$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json) Hash identifier: 09OVpfu3H1JemADCM8ofS4XN3oS780OIfbkAKh0zc1c= Subject key identifier: 6E:9A:1F:72:A8:33:D6:96:D9:AA:36:93:E2:2E:47:34:BD:C3:8D:E6 Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Certificate serial: 7324BD3D6E0DC5B6C1EA5D5A3B0186D886076AA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft Manifest number: 01ED Signing time: Sun 07 Sep 2025 08:52:15 +0000 Manifest this update: Sun 07 Sep 2025 08:47:15 +0000 Manifest next update: Wed 10 Sep 2025 14:28:15 +0000 Files and hashes: 1: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: Cbj6GkDcaoJeIrvgiVltwrJsJeqoybX78iSsqNnjvPs=) 2: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: Mq4MVaBaSG6/faiiw+ltHUL1lE9B1vG/CMZhMtucH4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:24:bd:3d:6e:0d:c5:b6:c1:ea:5d:5a:3b:01:86:d8:86:07:6a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Validity Not Before: Sep 7 08:47:15 2025 GMT Not After : Sep 10 14:28:15 2025 GMT Subject: CN=6E9A1F72A833D696D9AA3693E22E4734BDC38DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:e7:84:a6:25:a4:14:eb:31:cb:cf:37:a1: 0d:ae:e5:ce:af:2f:81:e8:ab:f6:13:30:b0:88:44: 1f:d5:f1:07:e6:f1:98:7c:c6:e7:7f:da:20:02:26: 1a:bd:af:f6:1c:46:28:6b:7a:c8:1a:d9:22:0d:b2: 19:ed:11:55:e3:99:bd:12:a9:09:4a:92:00:27:39: b1:a0:79:41:a5:90:fe:85:9b:64:94:22:ff:14:4f: 53:d4:21:3c:37:a4:17:a8:8b:18:ae:a0:2c:d1:50: a6:94:97:0f:95:7e:89:9d:30:96:dd:0b:c1:91:a7: 03:ef:ef:6e:19:08:93:73:8b:3b:17:6c:6e:88:ee: 9a:3d:e0:a2:78:7b:4b:21:5f:44:70:7d:26:3e:ce: 75:31:b2:7d:23:c7:10:cd:d8:6d:65:b2:b1:45:4e: 0b:0a:7a:69:08:06:f7:41:11:c2:0c:ac:dd:1b:2a: 6e:9c:8b:d0:3b:5f:45:99:8e:2c:b2:c8:a2:5f:de: 45:14:62:f8:b0:0c:a7:69:62:ca:50:80:3f:33:19: 53:35:2a:d7:1e:22:d3:1e:45:c8:73:fe:54:e6:65: db:d0:30:3f:5b:a1:fd:07:ff:3f:00:be:0c:ae:63: 26:5c:37:6f:d0:9c:72:ca:21:33:09:e4:36:af:27: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9A:1F:72:A8:33:D6:96:D9:AA:36:93:E2:2E:47:34:BD:C3:8D:E6 X509v3 Authority Key Identifier: keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cb:9a:10:0d:72:a4:28:16:64:c5:31:89:5c:c2:e0:9a:e3: 43:73:e6:47:06:49:53:11:de:23:64:9d:f3:a0:c5:57:7c:c9: 21:15:de:a3:8e:8b:a7:31:03:6a:6a:93:d3:1f:5d:6d:82:b0: ba:4c:fe:48:4a:d1:0e:67:c6:e6:b8:9e:91:b6:c6:bb:a4:83: 48:44:c3:40:f5:6e:cf:92:ef:fb:b9:3a:5e:3e:1e:cc:0f:d9: 60:ed:e6:7d:db:9e:fa:da:18:46:29:ac:7c:9f:a8:a3:49:9d: a8:20:6f:9a:bd:ce:30:76:02:dc:2b:6f:f9:e6:95:0c:61:6a: f8:70:ad:e3:d9:ab:db:5a:d7:a0:e2:98:96:c4:94:a0:ad:b8: 17:65:7e:b0:55:7b:7a:20:35:a6:93:02:d7:e6:71:64:22:b7: ea:a4:61:c4:fe:f8:82:4c:71:a6:3c:0f:1a:ae:d3:07:27:86: a0:34:44:91:ad:b4:57:3d:1c:5b:bc:a4:ec:bc:94:b9:25:22: d0:bc:f7:1d:5d:58:01:66:0b:20:e5:66:2c:f0:51:c3:2f:cc: 65:60:62:48:83:90:43:21:19:e3:77:f9:dd:5d:03:f4:d7:84: e8:66:33:f3:73:fd:03:69:3a:7c:cb:93:9c:8b:3b:8e:a9:db: 4e:91:e7:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyS9PW4NxbbB6l1aOwGG2IYHaqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FD N0EzNTE1QzAeFw0yNTA5MDcwODQ3MTVaFw0yNTA5MTAxNDI4MTVaMDMxMTAvBgNV BAMTKDZFOUExRjcyQTgzM0Q2OTZEOUFBMzY5M0UyMkU0NzM0QkRDMzhERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8t+eEpiWkFOsxy883oQ2u5c6v L4Hoq/YTMLCIRB/V8Qfm8Zh8xud/2iACJhq9r/YcRihresga2SINshntEVXjmb0S qQlKkgAnObGgeUGlkP6Fm2SUIv8UT1PUITw3pBeoixiuoCzRUKaUlw+VfomdMJbd C8GRpwPv724ZCJNzizsXbG6I7po94KJ4e0shX0RwfSY+znUxsn0jxxDN2G1lsrFF TgsKemkIBvdBEcIMrN0bKm6ci9A7X0WZjiyyyKJf3kUUYviwDKdpYspQgD8zGVM1 KtceItMeRchz/lTmZdvQMD9bof0H/z8AvgyuYyZcN2/QnHLKITMJ5DavJ8HRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbpofcqgz1pbZqjaT4i5HNL3DjeYwHwYDVR0j BBgwFoAUEaycrM6ar9ZuQYPm4OWZOsejUVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWJiZTVjMC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC8xMUFDOUNBQ0NF OUFBRkQ2NkU0MTgzRTZFMEU1OTkzQUM3QTM1MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FDN0Ez NTE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5 M0FDN0EzNTE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvLmhANcqQoFmTFMYlcwuCa40Nz5kcGSVMR 3iNknfOgxVd8ySEV3qOOi6cxA2pqk9MfXW2CsLpM/khK0Q5nxua4npG2xrukg0hE w0D1bs+S7/u5Ol4+HswP2WDt5n3bnvraGEYprHyfqKNJnaggb5q9zjB2Atwrb/nm lQxhavhwrePZq9ta16DimJbElKCtuBdlfrBVe3ogNaaTAtfmcWQit+qkYcT++IJM caY8Dxqu0wcnhqA0RJGttFc9HFu8pOy8lLklItC89x1dWAFmCyDlZizwUcMvzGVg YkiDkEMhGeN3+d1dA/TXhOhmM/Nz/QNpOnzLk5yLO46p206R51A= -----END CERTIFICATE-----Generated at Sun Sep 7 15:17:45 2025 by rpki-client