$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: EwM98p5ITTA+RipimmtoBU/Bpi6DlRtQJofz1VD3n2Q= Subject key identifier: 94:97:0D:BD:B3:AC:0F:EC:7E:86:F8:E7:57:5A:68:C2:9F:83:0D:5B Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 2385441C079FA76C14915E6F0F01B1195CA0BD5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 0151 Signing time: Sun 20 Jul 2025 19:52:18 +0000 Manifest this update: Sun 20 Jul 2025 19:47:18 +0000 Manifest next update: Thu 24 Jul 2025 00:16:18 +0000 Files and hashes: 1: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) 2: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: hl3yPRElE/mB7OjhjVqJ4mVwT0csOzz2iFpytLHOPFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:85:44:1c:07:9f:a7:6c:14:91:5e:6f:0f:01:b1:19:5c:a0:bd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Jul 20 19:47:18 2025 GMT Not After : Jul 24 00:16:18 2025 GMT Subject: CN=94970DBDB3AC0FEC7E86F8E7575A68C29F830D5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:c3:2e:b4:9a:1a:00:e9:85:d3:f8:9c:29: dc:51:08:06:55:fd:3c:bd:08:08:b6:59:6a:56:3a: 83:3f:e9:65:30:57:13:20:3f:0d:2c:8a:44:37:e5: 81:df:63:5a:52:00:48:0a:db:bb:02:7e:77:8b:53: 44:a3:b9:5d:64:9d:99:e0:0b:41:5a:e6:e1:44:17: de:2d:30:35:50:63:71:5a:54:d8:a5:9e:50:83:da: 75:da:1d:1d:4d:da:20:81:f9:1b:9d:81:11:62:0c: 06:30:4b:97:55:76:08:5e:52:28:30:da:60:6f:4a: 3c:57:f4:ec:bf:26:5d:89:14:f9:57:0d:69:9b:77: 27:37:e4:91:b5:e1:6f:db:c1:1e:09:17:c0:0b:1f: 29:6b:fe:00:37:e5:86:54:64:27:ce:d2:93:62:21: 80:ba:d8:bb:19:bf:57:68:83:32:61:24:83:e3:f0: b0:48:2c:de:98:a0:18:73:21:df:b5:4d:7e:c8:59: 98:e9:6b:7b:af:65:77:50:ff:40:49:8d:ed:d6:ec: 14:03:c9:47:43:ec:94:4b:ff:f1:13:6d:3a:5c:84: 3d:bb:b3:4f:ee:d2:6e:a0:4c:1e:79:c7:07:f1:d1: cd:e8:af:1e:56:7b:3b:85:b2:ea:00:40:00:92:60: a3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:97:0D:BD:B3:AC:0F:EC:7E:86:F8:E7:57:5A:68:C2:9F:83:0D:5B X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:dd:03:f5:70:b9:db:c0:5a:80:c0:31:00:c9:b3:95:53:1e: c5:8c:af:51:d6:b8:16:9d:21:8f:1a:cb:e8:c7:8c:4b:c9:32: 73:ac:be:8d:d7:32:ea:4b:73:65:c3:50:3a:06:9b:68:7d:8d: f8:36:aa:90:7d:73:3c:e2:a4:84:2a:04:a4:bc:cf:c4:1c:e5: 67:99:05:2b:05:77:06:ef:2e:7e:68:aa:4d:b6:dd:c9:88:23: 72:39:e1:29:d0:97:19:bd:93:df:5b:21:d9:d1:1e:03:43:fd: 70:6d:74:ea:6c:6f:21:97:8a:61:1d:6e:c9:f4:fc:08:68:e0: 30:e9:8b:cd:0c:ce:78:13:64:4a:9b:26:23:80:31:0d:a4:f2: 81:cd:c3:1f:b0:a9:df:fb:36:b2:77:16:c4:89:8f:ae:00:00: 3c:30:71:db:65:02:a7:74:6c:a8:22:9e:53:06:6c:a3:31:80: ff:2f:af:c3:02:af:1a:0c:72:93:54:59:ab:7c:11:8f:a8:c5: 64:13:a6:8d:11:4f:aa:4b:50:ed:26:75:0d:7a:e1:ac:15:5c: 54:9a:34:64:db:31:c4:5b:9d:fd:5b:0b:5e:cc:0e:15:38:fd: 21:b5:72:09:66:53:16:67:44:3e:a6:30:0b:0b:96:07:b5:d0: a0:27:07:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4VEHAefp2wUkV5vDwGxGVygvVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTA3MjAxOTQ3MThaFw0yNTA3MjQwMDE2MThaMDMxMTAvBgNV BAMTKDk0OTcwREJEQjNBQzBGRUM3RTg2RjhFNzU3NUE2OEMyOUY4MzBENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAcMutJoaAOmF0/icKdxRCAZV /Ty9CAi2WWpWOoM/6WUwVxMgPw0sikQ35YHfY1pSAEgK27sCfneLU0SjuV1knZng C0Fa5uFEF94tMDVQY3FaVNilnlCD2nXaHR1N2iCB+RudgRFiDAYwS5dVdgheUigw 2mBvSjxX9Oy/Jl2JFPlXDWmbdyc35JG14W/bwR4JF8ALHylr/gA35YZUZCfO0pNi IYC62LsZv1dogzJhJIPj8LBILN6YoBhzId+1TX7IWZjpa3uvZXdQ/0BJje3W7BQD yUdD7JRL//ETbTpchD27s0/u0m6gTB55xwfx0c3orx5WezuFsuoAQACSYKOvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlJcNvbOsD+x+hvjnV1powp+DDVswHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATdA/VwudvAWoDAMQDJs5VTHsWMr1HWuBad IY8ay+jHjEvJMnOsvo3XMupLc2XDUDoGm2h9jfg2qpB9czzipIQqBKS8z8Qc5WeZ BSsFdwbvLn5oqk223cmII3I54SnQlxm9k99bIdnRHgND/XBtdOpsbyGXimEdbsn0 /Aho4DDpi80MzngTZEqbJiOAMQ2k8oHNwx+wqd/7NrJ3FsSJj64AADwwcdtlAqd0 bKginlMGbKMxgP8vr8MCrxoMcpNUWat8EY+oxWQTpo0RT6pLUO0mdQ164awVXFSa NGTbMcRbnf1bC17MDhU4/SG1cglmUxZnRD6mMAsLlge10KAnB/A= -----END CERTIFICATE-----Generated at Tue Jul 22 04:40:07 2025 by rpki-client