$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: 3/Lo5cuNlscVNqObwqJ9EjTLXnidnpXDb2Dl8qsj66w= Subject key identifier: 87:DD:16:99:CA:3B:4B:59:95:66:EC:4E:36:A2:F1:CE:C1:75:8B:40 Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 3A0CCA2F4F2B13761742671FC24B48DC7723BC5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 04ED Signing time: Wed 04 Jun 2025 17:01:59 +0000 Manifest this update: Wed 04 Jun 2025 16:56:59 +0000 Manifest next update: Sun 08 Jun 2025 01:52:59 +0000 Files and hashes: 1: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=) 2: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: O8kAH8t08+9DH7Rdkzs7sp0HA8ViQO+3lyriqTCqhRw=) 3: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: xm1simv3lveMn9UvlhoQ3cBYgyn/3GTIHxncXARfxIg=) 4: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: PJNdW/jPDCi4OnaMwTB5HhmqSaNIxJPSQDfjtrHqN5w=) 5: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: p9nIhhAXDA1VGK03OeTNU5iCdtRuqI9pYS72qu+FFmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0c:ca:2f:4f:2b:13:76:17:42:67:1f:c2:4b:48:dc:77:23:bc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Jun 4 16:56:59 2025 GMT Not After : Jun 8 01:52:59 2025 GMT Subject: CN=87DD1699CA3B4B599566EC4E36A2F1CEC1758B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a7:f3:05:29:7d:84:a8:b9:a4:dd:8b:fd:1b: b2:5e:f9:02:25:ff:3e:c4:1d:e9:fe:43:fe:f3:71: 83:41:bb:52:9b:ad:83:e6:13:69:6e:64:c6:3a:02: ef:ca:fd:3d:98:6e:75:79:c5:c6:9f:41:2e:3e:f8: 56:b4:65:fe:21:9f:87:d8:1a:2d:cf:18:2f:c1:31: c7:f5:c8:63:d3:bb:9d:68:54:aa:41:52:f9:e0:82: 4e:b4:f2:a1:5d:c7:b0:0a:b8:2e:50:1f:a3:40:4d: 4a:f1:1f:71:a8:f6:41:9a:ce:1e:0b:4c:03:7b:40: 1d:93:a8:b5:a2:1d:c5:f4:ed:92:10:fd:12:a3:96: 75:4d:a7:29:2f:ff:7c:24:ba:e1:c5:1b:3c:0f:5a: 15:6e:fa:30:36:44:db:c2:3e:37:de:db:de:8e:72: 9c:ea:35:cb:f7:09:3c:81:86:0e:3d:1a:33:6b:71: 1d:c0:a3:1d:27:cb:8c:a1:c5:6a:15:d2:e6:74:20: 90:72:5e:3d:86:1c:4e:e6:8e:cd:64:4a:9d:9c:98: 8e:3b:0e:fc:d5:76:cd:6a:ea:fc:75:ce:ae:95:f4: fc:8b:63:90:c8:d1:96:fb:e0:26:52:a2:8e:47:c9: cf:a8:ce:cb:50:90:14:ba:eb:bb:67:9b:b8:bd:66: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DD:16:99:CA:3B:4B:59:95:66:EC:4E:36:A2:F1:CE:C1:75:8B:40 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:34:8a:cd:eb:cc:c7:8e:24:58:24:ba:09:a6:6f:8e:47:ca: 94:0d:8c:92:99:7a:4e:ab:65:94:b5:e6:10:4c:f0:cd:d6:9a: ff:2a:62:a6:46:ac:aa:07:57:f1:8a:b7:6c:6c:37:7f:89:52: 24:22:79:30:2e:10:02:20:a4:93:96:16:5e:82:b7:9f:21:08: 9f:73:3e:61:0d:52:52:c8:11:94:56:91:44:2c:b7:70:56:93: c8:08:dc:f3:d6:ba:d4:2d:53:a5:53:9e:30:3c:64:90:ae:e1: 79:76:75:6b:77:85:7c:8d:99:b1:eb:39:ac:0f:6b:30:c1:95: 2c:59:50:17:48:bd:b0:d6:bd:f9:cc:63:01:c7:06:78:20:a7: 68:38:96:61:5c:9c:db:bc:99:8e:f5:bb:a0:c6:f5:e6:e9:f2: ff:8c:64:c6:06:80:a6:f3:72:0f:b2:e7:25:ed:e3:3d:1b:43: 42:6d:f4:87:68:d5:63:c5:a9:8a:ce:09:ec:57:db:5b:af:24: b6:2e:e6:33:ee:ea:35:1b:2f:be:c9:93:71:a2:7c:93:c1:87: df:ef:3b:ff:f0:c1:2f:e1:20:a9:1e:0b:8b:d1:1d:a7:fb:42: 1d:61:b5:0e:c4:76:05:54:2d:db:58:00:94:72:d8:a2:ee:50: 6a:67:c3:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgzKL08rE3YXQmcfwktI3HcjvFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNTA2MDQxNjU2NTlaFw0yNTA2MDgwMTUyNTlaMDMxMTAvBgNV BAMTKDg3REQxNjk5Q0EzQjRCNTk5NTY2RUM0RTM2QTJGMUNFQzE3NThCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMp/MFKX2EqLmk3Yv9G7Je+QIl /z7EHen+Q/7zcYNBu1KbrYPmE2luZMY6Au/K/T2YbnV5xcafQS4++Fa0Zf4hn4fY Gi3PGC/BMcf1yGPTu51oVKpBUvnggk608qFdx7AKuC5QH6NATUrxH3Go9kGazh4L TAN7QB2TqLWiHcX07ZIQ/RKjlnVNpykv/3wkuuHFGzwPWhVu+jA2RNvCPjfe296O cpzqNcv3CTyBhg49GjNrcR3Aox0ny4yhxWoV0uZ0IJByXj2GHE7mjs1kSp2cmI47 DvzVds1q6vx1zq6V9PyLY5DI0Zb74CZSoo5Hyc+ozstQkBS667tnm7i9ZjalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh90Wmco7S1mVZuxONqLxzsF1i0AwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMs0is3rzMeOJFgkugmmb45HypQNjJKZek6r ZZS15hBM8M3Wmv8qYqZGrKoHV/GKt2xsN3+JUiQieTAuEAIgpJOWFl6Ct58hCJ9z PmENUlLIEZRWkUQst3BWk8gI3PPWutQtU6VTnjA8ZJCu4Xl2dWt3hXyNmbHrOawP azDBlSxZUBdIvbDWvfnMYwHHBnggp2g4lmFcnNu8mY71u6DG9ebp8v+MZMYGgKbz cg+y5yXt4z0bQ0Jt9Ido1WPFqYrOCexX21uvJLYu5jPu6jUbL77Jk3GifJPBh9/v O//wwS/hIKkeC4vRHaf7Qh1htQ7EdgVULdtYAJRy2KLuUGpnwz8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:40 2025 by rpki-client