$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json) Hash identifier: qXPQROUgj0wrmLY0kUvCzPIklrP7WvbJ/mc3jcsjF/A= Subject key identifier: 86:38:DD:32:BA:B5:AB:EA:13:31:83:5F:B0:D1:44:7C:66:61:8B:85 Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Certificate serial: 57062C80A7D6DB15F7CF73A423F5AD4662344F8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft Manifest number: 0207 Signing time: Tue 04 Nov 2025 04:53:18 +0000 Manifest this update: Tue 04 Nov 2025 04:48:18 +0000 Manifest next update: Fri 07 Nov 2025 16:23:18 +0000 Files and hashes: 1: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: Mq4MVaBaSG6/faiiw+ltHUL1lE9B1vG/CMZhMtucH4A=) 2: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: +k9sk/q3tMt9rpSiI0Cn0jLCG8b5AG5TIFj4YbfuXWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:06:2c:80:a7:d6:db:15:f7:cf:73:a4:23:f5:ad:46:62:34:4f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Validity Not Before: Nov 4 04:48:18 2025 GMT Not After : Nov 7 16:23:18 2025 GMT Subject: CN=8638DD32BAB5ABEA1331835FB0D1447C66618B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:78:64:92:66:52:25:cc:a7:c4:48:d1:3e: fc:70:47:6a:40:4f:0a:2d:09:73:e8:e7:cb:08:a2: e5:be:48:4f:f4:41:88:7a:72:b1:be:d3:2a:24:d2: ec:65:bc:37:87:a9:4c:36:5f:05:35:6c:61:ef:52: 82:3f:10:94:de:49:c5:8c:d9:68:c5:2c:84:fa:a4: d0:28:fe:0d:66:c3:14:d1:40:98:bf:b4:c1:f5:39: ed:a8:95:93:d1:f3:cb:67:8b:69:76:46:d1:2f:4b: d0:45:d1:f7:86:a7:2b:0e:01:cd:b7:9a:77:94:71: 4a:e2:6b:14:f4:67:17:7f:9e:47:38:a9:a2:f8:8d: 34:a6:a0:ba:49:b7:2a:b7:38:b9:69:33:f4:b8:fe: af:c1:96:2d:93:0c:84:a7:e8:2d:dd:3e:ff:86:aa: dc:bb:6d:5e:bd:fe:4c:71:6c:c1:d7:cf:8b:f1:73: 26:a9:03:cc:99:97:67:41:ad:e3:65:88:18:0c:7d: e5:0b:30:c9:07:fa:57:c7:d7:2b:a6:b0:b0:cb:b7: 56:e0:99:80:28:46:db:a0:2d:06:f9:bf:15:12:65: 6a:f7:ae:a5:fa:51:8c:60:6e:a1:79:c6:8b:ae:4d: 23:e6:22:98:af:cc:38:49:49:00:85:71:04:e9:b2: 54:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:DD:32:BA:B5:AB:EA:13:31:83:5F:B0:D1:44:7C:66:61:8B:85 X509v3 Authority Key Identifier: keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:00:52:8a:28:8a:46:2f:41:4b:09:eb:9f:26:a7:6b:57:b1: 68:1e:1d:5a:ec:0c:a5:79:d8:7e:31:19:13:20:f5:88:0a:be: 49:97:fb:1f:76:d7:b2:f2:fe:f7:3c:d9:ea:c2:7a:49:dd:37: ff:f1:37:8f:c1:9c:57:5c:01:06:ff:7d:6f:d5:82:f7:bf:08: 58:f4:a5:e6:37:76:04:aa:66:dc:f8:6a:0a:3c:e9:c5:67:e0: 59:4a:4d:56:46:a1:bc:60:f5:ad:d0:e4:87:b3:76:76:83:dc: e3:14:30:a0:30:ec:7e:84:28:1d:80:58:b5:8e:8b:19:3c:2e: 57:41:51:89:7c:0b:81:d7:34:2e:6d:42:ab:39:0b:2f:0c:f8: e7:75:6b:02:8a:c4:6a:c8:24:b0:de:6d:bd:32:4d:60:5f:be: 44:9d:a8:ec:71:36:9e:db:a2:1a:44:bc:24:61:cd:c8:32:3a: 2a:e9:fb:c3:d4:c8:73:75:58:30:a4:cd:18:43:1d:72:ee:13: 9b:a2:4b:5e:b5:b0:e6:f9:e0:fe:c4:69:2f:d1:f4:2b:32:bc: 32:a3:5a:7a:93:99:02:18:c3:b9:53:73:cf:73:8a:d5:87:56: e4:02:5b:e6:59:0e:d1:66:b1:8d:fd:f0:22:f4:29:32:2f:a6: 01:38:aa:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwYsgKfW2xX3z3OkI/WtRmI0T4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FD N0EzNTE1QzAeFw0yNTExMDQwNDQ4MThaFw0yNTExMDcxNjIzMThaMDMxMTAvBgNV BAMTKDg2MzhERDMyQkFCNUFCRUExMzMxODM1RkIwRDE0NDdDNjY2MThCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahHhkkmZSJcynxEjRPvxwR2pA TwotCXPo58sIouW+SE/0QYh6crG+0yok0uxlvDeHqUw2XwU1bGHvUoI/EJTeScWM 2WjFLIT6pNAo/g1mwxTRQJi/tMH1Oe2olZPR88tni2l2RtEvS9BF0feGpysOAc23 mneUcUriaxT0Zxd/nkc4qaL4jTSmoLpJtyq3OLlpM/S4/q/Bli2TDISn6C3dPv+G qty7bV69/kxxbMHXz4vxcyapA8yZl2dBreNliBgMfeULMMkH+lfH1yumsLDLt1bg mYAoRtugLQb5vxUSZWr3rqX6UYxgbqF5xouuTSPmIpivzDhJSQCFcQTpslQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjjdMrq1q+oTMYNfsNFEfGZhi4UwHwYDVR0j BBgwFoAUEaycrM6ar9ZuQYPm4OWZOsejUVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWJiZTVjMC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC8xMUFDOUNBQ0NF OUFBRkQ2NkU0MTgzRTZFMEU1OTkzQUM3QTM1MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FDN0Ez NTE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5 M0FDN0EzNTE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIAUoooikYvQUsJ658mp2tXsWgeHVrsDKV5 2H4xGRMg9YgKvkmX+x9217Ly/vc82erCekndN//xN4/BnFdcAQb/fW/Vgve/CFj0 peY3dgSqZtz4ago86cVn4FlKTVZGobxg9a3Q5IezdnaD3OMUMKAw7H6EKB2AWLWO ixk8LldBUYl8C4HXNC5tQqs5Cy8M+Od1awKKxGrIJLDebb0yTWBfvkSdqOxxNp7b ohpEvCRhzcgyOirp+8PUyHN1WDCkzRhDHXLuE5uiS161sOb54P7EaS/R9CsyvDKj WnqTmQIYw7lTc89zitWHVuQCW+ZZDtFmsY398CL0KTIvpgE4qmU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:56 2025 by rpki-client