$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft File: 9B123580240DE1580D07828D18D711FDE8163C25.mft (raw, json) Hash identifier: S7dOGlqutbMRaoQ5Y2F0TsflNQkWCW8/lFRVOeWbQts= Subject key identifier: 5B:34:38:55:BA:83:6B:45:C4:4E:C0:02:DC:B4:3A:60:25:4E:9F:D0 Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 7B03D20CEF96B87781791B8EA68082AD69E32E08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft Manifest number: 01AC Signing time: Mon 20 Oct 2025 08:21:13 +0000 Manifest this update: Mon 20 Oct 2025 08:16:13 +0000 Manifest next update: Thu 23 Oct 2025 09:21:13 +0000 Files and hashes: 1: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (hash: 6z++MpDq3aN0vzrKOFnR3M3TfXGzn/Ja004d5rCDado=) 2: 9B123580240DE1580D07828D18D711FDE8163C25.crl (hash: igEi4uj/RV2BgLbmdLh3S0t8K6484JDuCJtZELoXZV8=) 3: 323030313a6466373a626230303a3a2f34382d3438203d3e20313338303531.roa (hash: cb2aylHiHSC4fi9/lMSvkqhTCdu9b24WuShT1wCqpZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:03:d2:0c:ef:96:b8:77:81:79:1b:8e:a6:80:82:ad:69:e3:2e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Oct 20 08:16:13 2025 GMT Not After : Oct 23 09:21:13 2025 GMT Subject: CN=5B343855BA836B45C44EC002DCB43A60254E9FD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:1a:66:33:d2:0a:cc:90:05:3c:ce:2d:b1: 1b:de:89:cf:30:3a:b2:4a:a7:a1:70:ae:b8:b5:9e: a9:72:e0:e1:3f:6f:5b:6d:31:90:0d:fc:2c:ef:b9: ec:37:b8:b8:c3:53:36:fa:df:f2:07:d1:e8:d1:87: e9:28:64:78:1d:d6:f5:22:2e:96:05:bb:d4:be:2a: b7:9e:77:03:7a:ba:ab:7c:3c:43:95:e6:b8:19:07: 60:12:80:49:b6:fc:a5:c5:e5:f4:2e:9f:d7:e6:7c: 40:42:59:b3:54:73:f9:aa:88:e4:e0:3a:4f:d0:c4: fd:9a:20:2d:4c:41:34:85:bd:86:e4:53:83:93:cf: 94:fc:b3:7f:c9:22:f2:85:f3:c9:e8:87:61:4d:52: a6:da:53:32:cb:8c:5d:f6:1d:a6:ea:fc:cb:ac:d6: f8:c6:3a:d6:33:c9:1e:44:b2:2b:2f:89:b2:67:f1: e4:4d:e6:44:30:0b:40:aa:56:04:24:9b:4b:3d:17: 8e:91:84:5f:0f:ab:6d:f0:d6:1a:df:d5:e7:9a:3d: f2:ee:76:b1:75:4f:36:63:ed:57:02:6b:63:6b:e3: cc:c7:b1:10:0c:e8:37:4e:ea:99:93:73:bb:0d:6a: 3e:3c:6c:35:59:c3:92:17:c3:16:c3:07:42:28:1a: 1d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:34:38:55:BA:83:6B:45:C4:4E:C0:02:DC:B4:3A:60:25:4E:9F:D0 X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d3:c4:6a:89:b4:fd:c5:5b:a0:32:ca:71:5b:89:8d:c4:15: 50:3f:12:ca:02:71:66:e2:5d:87:f2:5b:cc:93:8b:7b:18:74: 5a:92:f1:de:83:b0:f3:79:b6:c2:31:a8:31:44:e6:ee:a1:20: 59:90:82:55:2c:f2:29:e4:56:db:eb:49:67:66:94:0b:6d:7b: b5:de:e2:0a:26:eb:eb:a0:4b:49:7f:c6:54:5a:3e:77:5b:e2: 53:c9:3e:f9:38:65:45:e4:f9:70:fa:4b:73:dc:d4:0c:5a:f5: 74:db:a5:f0:35:0c:db:c8:19:ae:75:26:5a:d2:9c:71:0b:77: 08:03:57:11:46:2a:49:4c:e3:54:ef:47:b1:83:f3:eb:d5:32: 86:91:e0:f0:b5:5b:af:f8:2b:e0:75:9d:a2:24:d9:d2:f2:0a: 41:fa:c4:9f:7b:81:bc:66:98:a3:db:57:e9:7b:5a:ca:41:c8: 49:18:16:61:f6:16:d3:65:cd:f4:fd:7c:34:54:a4:06:a7:2b: 1f:0e:a3:28:a8:7c:9c:89:b2:53:cb:2c:ee:af:77:e2:be:47: 5c:ba:83:ac:47:4b:41:48:da:2b:69:5b:73:a8:15:78:94:58: da:6a:c1:b5:b3:45:ca:95:cd:e7:a8:c8:ae:26:66:41:9c:8d: ed:e3:98:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewPSDO+WuHeBeRuOpoCCrWnjLggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNTEwMjAwODE2MTNaFw0yNTEwMjMwOTIxMTNaMDMxMTAvBgNV BAMTKDVCMzQzODU1QkE4MzZCNDVDNDRFQzAwMkRDQjQzQTYwMjU0RTlGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKixpmM9IKzJAFPM4tsRveic8w OrJKp6Fwrri1nqly4OE/b1ttMZAN/Czvuew3uLjDUzb63/IH0ejRh+koZHgd1vUi LpYFu9S+KreedwN6uqt8PEOV5rgZB2ASgEm2/KXF5fQun9fmfEBCWbNUc/mqiOTg Ok/QxP2aIC1MQTSFvYbkU4OTz5T8s3/JIvKF88noh2FNUqbaUzLLjF32Habq/Mus 1vjGOtYzyR5EsisvibJn8eRN5kQwC0CqVgQkm0s9F46RhF8Pq23w1hrf1eeaPfLu drF1TzZj7VcCa2Nr48zHsRAM6DdO6pmTc7sNaj48bDVZw5IXwxbDB0IoGh01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWzQ4VbqDa0XETsAC3LQ6YCVOn9AwHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4ZTJlNzQtZjZjNy00OWY0LWFk NTgtZjAwY2RlM2VkYTYwLzAvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzEx RkRFODE2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrTxGqJtP3FW6AyynFbiY3EFVA/EsoCcWbi XYfyW8yTi3sYdFqS8d6DsPN5tsIxqDFE5u6hIFmQglUs8inkVtvrSWdmlAtte7Xe 4gom6+ugS0l/xlRaPndb4lPJPvk4ZUXk+XD6S3Pc1Axa9XTbpfA1DNvIGa51JlrS nHELdwgDVxFGKklM41TvR7GD8+vVMoaR4PC1W6/4K+B1naIk2dLyCkH6xJ97gbxm mKPbV+l7WspByEkYFmH2FtNlzfT9fDRUpAanKx8OoyiofJyJslPLLO6vd+K+R1y6 g6xHS0FI2itpW3OoFXiUWNpqwbWzRcqVzeeoyK4mZkGcje3jmBE= -----END CERTIFICATE-----Generated at Tue Oct 21 13:31:03 2025 by rpki-client