$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json) Hash identifier: Vw0IptDC7CvmOTD4LwjRcnAHRNK+YtbdyETSaIMi7hw= Subject key identifier: D3:5D:DC:EC:32:86:40:7E:C5:B1:24:E8:15:3C:FC:5E:0A:38:D5:C7 Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Certificate serial: 7497E7155C0870B200027A1A9A3AA577EBC477CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft Manifest number: E9 Signing time: Wed 05 Nov 2025 11:20:50 +0000 Manifest this update: Wed 05 Nov 2025 11:15:50 +0000 Manifest next update: Sat 08 Nov 2025 22:57:50 +0000 Files and hashes: 1: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=) 2: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: f1DLsL7dzBjZXjcVTp0vNhG6XxkmLo7oSHPCHgLx/zU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 22:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:97:e7:15:5c:08:70:b2:00:02:7a:1a:9a:3a:a5:77:eb:c4:77:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Validity Not Before: Nov 5 11:15:50 2025 GMT Not After : Nov 8 22:57:50 2025 GMT Subject: CN=D35DDCEC3286407EC5B124E8153CFC5E0A38D5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:d6:78:87:3d:77:65:9e:0d:66:78:d2:35: 17:08:e9:04:b0:2e:f3:38:3b:f4:e7:e6:d6:a0:b3: d4:64:d8:ca:1c:86:2e:53:56:cf:5c:d5:0d:92:e0: a8:7d:45:21:80:a5:cf:99:c6:bb:74:8c:63:62:b7: a6:f2:b6:9a:5d:91:03:96:83:b9:40:99:c8:46:16: 03:28:02:2d:e2:34:ed:f2:69:f0:59:84:7b:e9:6d: 30:0a:10:82:6c:f8:f5:3e:53:90:1d:3c:fc:18:7d: 7d:61:28:3c:56:23:5a:d0:d3:7d:bb:a2:1f:cc:43: 40:b7:3d:7b:a8:29:c8:23:d8:58:2d:29:52:57:c5: 49:31:75:e8:18:34:cf:be:b4:0e:27:6e:c7:f0:d0: da:c4:69:ca:10:bd:b5:5a:17:c0:8c:64:ef:22:67: 5f:59:b9:98:02:03:bf:51:b2:5a:2a:ad:4b:91:de: 2b:ec:e9:4e:40:cb:28:75:1a:9a:c7:e8:04:95:a0: 2a:0a:82:c1:d7:3c:26:4b:4a:94:07:ea:2d:46:25: 87:2b:35:65:e3:a0:ad:fe:9c:58:77:5e:22:a6:fd: 3f:be:72:04:44:20:0a:da:1d:17:88:78:e6:3a:e7: 65:c5:45:f3:42:99:10:6e:ef:9f:21:14:63:4b:09: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5D:DC:EC:32:86:40:7E:C5:B1:24:E8:15:3C:FC:5E:0A:38:D5:C7 X509v3 Authority Key Identifier: keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f1:e5:b5:18:0a:bb:54:7d:1e:65:48:5a:f2:24:b8:48:8c: da:5e:85:3e:98:10:c2:6d:73:80:fd:24:b7:5e:f7:c5:1f:6f: 7a:c4:cb:7a:f2:aa:39:cf:43:b3:b9:50:d3:c4:45:c7:34:69: 4b:a8:29:ec:7d:43:5a:a0:99:f5:6f:55:f6:62:25:18:51:9d: 74:b5:4c:58:c0:11:20:0e:bc:0d:cc:62:2a:f8:0d:b7:b9:c6: 55:e0:33:4c:3f:0b:c0:b3:62:49:32:b8:ea:a4:b3:2c:4d:df: ae:7b:d3:52:c7:77:12:6b:44:90:e7:16:19:2e:10:a3:2a:af: 7d:97:9d:d9:37:53:ce:d8:3b:60:ae:44:05:ca:73:fe:cd:08: 20:c6:1a:8f:c1:b3:43:ce:a0:02:45:e0:f7:32:a6:c4:a7:e0: 05:77:92:a3:11:fb:7f:ab:36:1c:41:c6:69:8a:1e:0e:a0:71: da:e4:8f:f1:81:0c:e5:c6:2c:73:28:21:dc:0d:dd:84:ea:a0: 17:fb:a2:47:a3:09:67:5e:5f:c9:35:43:b9:04:38:45:ab:cf: dd:71:4a:aa:f4:f2:7d:c6:41:6f:24:c0:a0:4f:02:31:f1:d1: ce:0c:a2:17:b7:79:e4:f2:38:c3:b3:1e:21:60:1a:80:e3:65: 57:a2:50:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJfnFVwIcLIAAnoamjqld+vEd8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgw MDI2QUI3RTAeFw0yNTExMDUxMTE1NTBaFw0yNTExMDgyMjU3NTBaMDMxMTAvBgNV BAMTKEQzNUREQ0VDMzI4NjQwN0VDNUIxMjRFODE1M0NGQzVFMEEzOEQ1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENtZ4hz13ZZ4NZnjSNRcI6QSw LvM4O/Tn5tags9Rk2Mochi5TVs9c1Q2S4Kh9RSGApc+Zxrt0jGNit6bytppdkQOW g7lAmchGFgMoAi3iNO3yafBZhHvpbTAKEIJs+PU+U5AdPPwYfX1hKDxWI1rQ0327 oh/MQ0C3PXuoKcgj2FgtKVJXxUkxdegYNM++tA4nbsfw0NrEacoQvbVaF8CMZO8i Z19ZuZgCA79RsloqrUuR3ivs6U5Ayyh1GprH6ASVoCoKgsHXPCZLSpQH6i1GJYcr NWXjoK3+nFh3XiKm/T++cgREIAraHReIeOY652XFRfNCmRBu758hFGNLCVyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU013c7DKGQH7FsSToFTz8Xgo41ccwHwYDVR0j BBgwFoAUEag59ftrNF+xWGxW8UbA2AAmq34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS8xMUE4MzlGNUZC NkIzNDVGQjE1ODZDNTZGMTQ2QzBEODAwMjZBQjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgwMDI2 QUI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzEvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMw RDgwMDI2QUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnx5bUYCrtUfR5lSFryJLhIjNpehT6YEMJt c4D9JLde98Ufb3rEy3ryqjnPQ7O5UNPERcc0aUuoKex9Q1qgmfVvVfZiJRhRnXS1 TFjAESAOvA3MYir4Dbe5xlXgM0w/C8CzYkkyuOqksyxN365701LHdxJrRJDnFhku EKMqr32Xndk3U87YO2CuRAXKc/7NCCDGGo/Bs0POoAJF4PcypsSn4AV3kqMR+3+r NhxBxmmKHg6gcdrkj/GBDOXGLHMoIdwN3YTqoBf7okejCWdeX8k1Q7kEOEWrz91x Sqr08n3GQW8kwKBPAjHx0c4Mohe3eeTyOMOzHiFgGoDjZVeiUDE= -----END CERTIFICATE-----Generated at Wed Nov 5 20:45:23 2025 by rpki-client