$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: BEMffM7jjSJMgKzr2pjqonf92Djg6fMm/D87tdVIdmg= Subject key identifier: FD:32:9F:03:D5:C5:1D:D5:97:89:FE:2A:30:80:AF:14:41:8B:08:C9 Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 4FE0E57CB69AB746DA6CA88867B5C476355B077E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 0192 Signing time: Fri 22 Aug 2025 14:01:11 +0000 Manifest this update: Fri 22 Aug 2025 13:56:11 +0000 Manifest next update: Mon 25 Aug 2025 15:13:11 +0000 Files and hashes: 1: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: SeVZ0vfdARWKU1St77Wn+qW99IczJbT8oDOZZnFvj4Q=) 2: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=) 3: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e0:e5:7c:b6:9a:b7:46:da:6c:a8:88:67:b5:c4:76:35:5b:07:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Aug 22 13:56:11 2025 GMT Not After : Aug 25 15:13:11 2025 GMT Subject: CN=FD329F03D5C51DD59789FE2A3080AF14418B08C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:e4:ca:3d:ba:85:08:2f:60:03:96:e4:ed: e7:20:d1:0b:50:49:56:6d:35:e8:70:c9:6a:f8:d7: 89:e0:31:14:0c:66:9e:da:71:2d:f4:94:93:62:22: bc:5d:d2:86:14:e5:12:f4:ca:ab:b5:a8:a2:60:67: f8:78:f0:1c:c5:a3:d9:75:4a:57:00:c9:61:38:0a: 2c:4b:a4:3f:5c:d7:32:57:b6:23:a1:66:85:47:e7: 6f:6c:54:64:32:4f:02:9f:74:2c:db:e3:80:89:a3: 2a:1a:ad:55:af:be:17:14:08:7b:5b:4c:e5:63:4f: 08:2e:9b:72:c7:3b:87:75:66:3a:32:06:41:1a:7f: 9c:e2:f3:89:4b:d3:55:27:3d:ba:4f:67:8e:4f:e1: 26:76:aa:6c:c1:ae:bb:d6:72:18:4e:cb:19:c5:b4: a0:b5:6b:c5:a8:ad:bd:3f:85:31:0e:a2:e1:c7:65: a4:d7:30:41:c4:c1:42:36:96:c1:f6:06:26:ba:01: 57:9e:dc:b1:3b:d2:f4:9d:5f:a9:83:9c:67:5d:e8: 82:e8:34:d6:bc:b0:cb:20:ea:a1:a2:85:ba:07:ab: 99:29:a5:39:85:54:f3:4c:d6:4e:0a:34:23:8f:d4: 1f:03:f2:3f:dd:30:fd:e6:cb:8e:92:e3:df:f9:79: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:32:9F:03:D5:C5:1D:D5:97:89:FE:2A:30:80:AF:14:41:8B:08:C9 X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:be:30:4f:64:60:ae:01:d1:4f:8c:8b:7f:d6:79:72:fb:cc: b0:46:d5:c3:64:da:e9:6b:43:0b:83:0e:1f:1d:d5:ef:e7:8c: 7a:8c:e7:14:a5:f3:0c:81:e3:9e:d7:31:25:1c:12:c9:33:5f: 11:67:8e:c3:ad:55:60:2b:27:1b:78:d0:f4:62:24:d4:ed:b0: 08:3a:87:59:b6:5d:10:fc:4a:ec:d1:b6:28:c1:8a:b4:6d:eb: 30:09:02:1b:0f:20:ce:d4:96:ad:d9:28:2c:7b:6e:6e:06:54: 64:28:e2:05:49:ca:45:f2:ca:01:8a:91:33:fe:48:18:41:8d: 34:33:f8:80:25:22:74:a6:ba:73:59:5a:85:46:b6:bb:11:81: c1:30:2e:cf:5d:e5:a9:4e:79:51:11:12:7d:1b:7b:11:43:31: ab:9c:86:13:1c:38:60:4f:50:32:d3:b2:eb:8c:9a:ed:ae:ed: f2:66:11:a4:27:e5:63:e7:8b:35:9c:e4:35:11:5e:9d:31:f8: e7:55:67:c5:a6:e0:1d:62:b7:7e:fc:3c:c7:f1:f5:4b:ee:3e: ad:3c:60:99:b8:45:15:a3:06:1c:00:7d:bf:8a:b1:5d:26:23: 86:36:77:f0:4f:06:d8:59:79:c8:57:69:57:80:5a:58:86:5e: 10:09:4f:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+DlfLaat0babKiIZ7XEdjVbB34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNTA4MjIxMzU2MTFaFw0yNTA4MjUxNTEzMTFaMDMxMTAvBgNV BAMTKEZEMzI5RjAzRDVDNTFERDU5Nzg5RkUyQTMwODBBRjE0NDE4QjA4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWuTKPbqFCC9gA5bk7ecg0QtQ SVZtNehwyWr414ngMRQMZp7acS30lJNiIrxd0oYU5RL0yqu1qKJgZ/h48BzFo9l1 SlcAyWE4CixLpD9c1zJXtiOhZoVH529sVGQyTwKfdCzb44CJoyoarVWvvhcUCHtb TOVjTwgum3LHO4d1ZjoyBkEaf5zi84lL01UnPbpPZ45P4SZ2qmzBrrvWchhOyxnF tKC1a8Worb0/hTEOouHHZaTXMEHEwUI2lsH2Bia6AVee3LE70vSdX6mDnGdd6ILo NNa8sMsg6qGihboHq5kppTmFVPNM1k4KNCOP1B8D8j/dMP3my46S49/5eeMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/TKfA9XFHdWXif4qMICvFEGLCMkwHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF++ME9kYK4B0U+Mi3/WeXL7zLBG1cNk2ulr QwuDDh8d1e/njHqM5xSl8wyB457XMSUcEskzXxFnjsOtVWArJxt40PRiJNTtsAg6 h1m2XRD8SuzRtijBirRt6zAJAhsPIM7Ulq3ZKCx7bm4GVGQo4gVJykXyygGKkTP+ SBhBjTQz+IAlInSmunNZWoVGtrsRgcEwLs9d5alOeVEREn0bexFDMauchhMcOGBP UDLTsuuMmu2u7fJmEaQn5WPnizWc5DURXp0x+OdVZ8Wm4B1it378PMfx9UvuPq08 YJm4RRWjBhwAfb+KsV0mI4Y2d/BPBthZechXaVeAWliGXhAJTyI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:27 2025 by rpki-client