$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: 0bycQN1anfr0IWHZQTQJ90iFu+ej0qRWSzGuIuDvOX0= Subject key identifier: 89:1C:1F:54:08:91:E6:80:0B:E4:6C:66:89:DE:A7:A6:A6:BE:13:F9 Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 54C3CF4AFD267083BA712299D74C2C73384A87B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 048A Signing time: Mon 03 Nov 2025 21:50:38 +0000 Manifest this update: Mon 03 Nov 2025 21:45:38 +0000 Manifest next update: Thu 06 Nov 2025 22:56:38 +0000 Files and hashes: 1: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: NkQ9eWcHVREh5sfesIOFWzh9yqFj5sw8tkhu4ZxcoSQ=) 2: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: P41PFR8M2pkKOmCdUu6l5sHUIprRbj+Eb/jozno97jU=) 3: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: /De9PraBKQ9VNMLW73eKsHyTdK5CxUO/Ms23Vqs0bog=) 4: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: LTZWN20UeEpbk3/6yOOjk81arYUEDuYxFg/WlS2mmEI=) 5: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=) 6: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: ovOsfHzlPQZ/XG4T8zqSioaXtXwAFFDLyimTEduDcLA=) 7: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 9ga4Dz2S1yZEHVR/bNJu6K+f7jqkSZliYiYDlhJqlSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c3:cf:4a:fd:26:70:83:ba:71:22:99:d7:4c:2c:73:38:4a:87:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: Nov 3 21:45:38 2025 GMT Not After : Nov 6 22:56:38 2025 GMT Subject: CN=891C1F540891E6800BE46C6689DEA7A6A6BE13F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:85:9e:d5:b7:7e:a4:f3:16:fe:8d:d0:9c: b0:df:8a:37:15:b7:ab:d2:ec:47:f2:a9:05:81:51: 6b:ce:be:53:28:76:9a:b5:ab:53:aa:2b:81:72:b7: 27:5c:9b:13:af:54:9b:90:a9:b4:d7:e1:a6:7f:a2: 73:5a:f3:fc:ff:c5:28:cb:f7:d4:f2:40:48:35:c1: f0:7f:4f:0c:b8:39:b5:fa:89:63:0c:e3:03:48:5f: 53:60:50:52:f9:4b:6d:f8:ff:c1:2b:2b:1c:5b:e9: 99:99:10:af:58:55:53:c3:3d:ff:25:05:cc:d2:65: 73:73:cf:d7:32:08:06:45:78:22:e3:be:dd:2b:ad: 48:63:9b:44:6e:54:b5:fc:d8:b3:7d:3b:77:aa:78: 2c:c2:4f:90:5f:21:ca:57:80:de:23:cd:92:b5:9a: a0:35:80:bd:63:b9:1b:e4:60:a4:5c:47:fe:42:0e: 62:3e:72:32:d5:a4:ee:b6:e1:ed:38:52:5d:7a:cb: 1c:ef:1f:61:e0:3e:ae:f0:6e:7c:3f:94:c5:4d:b9: e1:67:bd:1e:02:59:2b:95:67:44:6e:c6:d8:66:5c: 12:f5:14:4c:4a:67:bd:eb:4d:b3:c9:9e:87:96:e1: 93:2b:a7:16:66:dc:1b:f9:d1:2b:a4:a0:d2:4a:a0: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1C:1F:54:08:91:E6:80:0B:E4:6C:66:89:DE:A7:A6:A6:BE:13:F9 X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9f:15:02:06:2a:07:4f:d1:22:fb:dc:d0:d0:e6:57:77:77: 4e:6b:b8:ea:a7:d6:13:10:83:f9:eb:e6:a2:85:28:f3:bd:c9: 08:e5:8d:2a:12:80:02:37:0f:e0:c7:35:32:e7:7b:fc:7d:bc: 20:09:e9:16:2d:e4:83:e0:00:da:a6:6f:19:c0:92:12:dd:3f: af:45:60:b7:5a:2e:de:4b:65:ab:41:3a:d9:96:29:4c:f3:f2: db:e3:51:36:a8:cc:0d:35:34:7a:3d:0d:74:3a:b8:42:30:29: 4a:80:c4:a2:97:8b:fe:d9:dc:01:22:e4:71:e9:63:c1:e0:e7: 04:0d:7a:81:b1:b5:1b:3a:26:20:55:90:eb:af:2e:e3:9b:51: b4:c8:d9:6b:fa:17:26:98:8e:e4:44:ea:ba:91:11:6c:d0:1f: 08:e8:9d:de:94:50:10:eb:a4:3f:20:f7:ea:e9:a1:f1:c6:b9: a8:01:a8:26:06:72:7c:a4:d1:0b:cb:21:6b:1b:2f:cb:a1:a3: 9a:1f:7d:9c:a3:62:4c:c3:90:ab:40:49:31:71:18:97:ad:fc: 5a:6b:0f:0d:ed:33:00:a4:e2:05:09:79:2b:36:9b:17:b0:5f: 7a:65:c4:f6:6c:7a:f1:44:de:cd:31:0b:79:cd:52:9c:96:5a: 00:64:3e:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVMPPSv0mcIO6cSKZ10wsczhKh7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNTExMDMyMTQ1MzhaFw0yNTExMDYyMjU2MzhaMDMxMTAvBgNV BAMTKDg5MUMxRjU0MDg5MUU2ODAwQkU0NkM2Njg5REVBN0E2QTZCRTEzRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzYWe1bd+pPMW/o3QnLDfijcV t6vS7EfyqQWBUWvOvlModpq1q1OqK4FytydcmxOvVJuQqbTX4aZ/onNa8/z/xSjL 99TyQEg1wfB/Twy4ObX6iWMM4wNIX1NgUFL5S234/8ErKxxb6ZmZEK9YVVPDPf8l BczSZXNzz9cyCAZFeCLjvt0rrUhjm0RuVLX82LN9O3eqeCzCT5BfIcpXgN4jzZK1 mqA1gL1juRvkYKRcR/5CDmI+cjLVpO624e04Ul16yxzvH2HgPq7wbnw/lMVNueFn vR4CWSuVZ0RuxthmXBL1FExKZ73rTbPJnoeW4ZMrpxZm3Bv50SukoNJKoHhJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRwfVAiR5oAL5Gxmid6npqa+E/kwHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyfFQIGKgdP0SL73NDQ5ld3d05ruOqn1hMQ g/nr5qKFKPO9yQjljSoSgAI3D+DHNTLne/x9vCAJ6RYt5IPgANqmbxnAkhLdP69F YLdaLt5LZatBOtmWKUzz8tvjUTaozA01NHo9DXQ6uEIwKUqAxKKXi/7Z3AEi5HHp Y8Hg5wQNeoGxtRs6JiBVkOuvLuObUbTI2Wv6FyaYjuRE6rqREWzQHwjond6UUBDr pD8g9+rpofHGuagBqCYGcnyk0QvLIWsbL8uho5offZyjYkzDkKtASTFxGJet/Fpr Dw3tMwCk4gUJeSs2mxewX3plxPZsevFE3s0xC3nNUpyWWgBkPlQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:43 2025 by rpki-client