$ rpki-client -vvf repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft File: 11489A5805B7FE2710AE32C3077C3450579D1288.mft (raw, json) Hash identifier: yM5VxfmNEQqeBCMCX783JWQD9VeTrgVIQXpaDshXBeM= Subject key identifier: 70:4E:5E:3E:AF:A9:33:54:ED:96:56:24:A7:70:76:DB:7B:83:08:8B Authority key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 Certificate issuer: /CN=11489A5805B7FE2710AE32C3077C3450579D1288 Certificate serial: 072242BE7F6823DCEBC91F8F190F8394CF92824B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft Manifest number: 0114 Signing time: Thu 04 Sep 2025 22:31:45 +0000 Manifest this update: Thu 04 Sep 2025 22:26:45 +0000 Manifest next update: Mon 08 Sep 2025 05:46:45 +0000 Files and hashes: 1: 11489A5805B7FE2710AE32C3077C3450579D1288.crl (hash: vyVzuSxc7YkGRTToeyAFFT6Xs8jgpK1CSyjTzpHZCxU=) 2: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: NOH9wRK9inkAfrcmkP1Y7WHt1AAQ1F9Kr20Q6/2/AlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:22:42:be:7f:68:23:dc:eb:c9:1f:8f:19:0f:83:94:cf:92:82:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11489A5805B7FE2710AE32C3077C3450579D1288 Validity Not Before: Sep 4 22:26:45 2025 GMT Not After : Sep 8 05:46:45 2025 GMT Subject: CN=704E5E3EAFA93354ED965624A77076DB7B83088B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:2c:0f:6f:bd:1c:e9:65:cf:f4:95:00:55: 1a:16:2b:ae:eb:3c:f5:cc:49:eb:87:0e:bd:c0:1f: 8f:90:94:a6:56:00:d3:03:43:f9:d0:3a:21:e2:c5: a8:f2:ca:db:31:cc:3b:63:ec:d8:33:bd:0b:36:08: 77:50:3b:33:03:a3:ce:6b:b2:e1:7f:e6:5a:53:79: 2c:a7:b7:14:a7:5e:b3:11:b8:8b:72:86:d7:41:3d: 37:4f:dc:0e:f4:f7:6f:18:10:48:0f:46:d3:52:05: cb:5c:b0:c8:9b:36:12:9f:12:60:f2:e5:17:19:a2: 6a:b8:76:5c:e9:fb:bf:1e:90:a2:52:e1:a8:4e:c6: 63:75:67:75:4a:f5:79:be:46:d2:57:c4:64:c6:00: 34:b5:50:4b:73:27:6e:76:e3:1e:c4:89:45:a0:df: c6:c7:3c:ed:aa:e7:7b:5e:34:90:09:78:53:f7:55: c6:b1:03:35:54:5e:58:4e:3a:00:a9:9f:73:89:a8: 7d:da:eb:6d:2c:b8:b7:14:71:77:e3:7e:73:9f:e4: 0c:eb:8d:56:3b:c3:54:8c:60:9a:99:99:0f:43:e0: bb:fe:73:de:e5:78:7c:22:d4:77:74:a4:7b:da:b9: f8:81:36:22:16:84:71:9a:c5:70:a4:ee:5e:29:11: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4E:5E:3E:AF:A9:33:54:ED:96:56:24:A7:70:76:DB:7B:83:08:8B X509v3 Authority Key Identifier: keyid:11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:75:3e:01:89:b6:37:e4:71:60:48:c7:0c:0e:ff:2c:9c:fa: 80:bd:70:e5:ef:2e:c8:6b:62:8f:c7:2c:10:1e:09:cf:9c:df: 90:01:eb:fa:04:39:5b:1b:a1:bf:b3:64:1a:f8:79:06:f0:a3: 06:be:7e:a5:aa:43:da:a2:4d:42:ba:d5:e7:33:c1:08:ce:0e: 70:4a:f4:ca:d6:b7:27:a0:8b:9c:4a:15:9b:83:54:3a:be:73: 72:83:6a:82:ff:6d:5b:26:ff:a7:62:06:6d:34:3f:b9:38:24: 39:98:0a:4f:04:50:40:58:ad:38:4f:54:89:e9:6c:19:01:03: 66:c8:af:41:eb:92:56:ac:31:a5:32:01:2a:ac:76:1b:14:42: 8f:23:e6:59:14:fe:04:28:43:2d:16:1f:ce:a4:09:1e:d9:c5: 06:70:87:56:1c:da:8d:8d:9b:3b:73:c1:3e:25:36:aa:78:f8: 26:54:b8:64:40:74:c0:3a:f5:d3:25:22:29:83:dd:f4:67:bf: ed:a1:70:18:96:77:29:17:1b:6f:fe:15:ae:55:be:0f:4d:3a: c8:b6:74:63:bc:6f:2e:3c:17:d7:21:89:dc:0a:bc:eb:fe:76: 67:a6:0a:3d:15:85:cb:ea:a9:d4:06:84:8b:d0:af:97:f5:2e: 10:bd:aa:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByJCvn9oI9zryR+PGQ+DlM+SgkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1 NzlEMTI4ODAeFw0yNTA5MDQyMjI2NDVaFw0yNTA5MDgwNTQ2NDVaMDMxMTAvBgNV BAMTKDcwNEU1RTNFQUZBOTMzNTRFRDk2NTYyNEE3NzA3NkRCN0I4MzA4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwESwPb70c6WXP9JUAVRoWK67r PPXMSeuHDr3AH4+QlKZWANMDQ/nQOiHixajyytsxzDtj7NgzvQs2CHdQOzMDo85r suF/5lpTeSyntxSnXrMRuItyhtdBPTdP3A70928YEEgPRtNSBctcsMibNhKfEmDy 5RcZomq4dlzp+78ekKJS4ahOxmN1Z3VK9Xm+RtJXxGTGADS1UEtzJ2524x7EiUWg 38bHPO2q53teNJAJeFP3VcaxAzVUXlhOOgCpn3OJqH3a620suLcUcXfjfnOf5Azr jVY7w1SMYJqZmQ9D4Lv+c97leHwi1Hd0pHvaufiBNiIWhHGaxXCk7l4pESTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcE5ePq+pM1TtllYkp3B223uDCIswHwYDVR0j BBgwFoAUEUiaWAW3/icQrjLDB3w0UFedEogwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMC8xMTQ4OUE1ODA1 QjdGRTI3MTBBRTMyQzMwNzdDMzQ1MDU3OUQxMjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1NzlE MTI4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0 NTA1NzlEMTI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMl1PgGJtjfkcWBIxwwO/yyc+oC9cOXvLshr Yo/HLBAeCc+c35AB6/oEOVsbob+zZBr4eQbwowa+fqWqQ9qiTUK61eczwQjODnBK 9MrWtyegi5xKFZuDVDq+c3KDaoL/bVsm/6diBm00P7k4JDmYCk8EUEBYrThPVInp bBkBA2bIr0HrklasMaUyASqsdhsUQo8j5lkU/gQoQy0WH86kCR7ZxQZwh1Yc2o2N mztzwT4lNqp4+CZUuGRAdMA69dMlIimD3fRnv+2hcBiWdykXG2/+Fa5Vvg9NOsi2 dGO8by48F9chidwKvOv+dmemCj0VhcvqqdQGhIvQr5f1LhC9qgM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:36 2025 by rpki-client