$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft File: 11B369E1CF41EB03E35A2711FF1FE0F687242467.mft (raw, json) Hash identifier: ktyIjLHyflgO47HNihcPOWUXIrz5msw6gKlWy15MrVM= Subject key identifier: 22:2D:4D:3D:9B:7B:00:A4:11:7E:21:1A:8F:95:C5:39:90:49:05:CC Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Certificate serial: 20A947AB4808677542C88BD4753F73AF37FAC0B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft Manifest number: 01F5 Signing time: Mon 16 Jun 2025 08:02:53 +0000 Manifest this update: Mon 16 Jun 2025 07:57:53 +0000 Manifest next update: Thu 19 Jun 2025 17:48:53 +0000 Files and hashes: 1: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: nafgZnAsM444PZpRUGJ2jDID9gOrDEkaukgW0FDatiE=) 2: 11B369E1CF41EB03E35A2711FF1FE0F687242467.crl (hash: oThccf8Z6vyai1vHeVL0dirwvJ5qQh/J32Rb0ynPFdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a9:47:ab:48:08:67:75:42:c8:8b:d4:75:3f:73:af:37:fa:c0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Validity Not Before: Jun 16 07:57:53 2025 GMT Not After : Jun 19 17:48:53 2025 GMT Subject: CN=222D4D3D9B7B00A4117E211A8F95C539904905CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:83:53:06:a0:53:e5:44:0b:1f:30:90:2a: 74:15:82:a9:f7:cd:d8:0e:a2:09:8b:43:ed:cb:a8: fd:fb:0d:23:ab:4f:87:eb:0c:60:81:63:fe:cb:e7: a2:4d:06:9b:36:d7:95:68:3c:c0:06:55:23:25:a8: dd:3a:6b:52:de:17:e5:42:a7:e2:95:c0:a9:f0:89: 33:0a:01:13:c2:49:91:c1:0b:c6:f5:48:1c:18:74: c9:8c:da:62:34:00:0d:ae:24:e3:82:75:3c:c8:d6: cc:22:c6:5c:f2:66:04:c4:ea:27:29:25:71:6b:a0: 7e:df:bb:0a:b9:27:29:46:57:82:18:75:b6:ed:d6: ee:7d:78:d0:58:7e:a9:d9:b7:60:fb:4e:80:4b:22: b5:ec:3a:db:57:ae:8c:90:4b:f0:fc:83:73:07:f4: 69:52:f8:3f:6c:20:8b:c0:72:c9:e3:78:f2:21:f8: b6:02:ef:81:d7:59:4a:ae:46:72:86:de:24:40:20: 4c:3d:70:c6:92:3b:df:7d:fd:ff:ee:40:f1:a3:90: b9:60:d7:d4:35:6f:2b:b0:f1:22:ab:cd:da:b4:0f: 5a:b6:89:2a:95:2a:90:26:95:ed:fe:6d:34:97:27: 8e:1d:92:74:47:6a:b3:8b:37:80:32:3a:cc:a0:b6: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2D:4D:3D:9B:7B:00:A4:11:7E:21:1A:8F:95:C5:39:90:49:05:CC X509v3 Authority Key Identifier: keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:cb:12:87:2f:26:d0:dc:80:11:58:44:e1:7e:e5:94:b9:ca: 79:dc:d7:90:31:66:9c:f4:74:a7:92:e1:7a:d2:ca:ca:63:ea: 9b:52:21:63:d1:78:9f:ec:17:4e:58:e0:96:2e:92:49:43:29: c3:08:00:f2:68:ad:b6:f7:7c:cc:46:bb:7f:2f:73:5d:21:ff: e7:75:8e:e7:0e:f5:59:7e:26:7e:84:40:75:f4:c0:d6:97:39: b9:b9:42:0d:30:fa:45:8d:0b:ad:17:40:d5:5a:2b:9b:49:83: 44:3f:28:42:21:ff:e7:9b:03:8e:32:9d:7a:d4:4b:c4:96:f6: 46:48:d9:72:f5:3e:3f:7e:b8:17:85:86:0d:7d:f6:7f:cc:24: 42:22:ce:f5:63:25:44:90:d7:7e:a0:cd:56:56:87:8d:9f:35: 92:8c:0d:2b:7a:a1:be:c6:85:6a:ab:36:61:ec:6e:8f:14:d6: 26:bb:20:bd:b5:6a:af:e0:1f:d9:a0:58:4a:ea:33:73:e8:01: c8:6c:2e:81:00:7e:e5:8d:63:0b:86:65:54:40:ae:44:8d:e9: 5d:e1:8b:d4:9d:95:67:61:79:0a:d5:87:74:ab:ec:f7:8d:13: 8e:f9:eb:bf:d9:39:0a:31:3b:7b:72:25:64:0b:00:da:4b:0b: fd:b7:87:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKlHq0gIZ3VCyIvUdT9zrzf6wLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4 NzI0MjQ2NzAeFw0yNTA2MTYwNzU3NTNaFw0yNTA2MTkxNzQ4NTNaMDMxMTAvBgNV BAMTKDIyMkQ0RDNEOUI3QjAwQTQxMTdFMjExQThGOTVDNTM5OTA0OTA1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOINTBqBT5UQLHzCQKnQVgqn3 zdgOogmLQ+3LqP37DSOrT4frDGCBY/7L56JNBps215VoPMAGVSMlqN06a1LeF+VC p+KVwKnwiTMKARPCSZHBC8b1SBwYdMmM2mI0AA2uJOOCdTzI1swixlzyZgTE6icp JXFroH7fuwq5JylGV4IYdbbt1u59eNBYfqnZt2D7ToBLIrXsOttXroyQS/D8g3MH 9GlS+D9sIIvAcsnjePIh+LYC74HXWUquRnKG3iRAIEw9cMaSO999/f/uQPGjkLlg 19Q1byuw8SKrzdq0D1q2iSqVKpAmle3+bTSXJ44dknRHarOLN4AyOsygtlxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIi1NPZt7AKQRfiEaj5XFOZBJBcwwHwYDVR0j BBgwFoAUEbNp4c9B6wPjWicR/x/g9ockJGcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA5NjJmNy02N2VhLTQ3MGUtYTUyNC03YWUxZTQwZmQ1YjcvMC8xMUIzNjlFMUNG NDFFQjAzRTM1QTI3MTFGRjFGRTBGNjg3MjQyNDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4NzI0 MjQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUw RjY4NzI0MjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTLEocvJtDcgBFYROF+5ZS5ynnc15AxZpz0 dKeS4XrSyspj6ptSIWPReJ/sF05Y4JYukklDKcMIAPJorbb3fMxGu38vc10h/+d1 jucO9Vl+Jn6EQHX0wNaXObm5Qg0w+kWNC60XQNVaK5tJg0Q/KEIh/+ebA44ynXrU S8SW9kZI2XL1Pj9+uBeFhg199n/MJEIizvVjJUSQ136gzVZWh42fNZKMDSt6ob7G hWqrNmHsbo8U1ia7IL21aq/gH9mgWErqM3PoAchsLoEAfuWNYwuGZVRArkSN6V3h i9SdlWdheQrVh3Sr7PeNE47567/ZOQoxO3tyJWQLANpLC/23hwg= -----END CERTIFICATE-----Generated at Tue Jun 17 21:04:57 2025 by rpki-client