwkg64l9X92i74igb/M 9qfHu+mWTpqlrZOhfWub8bmry5ZGAHxg6TJLLuAvtHBEC7u1/EjMxnI8MifO0huE YBKTUEvol/XNKnKD6IJed/DHyBobNqukqyAjlP6rfmAGYaOopJjAlPyGWgKtYwnf vBva18r7tdjZpeesON33manjpQru/JSAdDjdG7FibcwoXTl/4c09Z8w5XH+GRlni 738PWwWec8legGfV3n9S+QdAbBWY4JeP6JhcJA2QkwTiLaSP6aM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:41:53 2025 by rpki-client