$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft File: 11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json) Hash identifier: I1sziMajx5M1lv1+dDKzo8B33BJoYuMFVFndkq9eeVE= Subject key identifier: D9:16:D9:F2:45:98:05:6A:71:19:FD:0F:38:91:2D:8E:F9:03:58:71 Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 Certificate issuer: /CN=11D0290B4630192458231FFEA93A463483E71D15 Certificate serial: 21DF5A4FA3912B6EE9013295C0E0C3FE5AC29D66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft Manifest number: 0194 Signing time: Mon 21 Jul 2025 12:32:01 +0000 Manifest this update: Mon 21 Jul 2025 12:27:01 +0000 Manifest next update: Thu 24 Jul 2025 16:22:01 +0000 Files and hashes: 1: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: /J/AyxIihV7qP8j8os+4Ddk4t0/H8+IlrTHn+dTyHr4=) 2: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: dQzVS5c6rVBRF/0tO6cIv3bR4aPlpbtkxJTOxw37HyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:df:5a:4f:a3:91:2b:6e:e9:01:32:95:c0:e0:c3:fe:5a:c2:9d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15 Validity Not Before: Jul 21 12:27:01 2025 GMT Not After : Jul 24 16:22:01 2025 GMT Subject: CN=D916D9F24598056A7119FD0F38912D8EF9035871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:46:53:46:1a:1d:c9:16:16:be:ce:a1:3f: 84:73:7c:53:39:09:9c:dd:0a:da:30:47:04:a9:5d: 8f:ee:d3:5b:46:6f:60:07:56:69:67:f6:2a:37:e2: e8:c4:50:c8:da:25:8f:7b:e1:e2:86:7e:a4:4e:2e: cd:1a:df:73:d7:3a:ad:f0:e3:74:7a:4d:10:ac:cc: 82:c2:af:35:61:2f:98:ec:1e:a1:d7:8a:73:c8:6c: cc:28:e3:f4:8f:af:ea:99:ce:6d:90:27:fe:1c:21: d7:9c:af:11:f0:ae:46:0c:41:c5:07:85:7f:fe:f7: dc:aa:a2:08:31:32:05:4d:42:91:96:5e:7b:22:76: 4e:4c:af:aa:a8:5a:29:e1:4b:8c:66:f5:2e:7f:91: 5e:06:65:ac:8a:ef:32:a8:c7:b7:f3:ae:70:32:e3: 34:de:03:f8:88:a3:e6:7f:a7:e6:c1:d2:b9:0a:a9: 49:3d:0e:8b:31:ed:33:58:72:03:cf:da:48:a5:83: 48:1f:51:34:5a:2c:fc:7a:74:1c:81:96:62:00:1c: 1d:38:f3:28:8f:e8:d2:bb:21:be:1b:51:81:d4:68: 55:7e:f7:1f:c1:bd:bd:09:4d:55:41:73:4f:32:07: b4:61:0e:f5:61:22:94:32:9e:3f:7f:b5:b8:3d:58: 1f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:16:D9:F2:45:98:05:6A:71:19:FD:0F:38:91:2D:8E:F9:03:58:71 X509v3 Authority Key Identifier: keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a5:1b:9d:3a:0d:d1:9c:c0:7d:1c:06:01:63:39:99:89:5a: ab:6b:fa:fa:23:46:c4:3b:f1:d4:c8:45:9f:69:b9:7b:1e:fd: 48:11:08:b9:88:3d:2f:2f:b6:03:8b:af:8c:01:bb:26:3d:07: 6d:56:c0:83:f6:0c:eb:ad:6a:2f:b5:88:67:1b:9f:06:a9:fb: 95:f9:a9:54:04:fe:81:c7:b4:1a:04:67:5c:17:27:d2:05:9d: eb:fe:18:f0:cf:45:be:3b:69:f4:69:be:0d:e3:42:0f:61:59: 96:d4:8b:06:a4:71:b5:fe:c0:95:1b:35:02:dc:9a:d6:cf:2e: c0:03:6d:0f:c3:68:93:50:79:4a:00:c2:7e:21:a1:4e:5e:9d: 1a:9d:da:b9:40:7d:5c:70:18:e7:b2:5f:fe:a4:e3:cd:ef:bc: 48:d7:19:2b:e8:e0:4d:c4:e0:55:4b:39:ca:c8:11:c9:12:80: 18:93:be:18:39:08:b1:25:8c:35:cb:60:35:55:e3:bd:1c:0f: 76:7f:26:1b:e0:0a:89:47:5d:04:db:20:e9:8c:08:7f:16:4b: 16:e1:12:e7:56:3f:83:04:24:5e:12:ec:94:e0:f0:a9:38:ca: 22:ea:44:a0:92:a1:1b:0d:42:51:ff:c5:48:a8:7e:31:b2:30: 83:f5:0c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUId9aT6ORK27pATKVwODD/lrCnWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4 M0U3MUQxNTAeFw0yNTA3MjExMjI3MDFaFw0yNTA3MjQxNjIyMDFaMDMxMTAvBgNV BAMTKEQ5MTZEOUYyNDU5ODA1NkE3MTE5RkQwRjM4OTEyRDhFRjkwMzU4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4c0ZTRhodyRYWvs6hP4RzfFM5 CZzdCtowRwSpXY/u01tGb2AHVmln9io34ujEUMjaJY974eKGfqROLs0a33PXOq3w 43R6TRCszILCrzVhL5jsHqHXinPIbMwo4/SPr+qZzm2QJ/4cIdecrxHwrkYMQcUH hX/+99yqoggxMgVNQpGWXnsidk5Mr6qoWinhS4xm9S5/kV4GZayK7zKox7fzrnAy 4zTeA/iIo+Z/p+bB0rkKqUk9Dosx7TNYcgPP2kilg0gfUTRaLPx6dByBlmIAHB04 8yiP6NK7Ib4bUYHUaFV+9x/Bvb0JTVVBc08yB7RhDvVhIpQynj9/tbg9WB/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RbZ8kWYBWpxGf0POJEtjvkDWHEwHwYDVR0j BBgwFoAUEdApC0YwGSRYIx/+qTpGNIPnHRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdlY2NmZi1jZTliLTQxZGEtYjk4YS1hYmNmZTQ5MjUzYWYvMC8xMUQwMjkwQjQ2 MzAxOTI0NTgyMzFGRkVBOTNBNDYzNDgzRTcxRDE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4M0U3 MUQxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2 MzQ4M0U3MUQxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOlG506DdGcwH0cBgFjOZmJWqtr+vojRsQ7 8dTIRZ9puXse/UgRCLmIPS8vtgOLr4wBuyY9B21WwIP2DOutai+1iGcbnwap+5X5 qVQE/oHHtBoEZ1wXJ9IFnev+GPDPRb47afRpvg3jQg9hWZbUiwakcbX+wJUbNQLc mtbPLsADbQ/DaJNQeUoAwn4hoU5enRqd2rlAfVxwGOeyX/6k483vvEjXGSvo4E3E 4FVLOcrIEckSgBiTvhg5CLEljDXLYDVV470cD3Z/JhvgColHXQTbIOmMCH8WSxbh EudWP4MEJF4S7JTg8Kk4yiLqRKCSoRsNQlH/xUiofjGyMIP1DBo= -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:21 2025 by rpki-client