$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: c/nI7BWot0bRFZTF4ANXd53Q7J6crbKWtlQz3g+vJtg= Subject key identifier: D0:8C:16:76:A5:66:6E:51:1A:54:C1:92:D1:C0:3C:5A:C6:2C:24:CC Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 1B726403E548C27B666D90284A68B8C5B73A0116 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 0164 Signing time: Fri 09 May 2025 23:51:09 +0000 Manifest this update: Fri 09 May 2025 23:46:09 +0000 Manifest next update: Tue 13 May 2025 02:46:09 +0000 Files and hashes: 1: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=) 2: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: ZOtjP4HEEP9HwQRtM0PtM7KEkBz5qFeO/oRqHTA68nY=) 3: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:72:64:03:e5:48:c2:7b:66:6d:90:28:4a:68:b8:c5:b7:3a:01:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: May 9 23:46:09 2025 GMT Not After : May 13 02:46:09 2025 GMT Subject: CN=D08C1676A5666E511A54C192D1C03C5AC62C24CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c4:f3:9a:46:3b:70:d2:09:88:2d:42:6d:8e: 1a:0c:4f:18:b9:bd:ab:de:55:a9:a1:26:08:ce:e7: 59:f5:b6:ed:00:2e:d8:fc:7b:96:18:97:50:1e:88: eb:61:fe:18:43:d1:48:49:bc:73:ab:00:32:31:4f: 33:5a:b9:60:ed:62:87:93:4e:69:49:d2:d9:79:62: 5f:29:9b:4f:6e:40:fb:30:4a:93:71:48:52:7e:8e: 12:31:6a:56:22:8e:a8:77:b9:41:ee:51:8d:59:62: ae:e9:b7:bd:78:09:84:47:39:6e:fd:71:55:37:f7: fe:b4:ce:34:17:a5:20:50:7f:a2:3f:a5:b4:14:f9: d6:00:7b:34:b3:2e:e8:5b:1d:b9:66:55:2e:9e:75: a9:51:96:bd:43:3b:8d:01:78:15:a4:ea:87:04:47: eb:98:fc:e3:14:cc:3d:e1:ae:ad:ee:95:0d:de:24: ed:ac:39:34:7f:1b:2d:ca:16:15:40:4a:1b:22:b5: 95:48:96:28:87:94:57:69:6f:2d:89:00:aa:be:f6: b6:4f:0b:88:a2:86:b1:5a:00:65:e7:57:f9:41:f9: de:2a:af:46:65:80:34:d6:35:51:dd:82:57:d6:23: b2:65:95:4c:4e:6d:21:c8:c7:12:86:8c:18:98:7f: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8C:16:76:A5:66:6E:51:1A:54:C1:92:D1:C0:3C:5A:C6:2C:24:CC X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:15:be:22:af:f8:7c:93:36:33:a2:cd:45:2c:a6:0c:02:02: f4:8c:10:d2:22:fb:08:df:02:1b:06:1d:ee:81:e4:05:a6:0e: 7e:db:a4:ec:5e:c5:4e:30:cb:2a:ba:a8:9a:86:f9:8d:3f:06: c6:b1:59:d7:87:a5:6d:a9:5c:4e:03:a9:05:07:a4:52:ce:32: 91:19:89:25:ab:d4:cc:89:5e:de:f1:92:55:1c:5d:68:57:a6: 7f:41:e9:03:6a:61:9c:8d:09:ca:40:fa:0a:3f:3e:ed:88:74: e2:ab:a2:7f:10:97:3f:2c:9e:5a:08:71:ba:94:41:6e:91:67: 82:5c:0f:2d:89:23:83:74:7c:ae:41:f8:3f:b7:73:ef:7b:7d: ae:c1:f1:b1:3d:f4:af:86:8f:d9:7e:3a:64:5e:0b:4b:29:ad: 96:6d:24:65:cf:32:ed:25:e2:0d:cc:ac:0c:20:80:96:91:80: 01:5f:a1:ed:31:59:7f:bc:cc:34:a9:45:90:a4:4c:f6:3c:85: 18:0b:e7:af:7f:ff:cf:4d:d3:46:c8:a0:e1:6e:bd:b4:4d:96: 0d:1a:26:e7:76:6c:9d:c7:96:9a:10:a2:ae:97:62:aa:f2:e0: 44:d9:4c:df:ee:da:c0:df:f9:54:64:62:a0:2b:f6:b1:ef:1a: c8:d9:f6:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3JkA+VIwntmbZAoSmi4xbc6ARYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNTA1MDkyMzQ2MDlaFw0yNTA1MTMwMjQ2MDlaMDMxMTAvBgNV BAMTKEQwOEMxNjc2QTU2NjZFNTExQTU0QzE5MkQxQzAzQzVBQzYyQzI0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdxPOaRjtw0gmILUJtjhoMTxi5 vaveVamhJgjO51n1tu0ALtj8e5YYl1AeiOth/hhD0UhJvHOrADIxTzNauWDtYoeT TmlJ0tl5Yl8pm09uQPswSpNxSFJ+jhIxalYijqh3uUHuUY1ZYq7pt714CYRHOW79 cVU39/60zjQXpSBQf6I/pbQU+dYAezSzLuhbHblmVS6edalRlr1DO40BeBWk6ocE R+uY/OMUzD3hrq3ulQ3eJO2sOTR/Gy3KFhVAShsitZVIliiHlFdpby2JAKq+9rZP C4iihrFaAGXnV/lB+d4qr0ZlgDTWNVHdglfWI7JllUxObSHIxxKGjBiYfzlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IwWdqVmblEaVMGS0cA8WsYsJMwwHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYVviKv+HyTNjOizUUspgwCAvSMENIi+wjf AhsGHe6B5AWmDn7bpOxexU4wyyq6qJqG+Y0/BsaxWdeHpW2pXE4DqQUHpFLOMpEZ iSWr1MyJXt7xklUcXWhXpn9B6QNqYZyNCcpA+go/Pu2IdOKron8Qlz8snloIcbqU QW6RZ4JcDy2JI4N0fK5B+D+3c+97fa7B8bE99K+Gj9l+OmReC0sprZZtJGXPMu0l 4g3MrAwggJaRgAFfoe0xWX+8zDSpRZCkTPY8hRgL569//89N00bIoOFuvbRNlg0a Jud2bJ3HlpoQoq6XYqry4ETZTN/u2sDf+VRkYqAr9rHvGsjZ9rA= -----END CERTIFICATE-----Generated at Sun May 11 18:59:24 2025 by rpki-client