$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: 2/gn+JgwMZM6e31l7kaJVeiI5B0YxguioYXdFfUwEn8= Subject key identifier: 97:ED:13:EB:28:3A:CF:08:8C:A9:00:6E:A9:E4:CE:E8:3D:13:0A:FE Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 426537C4006340D525EBD832C849E71361079699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 046F Signing time: Fri 05 Sep 2025 04:50:37 +0000 Manifest this update: Fri 05 Sep 2025 04:45:37 +0000 Manifest next update: Mon 08 Sep 2025 09:57:37 +0000 Files and hashes: 1: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: pbptzbuOalIu4g6EBTk1Hf5iY+nFXqv+7IJZhSllhjA=) 2: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: jZ2VCixJokCjVkqlhzv/JzHDhAkV+oo6GioQBGOSoX4=) 3: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=) 4: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: /De9PraBKQ9VNMLW73eKsHyTdK5CxUO/Ms23Vqs0bog=) 5: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: RLjDgS7MtF3tPcpoTSb39JP1PHPvNJRDVIHMYjPpYko=) 6: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: 9uXyJitLGp0oBbCeUs7TaAAY+iYSX4UWztwu8itJZIk=) 7: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: Riw6dcMVfaMH7YcdR5/8rwW9Lvi4KEfM0QRQa87aMxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:65:37:c4:00:63:40:d5:25:eb:d8:32:c8:49:e7:13:61:07:96:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: Sep 5 04:45:37 2025 GMT Not After : Sep 8 09:57:37 2025 GMT Subject: CN=97ED13EB283ACF088CA9006EA9E4CEE83D130AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:b0:27:ef:8f:a5:82:23:14:3c:f0:8f:98: 1c:6b:06:72:92:27:8f:ae:22:ab:3d:e6:56:50:9f: da:87:ce:7f:74:05:47:a0:ed:53:66:e2:d5:10:bd: 15:c5:ad:f2:a7:7a:58:de:d4:8a:2d:64:9f:ef:2e: 79:9d:aa:2a:8d:91:74:51:c8:cc:91:27:e3:09:05: 6b:d4:2c:ec:bb:39:0b:35:85:4c:c8:22:f1:7d:38: d6:ab:98:25:ae:6c:fc:45:37:28:35:a2:5e:0b:a9: 33:2e:6f:0d:ae:1a:ec:47:69:b9:e5:c1:d3:1b:7b: a6:3d:cc:3c:94:e9:70:d8:fb:55:97:c9:08:cb:04: ca:0b:df:b2:b8:90:0e:2d:64:aa:f3:43:02:03:de: b6:31:50:e1:9c:dc:c7:e5:cf:69:6d:b3:6b:f4:98: 2e:64:1b:ae:7a:f5:0d:70:c4:82:37:72:c7:14:92: e4:bd:ed:b9:cb:72:44:14:ea:03:e0:47:31:fe:48: 93:1d:a8:4e:53:18:0c:e0:47:60:b2:eb:e5:c7:97: c0:77:a5:68:43:d5:ae:bb:67:9e:9e:86:d6:c7:25: a6:82:da:a5:b5:12:21:d4:70:5a:b6:34:17:73:07: 3f:dc:51:2c:80:22:a1:93:ba:41:54:1c:f7:f9:f8: 30:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:ED:13:EB:28:3A:CF:08:8C:A9:00:6E:A9:E4:CE:E8:3D:13:0A:FE X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d3:0f:f6:1e:0b:4f:75:0a:5d:8c:d1:16:56:42:b0:1d:f0: 9a:cb:4f:a9:d5:56:a8:39:19:9c:3e:79:a6:f5:54:17:a0:7b: 1b:ca:d3:e7:e7:68:93:97:75:46:31:bd:74:82:d6:d3:53:a3: d1:4d:70:30:e2:b4:41:82:7c:3a:08:b9:00:3f:8b:f3:50:20: 45:85:fe:c8:3e:c2:60:4f:f0:89:b0:60:e2:76:2d:fb:fa:1d: 06:5f:af:da:b9:65:6c:a2:17:97:d0:50:e9:66:b5:cb:18:7e: aa:29:94:42:fd:6c:c9:ea:03:95:59:ba:d2:5b:ff:08:df:0f: c8:71:00:7a:f1:3a:89:82:8a:7c:d3:49:4e:e2:03:e4:93:f7: 6e:06:63:3b:cb:bb:8a:0c:71:a7:28:65:31:a1:98:13:23:da: cb:e3:60:7b:7d:c8:d4:ff:a1:6a:32:d0:00:89:5e:cc:a2:0a: ee:4f:1e:2a:84:4a:07:d5:4b:77:63:d8:20:94:8f:83:b2:a4: 5a:10:3e:b4:18:0a:08:55:50:09:73:ea:44:f6:af:0f:e0:00: 7d:5e:b9:e6:81:94:1d:0a:de:48:97:b5:85:4a:39:16:cf:2e: 69:aa:92:f9:32:b0:e7:11:98:cd:21:41:b6:a0:6f:9c:ff:28: cc:e3:22:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmU3xABjQNUl69gyyEnnE2EHlpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNTA5MDUwNDQ1MzdaFw0yNTA5MDgwOTU3MzdaMDMxMTAvBgNV BAMTKDk3RUQxM0VCMjgzQUNGMDg4Q0E5MDA2RUE5RTRDRUU4M0QxMzBBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIW7An74+lgiMUPPCPmBxrBnKS J4+uIqs95lZQn9qHzn90BUeg7VNm4tUQvRXFrfKnelje1IotZJ/vLnmdqiqNkXRR yMyRJ+MJBWvULOy7OQs1hUzIIvF9ONarmCWubPxFNyg1ol4LqTMubw2uGuxHabnl wdMbe6Y9zDyU6XDY+1WXyQjLBMoL37K4kA4tZKrzQwID3rYxUOGc3Mflz2lts2v0 mC5kG6569Q1wxII3cscUkuS97bnLckQU6gPgRzH+SJMdqE5TGAzgR2Cy6+XHl8B3 pWhD1a67Z56ehtbHJaaC2qW1EiHUcFq2NBdzBz/cUSyAIqGTukFUHPf5+DDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl+0T6yg6zwiMqQBuqeTO6D0TCv4wHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbTD/YeC091Cl2M0RZWQrAd8JrLT6nVVqg5 GZw+eab1VBegexvK0+fnaJOXdUYxvXSC1tNTo9FNcDDitEGCfDoIuQA/i/NQIEWF /sg+wmBP8ImwYOJ2Lfv6HQZfr9q5ZWyiF5fQUOlmtcsYfqoplEL9bMnqA5VZutJb /wjfD8hxAHrxOomCinzTSU7iA+ST924GYzvLu4oMcacoZTGhmBMj2svjYHt9yNT/ oWoy0ACJXsyiCu5PHiqESgfVS3dj2CCUj4OypFoQPrQYCghVUAlz6kT2rw/gAH1e ueaBlB0K3kiXtYVKORbPLmmqkvkysOcRmM0hQbagb5z/KMzjIug= -----END CERTIFICATE-----Generated at Fri Sep 5 10:10:42 2025 by rpki-client