$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json) Hash identifier: lpwR2kMBbIBV/S2guDfSxd8xu9tzkWg7dmM6MgxuwS8= Subject key identifier: A4:B2:2E:69:9A:CF:4D:B0:1C:FD:D9:1D:B8:43:C2:C1:01:3E:68:6A Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Certificate serial: 67244E138E9C421C99282073B9118F6D14C813FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft Manifest number: 01DF Signing time: Wed 06 Aug 2025 11:32:20 +0000 Manifest this update: Wed 06 Aug 2025 11:27:20 +0000 Manifest next update: Sat 09 Aug 2025 14:23:20 +0000 Files and hashes: 1: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: 0Uw2PIlWDAGE9EAdIQN+cpycFZFDrSr303RCOe7U/E8=) 2: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: Z0QfnCnFXO5hZ7JldmKoSnZP2y1f6y2weiE89LsWAvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:24:4e:13:8e:9c:42:1c:99:28:20:73:b9:11:8f:6d:14:c8:13:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Validity Not Before: Aug 6 11:27:20 2025 GMT Not After : Aug 9 14:23:20 2025 GMT Subject: CN=A4B22E699ACF4DB01CFDD91DB843C2C1013E686A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ff:c6:d2:ad:33:41:86:0f:02:ee:49:37:29: a5:4f:da:05:a7:d1:6a:f4:52:9e:7a:7c:75:46:1c: 01:9c:bd:13:25:ab:5a:f2:0b:36:52:f6:3e:a4:d8: da:da:06:dd:53:ca:31:e2:91:ed:c5:92:7d:f2:31: b2:55:5e:9e:61:fc:42:0a:e5:50:31:2e:af:22:dc: b5:a3:1e:ec:c1:1f:e3:26:f6:91:4e:cc:42:ec:64: 9f:51:fa:57:8f:7b:e0:23:d1:eb:61:a9:08:f8:e2: c4:9d:fb:21:af:76:31:29:bb:f2:15:e4:11:38:a9: 44:ef:64:5b:02:20:0f:a1:ca:c8:f6:c6:65:5c:a2: ac:71:99:7f:db:0d:0f:b6:15:19:19:84:a1:cd:64: 07:9c:79:5d:63:1b:48:3a:ba:c1:48:09:f8:9d:36: 69:3e:d9:ce:f9:54:ae:2d:d6:52:10:e7:a8:68:c4: b7:74:53:9e:ef:1a:2c:fb:ee:e9:63:75:92:a0:f2: 96:19:83:50:db:e9:90:23:0a:1b:03:76:80:19:bf: 1a:c6:96:a2:36:34:93:ae:42:f0:e3:87:07:7d:97: 28:67:0d:ce:09:25:e6:16:0d:5e:45:27:3b:75:f6: 4e:90:0a:69:f5:15:27:7a:20:f4:c3:f8:c9:ea:1b: bb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B2:2E:69:9A:CF:4D:B0:1C:FD:D9:1D:B8:43:C2:C1:01:3E:68:6A X509v3 Authority Key Identifier: keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7f:a0:6c:1f:60:e2:2f:8c:b3:41:ff:16:17:20:09:07:1b: 30:f1:0d:c0:08:ed:02:8b:64:19:63:b2:90:ad:dd:9d:11:43: 17:bc:0a:b5:08:62:7c:6f:5b:4b:2c:23:13:a6:5f:e9:b0:52: 0a:c3:f1:60:2a:e8:7b:7d:5f:7e:c7:51:5e:b9:de:83:90:48: 8c:a2:50:59:96:c5:68:fd:fe:25:41:d7:2c:3e:d2:7b:aa:37: 4f:00:e1:71:16:95:de:3e:97:ae:c8:45:ef:64:de:0d:f4:be: 9b:b1:11:7e:c5:84:08:d1:f7:f5:f9:a3:55:c9:9f:ff:aa:03: 7f:b0:fc:58:5c:b1:8e:bf:68:40:84:b6:2e:62:e8:07:06:16: 78:14:b1:89:7d:4a:ac:fd:23:79:f2:81:58:99:80:43:15:8c: 1e:c2:82:44:6f:b6:e8:d9:a3:a2:9d:a0:66:88:31:de:57:4b: b7:ed:42:50:77:da:4a:d9:c3:d0:0d:f9:a3:91:c3:cd:43:3f: b5:f6:31:35:5c:3d:ea:f1:e3:a5:d1:c3:db:a2:28:08:ca:49: 9f:ca:a0:b4:e6:4f:22:f8:7f:69:69:cf:6e:50:49:18:af:41: 8c:b8:3d:ac:50:37:4a:1f:e4:12:93:9a:31:01:70:b5:68:d4: dd:57:22:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyROE46cQhyZKCBzuRGPbRTIE/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FD N0EzNTE1QzAeFw0yNTA4MDYxMTI3MjBaFw0yNTA4MDkxNDIzMjBaMDMxMTAvBgNV BAMTKEE0QjIyRTY5OUFDRjREQjAxQ0ZERDkxREI4NDNDMkMxMDEzRTY4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr/8bSrTNBhg8C7kk3KaVP2gWn 0Wr0Up56fHVGHAGcvRMlq1ryCzZS9j6k2NraBt1TyjHike3Fkn3yMbJVXp5h/EIK 5VAxLq8i3LWjHuzBH+Mm9pFOzELsZJ9R+lePe+Aj0ethqQj44sSd+yGvdjEpu/IV 5BE4qUTvZFsCIA+hysj2xmVcoqxxmX/bDQ+2FRkZhKHNZAeceV1jG0g6usFICfid Nmk+2c75VK4t1lIQ56hoxLd0U57vGiz77uljdZKg8pYZg1Db6ZAjChsDdoAZvxrG lqI2NJOuQvDjhwd9lyhnDc4JJeYWDV5FJzt19k6QCmn1FSd6IPTD+MnqG7vVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLIuaZrPTbAc/dkduEPCwQE+aGowHwYDVR0j BBgwFoAUEaycrM6ar9ZuQYPm4OWZOsejUVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWJiZTVjMC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC8xMUFDOUNBQ0NF OUFBRkQ2NkU0MTgzRTZFMEU1OTkzQUM3QTM1MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FDN0Ez NTE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5 M0FDN0EzNTE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFd/oGwfYOIvjLNB/xYXIAkHGzDxDcAI7QKL ZBljspCt3Z0RQxe8CrUIYnxvW0ssIxOmX+mwUgrD8WAq6Ht9X37HUV653oOQSIyi UFmWxWj9/iVB1yw+0nuqN08A4XEWld4+l67IRe9k3g30vpuxEX7FhAjR9/X5o1XJ n/+qA3+w/FhcsY6/aECEti5i6AcGFngUsYl9Sqz9I3nygViZgEMVjB7CgkRvtujZ o6KdoGaIMd5XS7ftQlB32krZw9AN+aORw81DP7X2MTVcPerx46XRw9uiKAjKSZ/K oLTmTyL4f2lpz25QSRivQYy4PaxQN0of5BKTmjEBcLVo1N1XImQ= -----END CERTIFICATE-----Generated at Thu Aug 7 03:22:01 2025 by rpki-client