$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: g+abBisMI5c89AcZrfpEeeSk5rXuZX19R4FPzJqRIz4= Subject key identifier: F4:97:05:D3:F4:A5:B9:49:9F:BB:8F:7D:71:39:1C:4F:C2:DA:25:41 Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 22D7C3208D71369BFF4F4C3B35834E1865278B7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 0183 Signing time: Sat 19 Jul 2025 05:01:10 +0000 Manifest this update: Sat 19 Jul 2025 04:56:10 +0000 Manifest next update: Tue 22 Jul 2025 11:39:10 +0000 Files and hashes: 1: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: D6nWZjTi40EtTtKWwc1wVbtN8VUpFr0dbOBhi0sFAgY=) 2: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=) 3: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 11:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d7:c3:20:8d:71:36:9b:ff:4f:4c:3b:35:83:4e:18:65:27:8b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Jul 19 04:56:10 2025 GMT Not After : Jul 22 11:39:10 2025 GMT Subject: CN=F49705D3F4A5B9499FBB8F7D71391C4FC2DA2541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:ed:5b:51:44:6b:7b:54:21:5f:de:78:1c: 53:df:07:47:f1:8b:28:14:4c:6c:77:20:50:76:69: 61:44:fe:d8:74:22:c7:42:84:ef:75:3f:3d:32:d9: 6f:ad:23:2f:7c:8b:60:96:6b:39:43:c9:6b:60:77: eb:20:f3:89:e7:c8:50:8f:98:26:4c:a3:ce:11:c0: 60:23:9b:47:77:aa:46:8c:8a:fb:4d:ee:79:3b:02: 27:a7:d0:da:8e:7f:3a:b7:a6:ea:54:0e:f9:c1:e7: e7:f3:24:78:23:95:7a:e8:5f:4e:30:52:f0:58:d9: 38:bc:3e:97:df:46:f7:6a:10:96:0d:b8:7e:1d:e6: da:ce:36:8c:a9:4f:64:68:34:54:8e:5c:a6:22:cf: 1c:51:da:c6:3c:23:60:d7:4f:35:f6:93:1e:b4:ac: b8:a1:f0:c4:35:e7:0e:70:c2:41:4a:7d:71:67:06: 0f:e0:55:d9:a0:25:38:db:bf:c0:a3:ae:93:16:3a: a3:60:77:3e:b8:55:06:7b:1a:5a:93:f6:ce:08:45: a6:82:5f:17:e4:f6:6c:a0:ee:25:b5:20:0d:79:f9: f1:40:77:c3:cd:6b:d8:fc:1a:5b:0c:0d:28:df:88: 6a:4a:d4:23:84:8c:1f:3e:ba:37:42:80:7b:28:95: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:05:D3:F4:A5:B9:49:9F:BB:8F:7D:71:39:1C:4F:C2:DA:25:41 X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f9:6b:2a:14:81:d1:5d:66:fc:a9:66:c6:9a:bf:0e:59:f9: ad:7a:76:41:31:82:b0:6f:d0:f9:01:67:49:9c:e2:e4:a5:fc: 24:22:5a:8b:bf:0c:6e:de:d1:90:96:34:ca:51:2d:d4:1c:68: 74:c1:84:02:8b:4b:e5:ae:ca:b8:1a:d2:e0:66:6a:17:f2:ee: 5f:44:1f:21:12:c7:50:7f:0c:66:b4:b1:71:b1:8a:23:d5:02: bf:17:38:d3:f5:a3:94:df:25:0a:c4:9a:53:62:fa:91:f2:fc: fb:ea:fb:30:1c:6f:6c:bd:bc:0f:86:b9:b0:f8:d9:4e:aa:bd: a7:e3:b7:a6:0e:de:7c:6c:f3:58:59:99:ad:b7:87:5c:17:14: 6a:35:77:10:bb:85:6b:8f:62:87:e1:30:17:2b:f1:cf:85:0a: 51:d2:b8:b0:58:7c:f2:ef:bb:41:c5:e0:9b:c4:00:29:b8:c5: 6d:74:8a:86:6e:d0:c9:63:23:c8:af:ac:f7:c1:09:a8:c8:ee: 13:7d:d7:02:21:5a:eb:56:96:81:59:c3:70:04:a6:8c:25:e3: 59:0b:97:7b:12:6d:c3:4e:97:8c:f4:8c:41:28:4d:d1:1f:33: 6a:77:54:84:c5:f5:bd:e1:39:0f:d0:bf:57:96:d7:73:81:bb: df:57:8d:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItfDII1xNpv/T0w7NYNOGGUni38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNTA3MTkwNDU2MTBaFw0yNTA3MjIxMTM5MTBaMDMxMTAvBgNV BAMTKEY0OTcwNUQzRjRBNUI5NDk5RkJCOEY3RDcxMzkxQzRGQzJEQTI1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNu1bUURre1QhX954HFPfB0fx iygUTGx3IFB2aWFE/th0IsdChO91Pz0y2W+tIy98i2CWazlDyWtgd+sg84nnyFCP mCZMo84RwGAjm0d3qkaMivtN7nk7Aien0NqOfzq3pupUDvnB5+fzJHgjlXroX04w UvBY2Ti8PpffRvdqEJYNuH4d5trONoypT2RoNFSOXKYizxxR2sY8I2DXTzX2kx60 rLih8MQ15w5wwkFKfXFnBg/gVdmgJTjbv8CjrpMWOqNgdz64VQZ7GlqT9s4IRaaC Xxfk9myg7iW1IA15+fFAd8PNa9j8GlsMDSjfiGpK1COEjB8+ujdCgHsolSebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9JcF0/SluUmfu499cTkcT8LaJUEwHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv5ayoUgdFdZvypZsaavw5Z+a16dkExgrBv 0PkBZ0mc4uSl/CQiWou/DG7e0ZCWNMpRLdQcaHTBhAKLS+Wuyrga0uBmahfy7l9E HyESx1B/DGa0sXGxiiPVAr8XONP1o5TfJQrEmlNi+pHy/Pvq+zAcb2y9vA+GubD4 2U6qvafjt6YO3nxs81hZma23h1wXFGo1dxC7hWuPYofhMBcr8c+FClHSuLBYfPLv u0HF4JvEACm4xW10ioZu0MljI8ivrPfBCajI7hN91wIhWutWloFZw3AEpowl41kL l3sSbcNOl4z0jEEoTdEfM2p3VITF9b3hOQ/Qv1eW13OBu99XjbI= -----END CERTIFICATE-----Generated at Mon Jul 21 12:33:21 2025 by rpki-client