$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: x1AAnkAtqGqAQXszjsJJ4BPW4SK1oVXhdGTyyTKX4yE= Subject key identifier: A5:DB:0A:85:40:B6:5E:01:2E:81:59:C8:D2:AB:25:CE:70:BB:6A:73 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 7715C16DF6BD166D6F5BC33293C07E754D166D87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02DB Signing time: Fri 31 Oct 2025 21:20:48 +0000 Manifest this update: Fri 31 Oct 2025 21:15:48 +0000 Manifest next update: Tue 04 Nov 2025 09:18:48 +0000 Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=) 2: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: yzu395hJmCONFhtKCnpFjZn2e/OduaecmjzrimXygVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:15:c1:6d:f6:bd:16:6d:6f:5b:c3:32:93:c0:7e:75:4d:16:6d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Oct 31 21:15:48 2025 GMT Not After : Nov 4 09:18:48 2025 GMT Subject: CN=A5DB0A8540B65E012E8159C8D2AB25CE70BB6A73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:62:e6:08:13:cf:22:b8:1b:d1:b7:10:0e: 75:30:b6:a3:4c:a6:0a:a4:5e:5d:0b:32:7d:98:39: 55:a4:c6:1e:f5:27:21:c3:b7:fd:dc:f1:ac:45:09: 32:88:01:34:47:5b:66:ad:7e:57:9a:5c:13:fc:f7: d8:f4:2e:6f:3b:bd:ac:2a:2d:22:b8:77:12:1a:45: 70:3d:45:5c:97:ae:7e:71:fe:67:b6:a3:9b:12:29: 4b:1c:5c:50:83:4e:48:dd:fc:85:ea:8a:6d:70:a5: e0:fb:77:11:cf:35:a5:c2:db:cc:2b:e4:5b:ff:e8: 87:ab:af:0d:9b:5a:e7:36:e2:1e:a3:ca:17:a3:36: aa:85:2b:4a:ca:c5:ec:ae:a7:13:66:84:c6:a2:35: 07:94:ab:a6:9d:67:1f:99:25:06:35:fb:1d:1f:7a: 5e:d0:8b:de:ce:b1:b1:36:29:b4:09:88:cd:03:6d: f3:7e:d3:ed:87:64:ca:92:ef:ce:8e:fb:7f:a3:47: 17:2d:39:ca:93:3c:9f:4f:b5:a7:d6:3b:39:bc:39: 92:a4:4d:02:0f:48:7e:a6:63:92:f9:d1:f2:fe:1e: e7:45:2d:51:07:0d:60:b6:2a:33:52:71:9a:cc:30: 82:62:59:25:c7:91:76:c4:ca:82:be:91:a3:23:61: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DB:0A:85:40:B6:5E:01:2E:81:59:C8:D2:AB:25:CE:70:BB:6A:73 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e2:9e:55:d7:bd:b8:b7:da:30:6e:f6:98:08:68:39:05:a4: 87:e5:fd:58:36:d7:60:36:95:6f:7b:68:f2:ac:67:1e:5d:da: 11:8c:ed:db:d6:7f:0f:e6:2a:4e:ba:c4:3a:e7:5b:bb:8d:3c: 4b:f3:27:d0:a6:78:f3:ad:52:6f:f5:78:e8:6b:84:3f:e2:ea: 9f:f8:5a:da:09:a9:31:b8:e3:d6:63:15:27:da:e0:2b:86:50: 07:6d:ee:86:00:73:c1:66:06:ce:8d:4a:27:f5:cd:f1:25:91: 5a:6e:bd:a2:39:65:1a:38:f7:b8:7c:12:28:77:a0:63:11:30: 8b:ff:3b:0e:25:75:61:c9:1b:a3:70:a3:06:c9:bf:1e:57:87: cf:c4:9e:59:b1:e2:1c:11:33:56:e7:3c:e3:6a:3c:29:9c:a1: 4b:22:7e:84:25:25:47:b7:81:c3:2f:b3:00:0b:36:ff:8d:88: dc:b3:0f:ff:a7:b0:57:a3:45:fe:0e:a5:73:92:f1:7c:c8:a9: 6b:32:d9:7b:77:bb:96:18:1e:70:dd:9f:d0:96:6f:4a:6b:6a: 5b:04:d6:f3:d5:a8:d3:70:06:e2:8a:5a:09:bd:10:e8:c8:e2: c5:ae:8c:e2:aa:85:6f:06:bf:65:80:9e:f4:fd:65:e0:b8:11: b8:77:61:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxXBbfa9Fm1vW8Myk8B+dU0WbYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTEwMzEyMTE1NDhaFw0yNTExMDQwOTE4NDhaMDMxMTAvBgNV BAMTKEE1REIwQTg1NDBCNjVFMDEyRTgxNTlDOEQyQUIyNUNFNzBCQjZBNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HWLmCBPPIrgb0bcQDnUwtqNM pgqkXl0LMn2YOVWkxh71JyHDt/3c8axFCTKIATRHW2atfleaXBP899j0Lm87vawq LSK4dxIaRXA9RVyXrn5x/me2o5sSKUscXFCDTkjd/IXqim1wpeD7dxHPNaXC28wr 5Fv/6Ierrw2bWuc24h6jyhejNqqFK0rKxeyupxNmhMaiNQeUq6adZx+ZJQY1+x0f el7Qi97OsbE2KbQJiM0DbfN+0+2HZMqS786O+3+jRxctOcqTPJ9PtafWOzm8OZKk TQIPSH6mY5L50fL+HudFLVEHDWC2KjNScZrMMIJiWSXHkXbEyoK+kaMjYVHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpdsKhUC2XgEugVnI0qslznC7anMwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDinlXXvbi32jBu9pgIaDkFpIfl/Vg212A2 lW97aPKsZx5d2hGM7dvWfw/mKk66xDrnW7uNPEvzJ9CmePOtUm/1eOhrhD/i6p/4 WtoJqTG449ZjFSfa4CuGUAdt7oYAc8FmBs6NSif1zfElkVpuvaI5ZRo497h8Eih3 oGMRMIv/Ow4ldWHJG6NwowbJvx5Xh8/Enlmx4hwRM1bnPONqPCmcoUsifoQlJUe3 gcMvswALNv+NiNyzD/+nsFejRf4OpXOS8XzIqWsy2Xt3u5YYHnDdn9CWb0pralsE 1vPVqNNwBuKKWgm9EOjI4sWujOKqhW8Gv2WAnvT9ZeC4Ebh3YX8= -----END CERTIFICATE-----Generated at Sun Nov 2 05:04:30 2025 by rpki-client