$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: xJWAWzsqkELjDtCqK6BMVfUQUXcKzZbugOFhqzJ8g9o= Subject key identifier: 69:B8:87:19:24:36:C5:B6:95:72:A7:F6:7C:D4:8D:F3:C4:1C:B1:94 Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 1A80661C34A3A803A09949AA3B1D8DD9A50873A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 0532 Signing time: Tue 04 Nov 2025 11:42:01 +0000 Manifest this update: Tue 04 Nov 2025 11:37:01 +0000 Manifest next update: Fri 07 Nov 2025 16:17:01 +0000 Files and hashes: 1: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: dnyBZdzbMW9ZXQMlf6BWZA7JFO9gnuMYODYckT0pxps=) 2: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=) 3: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=) 4: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=) 5: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:80:66:1c:34:a3:a8:03:a0:99:49:aa:3b:1d:8d:d9:a5:08:73:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Nov 4 11:37:01 2025 GMT Not After : Nov 7 16:17:01 2025 GMT Subject: CN=69B887192436C5B69572A7F67CD48DF3C41CB194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:8a:6b:9e:bf:30:76:37:42:aa:02:7a:31: 18:54:7c:19:5f:fd:6b:69:61:f1:70:ae:c6:e2:39: 42:52:3b:fe:32:95:35:04:39:3f:34:ba:72:26:17: e5:c0:1a:67:e7:60:39:e0:e2:9e:96:3d:77:2b:1c: 1f:2d:eb:3a:35:8c:ca:ea:4a:49:e3:48:27:e1:0e: 50:27:d1:47:93:65:06:8b:2d:d6:4d:2f:9d:de:f1: 9d:23:ea:0b:3f:9e:47:41:1b:03:2b:cb:14:73:00: a7:ea:36:24:f3:ca:66:f4:04:67:22:eb:ad:7f:5d: 51:07:7b:fc:7d:26:f6:6d:0f:dd:3a:47:fa:e2:3f: 29:60:02:1e:92:8e:c9:1e:8a:62:01:24:f5:c1:fe: a5:67:72:98:94:93:f8:1f:49:7c:d4:0f:c8:01:52: 56:98:51:42:6a:22:73:31:c8:02:4d:ab:a6:46:d6: df:b4:9c:0f:98:2c:88:63:23:11:e8:53:b3:cf:87: c0:84:d9:ec:bc:79:d3:97:e4:b8:0e:ac:cd:61:29: 94:1f:15:71:2f:f9:8e:98:3b:41:ae:11:64:b9:0c: f9:e3:f9:94:4f:6e:04:55:b2:35:d0:66:a8:31:d7: 1d:db:46:8e:15:9f:27:0b:94:d9:d8:8b:b9:07:b3: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B8:87:19:24:36:C5:B6:95:72:A7:F6:7C:D4:8D:F3:C4:1C:B1:94 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1e:96:39:e6:9b:67:52:68:b7:eb:32:00:82:1e:25:d6:9a: e2:9c:01:fe:d0:07:b6:5f:9e:41:f7:9c:8e:c3:e9:72:e9:59: 20:de:ce:3d:11:c2:a4:d5:b0:9c:bd:50:06:0f:6e:25:20:b4: 11:b7:07:7a:86:da:2b:19:e4:87:ca:dd:45:4d:fb:c4:07:08: 51:f7:30:8d:ea:03:62:01:60:1c:99:ac:1a:8f:7e:ea:10:d2: fd:f2:14:de:e9:07:d7:e0:10:7c:9f:9b:b4:d4:0a:e4:f7:df: 8e:62:19:c3:06:57:c9:89:89:29:fd:3b:92:52:e9:90:ef:24: 25:2b:7a:a3:03:82:09:e8:56:2d:23:21:bb:93:3a:a4:23:eb: db:66:36:c1:22:16:26:19:8b:63:b0:60:27:ce:8c:14:47:9e: 94:bd:19:60:48:75:5b:26:44:4b:a0:2f:82:20:ec:86:d0:76: ac:ab:7c:cd:f8:15:73:4b:94:82:0d:41:78:b1:78:51:ea:a2: a7:d8:e0:8a:5c:b4:64:80:4e:dd:5d:08:5e:c8:80:7a:15:32: cd:46:cc:8a:be:76:eb:da:73:c2:38:ab:0d:5e:72:83:54:ff: 1e:fb:d8:65:27:c6:ee:dc:a0:25:13:5b:12:cf:cc:34:8b:aa: 07:11:b2:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoBmHDSjqAOgmUmqOx2N2aUIc6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNTExMDQxMTM3MDFaFw0yNTExMDcxNjE3MDFaMDMxMTAvBgNV BAMTKDY5Qjg4NzE5MjQzNkM1QjY5NTcyQTdGNjdDRDQ4REYzQzQxQ0IxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/Yprnr8wdjdCqgJ6MRhUfBlf /WtpYfFwrsbiOUJSO/4ylTUEOT80unImF+XAGmfnYDng4p6WPXcrHB8t6zo1jMrq SknjSCfhDlAn0UeTZQaLLdZNL53e8Z0j6gs/nkdBGwMryxRzAKfqNiTzymb0BGci 661/XVEHe/x9JvZtD906R/riPylgAh6SjskeimIBJPXB/qVncpiUk/gfSXzUD8gB UlaYUUJqInMxyAJNq6ZG1t+0nA+YLIhjIxHoU7PPh8CE2ey8edOX5LgOrM1hKZQf FXEv+Y6YO0GuEWS5DPnj+ZRPbgRVsjXQZqgx1x3bRo4VnycLlNnYi7kHs4FtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUabiHGSQ2xbaVcqf2fNSN88QcsZQwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgeljnmm2dSaLfrMgCCHiXWmuKcAf7QB7Zf nkH3nI7D6XLpWSDezj0RwqTVsJy9UAYPbiUgtBG3B3qG2isZ5IfK3UVN+8QHCFH3 MI3qA2IBYByZrBqPfuoQ0v3yFN7pB9fgEHyfm7TUCuT3345iGcMGV8mJiSn9O5JS 6ZDvJCUreqMDggnoVi0jIbuTOqQj69tmNsEiFiYZi2OwYCfOjBRHnpS9GWBIdVsm REugL4Ig7IbQdqyrfM34FXNLlIINQXixeFHqoqfY4IpctGSATt1dCF7IgHoVMs1G zIq+duvac8I4qw1ecoNU/x772GUnxu7coCUTWxLPzDSLqgcRsv4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:43 2025 by rpki-client