$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: iwee/SwZYxlFW0SDDripOyhM0xxnUeRQXmZZe2QLNLU= Subject key identifier: E9:27:7A:40:1F:F4:30:90:EC:58:00:97:60:82:4C:AF:AC:80:28:BB Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 3E26888EEE727D30FBBD35AC148973D4187B78A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 016F Signing time: Tue 03 Jun 2025 14:31:20 +0000 Manifest this update: Tue 03 Jun 2025 14:26:20 +0000 Manifest next update: Fri 06 Jun 2025 15:56:20 +0000 Files and hashes: 1: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=) 2: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=) 3: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: 8+MDZmUZSU/x5pANUwhG7k+tpanhBvTD5rmP93GGcII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:26:88:8e:ee:72:7d:30:fb:bd:35:ac:14:89:73:d4:18:7b:78:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Jun 3 14:26:20 2025 GMT Not After : Jun 6 15:56:20 2025 GMT Subject: CN=E9277A401FF43090EC58009760824CAFAC8028BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ca:d6:57:f6:17:a3:77:eb:ff:e2:fd:77:a4: f2:5b:28:19:21:19:a1:05:d9:94:76:27:c4:e3:c5: 71:98:bb:57:77:81:25:82:2a:0a:e7:55:3d:f2:3b: 32:3f:86:ce:e3:70:9d:5b:da:ff:ee:d6:e2:f7:ff: 1a:e6:bc:5c:7a:d9:b4:68:67:b0:84:b3:ab:45:ff: 30:23:4e:cc:b6:dc:1f:1e:76:32:a2:d5:39:99:7b: 92:84:63:03:38:8d:55:41:36:39:d3:29:a6:3f:46: 10:4c:98:70:41:dc:ce:6c:fc:d4:09:09:c5:7c:e2: 9f:27:d2:d2:38:46:04:fe:40:5d:25:5d:c1:27:89: 0e:3c:e7:48:d7:ca:49:d2:95:51:f9:f5:a9:f7:a1: c9:f2:9e:c0:4c:1c:99:16:9f:a3:cf:83:3c:db:2d: 7d:fb:8e:49:1b:d1:d6:eb:e2:00:e7:96:73:93:71: 01:04:ec:e6:2c:09:f2:8f:c0:8b:37:3a:e7:c2:32: df:3b:2b:1c:3a:86:f4:6b:ba:9a:53:96:c6:c9:f7: 8d:6d:af:7d:39:38:78:31:1e:90:84:8e:52:33:02: f5:c5:b3:55:0f:46:51:25:f5:03:97:bb:aa:28:83: ef:f0:1b:07:3e:87:1a:8b:d8:76:c9:32:1c:b2:00: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:27:7A:40:1F:F4:30:90:EC:58:00:97:60:82:4C:AF:AC:80:28:BB X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3f:d2:ff:cc:75:54:d4:01:61:5b:04:4e:5d:3d:c5:b3:4c: 77:86:0b:4d:fc:39:ab:69:ea:cc:32:95:95:8d:fc:53:3a:63: 8a:7e:76:46:79:30:d5:f1:06:1c:ce:2f:46:41:c4:0f:7a:7f: 3f:9e:54:80:28:2b:82:b2:ca:d6:06:07:a5:16:c3:60:29:ad: 98:e3:6c:3c:32:11:61:97:40:0b:d9:b8:f2:97:ac:db:54:af: 32:ee:34:bd:16:b2:47:a6:49:17:20:69:22:18:ce:1e:9b:35: 52:28:c6:73:21:4d:56:70:cf:8f:da:ae:34:e3:a9:97:f7:b9: 42:fc:9d:1e:8d:90:5f:07:8f:df:b6:64:a8:71:5f:e5:60:31: a3:40:87:77:89:0d:24:11:d6:f6:ad:3c:7c:0f:22:4b:a6:ad: 0c:bb:85:ce:ed:8a:ab:88:b5:27:4f:75:48:a4:9e:6c:c6:14: bc:5e:98:15:57:04:56:56:63:9f:69:4f:d5:87:df:2b:c6:54: 80:8c:cb:b2:ae:02:cd:1e:5f:4b:eb:d8:19:5b:6d:44:02:d4: dd:b6:0b:b4:06:f8:61:68:13:5b:c7:86:1f:9d:5d:a1:b3:bf: 5d:3b:bd:9a:d4:fc:52:63:8c:b3:35:fe:c4:83:65:3c:bd:83: 2d:31:65:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPiaIju5yfTD7vTWsFIlz1Bh7eKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNTA2MDMxNDI2MjBaFw0yNTA2MDYxNTU2MjBaMDMxMTAvBgNV BAMTKEU5Mjc3QTQwMUZGNDMwOTBFQzU4MDA5NzYwODI0Q0FGQUM4MDI4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXytZX9hejd+v/4v13pPJbKBkh GaEF2ZR2J8TjxXGYu1d3gSWCKgrnVT3yOzI/hs7jcJ1b2v/u1uL3/xrmvFx62bRo Z7CEs6tF/zAjTsy23B8edjKi1TmZe5KEYwM4jVVBNjnTKaY/RhBMmHBB3M5s/NQJ CcV84p8n0tI4RgT+QF0lXcEniQ4850jXyknSlVH59an3ocnynsBMHJkWn6PPgzzb LX37jkkb0dbr4gDnlnOTcQEE7OYsCfKPwIs3OufCMt87Kxw6hvRruppTlsbJ941t r305OHgxHpCEjlIzAvXFs1UPRlEl9QOXu6oog+/wGwc+hxqL2HbJMhyyANurAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Sd6QB/0MJDsWACXYIJMr6yAKLswHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFA/0v/MdVTUAWFbBE5dPcWzTHeGC038Oatp 6swylZWN/FM6Y4p+dkZ5MNXxBhzOL0ZBxA96fz+eVIAoK4KyytYGB6UWw2AprZjj bDwyEWGXQAvZuPKXrNtUrzLuNL0WskemSRcgaSIYzh6bNVIoxnMhTVZwz4/arjTj qZf3uUL8nR6NkF8Hj9+2ZKhxX+VgMaNAh3eJDSQR1vatPHwPIkumrQy7hc7tiquI tSdPdUiknmzGFLxemBVXBFZWY59pT9WH3yvGVICMy7KuAs0eX0vr2BlbbUQC1N22 C7QG+GFoE1vHhh+dXaGzv107vZrU/FJjjLM1/sSDZTy9gy0xZcA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:50 2025 by rpki-client