$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: 4yWyif22+O+e4pqjC+9WUOcOFYv6P3oKs+teXu8KUtg= Subject key identifier: 77:44:33:00:87:82:1C:80:08:6B:23:FF:BC:5D:13:A7:A3:C4:55:58 Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 71FFDD8E09941A92381E9464F4419334B56C5785 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 0175 Signing time: Tue 17 Jun 2025 03:51:09 +0000 Manifest this update: Tue 17 Jun 2025 03:46:09 +0000 Manifest next update: Fri 20 Jun 2025 10:28:09 +0000 Files and hashes: 1: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: dvYrzjT326aRzTZrKhaxQN273iy//Pw69GXAqhjeGIY=) 2: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=) 3: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ff:dd:8e:09:94:1a:92:38:1e:94:64:f4:41:93:34:b5:6c:57:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Jun 17 03:46:09 2025 GMT Not After : Jun 20 10:28:09 2025 GMT Subject: CN=7744330087821C80086B23FFBC5D13A7A3C45558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:79:73:ff:70:17:61:bb:0e:5c:00:0a:81: d0:5d:b6:4c:b2:3f:02:6e:c3:83:39:ba:20:40:b8: fa:8f:9d:10:3d:21:e9:bf:54:31:b7:e2:e7:c9:0a: 45:7d:28:c0:1a:b7:ed:62:20:51:07:fc:ef:5c:d0: bb:44:bc:a0:8b:f0:5f:ba:70:76:3c:e6:6c:1d:27: 42:2a:fd:46:6f:b6:a6:4f:f3:10:63:9a:3c:d9:4f: e8:05:6e:c7:c3:9d:c9:da:30:ea:1c:dd:db:c6:5e: b6:13:86:50:21:22:c7:10:5c:aa:15:17:5f:b7:38: 96:e6:89:6f:04:e3:16:21:7f:32:8c:20:dc:6c:03: 87:e4:95:a1:49:f1:32:f0:53:a1:30:19:f3:2b:b8: 09:2b:94:86:ea:e3:27:4b:aa:06:1d:1e:7f:4f:d5: de:d8:70:99:91:4c:d8:9a:38:61:14:4b:ca:c2:66: 06:c3:28:d1:68:23:f6:cc:8a:5c:0e:bd:c6:fd:7b: 60:7c:07:54:c5:76:f7:29:26:d4:e0:eb:5e:7e:cc: 20:86:f1:70:81:00:9a:1c:5b:f5:11:44:f4:f7:c8: 3b:d1:eb:ab:9b:66:5f:32:95:06:5d:9a:45:9e:1e: 9f:20:2f:d2:83:b8:93:b1:d7:33:ea:40:62:7a:76: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:44:33:00:87:82:1C:80:08:6B:23:FF:BC:5D:13:A7:A3:C4:55:58 X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ca:9d:aa:55:87:35:1f:01:cf:77:56:ae:cd:e5:ed:1b:cf: cd:d3:9e:69:9e:42:10:09:28:e9:c1:2a:0d:0f:bc:1e:2b:73: 47:bf:47:c1:a8:44:eb:af:4a:8f:27:84:77:f5:51:07:28:60: 15:cb:71:f5:f5:27:a6:96:44:ce:d6:a7:74:97:99:b3:ec:9e: 09:92:93:e6:33:65:55:b1:3f:e5:9c:c3:14:bf:82:af:a7:7e: e4:80:6b:97:00:aa:e8:30:71:28:e9:91:ec:94:29:7d:62:3f: 5d:b7:38:b6:d2:ca:bd:28:b4:ec:df:b5:ce:3b:b7:58:c8:93: bd:fc:aa:6b:c6:7f:d6:12:0c:da:1e:0f:67:68:cf:40:4d:3c: b8:5b:a9:1f:d2:60:83:4d:81:b5:66:dd:1f:50:e4:22:6f:45: fd:9c:cb:df:bd:ac:09:b5:7b:f6:3c:c8:88:6d:a4:5c:19:35: cb:ee:9e:f9:08:4c:e7:1a:55:b0:61:53:48:6b:63:6d:31:ab: dc:08:0d:de:36:5d:2c:ef:85:17:c5:b3:fe:a7:3d:09:0d:b1: e4:ab:3a:11:2b:ec:ce:d2:44:f8:f3:c5:f2:22:cd:6c:57:07: 6c:70:ee:61:6f:9b:f6:2e:da:e3:40:c5:65:b5:44:d1:8e:f1: 74:e0:30:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcf/djgmUGpI4HpRk9EGTNLVsV4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNTA2MTcwMzQ2MDlaFw0yNTA2MjAxMDI4MDlaMDMxMTAvBgNV BAMTKDc3NDQzMzAwODc4MjFDODAwODZCMjNGRkJDNUQxM0E3QTNDNDU1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkHlz/3AXYbsOXAAKgdBdtkyy PwJuw4M5uiBAuPqPnRA9Iem/VDG34ufJCkV9KMAat+1iIFEH/O9c0LtEvKCL8F+6 cHY85mwdJ0Iq/UZvtqZP8xBjmjzZT+gFbsfDncnaMOoc3dvGXrYThlAhIscQXKoV F1+3OJbmiW8E4xYhfzKMINxsA4fklaFJ8TLwU6EwGfMruAkrlIbq4ydLqgYdHn9P 1d7YcJmRTNiaOGEUS8rCZgbDKNFoI/bMilwOvcb9e2B8B1TFdvcpJtTg615+zCCG 8XCBAJocW/URRPT3yDvR66ubZl8ylQZdmkWeHp8gL9KDuJOx1zPqQGJ6dgxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd0QzAIeCHIAIayP/vF0Tp6PEVVgwHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDKnapVhzUfAc93Vq7N5e0bz83TnmmeQhAJ KOnBKg0PvB4rc0e/R8GoROuvSo8nhHf1UQcoYBXLcfX1J6aWRM7Wp3SXmbPsngmS k+YzZVWxP+WcwxS/gq+nfuSAa5cAqugwcSjpkeyUKX1iP123OLbSyr0otOzftc47 t1jIk738qmvGf9YSDNoeD2doz0BNPLhbqR/SYINNgbVm3R9Q5CJvRf2cy9+9rAm1 e/Y8yIhtpFwZNcvunvkITOcaVbBhU0hrY20xq9wIDd42XSzvhRfFs/6nPQkNseSr OhEr7M7SRPjzxfIizWxXB2xw7mFvm/Yu2uNAxWW1RNGO8XTgMA4= -----END CERTIFICATE-----Generated at Tue Jun 17 11:47:34 2025 by rpki-client