$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: 88iTu21Rw1OgkpaV846xTB42nCSpKPg7Nh85ecOykXo= Subject key identifier: 43:41:8D:C8:06:3D:42:8C:A9:68:E3:49:68:3A:7D:DB:08:7E:41:E5 Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 185827A0D7B5807FE62ED31D8B9877AB11187721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 0509 Signing time: Wed 06 Aug 2025 04:12:05 +0000 Manifest this update: Wed 06 Aug 2025 04:07:05 +0000 Manifest next update: Sat 09 Aug 2025 13:39:05 +0000 Files and hashes: 1: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=) 2: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: wnb8/0MyTupf6o/1Vwsz6T6zM85C7lSoUmN5zy15US0=) 3: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=) 4: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=) 5: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:58:27:a0:d7:b5:80:7f:e6:2e:d3:1d:8b:98:77:ab:11:18:77:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Aug 6 04:07:05 2025 GMT Not After : Aug 9 13:39:05 2025 GMT Subject: CN=43418DC8063D428CA968E349683A7DDB087E41E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:4e:2d:60:d9:0e:55:88:c8:42:6d:d7:ce: fd:11:aa:a8:d6:01:fe:eb:34:fa:cd:f4:ca:a3:fd: 41:08:3d:fe:66:b5:72:ed:5f:bf:a4:4f:b1:15:cb: 72:32:32:4f:dd:eb:56:31:6e:14:f4:96:84:74:a5: 17:e6:e7:ea:1a:15:29:b0:6d:af:82:03:ae:0e:df: 3a:88:be:07:b5:f5:06:0e:87:5b:2f:98:5e:4e:d9: 60:fa:2e:21:9e:30:fe:1f:ea:51:dd:b9:20:cf:be: ef:57:54:39:15:22:83:c4:2f:55:37:04:f7:e3:e3: 23:83:98:40:64:ba:e2:aa:3d:da:ed:a9:76:73:72: ce:ac:e2:cc:0f:02:75:19:0d:b6:0f:4c:ba:ee:0f: b6:88:da:d0:0f:5a:ed:e6:da:f3:71:41:c3:c3:6c: 9e:8f:af:03:30:ed:4f:c0:f5:39:e1:6e:b7:48:11: 03:02:4d:f2:bc:e9:e8:49:a1:64:7e:14:4b:9a:ff: 90:93:30:2d:f5:d9:e1:8a:53:73:a4:73:ab:c1:77: 9c:f2:d5:e7:4e:55:c6:91:7d:73:39:b7:f7:1f:5c: 18:10:a3:60:3f:71:87:9e:d6:0d:a6:ef:a0:ed:74: a3:ed:23:b0:d7:25:06:50:e0:5b:ca:e6:23:ce:09: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:41:8D:C8:06:3D:42:8C:A9:68:E3:49:68:3A:7D:DB:08:7E:41:E5 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d4:55:54:78:dd:f2:15:3b:7b:1b:7a:3a:33:29:be:7b:b3: e0:bf:11:7d:a1:4f:27:06:a4:a8:ac:77:74:83:28:1e:20:b9: 6f:f7:48:d7:eb:d9:e1:7b:24:b7:8c:13:e1:7f:f2:15:5a:0f: f6:73:f1:44:e2:f8:7d:15:29:f2:ac:f4:6e:1a:de:17:bf:c4: b1:d1:c6:8e:1a:cc:b3:4d:73:29:63:26:8c:cd:7b:b0:eb:25: c1:6a:8c:24:e1:82:c2:f8:8d:2c:20:42:a4:8d:80:8a:3b:03: 6d:12:fe:9e:d3:37:a5:ce:7d:dc:12:bd:92:7b:2a:5e:f5:b5: 46:f4:62:be:c9:08:7a:e6:af:54:c0:ed:3b:35:9c:41:02:76: 31:ea:f2:48:35:fd:dc:89:21:89:c3:c8:f9:b5:06:63:88:ec: 8a:ca:f4:7c:8b:5d:ba:90:4b:20:30:04:ca:6e:4f:0e:d8:8b: de:01:63:45:07:e2:99:0e:f6:e9:dd:32:71:b2:57:22:d3:cc: b0:c5:e2:26:47:bd:cd:a3:c5:f3:46:49:c9:6b:dc:fe:f2:2b: a3:90:39:cf:37:81:2f:14:62:72:37:9f:ba:50:11:67:e9:54: 0f:1c:c1:0c:63:6b:dd:31:59:62:bc:ea:db:07:c7:25:fa:64: 36:a1:b2:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFgnoNe1gH/mLtMdi5h3qxEYdyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNTA4MDYwNDA3MDVaFw0yNTA4MDkxMzM5MDVaMDMxMTAvBgNV BAMTKDQzNDE4REM4MDYzRDQyOENBOTY4RTM0OTY4M0E3RERCMDg3RTQxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0a04tYNkOVYjIQm3Xzv0RqqjW Af7rNPrN9Mqj/UEIPf5mtXLtX7+kT7EVy3IyMk/d61YxbhT0loR0pRfm5+oaFSmw ba+CA64O3zqIvge19QYOh1svmF5O2WD6LiGeMP4f6lHduSDPvu9XVDkVIoPEL1U3 BPfj4yODmEBkuuKqPdrtqXZzcs6s4swPAnUZDbYPTLruD7aI2tAPWu3m2vNxQcPD bJ6PrwMw7U/A9TnhbrdIEQMCTfK86ehJoWR+FEua/5CTMC312eGKU3Okc6vBd5zy 1edOVcaRfXM5t/cfXBgQo2A/cYee1g2m76DtdKPtI7DXJQZQ4FvK5iPOCTTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0GNyAY9QoypaONJaDp92wh+QeUwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXUVVR43fIVO3sbejozKb57s+C/EX2hTycG pKisd3SDKB4guW/3SNfr2eF7JLeME+F/8hVaD/Zz8UTi+H0VKfKs9G4a3he/xLHR xo4azLNNcyljJozNe7DrJcFqjCThgsL4jSwgQqSNgIo7A20S/p7TN6XOfdwSvZJ7 Kl71tUb0Yr7JCHrmr1TA7Ts1nEECdjHq8kg1/dyJIYnDyPm1BmOI7IrK9HyLXbqQ SyAwBMpuTw7Yi94BY0UH4pkO9undMnGyVyLTzLDF4iZHvc2jxfNGSclr3P7yK6OQ Oc83gS8UYnI3n7pQEWfpVA8cwQxja90xWWK86tsHxyX6ZDahsiE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:04 2025 by rpki-client