$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json) Hash identifier: fal0Y6L2ojzGjQTqbwot4kalMwygJWGXvPdKflFndEo= Subject key identifier: CD:24:14:C5:C9:DB:9F:69:15:A2:5C:A9:D5:00:0E:8D:27:E0:7D:D4 Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Certificate serial: 04210B4642FF544E3D1E0BC697F0DAFF0431A772 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft Manifest number: 01D7 Signing time: Sat 19 Jul 2025 11:12:15 +0000 Manifest this update: Sat 19 Jul 2025 11:07:15 +0000 Manifest next update: Tue 22 Jul 2025 19:17:15 +0000 Files and hashes: 1: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: 0Uw2PIlWDAGE9EAdIQN+cpycFZFDrSr303RCOe7U/E8=) 2: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: ulGt6Ja3J6tQ4ZzHt93InCKBQLK2YemytZvBgddjF4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:21:0b:46:42:ff:54:4e:3d:1e:0b:c6:97:f0:da:ff:04:31:a7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Validity Not Before: Jul 19 11:07:15 2025 GMT Not After : Jul 22 19:17:15 2025 GMT Subject: CN=CD2414C5C9DB9F6915A25CA9D5000E8D27E07DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:a7:84:18:cc:7c:1d:f0:5e:a3:b4:40:f7: e3:fe:c1:f8:5d:7b:13:a8:ba:24:d2:3d:cb:56:03: 68:a0:37:64:93:df:66:43:9c:32:e0:a4:f6:71:e9: 5a:8e:7c:25:25:e0:34:1b:c2:e1:93:11:93:c4:5e: 3f:2d:ba:9e:56:e1:4a:cd:6b:d1:23:ca:80:2f:e9: 3f:2f:ff:cb:4a:bd:1d:32:6d:71:a1:3b:77:90:4c: d1:4a:e4:81:58:dd:38:c9:b2:bc:12:c9:c5:94:7a: f6:fb:ab:cf:fb:26:f8:e6:3f:3a:c6:be:84:77:91: 10:2f:93:a5:09:54:77:dd:ca:ac:34:c8:6d:c7:4a: d2:87:f6:67:64:c2:33:ed:c8:86:02:9b:13:83:e7: 6e:0c:93:76:c7:46:d1:7b:f3:4e:eb:44:e9:ef:cb: 26:1e:cf:30:03:4d:5b:f2:cb:b1:d0:a5:82:68:23: c5:a2:6a:56:25:49:1d:3b:aa:03:e3:15:d3:0c:aa: f8:1e:53:c5:ca:fb:b8:c5:11:dc:9e:c9:9c:09:23: 26:7e:bb:aa:3a:1f:f7:0e:eb:b5:3b:65:0a:2f:6f: be:32:67:69:a9:db:a4:a7:7f:77:f6:3c:c4:5e:53: a5:f6:01:46:87:c4:c0:ff:62:90:4a:d2:8f:d8:c2: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:14:C5:C9:DB:9F:69:15:A2:5C:A9:D5:00:0E:8D:27:E0:7D:D4 X509v3 Authority Key Identifier: keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c1:81:c2:ac:80:c2:f6:64:0f:a7:dd:9d:63:48:75:d6:c9: f7:c1:7a:17:eb:d1:f2:7b:19:a6:0c:c4:8d:be:f1:56:b3:7f: fc:b6:ee:94:bc:39:34:c7:63:d2:03:48:73:6b:47:39:c8:e8: 67:1d:bb:bd:68:f6:92:a8:fa:77:b9:c4:f1:42:9d:18:19:b2: 25:d5:e5:5a:d5:ed:9a:22:7f:25:f2:4c:4e:7d:12:62:9e:2a: 62:fb:01:fe:ac:bc:47:b1:19:a1:f4:b9:cf:4b:11:9b:d3:ce: 3a:9c:0f:7a:f4:ff:fa:c1:b1:b2:d8:c1:6a:ab:bb:1f:bf:c0: ab:e9:20:c6:a7:a2:19:fe:db:91:2e:49:b4:db:f0:4d:c9:db: bc:50:06:98:3f:45:c2:20:86:f5:f8:d0:8e:54:d1:7a:4a:da: 17:38:19:df:05:63:7f:a2:39:22:fb:fd:c4:49:fe:6c:f9:98: be:51:4e:06:12:08:6b:26:5d:f2:c0:d3:c2:d2:18:a4:4d:5f: 26:43:fc:35:0f:86:f0:11:cd:eb:87:df:b8:36:99:35:65:23: c2:8b:f7:ed:5e:33:1b:a1:74:1f:ec:39:bd:c6:02:0d:5b:4c: 3c:77:de:09:75:e7:0a:81:86:dc:cc:32:bc:8e:16:33:8c:9d: 22:ce:12:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCELRkL/VE49HgvGl/Da/wQxp3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FD N0EzNTE1QzAeFw0yNTA3MTkxMTA3MTVaFw0yNTA3MjIxOTE3MTVaMDMxMTAvBgNV BAMTKENEMjQxNEM1QzlEQjlGNjkxNUEyNUNBOUQ1MDAwRThEMjdFMDdERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqKeEGMx8HfBeo7RA9+P+wfhd exOouiTSPctWA2igN2ST32ZDnDLgpPZx6VqOfCUl4DQbwuGTEZPEXj8tup5W4UrN a9EjyoAv6T8v/8tKvR0ybXGhO3eQTNFK5IFY3TjJsrwSycWUevb7q8/7JvjmPzrG voR3kRAvk6UJVHfdyqw0yG3HStKH9mdkwjPtyIYCmxOD524Mk3bHRtF7807rROnv yyYezzADTVvyy7HQpYJoI8WialYlSR07qgPjFdMMqvgeU8XK+7jFEdyeyZwJIyZ+ u6o6H/cO67U7ZQovb74yZ2mp26Snf3f2PMReU6X2AUaHxMD/YpBK0o/Ywh/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSQUxcnbn2kVolyp1QAOjSfgfdQwHwYDVR0j BBgwFoAUEaycrM6ar9ZuQYPm4OWZOsejUVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWJiZTVjMC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC8xMUFDOUNBQ0NF OUFBRkQ2NkU0MTgzRTZFMEU1OTkzQUM3QTM1MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FDN0Ez NTE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5 M0FDN0EzNTE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3BgcKsgML2ZA+n3Z1jSHXWyffBehfr0fJ7 GaYMxI2+8Vazf/y27pS8OTTHY9IDSHNrRznI6Gcdu71o9pKo+ne5xPFCnRgZsiXV 5VrV7ZoifyXyTE59EmKeKmL7Af6svEexGaH0uc9LEZvTzjqcD3r0//rBsbLYwWqr ux+/wKvpIManohn+25EuSbTb8E3J27xQBpg/RcIghvX40I5U0XpK2hc4Gd8FY3+i OSL7/cRJ/mz5mL5RTgYSCGsmXfLA08LSGKRNXyZD/DUPhvARzeuH37g2mTVlI8KL 9+1eMxuhdB/sOb3GAg1bTDx33gl15wqBhtzMMryOFjOMnSLOEmU= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:31 2025 by rpki-client