$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: jo03tcvOpP/tiB0HEstfMBXz5MHyoTwIwTrKk5CtPZE= Subject key identifier: 06:E4:47:4C:DF:02:B0:9A:58:D7:3B:B6:84:EA:A6:15:E5:33:1C:D6 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 42BE8D07D0E605B51ED2C22CC9E236A22DC2568D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 029F Signing time: Thu 19 Jun 2025 08:20:47 +0000 Manifest this update: Thu 19 Jun 2025 08:15:47 +0000 Manifest next update: Sun 22 Jun 2025 18:02:47 +0000 Files and hashes: 1: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: TCPUniCec23PXrgYofBOXKLPmuGHQaeEe0mQX8VOM4c=) 2: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: tXcQSjFRgRXWYm56Zc7JHT0yut/bAGiDVFBVYQq84Lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 13:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:be:8d:07:d0:e6:05:b5:1e:d2:c2:2c:c9:e2:36:a2:2d:c2:56:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Jun 19 08:15:47 2025 GMT Not After : Jun 22 18:02:47 2025 GMT Subject: CN=06E4474CDF02B09A58D73BB684EAA615E5331CD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:f9:71:5a:82:d3:79:eb:5f:4d:08:62:76: 75:5f:44:77:80:b5:6f:6c:25:b9:48:8a:08:98:b8: de:6d:b6:c2:ed:22:68:cc:1c:16:4d:eb:37:d8:24: 26:3d:27:3b:7c:0c:e6:14:e4:68:5f:0a:a3:3b:b3: 1f:ed:33:9f:5a:4b:16:51:25:7e:fb:0d:6a:8b:e7: 40:c3:20:87:c5:be:9b:1b:fc:51:17:df:21:92:e5: f3:45:f9:51:3e:ca:64:2f:1d:56:92:36:d8:be:77: a7:c8:40:33:c7:f9:04:51:b0:67:15:2a:f3:54:5c: 68:3a:e9:5d:50:62:bd:db:f4:2f:b3:ad:6c:fd:1d: 4c:49:6c:c5:d2:9f:10:eb:6e:ba:42:5d:4f:3c:bc: 6e:7a:f4:5f:88:21:3b:7e:be:ed:68:90:f1:8b:b7: cc:42:e7:7c:79:fb:e1:1b:90:44:db:f4:75:3e:04: 3c:54:d8:01:f0:01:e3:4e:fe:6c:bf:f9:1b:c2:a2: 00:78:03:ab:60:51:1e:b9:d3:c8:cc:bc:05:9e:ab: 15:d1:a6:ab:d2:c9:a5:d4:bb:45:55:73:d8:bd:16: 4a:96:a6:50:5e:66:f5:11:7f:9e:91:49:5e:d4:a3: b9:70:7a:e7:e5:67:d0:23:46:0b:d9:67:8d:9f:50: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E4:47:4C:DF:02:B0:9A:58:D7:3B:B6:84:EA:A6:15:E5:33:1C:D6 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f5:b9:14:83:fb:ae:48:68:65:8d:cd:af:12:a8:0b:63:92: 65:57:db:b4:12:84:9f:19:8a:e2:a1:54:12:c9:af:f6:c3:10: 29:de:58:39:ac:b1:43:ce:3b:b4:c2:67:ba:90:d0:bf:8d:fc: 63:39:21:03:98:0e:94:2e:5b:ef:37:e9:8a:74:31:19:dc:51: 8a:07:d4:56:78:68:87:b2:a0:8e:1b:75:90:c3:ca:c1:0e:7d: 56:a2:43:16:72:33:6b:5e:c4:96:37:1a:51:aa:46:04:3d:c5: c4:eb:5a:3c:ef:e6:cb:14:8d:77:2b:ac:fa:5c:4b:23:22:40: 02:04:8e:4a:49:49:c0:b1:12:3a:56:2a:68:19:6f:3a:db:1b: 0c:9b:31:41:7e:e0:8e:91:9e:88:7c:27:de:7a:31:11:f7:15: 45:81:e7:a6:16:c6:f7:0d:70:d8:08:e0:4c:e3:26:9b:70:78: 68:e5:7a:68:72:69:eb:13:18:37:cf:95:31:05:01:15:fe:24: d5:00:fe:68:58:55:6d:de:90:dc:04:e0:c1:e0:e3:d8:5c:24: 4d:31:e1:92:96:e5:be:c9:04:63:3e:e4:c1:72:b4:3a:00:05: 1e:a7:b4:fd:15:72:8b:28:83:f3:61:18:5e:46:ab:87:28:78: cd:0c:54:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQr6NB9DmBbUe0sIsyeI2oi3CVo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTA2MTkwODE1NDdaFw0yNTA2MjIxODAyNDdaMDMxMTAvBgNV BAMTKDA2RTQ0NzRDREYwMkIwOUE1OEQ3M0JCNjg0RUFBNjE1RTUzMzFDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5avlxWoLTeetfTQhidnVfRHeA tW9sJblIigiYuN5ttsLtImjMHBZN6zfYJCY9Jzt8DOYU5GhfCqM7sx/tM59aSxZR JX77DWqL50DDIIfFvpsb/FEX3yGS5fNF+VE+ymQvHVaSNti+d6fIQDPH+QRRsGcV KvNUXGg66V1QYr3b9C+zrWz9HUxJbMXSnxDrbrpCXU88vG569F+IITt+vu1okPGL t8xC53x5++EbkETb9HU+BDxU2AHwAeNO/my/+RvCogB4A6tgUR6508jMvAWeqxXR pqvSyaXUu0VVc9i9FkqWplBeZvURf56RSV7Uo7lweuflZ9AjRgvZZ42fUKZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBuRHTN8CsJpY1zu2hOqmFeUzHNYwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEX1uRSD+65IaGWNza8SqAtjkmVX27QShJ8Z iuKhVBLJr/bDECneWDmssUPOO7TCZ7qQ0L+N/GM5IQOYDpQuW+836Yp0MRncUYoH 1FZ4aIeyoI4bdZDDysEOfVaiQxZyM2texJY3GlGqRgQ9xcTrWjzv5ssUjXcrrPpc SyMiQAIEjkpJScCxEjpWKmgZbzrbGwybMUF+4I6Rnoh8J956MRH3FUWB56YWxvcN cNgI4EzjJptweGjlemhyaesTGDfPlTEFARX+JNUA/mhYVW3ekNwE4MHg49hcJE0x 4ZKW5b7JBGM+5MFytDoABR6ntP0Vcosog/NhGF5Gq4coeM0MVI0= -----END CERTIFICATE-----Generated at Thu Jun 19 20:50:33 2025 by rpki-client