$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: Uuj+U8MAIXO+sD7AQ80nbwWiuzAlyfljEXOXkMuAOrI= Subject key identifier: 89:21:C9:B2:02:F6:82:1E:D9:FE:9F:8A:34:52:31:25:5E:ED:FE:D1 Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 0A2872ADB7AB042F917557613DBACDA873348431 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 0459 Signing time: Sat 19 Jul 2025 06:50:36 +0000 Manifest this update: Sat 19 Jul 2025 06:45:36 +0000 Manifest next update: Tue 22 Jul 2025 14:13:36 +0000 Files and hashes: 1: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: e95q+C4KNSdHsgEMXKBGexOr+gSPbjbSf8xx5WuRh4E=) 2: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: q8jtLBKBKQeodF380oFs3a5khPlHgV+mCvTqqN3bIXc=) 3: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: Riw6dcMVfaMH7YcdR5/8rwW9Lvi4KEfM0QRQa87aMxU=) 4: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: jZ2VCixJokCjVkqlhzv/JzHDhAkV+oo6GioQBGOSoX4=) 5: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: RLjDgS7MtF3tPcpoTSb39JP1PHPvNJRDVIHMYjPpYko=) 6: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=) 7: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: pbptzbuOalIu4g6EBTk1Hf5iY+nFXqv+7IJZhSllhjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:28:72:ad:b7:ab:04:2f:91:75:57:61:3d:ba:cd:a8:73:34:84:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: Jul 19 06:45:36 2025 GMT Not After : Jul 22 14:13:36 2025 GMT Subject: CN=8921C9B202F6821ED9FE9F8A345231255EEDFED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:a3:44:84:5f:f7:eb:1e:fb:4c:16:12:34: ac:60:a3:26:ba:6e:55:83:7e:7e:01:94:3e:e2:8f: e3:27:46:4b:67:37:56:7a:46:32:a6:55:42:9e:e6: 63:27:da:f2:9b:35:d2:06:42:cc:30:9f:59:b9:c2: 88:88:f2:dc:52:1c:f0:bb:35:0c:1a:a1:74:b4:6a: df:2f:2d:5b:b0:bb:5f:4d:c2:17:d7:8d:b6:b5:dd: b6:bf:b6:81:00:3a:e5:56:85:50:16:f0:9b:10:c1: 57:68:a0:07:76:84:ab:a9:a3:8a:1a:e4:35:42:c3: 8a:a0:6f:e0:38:83:4f:bd:e8:26:9b:7b:16:5a:fe: 05:3f:3a:04:f7:f4:87:ed:82:1b:7c:46:10:d4:0c: c2:e2:d6:96:c9:28:b2:fb:d2:d5:eb:2f:a6:73:f7: 7d:48:c2:62:03:75:14:9b:92:1e:3b:27:e2:af:f7: 25:05:2d:f9:94:79:7a:55:7e:ee:7f:66:70:f2:6e: 01:f5:47:38:6c:ea:3e:b8:ff:f5:ce:2b:6e:21:19: bb:03:b4:a4:ad:43:d6:f4:ac:18:33:05:e0:f8:f3: d9:41:3a:91:e5:48:f4:87:74:27:50:f8:a7:35:e6: a1:db:e7:d6:68:02:37:21:24:fc:0e:b3:34:4d:ab: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:21:C9:B2:02:F6:82:1E:D9:FE:9F:8A:34:52:31:25:5E:ED:FE:D1 X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ab:ca:51:15:27:6d:a7:a2:7e:90:88:82:fe:bf:f6:57:20: 29:eb:96:6d:18:4f:b2:00:3e:f0:70:93:ea:bd:5d:4d:c2:66: a8:31:0a:aa:99:e6:f7:91:14:81:5d:4c:5d:19:82:13:5e:32: 39:17:b5:f9:36:0c:d8:e1:cd:35:60:99:90:e5:61:75:5e:7a: a6:6c:24:e3:f7:d1:cf:32:d3:97:7f:f4:ed:dd:3b:5a:ff:8c: 3a:dc:3a:d3:ea:ed:3d:6c:a9:59:9b:ba:c8:d4:18:25:b4:1c: 18:9c:d3:ef:66:e0:3c:c3:a1:0c:8e:0b:41:56:4d:84:82:72: 01:4e:e1:4b:20:96:8d:0f:19:72:e9:1d:2b:06:ce:04:99:e2: 68:12:ab:96:7b:1a:39:d7:8a:da:3a:e6:51:2a:d3:ca:16:05: 75:bf:fc:8a:79:c6:8a:e5:7c:a9:c8:72:90:36:73:b8:75:49: 25:d1:b7:49:6d:a8:6f:73:34:9d:26:8a:59:ee:db:6a:d8:0b: 44:3b:a3:46:86:e0:0a:38:4e:f3:23:92:9e:b3:26:eb:a5:c3: 90:83:96:06:b9:cf:e7:9f:fb:40:bf:0a:34:b0:42:c1:f9:06: 33:ee:b9:47:09:67:44:4b:a1:81:c3:6e:4a:67:8e:7f:e1:82: ce:b1:ea:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCihyrberBC+RdVdhPbrNqHM0hDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNTA3MTkwNjQ1MzZaFw0yNTA3MjIxNDEzMzZaMDMxMTAvBgNV BAMTKDg5MjFDOUIyMDJGNjgyMUVEOUZFOUY4QTM0NTIzMTI1NUVFREZFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFKNEhF/36x77TBYSNKxgoya6 blWDfn4BlD7ij+MnRktnN1Z6RjKmVUKe5mMn2vKbNdIGQswwn1m5woiI8txSHPC7 NQwaoXS0at8vLVuwu19NwhfXjba13ba/toEAOuVWhVAW8JsQwVdooAd2hKupo4oa 5DVCw4qgb+A4g0+96CabexZa/gU/OgT39Iftght8RhDUDMLi1pbJKLL70tXrL6Zz 931IwmIDdRSbkh47J+Kv9yUFLfmUeXpVfu5/ZnDybgH1Rzhs6j64//XOK24hGbsD tKStQ9b0rBgzBeD489lBOpHlSPSHdCdQ+Kc15qHb59ZoAjchJPwOszRNq8mvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiSHJsgL2gh7Z/p+KNFIxJV7t/tEwHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmrylEVJ22non6QiIL+v/ZXICnrlm0YT7IA PvBwk+q9XU3CZqgxCqqZ5veRFIFdTF0ZghNeMjkXtfk2DNjhzTVgmZDlYXVeeqZs JOP30c8y05d/9O3dO1r/jDrcOtPq7T1sqVmbusjUGCW0HBic0+9m4DzDoQyOC0FW TYSCcgFO4Usglo0PGXLpHSsGzgSZ4mgSq5Z7GjnXito65lEq08oWBXW//Ip5xorl fKnIcpA2c7h1SSXRt0ltqG9zNJ0milnu22rYC0Q7o0aG4Ao4TvMjkp6zJuulw5CD lga5z+ef+0C/CjSwQsH5BjPuuUcJZ0RLoYHDbkpnjn/hgs6x6gY= -----END CERTIFICATE-----Generated at Mon Jul 21 08:58:21 2025 by rpki-client