$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft File: 11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json) Hash identifier: rfGfdOv0wqTr3LMRaDdOZVKoiZTXAj9rh/T4iTsBlgM= Subject key identifier: D8:66:1A:FD:EC:F8:C6:20:90:71:02:7D:D9:68:2F:36:70:FC:B5:39 Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 Certificate issuer: /CN=11D0290B4630192458231FFEA93A463483E71D15 Certificate serial: 23BB4608DA5105007C813D6AED7C8D12DF7D4A3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft Manifest number: 017F Signing time: Tue 03 Jun 2025 18:52:59 +0000 Manifest this update: Tue 03 Jun 2025 18:47:59 +0000 Manifest next update: Sat 07 Jun 2025 03:42:59 +0000 Files and hashes: 1: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: /J/AyxIihV7qP8j8os+4Ddk4t0/H8+IlrTHn+dTyHr4=) 2: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: Fm3TnIsp0mJQSbVnMD3AlUT5LT70Cplojq5OI3pI60I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bb:46:08:da:51:05:00:7c:81:3d:6a:ed:7c:8d:12:df:7d:4a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15 Validity Not Before: Jun 3 18:47:59 2025 GMT Not After : Jun 7 03:42:59 2025 GMT Subject: CN=D8661AFDECF8C6209071027DD9682F3670FCB539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:ec:8e:4d:57:80:ce:a8:0e:86:e8:50:4e: 79:35:c7:5b:40:a5:ea:ec:10:b1:92:68:c8:9e:c8: 4a:be:0c:4b:b9:79:25:ac:2e:60:92:23:e4:79:22: 63:12:06:ca:71:55:3f:61:bd:2a:f5:12:5d:dc:08: cd:fd:e9:34:19:04:3f:6a:39:17:88:c4:70:76:2b: c3:cb:b9:5a:7e:7d:48:68:dc:48:95:76:22:af:3e: 17:3e:b6:65:29:5d:47:a7:e8:5b:62:65:e9:69:29: 3b:ea:f5:8e:75:97:db:fe:46:b8:97:6b:72:eb:dc: 29:c5:82:19:b0:3a:5b:f7:58:8c:54:c8:37:c2:4f: bf:0f:73:56:92:e7:45:6d:14:db:16:24:c8:ce:cd: d2:c7:6e:e7:69:e4:33:a2:f8:11:cd:83:eb:7e:ea: ad:19:d9:a6:8c:04:81:a0:71:b4:01:3d:bd:98:67: 02:15:0c:e1:08:5f:8a:e6:62:1a:28:03:d1:c2:3f: 75:ef:06:a7:6b:ce:fd:ef:d4:f0:15:36:61:4a:c7: d9:2d:0a:17:a8:3a:53:08:23:d4:14:13:dd:0c:40: ee:93:69:b1:7d:2d:be:dd:e5:1e:b4:d7:6b:c4:e8: 1f:38:7b:4c:4d:b3:e6:33:f3:f0:a3:16:c2:df:cc: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:66:1A:FD:EC:F8:C6:20:90:71:02:7D:D9:68:2F:36:70:FC:B5:39 X509v3 Authority Key Identifier: keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:34:52:da:3f:45:df:f9:48:c6:3c:dd:f7:66:75:11:4e:f0: 47:0b:5f:36:44:30:46:f8:b1:31:d0:b7:34:f8:4b:98:f9:ad: b7:49:d3:cd:5f:2a:77:95:52:0f:28:c6:75:55:0d:50:a7:c5: e3:f6:4e:7e:90:7b:d9:0b:0f:26:09:8d:dc:54:96:6b:c9:64: 22:c7:9a:23:3a:8c:34:c6:17:71:e8:32:2a:fc:a1:02:10:12: d7:82:5b:f4:0f:17:7f:57:2c:bf:64:10:62:bb:a9:61:68:31: df:93:5f:dd:d7:43:53:eb:51:8a:13:7d:c5:15:2b:ef:bb:e0: 4b:89:48:bc:12:f0:2f:df:83:0a:e9:36:1b:ef:7c:72:7d:ce: 0a:c6:6b:db:5f:e4:6c:1a:8f:fd:39:43:34:48:a6:cc:c2:b4: d1:f6:4f:af:c6:60:38:6b:fc:52:3a:00:0c:11:97:80:ca:ff: 3f:48:f4:41:e0:9a:a4:60:37:fb:95:97:ba:d0:d9:5f:d9:d0: 45:9f:6e:26:4c:37:44:dd:c7:41:c5:2f:07:82:f9:02:2b:1b: 8d:4d:e3:66:a6:8d:c8:80:5a:5b:7c:a1:c4:1e:49:4e:9c:ea: 3d:a5:5c:bd:9d:fd:f6:02:95:6d:90:ab:d2:1a:79:09:a4:32: 58:1d:5e:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7tGCNpRBQB8gT1q7XyNEt99SjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4 M0U3MUQxNTAeFw0yNTA2MDMxODQ3NTlaFw0yNTA2MDcwMzQyNTlaMDMxMTAvBgNV BAMTKEQ4NjYxQUZERUNGOEM2MjA5MDcxMDI3REQ5NjgyRjM2NzBGQ0I1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/OyOTVeAzqgOhuhQTnk1x1tA persELGSaMieyEq+DEu5eSWsLmCSI+R5ImMSBspxVT9hvSr1El3cCM396TQZBD9q OReIxHB2K8PLuVp+fUho3EiVdiKvPhc+tmUpXUen6FtiZelpKTvq9Y51l9v+RriX a3Lr3CnFghmwOlv3WIxUyDfCT78Pc1aS50VtFNsWJMjOzdLHbudp5DOi+BHNg+t+ 6q0Z2aaMBIGgcbQBPb2YZwIVDOEIX4rmYhooA9HCP3XvBqdrzv3v1PAVNmFKx9kt CheoOlMII9QUE90MQO6TabF9Lb7d5R6012vE6B84e0xNs+Yz8/CjFsLfzABHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GYa/ez4xiCQcQJ92WgvNnD8tTkwHwYDVR0j BBgwFoAUEdApC0YwGSRYIx/+qTpGNIPnHRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdlY2NmZi1jZTliLTQxZGEtYjk4YS1hYmNmZTQ5MjUzYWYvMC8xMUQwMjkwQjQ2 MzAxOTI0NTgyMzFGRkVBOTNBNDYzNDgzRTcxRDE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4M0U3 MUQxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2 MzQ4M0U3MUQxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKk0Uto/Rd/5SMY83fdmdRFO8EcLXzZEMEb4 sTHQtzT4S5j5rbdJ081fKneVUg8oxnVVDVCnxeP2Tn6Qe9kLDyYJjdxUlmvJZCLH miM6jDTGF3HoMir8oQIQEteCW/QPF39XLL9kEGK7qWFoMd+TX93XQ1PrUYoTfcUV K++74EuJSLwS8C/fgwrpNhvvfHJ9zgrGa9tf5Gwaj/05QzRIpszCtNH2T6/GYDhr /FI6AAwRl4DK/z9I9EHgmqRgN/uVl7rQ2V/Z0EWfbiZMN0Tdx0HFLweC+QIrG41N 42amjciAWlt8ocQeSU6c6j2lXL2d/fYClW2Qq9IaeQmkMlgdXgU= -----END CERTIFICATE-----Generated at Thu Jun 5 19:41:55 2025 by rpki-client