$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: H3DLaw0o8W6v3Ez3lo0SP+7EYLkW/hefo4xODH6M0Lk= Subject key identifier: 3D:EB:7B:D1:F7:C7:C4:20:8A:06:3E:F8:1E:59:96:0C:03:AA:64:50 Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 473819D7835D2A031E7FDAE3DC07ECCCE0D09839 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 0517 Signing time: Sat 06 Sep 2025 02:32:01 +0000 Manifest this update: Sat 06 Sep 2025 02:27:01 +0000 Manifest next update: Tue 09 Sep 2025 05:58:01 +0000 Files and hashes: 1: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=) 2: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=) 3: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=) 4: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: 6CuAryjZ12EIN8BmVZhe1tRUzZWIAQ3GJpifiSMm1TU=) 5: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:38:19:d7:83:5d:2a:03:1e:7f:da:e3:dc:07:ec:cc:e0:d0:98:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Sep 6 02:27:01 2025 GMT Not After : Sep 9 05:58:01 2025 GMT Subject: CN=3DEB7BD1F7C7C4208A063EF81E59960C03AA6450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:4e:e2:29:b6:97:6e:d8:0a:bc:bc:a5:9f: d2:55:1d:8e:03:76:ea:27:e1:d6:f7:26:04:66:4d: 62:76:82:d4:5a:f3:0d:83:c6:71:84:7d:a1:5d:3b: 62:2c:25:79:17:7a:38:eb:78:6f:8b:16:18:e2:70: ed:50:21:f9:c6:06:01:6d:37:a6:03:50:f8:b9:16: 70:c1:10:da:4a:a7:ae:7b:09:42:54:a9:1c:a1:0f: 39:d1:b5:aa:2f:cc:03:3d:f8:60:af:a9:89:c8:cb: 7b:d9:6b:2f:45:7f:4b:a9:4d:b2:f6:4f:56:b0:f7: 3f:c1:30:b8:d3:6f:9b:14:0a:49:37:c1:25:e4:7e: af:80:4c:15:71:06:02:a1:32:d0:34:9f:15:92:17: 11:80:51:ef:ea:d4:46:50:af:8b:b1:c4:a7:4b:72: 83:24:ad:93:5b:eb:8b:ae:cf:ea:6c:cc:0b:55:97: 0a:a1:a0:c3:39:aa:d4:d9:5b:dd:58:c7:f7:0b:ac: 4b:0b:89:17:43:19:19:b8:2c:80:ff:b3:c8:11:46: 38:80:29:96:c6:80:83:e2:ad:57:80:5d:09:8b:d5: a0:8d:6b:de:f0:39:3f:a8:a2:3a:98:65:95:fa:70: 44:c5:e7:72:1e:a9:f6:77:34:7b:dc:74:b9:5e:b0: 6f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EB:7B:D1:F7:C7:C4:20:8A:06:3E:F8:1E:59:96:0C:03:AA:64:50 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5c:f5:32:bd:49:8a:9c:e3:62:cb:03:a7:ec:f3:fc:70:bf: 93:0b:2c:7d:99:41:69:cb:a2:6e:eb:9e:59:90:47:5a:0e:21: 00:88:d4:2a:54:10:f5:c8:49:8d:ac:d3:99:76:1e:7a:54:f2: 72:2b:0d:a9:53:e0:76:bc:22:52:77:c1:f6:69:5d:27:49:a4: 22:1c:76:dd:60:79:96:96:d5:f7:57:81:fe:ad:df:9f:86:b4: 58:ab:9a:37:6e:04:b9:89:d9:88:2f:4a:5e:13:aa:15:6b:a6: 7e:d5:15:9c:45:4a:15:09:88:44:dc:a0:fd:26:25:f9:07:bf: d5:15:29:f5:e1:94:90:30:b0:c7:2c:5e:49:6c:af:ae:50:33: 96:14:df:74:d2:cf:95:b3:a1:7d:ab:37:f2:e4:9a:ec:30:fb: f5:bf:f7:97:e1:f1:38:de:53:97:3b:b8:bc:f5:9b:1e:0e:eb: 6f:7a:fa:10:c2:5b:85:c3:a9:6f:5a:9a:eb:8d:4a:f3:7e:42: e4:24:b2:bc:91:14:d1:36:38:d3:7f:20:22:48:94:2b:a5:83: c0:c9:34:f2:fe:d7:2a:59:89:90:f7:05:68:61:05:fb:ef:28: 2f:7f:0b:fc:85:cb:d4:b4:4a:53:eb:97:9a:f8:13:c5:fd:e9: 9c:a2:cc:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzgZ14NdKgMef9rj3AfszODQmDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNTA5MDYwMjI3MDFaFw0yNTA5MDkwNTU4MDFaMDMxMTAvBgNV BAMTKDNERUI3QkQxRjdDN0M0MjA4QTA2M0VGODFFNTk5NjBDMDNBQTY0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQk7iKbaXbtgKvLyln9JVHY4D duon4db3JgRmTWJ2gtRa8w2DxnGEfaFdO2IsJXkXejjreG+LFhjicO1QIfnGBgFt N6YDUPi5FnDBENpKp657CUJUqRyhDznRtaovzAM9+GCvqYnIy3vZay9Ff0upTbL2 T1aw9z/BMLjTb5sUCkk3wSXkfq+ATBVxBgKhMtA0nxWSFxGAUe/q1EZQr4uxxKdL coMkrZNb64uuz+pszAtVlwqhoMM5qtTZW91Yx/cLrEsLiRdDGRm4LID/s8gRRjiA KZbGgIPirVeAXQmL1aCNa97wOT+oojqYZZX6cETF53IeqfZ3NHvcdLlesG+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPet70ffHxCCKBj74HlmWDAOqZFAwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlc9TK9SYqc42LLA6fs8/xwv5MLLH2ZQWnL om7rnlmQR1oOIQCI1CpUEPXISY2s05l2HnpU8nIrDalT4Ha8IlJ3wfZpXSdJpCIc dt1geZaW1fdXgf6t35+GtFirmjduBLmJ2YgvSl4TqhVrpn7VFZxFShUJiETcoP0m JfkHv9UVKfXhlJAwsMcsXklsr65QM5YU33TSz5WzoX2rN/Lkmuww+/W/95fh8Tje U5c7uLz1mx4O6296+hDCW4XDqW9amuuNSvN+QuQksryRFNE2ONN/ICJIlCulg8DJ NPL+1ypZiZD3BWhhBfvvKC9/C/yFy9S0SlPrl5r4E8X96ZyizLU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:28 2025 by rpki-client