$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: l4lrrn4ocs0UpnQfL71ekjwIjDsTgm6uqxBvNRuadlM= Subject key identifier: 9A:B7:0C:10:06:B7:3C:49:D7:EC:68:27:AA:62:9F:91:B4:F6:15:D8 Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 498DB375A9CC4E79B8B6A75BD9255C69922B0681 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 01B3 Signing time: Tue 04 Nov 2025 10:51:14 +0000 Manifest this update: Tue 04 Nov 2025 10:46:14 +0000 Manifest next update: Fri 07 Nov 2025 18:42:14 +0000 Files and hashes: 1: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=) 2: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=) 3: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: DxE8fhaGqDH1qh8BLV12QG5BNG+0HyJYHiYcomGZl/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8d:b3:75:a9:cc:4e:79:b8:b6:a7:5b:d9:25:5c:69:92:2b:06:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Nov 4 10:46:14 2025 GMT Not After : Nov 7 18:42:14 2025 GMT Subject: CN=9AB70C1006B73C49D7EC6827AA629F91B4F615D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:22:ed:31:51:34:a9:32:78:c1:f8:d4:00: aa:95:87:5b:c1:08:af:84:a7:7a:d3:a6:84:0f:64: 7a:b0:9d:dd:6f:98:57:29:65:9d:3c:2d:c3:d4:79: 74:33:66:33:91:c0:09:bf:3e:7c:a8:89:a8:13:23: 68:67:b4:94:8a:3e:0a:7d:f7:f1:dc:be:02:bf:ba: 3c:c7:4c:90:2d:b4:20:9b:7f:51:e7:f0:69:78:39: 21:94:04:2e:0d:9b:f1:d1:ce:d1:67:6d:d3:39:2f: bf:cf:bc:9a:88:63:50:f9:54:f2:e0:f3:f0:68:6b: 16:04:2d:d3:49:c3:86:fa:09:9d:46:c1:a4:06:19: c8:35:41:0b:06:5d:4b:74:e3:3b:ef:70:b4:f7:cb: 3b:1a:7d:4e:df:f6:07:81:6a:19:63:43:6d:b8:5e: f0:81:4a:24:5d:41:a1:a3:34:b6:3e:d5:05:33:0a: 07:43:cb:0d:2f:ec:9a:98:40:fe:fc:ed:94:b0:16: f2:11:2b:9b:b0:f7:9b:fb:f0:e8:69:05:77:c5:bc: 81:4f:0d:84:8a:69:7c:c4:ba:16:0e:2a:69:72:60: 58:59:77:ce:f0:ea:a0:56:1e:d1:34:2f:e5:a1:f6: 1a:83:e8:69:9c:9d:6d:50:23:3b:8c:cc:3f:4b:1d: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B7:0C:10:06:B7:3C:49:D7:EC:68:27:AA:62:9F:91:B4:F6:15:D8 X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:98:0f:7e:4d:89:a1:27:f4:06:03:65:1d:70:3e:a4:b4:e8: 51:42:13:4e:d1:13:8d:9e:e7:b9:21:0a:3f:6f:56:0a:0c:a2: 66:1f:54:52:6d:bf:3f:82:3f:b9:9f:06:38:75:20:b0:bb:b3: 04:f7:5f:75:c6:3e:1f:83:04:71:a3:b0:ff:da:10:05:2a:87: 75:df:2b:a7:e1:d9:b0:76:ba:36:3b:3d:bb:bd:ac:1e:1e:31: 2d:b6:bb:8f:bd:23:d1:08:93:69:6e:3f:50:7c:30:4c:89:91: 87:43:67:49:a9:3a:4f:97:20:f0:19:11:91:b8:06:40:64:f7: 19:b4:1c:26:05:d8:8d:bc:9d:46:a5:36:47:ac:a1:76:97:32: e9:ca:24:68:7e:d3:9c:60:30:f2:00:7d:3e:4e:7b:b2:08:9f: aa:d0:7b:84:3f:eb:0c:61:1d:f9:15:06:50:ca:53:74:7d:09: ce:a9:f7:ed:1d:e3:52:e4:c5:66:4c:4a:bb:a0:71:b0:09:38: df:8b:79:04:c9:55:45:69:17:a1:0f:ed:8d:43:8f:3f:d2:16: 69:7c:00:72:c0:ac:66:ca:4f:e8:f6:01:36:6d:67:9e:54:f1: 2d:3b:f1:63:c2:3f:c6:53:53:21:48:97:e6:d8:18:fb:4e:da: 19:0a:97:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSY2zdanMTnm4tqdb2SVcaZIrBoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNTExMDQxMDQ2MTRaFw0yNTExMDcxODQyMTRaMDMxMTAvBgNV BAMTKDlBQjcwQzEwMDZCNzNDNDlEN0VDNjgyN0FBNjI5RjkxQjRGNjE1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yyLtMVE0qTJ4wfjUAKqVh1vB CK+Ep3rTpoQPZHqwnd1vmFcpZZ08LcPUeXQzZjORwAm/PnyoiagTI2hntJSKPgp9 9/HcvgK/ujzHTJAttCCbf1Hn8Gl4OSGUBC4Nm/HRztFnbdM5L7/PvJqIY1D5VPLg 8/BoaxYELdNJw4b6CZ1GwaQGGcg1QQsGXUt04zvvcLT3yzsafU7f9geBahljQ224 XvCBSiRdQaGjNLY+1QUzCgdDyw0v7JqYQP787ZSwFvIRK5uw95v78OhpBXfFvIFP DYSKaXzEuhYOKmlyYFhZd87w6qBWHtE0L+Wh9hqD6GmcnW1QIzuMzD9LHSmHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmrcMEAa3PEnX7GgnqmKfkbT2FdgwHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+YD35NiaEn9AYDZR1wPqS06FFCE07RE42e 57khCj9vVgoMomYfVFJtvz+CP7mfBjh1ILC7swT3X3XGPh+DBHGjsP/aEAUqh3Xf K6fh2bB2ujY7Pbu9rB4eMS22u4+9I9EIk2luP1B8MEyJkYdDZ0mpOk+XIPAZEZG4 BkBk9xm0HCYF2I28nUalNkesoXaXMunKJGh+05xgMPIAfT5Oe7IIn6rQe4Q/6wxh HfkVBlDKU3R9Cc6p9+0d41LkxWZMSrugcbAJON+LeQTJVUVpF6EP7Y1Djz/SFml8 AHLArGbKT+j2ATZtZ55U8S078WPCP8ZTUyFIl+bYGPtO2hkKl8k= -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:05 2025 by rpki-client