$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json) Hash identifier: XePHpqFaI8pJyB3Pw11cwwvqMU9WyMHXUwYNuWTK9ho= Subject key identifier: 9D:AE:06:0A:02:A4:B0:DE:E3:8F:6E:48:72:9E:A9:51:20:00:8E:A0 Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Certificate serial: 49C609C03637CC6E7455F763DAF5FE8B6A8D32C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft Manifest number: 01C7 Signing time: Fri 13 Jun 2025 12:22:14 +0000 Manifest this update: Fri 13 Jun 2025 12:17:14 +0000 Manifest next update: Mon 16 Jun 2025 15:13:14 +0000 Files and hashes: 1: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: VxUeutHfHf5JFAgDug3H5ZhdRUtDbVdzHlONlDFAy9k=) 2: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: 0Uw2PIlWDAGE9EAdIQN+cpycFZFDrSr303RCOe7U/E8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 15:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c6:09:c0:36:37:cc:6e:74:55:f7:63:da:f5:fe:8b:6a:8d:32:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Validity Not Before: Jun 13 12:17:14 2025 GMT Not After : Jun 16 15:13:14 2025 GMT Subject: CN=9DAE060A02A4B0DEE38F6E48729EA95120008EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:07:25:18:bc:23:ca:28:d0:25:8d:98:57: e3:c1:fe:d8:7d:46:bc:77:6a:89:e3:df:37:5a:8b: f2:d8:c3:99:e3:29:c9:de:30:bf:0d:35:36:6e:eb: fe:59:05:5e:ba:a3:25:6c:53:5b:3c:60:ad:77:10: 21:14:94:b3:d5:b7:cb:e6:8b:a1:86:fe:74:8e:6c: 77:1f:c3:5f:cf:2e:88:5f:b6:65:6a:9c:c1:f2:96: 57:de:fc:fe:72:b1:67:ea:cf:1e:44:c4:ea:06:79: 4e:a9:f0:04:a2:1a:41:0e:b8:26:17:38:e8:bb:81: 1b:9b:92:9c:a9:b6:34:e3:da:3e:df:b2:ed:23:ea: ab:0a:c4:ce:9a:1d:71:22:fd:8d:f5:83:da:bc:c4: 68:e9:e5:8c:90:24:f9:a7:6f:30:99:f3:75:5f:03: 3d:47:ee:a5:cb:4d:bf:b2:6c:e2:c3:7c:9f:3f:3c: 2d:e6:4a:63:e7:0e:b9:68:6f:c2:e3:fc:f3:32:c2: 7e:e6:5c:7d:7d:42:21:c1:df:d0:41:38:d4:07:4e: 60:4b:01:fc:1d:90:6a:3e:6c:44:5c:ca:80:fb:1c: a1:2b:d5:e3:a3:ad:cd:1e:d2:0f:c6:57:06:d8:e6: 8b:b2:47:2b:25:93:a7:58:6f:cd:36:e9:b7:2c:6e: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AE:06:0A:02:A4:B0:DE:E3:8F:6E:48:72:9E:A9:51:20:00:8E:A0 X509v3 Authority Key Identifier: keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ad:f2:12:e1:2c:13:bc:55:83:ca:42:6f:ae:d4:a3:e4:3a: 0d:ae:60:a8:e5:63:7c:ef:f3:13:57:d7:f0:ca:7f:14:27:ab: 89:1a:5b:38:14:7e:80:2b:19:23:11:25:ea:7c:f4:e7:8d:cc: ab:a8:b4:82:f6:fc:d6:91:30:d1:23:07:1c:af:8e:6a:6c:9f: 5b:aa:74:68:95:ec:80:9e:dd:51:c2:89:2a:f7:96:22:e1:d3: ef:c9:f3:bb:8d:b5:40:e5:85:35:40:17:b2:6f:56:7f:73:e5: cc:1e:43:3d:1e:e1:d5:ab:19:0f:7f:6a:71:0f:0f:2a:6a:80: 72:ab:cb:9b:cf:7b:97:21:58:8f:e6:cf:f5:f2:6e:65:53:5f: 03:cf:95:f5:e3:52:7e:86:76:77:ab:3a:6d:bf:11:85:43:e2: 81:a8:30:63:7b:1b:77:ab:32:c8:01:28:a5:db:55:8e:1c:3f: d6:93:57:74:95:2e:fa:d8:e6:2f:6b:26:e3:44:cb:ef:0a:a8: 2f:30:01:3b:a8:0a:92:0e:32:66:85:ed:c4:51:0e:18:2e:a8: 3e:cb:48:cd:48:82:51:b9:90:85:77:05:18:e3:12:f3:3b:bd: d4:58:0e:3e:a4:5d:cc:aa:96:9d:b8:c5:91:aa:8d:4a:86:d3: e5:40:f3:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScYJwDY3zG50Vfdj2vX+i2qNMsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FD N0EzNTE1QzAeFw0yNTA2MTMxMjE3MTRaFw0yNTA2MTYxNTEzMTRaMDMxMTAvBgNV BAMTKDlEQUUwNjBBMDJBNEIwREVFMzhGNkU0ODcyOUVBOTUxMjAwMDhFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtAclGLwjyijQJY2YV+PB/th9 Rrx3aonj3zdai/LYw5njKcneML8NNTZu6/5ZBV66oyVsU1s8YK13ECEUlLPVt8vm i6GG/nSObHcfw1/PLohftmVqnMHyllfe/P5ysWfqzx5ExOoGeU6p8ASiGkEOuCYX OOi7gRubkpyptjTj2j7fsu0j6qsKxM6aHXEi/Y31g9q8xGjp5YyQJPmnbzCZ83Vf Az1H7qXLTb+ybOLDfJ8/PC3mSmPnDrlob8Lj/PMywn7mXH19QiHB39BBONQHTmBL AfwdkGo+bERcyoD7HKEr1eOjrc0e0g/GVwbY5ouyRyslk6dYb8026bcsbscRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUna4GCgKksN7jj25Icp6pUSAAjqAwHwYDVR0j BBgwFoAUEaycrM6ar9ZuQYPm4OWZOsejUVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWJiZTVjMC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC8xMUFDOUNBQ0NF OUFBRkQ2NkU0MTgzRTZFMEU1OTkzQUM3QTM1MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FDN0Ez NTE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5 M0FDN0EzNTE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+t8hLhLBO8VYPKQm+u1KPkOg2uYKjlY3zv 8xNX1/DKfxQnq4kaWzgUfoArGSMRJep89OeNzKuotIL2/NaRMNEjBxyvjmpsn1uq dGiV7ICe3VHCiSr3liLh0+/J87uNtUDlhTVAF7JvVn9z5cweQz0e4dWrGQ9/anEP DypqgHKry5vPe5chWI/mz/XybmVTXwPPlfXjUn6GdnerOm2/EYVD4oGoMGN7G3er MsgBKKXbVY4cP9aTV3SVLvrY5i9rJuNEy+8KqC8wATuoCpIOMmaF7cRRDhguqD7L SM1IglG5kIV3BRjjEvM7vdRYDj6kXcyqlp24xZGqjUqG0+VA86g= -----END CERTIFICATE-----Generated at Sun Jun 15 17:29:04 2025 by rpki-client