$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: lNDa3N/VOvc/89xf7oAwQVB/FvXVykwMfrB7gpj5pUs= Subject key identifier: 99:97:6D:11:7D:A8:78:26:64:CC:EC:F8:96:CC:E3:0B:DA:28:D8:98 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 3F6E6D7DF4325ACD401B041E85E1B0773071DFD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02C1 Signing time: Thu 04 Sep 2025 21:20:46 +0000 Manifest this update: Thu 04 Sep 2025 21:15:46 +0000 Manifest next update: Mon 08 Sep 2025 05:35:46 +0000 Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: tXcQSjFRgRXWYm56Zc7JHT0yut/bAGiDVFBVYQq84Lg=) 2: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: seek/Ao+xPw/h2kpbigLwG9Cex0RQVqqjD9URs88Fuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6e:6d:7d:f4:32:5a:cd:40:1b:04:1e:85:e1:b0:77:30:71:df:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Sep 4 21:15:46 2025 GMT Not After : Sep 8 05:35:46 2025 GMT Subject: CN=99976D117DA8782664CCECF896CCE30BDA28D898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:30:a5:52:01:38:99:45:5a:f2:cf:8c:b8: d2:f9:8a:9c:17:d6:98:2a:7b:a2:74:f1:04:0f:d3: fa:b5:c9:19:ac:8c:d9:2d:59:49:f2:45:94:c4:85: 4d:d3:f9:27:d3:fe:35:a1:ec:45:5a:fc:20:7e:7c: 2f:67:99:4a:1d:fe:e9:36:12:00:e7:26:2f:8e:b7: f0:ea:4d:21:26:48:4b:5e:61:9a:71:5a:80:4e:96: e5:47:63:bd:7d:d0:d9:e3:d8:4b:35:3d:e4:8b:74: cf:a9:5a:b4:1e:62:c0:9f:3d:c0:16:d7:10:a2:0b: 07:9b:61:25:8c:54:dc:92:12:89:8a:50:7c:0f:5f: 56:2a:b5:5f:4c:33:e1:a2:72:bd:04:21:1b:8c:2d: 80:ea:50:83:06:7a:40:5f:58:0f:b6:68:2b:2e:ab: 25:db:68:3f:3a:31:8a:7d:47:3f:fe:3b:5d:91:5f: 30:ab:b8:6f:53:2b:f4:4d:a5:56:4b:a0:0d:3b:a1: 83:42:2c:5c:45:c6:3e:0f:2d:8d:89:2e:42:0a:5c: 07:74:1b:93:02:b1:ef:27:d5:94:44:b8:81:a0:77: 89:83:83:cd:55:39:7f:e0:dd:49:2f:93:5d:f2:72: 51:ce:96:59:8d:64:07:bc:5b:a4:20:76:9b:97:d2: a6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:97:6D:11:7D:A8:78:26:64:CC:EC:F8:96:CC:E3:0B:DA:28:D8:98 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:4e:15:8c:59:e6:7a:ba:ac:47:75:89:2c:d9:f4:62:98:c8: f6:48:bf:b9:a7:57:19:4f:ea:92:f5:32:ae:b5:1b:fb:24:c6: 40:46:ec:95:90:94:8a:4e:00:f6:cb:94:ad:8c:3f:3b:e7:9f: 49:ff:c0:6c:81:83:20:38:0a:14:02:77:d1:db:77:f2:6a:37: 82:65:84:45:c1:a6:9f:7d:19:2a:ef:38:df:a7:d9:c8:0b:66: c0:00:b0:4c:57:31:6d:79:5b:58:8f:33:8d:8d:f6:40:81:b5: 74:d5:02:c1:19:bc:e9:88:2a:2a:42:35:c4:20:fa:08:5f:9c: 8d:dc:1e:70:21:e7:3c:b0:18:04:2b:01:6e:b9:97:87:b5:d6: f3:5e:74:1d:ee:83:4e:62:88:6c:16:e6:d4:d8:7d:59:35:fe: 85:a7:8c:76:d2:30:30:01:40:35:7d:64:e7:b3:85:68:5f:f8: 86:48:a4:b0:74:c7:a0:61:c8:3f:23:4f:85:ae:51:f6:f5:a6: 24:ee:26:9f:b4:7b:b9:d0:1f:82:c1:9e:88:a1:ec:8d:95:e4: 3c:f5:a8:1b:97:2d:94:be:d7:ea:7c:a4:16:b7:7a:32:1f:f5: 90:8c:da:b3:24:f3:94:37:78:fc:06:d5:06:47:94:f3:56:00: e0:de:b1:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP25tffQyWs1AGwQeheGwdzBx39cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTA5MDQyMTE1NDZaFw0yNTA5MDgwNTM1NDZaMDMxMTAvBgNV BAMTKDk5OTc2RDExN0RBODc4MjY2NENDRUNGODk2Q0NFMzBCREEyOEQ4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhjClUgE4mUVa8s+MuNL5ipwX 1pgqe6J08QQP0/q1yRmsjNktWUnyRZTEhU3T+SfT/jWh7EVa/CB+fC9nmUod/uk2 EgDnJi+Ot/DqTSEmSEteYZpxWoBOluVHY7190Nnj2Es1PeSLdM+pWrQeYsCfPcAW 1xCiCwebYSWMVNySEomKUHwPX1YqtV9MM+Gicr0EIRuMLYDqUIMGekBfWA+2aCsu qyXbaD86MYp9Rz/+O12RXzCruG9TK/RNpVZLoA07oYNCLFxFxj4PLY2JLkIKXAd0 G5MCse8n1ZREuIGgd4mDg81VOX/g3Ukvk13yclHOllmNZAe8W6QgdpuX0qZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZdtEX2oeCZkzOz4lszjC9oo2JgwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMNOFYxZ5nq6rEd1iSzZ9GKYyPZIv7mnVxlP 6pL1Mq61G/skxkBG7JWQlIpOAPbLlK2MPzvnn0n/wGyBgyA4ChQCd9Hbd/JqN4Jl hEXBpp99GSrvON+n2cgLZsAAsExXMW15W1iPM42N9kCBtXTVAsEZvOmIKipCNcQg +ghfnI3cHnAh5zywGAQrAW65l4e11vNedB3ug05iiGwW5tTYfVk1/oWnjHbSMDAB QDV9ZOezhWhf+IZIpLB0x6BhyD8jT4WuUfb1piTuJp+0e7nQH4LBnoih7I2V5Dz1 qBuXLZS+1+p8pBa3ejIf9ZCM2rMk85Q3ePwG1QZHlPNWAODesSM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:33 2025 by rpki-client