$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: oo3QoFoyUBmiSNWHSzP026N1IOMUB7BXXxKQdGqFCRQ= Subject key identifier: E4:EA:F5:A7:7C:1A:72:88:6A:93:B4:39:F2:8C:3E:BE:FF:86:3B:9D Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 334B3D31D9FF83AFA2011E58A722D807C0BB46F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02B4 Signing time: Wed 06 Aug 2025 11:40:48 +0000 Manifest this update: Wed 06 Aug 2025 11:35:48 +0000 Manifest next update: Sat 09 Aug 2025 13:35:48 +0000 Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: tXcQSjFRgRXWYm56Zc7JHT0yut/bAGiDVFBVYQq84Lg=) 2: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: KPSAOOOdITFnyStJXFsr954mQRAfS5xjdcYLRav1wow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4b:3d:31:d9:ff:83:af:a2:01:1e:58:a7:22:d8:07:c0:bb:46:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Aug 6 11:35:48 2025 GMT Not After : Aug 9 13:35:48 2025 GMT Subject: CN=E4EAF5A77C1A72886A93B439F28C3EBEFF863B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:39:b3:b7:b3:31:6b:ec:5b:5d:d6:d2:e9: 10:0b:9c:37:6e:06:2e:e6:c3:3d:aa:b9:c6:28:d4: c1:a8:df:90:8b:67:ef:cc:bb:b1:ee:bf:ef:a7:ad: bc:cf:85:5d:49:04:26:21:d7:c7:67:a0:59:ff:19: 61:bc:19:51:6a:3b:51:91:87:92:94:9e:db:f9:76: 18:23:f5:41:62:e3:43:cf:45:7a:a3:e8:f2:79:24: 16:f1:4f:23:e8:2d:40:8d:32:c4:79:9c:27:e3:ed: e5:c8:9f:ff:2d:6f:40:32:38:31:27:2d:f5:a9:13: 05:51:93:4a:ac:f6:8d:c3:a7:28:90:77:db:10:e3: ee:eb:4b:23:79:86:7a:09:20:1c:4b:d5:0c:ca:4d: 69:48:57:5e:d8:c9:d6:0d:63:e4:8a:93:d1:96:15: b8:aa:30:73:62:2f:c4:e7:cb:bb:b6:e3:e6:93:73: af:b2:81:0c:59:f7:18:a6:72:c0:e2:70:01:03:ce: 85:b0:f6:62:40:57:df:c6:84:28:9c:77:9b:60:f3: 28:cf:e1:c0:45:c5:10:22:35:49:66:e7:4f:00:75: fe:58:5e:33:87:42:21:bd:66:4f:19:83:bc:cd:a3: 1c:6b:52:55:66:2c:1e:c1:10:07:8e:c6:14:b0:d3: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EA:F5:A7:7C:1A:72:88:6A:93:B4:39:F2:8C:3E:BE:FF:86:3B:9D X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2f:3d:66:4e:41:24:8b:87:ea:69:27:2d:5c:3b:f6:37:f4: 82:7a:c8:07:c9:5e:86:a6:6b:be:9a:d1:44:57:20:a1:d0:9b: 69:17:43:99:d9:1c:10:7e:a7:5c:09:c2:0d:17:61:c1:2d:06: 1a:cd:43:67:c3:9f:90:69:d3:af:5e:98:2f:16:af:eb:e3:bf: 58:54:58:4e:24:8b:6d:4e:2a:28:5d:8c:94:70:ab:32:d5:90: 89:d6:61:28:2d:98:3d:c5:25:30:00:05:5d:8d:df:20:e8:7d: ee:a0:d2:db:13:6d:e1:ef:0a:ae:a2:d9:d8:26:c7:c0:28:a4: 46:8f:aa:51:04:bc:6c:87:db:7b:eb:7e:e4:d9:05:29:56:68: 88:98:73:24:68:4e:29:b1:be:b4:1c:54:ea:63:8b:96:ab:d3: 1b:e1:a3:a0:28:61:f3:89:31:a6:c9:c8:de:16:3c:25:f8:2a: 32:c8:e2:35:36:35:ee:cd:13:ae:65:a1:ef:fd:16:96:67:5b: a6:81:41:88:0e:71:51:e2:10:ef:bc:aa:72:6b:36:85:12:e8: 54:28:a0:cc:76:f9:6a:38:97:ec:16:e8:05:77:8f:3f:87:53: c1:a3:1f:9f:fc:6a:20:6b:88:68:ee:d1:70:0b:3c:a0:6b:05: 7f:61:40:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0s9Mdn/g6+iAR5YpyLYB8C7RvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTA4MDYxMTM1NDhaFw0yNTA4MDkxMzM1NDhaMDMxMTAvBgNV BAMTKEU0RUFGNUE3N0MxQTcyODg2QTkzQjQzOUYyOEMzRUJFRkY4NjNCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnljmzt7Mxa+xbXdbS6RALnDdu Bi7mwz2qucYo1MGo35CLZ+/Mu7Huv++nrbzPhV1JBCYh18dnoFn/GWG8GVFqO1GR h5KUntv5dhgj9UFi40PPRXqj6PJ5JBbxTyPoLUCNMsR5nCfj7eXIn/8tb0AyODEn LfWpEwVRk0qs9o3DpyiQd9sQ4+7rSyN5hnoJIBxL1QzKTWlIV17YydYNY+SKk9GW FbiqMHNiL8Tny7u24+aTc6+ygQxZ9ximcsDicAEDzoWw9mJAV9/GhCicd5tg8yjP 4cBFxRAiNUlm508Adf5YXjOHQiG9Zk8Zg7zNoxxrUlVmLB7BEAeOxhSw0wHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Or1p3wacohqk7Q58ow+vv+GO50wHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAvPWZOQSSLh+ppJy1cO/Y39IJ6yAfJXoam a76a0URXIKHQm2kXQ5nZHBB+p1wJwg0XYcEtBhrNQ2fDn5Bp069emC8Wr+vjv1hU WE4ki21OKihdjJRwqzLVkInWYSgtmD3FJTAABV2N3yDofe6g0tsTbeHvCq6i2dgm x8AopEaPqlEEvGyH23vrfuTZBSlWaIiYcyRoTimxvrQcVOpji5ar0xvho6AoYfOJ MabJyN4WPCX4KjLI4jU2Ne7NE65loe/9FpZnW6aBQYgOcVHiEO+8qnJrNoUS6FQo oMx2+Wo4l+wW6AV3jz+HU8GjH5/8aiBriGju0XALPKBrBX9hQHs= -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:11 2025 by rpki-client