$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json) Hash identifier: CVdnGUuvn3XCWQQlFcUta118inc2xOJSiuVloP+V5jA= Subject key identifier: 20:C8:38:AC:52:09:07:C7:CB:CB:75:E1:B3:4F:76:18:9F:FB:C5:33 Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Certificate serial: 1FDAAAB5264E1B2B74E2AEADB0672321BBBA489C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft Manifest number: CD Signing time: Thu 04 Sep 2025 11:10:50 +0000 Manifest this update: Thu 04 Sep 2025 11:05:50 +0000 Manifest next update: Sun 07 Sep 2025 15:35:50 +0000 Files and hashes: 1: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: SF8Aqow6F7DOlyug2yTOD+efYtTPq0rx+Zyht1FSs1M=) 2: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:da:aa:b5:26:4e:1b:2b:74:e2:ae:ad:b0:67:23:21:bb:ba:48:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Validity Not Before: Sep 4 11:05:50 2025 GMT Not After : Sep 7 15:35:50 2025 GMT Subject: CN=20C838AC520907C7CBCB75E1B34F76189FFBC533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:2d:d8:5f:9a:7f:ee:d8:bd:15:84:04:b4: f6:b8:ad:3d:1a:ab:c8:e5:d3:3b:c8:c8:19:24:5b: 01:ad:49:78:a2:90:27:f3:1c:e9:f1:02:d7:9b:b6: 45:f6:a1:ad:65:be:29:36:6d:ae:bb:6c:6e:c3:cb: 4e:58:b5:82:3a:29:dc:9e:83:24:5a:27:b2:e8:9b: c9:de:75:d5:bb:49:df:12:be:83:9b:e8:d2:d1:cb: d2:cf:c9:b1:70:1e:10:ec:f0:bf:a0:75:9a:75:97: 20:67:a1:0c:7d:02:59:82:a0:97:30:4c:bb:fa:1f: d3:a1:6f:06:60:20:a5:f4:07:28:fc:33:6e:ec:67: 06:19:76:19:de:41:b4:e4:1a:62:f0:dc:ca:d8:9c: 17:d7:1e:79:b3:23:03:ef:96:1d:2e:3f:6a:48:62: a0:24:95:e3:60:9f:c5:d9:47:2a:cf:f1:0b:1f:c6: fd:df:ff:08:20:af:34:a5:b8:24:18:20:cd:e8:13: 60:ee:4b:6d:20:77:af:39:a2:92:64:d2:b9:69:4c: 8b:f8:27:fa:9c:5e:18:13:24:24:ab:7b:21:3a:04: 33:e9:8a:9a:43:f4:e2:7e:b5:a1:ef:80:2f:33:aa: 31:42:4f:92:23:fa:c8:31:35:ae:ff:0b:5a:48:56: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C8:38:AC:52:09:07:C7:CB:CB:75:E1:B3:4F:76:18:9F:FB:C5:33 X509v3 Authority Key Identifier: keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c7:f7:76:a8:ca:41:80:a6:34:ef:8e:88:f6:3c:28:0c:49: 0b:50:93:58:3e:49:b5:61:8e:39:ea:83:db:b2:d1:00:19:81: 6f:e2:83:83:47:f1:68:89:1d:26:e3:29:3e:68:cc:5d:1f:80: 66:3f:03:eb:7f:83:64:23:b1:61:c2:f7:70:4c:50:a2:79:54: ad:7e:04:21:a1:92:fd:62:8a:e3:99:76:f5:30:ce:84:38:cb: 10:67:08:35:84:ab:92:c8:1a:32:f0:94:45:dc:3a:b1:3e:3f: cf:cb:66:25:54:53:a6:9a:27:a0:9f:4a:2d:f0:41:77:95:aa: fa:1c:f0:4f:69:91:5c:4e:b8:38:93:69:63:e6:05:d0:36:e1: e2:38:5d:b3:17:5d:57:9a:29:19:1e:d7:e7:33:0c:cb:fa:46: 8c:23:87:08:69:43:01:9f:5e:a5:a9:3d:fc:9d:44:a1:b1:3f: 8d:36:47:06:71:1b:bb:99:0c:c3:4e:4e:ac:d0:3a:30:da:af: bd:0c:cd:ea:2f:85:92:e6:8c:ba:3f:af:72:93:b5:bd:62:3e: 88:96:19:11:41:4c:9b:4b:9b:4f:cb:ae:06:7d:59:75:83:51: f3:bd:da:e3:42:5e:84:0b:20:47:4a:95:16:d2:d6:ba:6c:64: ea:5f:7d:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9qqtSZOGyt04q6tsGcjIbu6SJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgw MDI2QUI3RTAeFw0yNTA5MDQxMTA1NTBaFw0yNTA5MDcxNTM1NTBaMDMxMTAvBgNV BAMTKDIwQzgzOEFDNTIwOTA3QzdDQkNCNzVFMUIzNEY3NjE4OUZGQkM1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiS3YX5p/7ti9FYQEtPa4rT0a q8jl0zvIyBkkWwGtSXiikCfzHOnxAtebtkX2oa1lvik2ba67bG7Dy05YtYI6Kdye gyRaJ7Lom8neddW7Sd8SvoOb6NLRy9LPybFwHhDs8L+gdZp1lyBnoQx9AlmCoJcw TLv6H9OhbwZgIKX0Byj8M27sZwYZdhneQbTkGmLw3MrYnBfXHnmzIwPvlh0uP2pI YqAkleNgn8XZRyrP8Qsfxv3f/wggrzSluCQYIM3oE2DuS20gd685opJk0rlpTIv4 J/qcXhgTJCSreyE6BDPpippD9OJ+taHvgC8zqjFCT5Ij+sgxNa7/C1pIVqF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIMg4rFIJB8fLy3Xhs092GJ/7xTMwHwYDVR0j BBgwFoAUEag59ftrNF+xWGxW8UbA2AAmq34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS8xMUE4MzlGNUZC NkIzNDVGQjE1ODZDNTZGMTQ2QzBEODAwMjZBQjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgwMDI2 QUI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzEvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMw RDgwMDI2QUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDH93aoykGApjTvjoj2PCgMSQtQk1g+SbVh jjnqg9uy0QAZgW/ig4NH8WiJHSbjKT5ozF0fgGY/A+t/g2QjsWHC93BMUKJ5VK1+ BCGhkv1iiuOZdvUwzoQ4yxBnCDWEq5LIGjLwlEXcOrE+P8/LZiVUU6aaJ6CfSi3w QXeVqvoc8E9pkVxOuDiTaWPmBdA24eI4XbMXXVeaKRke1+czDMv6RowjhwhpQwGf XqWpPfydRKGxP402RwZxG7uZDMNOTqzQOjDar70MzeovhZLmjLo/r3KTtb1iPoiW GRFBTJtLm0/LrgZ9WXWDUfO92uNCXoQLIEdKlRbS1rpsZOpffXs= -----END CERTIFICATE-----Generated at Fri Sep 5 06:10:21 2025 by rpki-client