$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: fc4EXmAwPbbLK+mLAis1y+JZmg7s6vOwctP8f0yoeCE= Subject key identifier: 93:13:AF:CF:A9:87:88:BB:86:5B:8D:6E:FF:2E:8A:EA:C5:E1:4D:E5 Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 1C241D158E7DF9C4A2A25770846561C1D979EF97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 018D Signing time: Mon 11 Aug 2025 06:21:14 +0000 Manifest this update: Mon 11 Aug 2025 06:16:14 +0000 Manifest next update: Thu 14 Aug 2025 17:46:14 +0000 Files and hashes: 1: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=) 2: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: CUNI3QlN5AuIw5iitsE0OpZ7BVqRjibhC0ufN03v/6k=) 3: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 17:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:24:1d:15:8e:7d:f9:c4:a2:a2:57:70:84:65:61:c1:d9:79:ef:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Aug 11 06:16:14 2025 GMT Not After : Aug 14 17:46:14 2025 GMT Subject: CN=9313AFCFA98788BB865B8D6EFF2E8AEAC5E14DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:4a:a8:37:ae:ca:c6:04:3c:0b:27:90:c8: 0b:9a:d9:92:79:da:d3:40:d0:6a:8c:40:d4:59:a2: 33:4d:2c:f2:4e:12:44:04:22:55:88:f0:cc:92:29: 9f:c7:87:e4:29:ba:76:f5:55:cd:23:b3:70:8e:7c: c9:ad:bb:5c:97:da:63:11:bb:5b:0c:7a:b9:e5:4a: 8b:40:63:22:39:89:48:d5:3e:df:16:29:49:cc:2e: 7f:73:f7:98:fe:9b:d3:e4:dc:d8:7f:f2:f8:1b:d5: 1b:a9:c9:88:d2:c5:00:6b:40:a9:12:50:a7:64:63: c0:84:e5:a8:63:01:89:20:99:99:c6:0b:c3:8c:9c: 10:7d:15:3c:67:eb:cf:ec:96:68:f3:ad:31:5e:3a: 99:e5:54:bf:7b:15:fe:7b:5a:d6:43:d7:00:f7:98: 59:10:28:31:67:a5:f7:0b:d4:30:a7:0f:83:1f:b5: 12:88:9f:59:f0:8d:9d:8e:e9:a1:6c:97:d4:79:10: a2:9c:e9:7f:97:54:0f:12:48:91:4c:36:73:ef:17: 2d:0c:9c:12:3a:1f:f8:62:78:f2:28:ce:03:fa:49: a6:e3:1b:57:64:df:50:74:12:f7:a8:e8:87:a9:4d: 76:7e:b6:28:30:bc:96:54:22:02:7e:f3:8f:0c:a4: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:13:AF:CF:A9:87:88:BB:86:5B:8D:6E:FF:2E:8A:EA:C5:E1:4D:E5 X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:37:db:3a:1b:8e:e5:4c:91:05:40:8b:af:59:f4:72:9a:8a: 44:16:49:8b:ef:1b:a7:61:ca:f0:fe:ff:58:ac:a5:a2:c9:28: e5:4e:78:16:67:d9:45:ad:48:1b:8a:32:b9:93:ce:69:dd:e4: 84:8c:14:68:0a:b2:17:f8:47:23:63:04:ce:24:d4:90:29:26: dc:f9:d8:3f:bc:45:c5:39:7d:98:35:5d:0a:0d:6f:b8:07:a2: b6:aa:1d:30:5d:5f:09:19:f0:d0:b2:2f:46:21:4a:30:a2:a8: 61:42:30:8e:4d:63:6f:37:39:c7:2d:6d:d5:75:89:2c:17:e3: 6d:a5:10:08:fa:cd:70:d4:f0:be:c1:a8:3f:f2:01:9f:0b:8e: 15:a0:f4:71:d5:84:33:e3:15:e4:9f:2f:d8:5b:db:07:ae:22: 5b:15:15:da:8d:54:df:dd:e0:2e:1a:c7:5b:24:dc:65:29:19: 23:53:3c:8d:3e:43:60:d3:31:d0:13:d7:90:b3:e2:69:5d:7d: 1d:fa:92:56:b9:a3:44:c7:7a:76:2a:3f:28:90:c0:ba:d0:1e: 8c:91:4b:16:0a:ea:40:3a:e0:89:4f:9d:20:ab:62:4c:3b:61: cc:b4:38:81:3d:0e:36:c6:35:2f:53:84:e6:50:05:eb:df:1a: 76:0f:30:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCQdFY59+cSioldwhGVhwdl575cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNTA4MTEwNjE2MTRaFw0yNTA4MTQxNzQ2MTRaMDMxMTAvBgNV BAMTKDkzMTNBRkNGQTk4Nzg4QkI4NjVCOEQ2RUZGMkU4QUVBQzVFMTRERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvoEqoN67KxgQ8CyeQyAua2ZJ5 2tNA0GqMQNRZojNNLPJOEkQEIlWI8MySKZ/Hh+Qpunb1Vc0js3COfMmtu1yX2mMR u1sMernlSotAYyI5iUjVPt8WKUnMLn9z95j+m9Pk3Nh/8vgb1RupyYjSxQBrQKkS UKdkY8CE5ahjAYkgmZnGC8OMnBB9FTxn68/slmjzrTFeOpnlVL97Ff57WtZD1wD3 mFkQKDFnpfcL1DCnD4MftRKIn1nwjZ2O6aFsl9R5EKKc6X+XVA8SSJFMNnPvFy0M nBI6H/hiePIozgP6SabjG1dk31B0Eveo6IepTXZ+tigwvJZUIgJ+848MpD13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkxOvz6mHiLuGW41u/y6K6sXhTeUwHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKI32zobjuVMkQVAi69Z9HKaikQWSYvvG6dh yvD+/1ispaLJKOVOeBZn2UWtSBuKMrmTzmnd5ISMFGgKshf4RyNjBM4k1JApJtz5 2D+8RcU5fZg1XQoNb7gHoraqHTBdXwkZ8NCyL0YhSjCiqGFCMI5NY283OcctbdV1 iSwX422lEAj6zXDU8L7BqD/yAZ8LjhWg9HHVhDPjFeSfL9hb2weuIlsVFdqNVN/d 4C4ax1sk3GUpGSNTPI0+Q2DTMdAT15Cz4mldfR36kla5o0THenYqPyiQwLrQHoyR SxYK6kA64IlPnSCrYkw7Ycy0OIE9DjbGNS9ThOZQBevfGnYPMPE= -----END CERTIFICATE-----Generated at Wed Aug 13 05:52:44 2025 by rpki-client