$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: /7X32TEHgqE7h7jRK3I4jy5mjksvxyEVWfkLk5KgB+s= Subject key identifier: 98:84:66:8E:F2:02:2D:90:5D:23:DC:CE:6C:CF:66:43:AA:81:68:93 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 0F361C5703AE3F2C1664BFC7287A402DB7374808 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02DC Signing time: Mon 03 Nov 2025 09:20:48 +0000 Manifest this update: Mon 03 Nov 2025 09:15:48 +0000 Manifest next update: Thu 06 Nov 2025 16:12:48 +0000 Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=) 2: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: 65gmi79ehGZktbSscBjRC9LHW101H9tuHLdm86g3y/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:36:1c:57:03:ae:3f:2c:16:64:bf:c7:28:7a:40:2d:b7:37:48:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Nov 3 09:15:48 2025 GMT Not After : Nov 6 16:12:48 2025 GMT Subject: CN=9884668EF2022D905D23DCCE6CCF6643AA816893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:d2:fd:61:6f:1e:ee:7a:52:54:b4:15:88: 45:5a:36:9c:5a:f6:f9:10:5f:c3:bf:62:6f:89:4c: 8d:e2:30:d6:fb:01:e9:98:e9:6e:7e:3d:a0:ff:b1: 33:47:f5:9d:63:8e:52:01:b2:bb:69:56:24:c4:d0: 67:e4:c0:d4:d8:70:a1:90:f8:ce:89:cd:1a:16:b7: 2a:59:b8:83:56:2f:b0:80:23:d4:86:5c:ab:d0:d6: 55:b8:0c:e9:93:96:df:a9:cc:fb:ca:90:b3:ee:f7: b0:3c:a1:17:4c:36:4e:03:ed:34:46:54:02:b9:af: 61:ae:a2:bc:cd:2b:bd:d8:a3:02:86:cc:53:51:ac: 2e:87:34:4d:ad:54:e0:d5:6a:7a:68:26:48:67:23: 44:ff:d2:0a:e4:1a:a7:66:19:7d:ac:fe:bc:c9:d5: cf:62:ed:ea:73:5b:10:1b:12:73:da:20:8a:9b:11: 22:c5:3c:2c:66:30:32:b5:08:8b:04:05:8b:e1:ab: 04:55:7b:7d:db:13:2a:f7:8b:c7:2d:c2:f9:82:33: a8:69:ce:37:09:ab:df:fd:30:2c:83:25:37:e1:f9: ec:41:e7:2e:ed:84:c0:62:5e:6a:2f:b9:f4:bc:3f: 0d:a9:87:4a:d0:8f:ac:a0:2d:b6:7b:5f:a6:47:0b: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:84:66:8E:F2:02:2D:90:5D:23:DC:CE:6C:CF:66:43:AA:81:68:93 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:41:05:61:aa:ad:b1:07:28:d0:e7:2e:57:1f:06:7d:e2:5a: 70:e7:4b:fc:85:69:44:e2:90:be:66:01:74:da:a9:df:0f:a7: ee:5e:6a:fa:e0:b2:53:e9:c7:7b:67:89:ff:ab:35:de:64:bc: ca:e9:6f:13:48:4d:d1:df:65:84:cd:a3:52:ad:10:c0:a7:45: 93:c3:0c:a9:74:40:2b:5c:0c:2d:0c:f4:a1:e1:c0:44:c5:fd: 7b:f4:2d:42:75:27:dd:bf:ac:f2:77:6b:b0:14:ff:e5:10:28: 33:c9:49:c2:ef:c7:f0:ff:7e:d2:7f:90:a6:de:03:31:91:31: d1:e2:8d:8d:3d:e0:71:e9:f7:fc:9b:9d:a5:73:c3:92:81:d7: 56:ca:26:3b:8a:76:aa:06:bf:2c:1f:01:a5:c0:9a:e7:78:a3: f0:da:ed:a5:05:f8:ad:db:3a:57:e5:51:79:bf:46:2f:81:45: 09:0f:f0:d0:37:f8:66:76:82:e0:09:1f:8e:bf:e9:51:21:de: 5b:27:5c:43:68:8f:16:49:7b:31:c5:81:ac:9a:64:73:c0:2d: ca:04:a6:16:28:63:2d:19:3e:8b:57:45:bb:41:79:ca:4a:40: b7:ac:e3:cb:45:cb:45:73:1f:c4:8a:d6:2a:d1:d6:13:14:32: b0:31:ed:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzYcVwOuPywWZL/HKHpALbc3SAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTExMDMwOTE1NDhaFw0yNTExMDYxNjEyNDhaMDMxMTAvBgNV BAMTKDk4ODQ2NjhFRjIwMjJEOTA1RDIzRENDRTZDQ0Y2NjQzQUE4MTY4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgs9L9YW8e7npSVLQViEVaNpxa 9vkQX8O/Ym+JTI3iMNb7AemY6W5+PaD/sTNH9Z1jjlIBsrtpViTE0GfkwNTYcKGQ +M6JzRoWtypZuINWL7CAI9SGXKvQ1lW4DOmTlt+pzPvKkLPu97A8oRdMNk4D7TRG VAK5r2GuorzNK73YowKGzFNRrC6HNE2tVODVanpoJkhnI0T/0grkGqdmGX2s/rzJ 1c9i7epzWxAbEnPaIIqbESLFPCxmMDK1CIsEBYvhqwRVe33bEyr3i8ctwvmCM6hp zjcJq9/9MCyDJTfh+exB5y7thMBiXmovufS8Pw2ph0rQj6ygLbZ7X6ZHC94TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmIRmjvICLZBdI9zObM9mQ6qBaJMwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlBBWGqrbEHKNDnLlcfBn3iWnDnS/yFaUTi kL5mAXTaqd8Pp+5eavrgslPpx3tnif+rNd5kvMrpbxNITdHfZYTNo1KtEMCnRZPD DKl0QCtcDC0M9KHhwETF/Xv0LUJ1J92/rPJ3a7AU/+UQKDPJScLvx/D/ftJ/kKbe AzGRMdHijY094HHp9/ybnaVzw5KB11bKJjuKdqoGvywfAaXAmud4o/Da7aUF+K3b OlflUXm/Ri+BRQkP8NA3+GZ2guAJH46/6VEh3lsnXENojxZJezHFgayaZHPALcoE phYoYy0ZPotXRbtBecpKQLes48tFy0VzH8SK1irR1hMUMrAx7Vc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:31 2025 by rpki-client