$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: lvxhX/4WUyVItQmd0CKa6eQUIJQM16OLrQu0+TE2wYw= Subject key identifier: 18:FA:6A:86:14:0F:E9:DB:56:C7:86:16:CB:67:0E:EC:3D:D1:38:72 Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 714E3FB00CAE5D18D86BCD8263D5CE021391775C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 0502 Signing time: Mon 21 Jul 2025 00:41:58 +0000 Manifest this update: Mon 21 Jul 2025 00:36:58 +0000 Manifest next update: Thu 24 Jul 2025 12:06:58 +0000 Files and hashes: 1: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=) 2: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=) 3: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=) 4: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: XIc4KBuf2Uw1gfDEzGiMDOKA1R2n+bGrKgb6QFJYcqQ=) 5: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: p9nIhhAXDA1VGK03OeTNU5iCdtRuqI9pYS72qu+FFmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4e:3f:b0:0c:ae:5d:18:d8:6b:cd:82:63:d5:ce:02:13:91:77:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Jul 21 00:36:58 2025 GMT Not After : Jul 24 12:06:58 2025 GMT Subject: CN=18FA6A86140FE9DB56C78616CB670EEC3DD13872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:0f:ea:54:d4:2b:9c:45:51:1c:26:20:60: 17:66:0b:f0:2b:31:82:f7:a0:87:fd:f5:aa:2b:c2: cd:44:26:69:ca:6e:3c:ea:c3:1b:13:15:03:42:f9: 1d:b1:78:36:71:08:cf:ec:37:5e:14:54:e8:99:89: 55:40:f9:87:b5:d0:72:c8:4a:1c:a2:64:ec:9a:b9: 38:5c:79:c0:34:e9:32:06:ab:ae:fa:cc:3a:a0:de: 7f:3f:ae:92:16:97:a9:59:1c:df:17:95:2a:59:0f: f9:a4:2b:c6:7a:f7:9d:f4:61:51:2a:e3:49:35:d8: 96:40:66:69:09:83:ce:4c:c8:ae:58:c7:fd:3f:a2: ea:9b:7d:8f:40:2a:e0:a5:df:89:21:93:2a:c0:8e: b7:92:4b:88:da:1b:cb:51:c0:54:c3:b2:83:a6:6f: 33:41:3c:88:f2:7b:17:b8:81:3d:7f:ff:f7:12:b3: c1:bb:ce:e9:0b:db:54:b3:5b:62:53:fc:84:b1:df: cb:6d:7b:65:f1:b4:7c:18:52:13:82:18:75:45:cb: 16:2f:c5:6d:cf:1e:04:bf:65:7d:ff:52:34:3d:d7: 75:1c:f2:7e:c2:d6:5f:64:51:cc:a7:26:5c:05:31: 2e:ef:29:06:e0:3b:d8:68:ac:4c:53:b0:e3:6d:e3: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FA:6A:86:14:0F:E9:DB:56:C7:86:16:CB:67:0E:EC:3D:D1:38:72 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bb:46:07:75:22:43:97:43:fd:f9:10:d2:e0:ad:fc:07:51: 23:eb:5a:80:b8:3b:84:c9:55:5f:d5:bc:83:af:4e:96:e5:ee: 1b:19:33:db:32:8c:6d:da:ab:58:39:00:2f:29:5b:f0:c8:e9: 21:6d:25:1b:c6:5d:83:ff:78:2a:eb:24:9a:67:8b:fb:95:ea: 61:ec:4e:ea:dd:d7:81:01:83:4a:9a:ce:80:a1:14:37:ac:91: 9a:93:d1:e9:38:c4:ce:19:51:61:55:c1:f0:52:b2:ec:94:55: 5e:81:09:08:e9:0c:fc:fc:c8:9a:f8:9f:cb:1a:67:93:29:73: 63:63:fb:35:37:72:4f:dc:2c:4a:d1:ee:b2:84:44:b3:e1:35: a8:7a:1f:a0:1c:88:53:df:a9:33:64:de:f5:bf:59:bb:6e:81: 0d:59:9a:1c:86:e5:d1:18:1b:d1:97:08:37:81:ff:30:59:6d: 39:10:d6:79:5c:bd:e7:bb:2b:8b:c1:c2:de:0c:6b:f1:0c:83: d1:48:a5:34:04:a1:71:d6:d6:69:1d:ad:2b:26:9f:35:86:a9: a5:e8:ba:ec:9f:8d:65:43:84:51:21:26:3a:1c:52:53:bc:9c: dd:03:69:31:87:4f:06:23:d1:40:56:c2:c8:8d:93:25:79:ea: b3:30:ff:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcU4/sAyuXRjYa82CY9XOAhORd1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNTA3MjEwMDM2NThaFw0yNTA3MjQxMjA2NThaMDMxMTAvBgNV BAMTKDE4RkE2QTg2MTQwRkU5REI1NkM3ODYxNkNCNjcwRUVDM0REMTM4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sQ/qVNQrnEVRHCYgYBdmC/Ar MYL3oIf99aorws1EJmnKbjzqwxsTFQNC+R2xeDZxCM/sN14UVOiZiVVA+Ye10HLI ShyiZOyauThcecA06TIGq676zDqg3n8/rpIWl6lZHN8XlSpZD/mkK8Z69530YVEq 40k12JZAZmkJg85MyK5Yx/0/ouqbfY9AKuCl34khkyrAjreSS4jaG8tRwFTDsoOm bzNBPIjyexe4gT1///cSs8G7zukL21SzW2JT/ISx38tte2XxtHwYUhOCGHVFyxYv xW3PHgS/ZX3/UjQ913Uc8n7C1l9kUcynJlwFMS7vKQbgO9horExTsONt48nhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGPpqhhQP6dtWx4YWy2cO7D3ROHIwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq7Rgd1IkOXQ/35ENLgrfwHUSPrWoC4O4TJ VV/VvIOvTpbl7hsZM9syjG3aq1g5AC8pW/DI6SFtJRvGXYP/eCrrJJpni/uV6mHs Turd14EBg0qazoChFDeskZqT0ek4xM4ZUWFVwfBSsuyUVV6BCQjpDPz8yJr4n8sa Z5Mpc2Nj+zU3ck/cLErR7rKERLPhNah6H6AciFPfqTNk3vW/WbtugQ1ZmhyG5dEY G9GXCDeB/zBZbTkQ1nlcvee7K4vBwt4Ma/EMg9FIpTQEoXHW1mkdrSsmnzWGqaXo uuyfjWVDhFEhJjocUlO8nN0DaTGHTwYj0UBWwsiNkyV56rMw/1g= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:02 2025 by rpki-client