$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: WdSiYSxPbdj62JzLas2hn5JeTarKE4o6WTm42wLQbSE= Subject key identifier: A9:BA:BF:EE:82:81:2E:D0:96:24:4D:C9:70:99:23:14:70:E2:51:0A Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 0E2480C500AC310A14906FF69496ADDD6FA38D70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 0148 Signing time: Mon 30 Jun 2025 10:12:05 +0000 Manifest this update: Mon 30 Jun 2025 10:07:05 +0000 Manifest next update: Thu 03 Jul 2025 21:10:05 +0000 Files and hashes: 1: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) 2: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: Tzj3nBDRUSznfJCK5367pDyIJuP5k0J+9Vq8Q7nmmPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:24:80:c5:00:ac:31:0a:14:90:6f:f6:94:96:ad:dd:6f:a3:8d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Jun 30 10:07:05 2025 GMT Not After : Jul 3 21:10:05 2025 GMT Subject: CN=A9BABFEE82812ED096244DC97099231470E2510A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:e5:33:ff:81:ea:aa:19:b5:0e:07:82:57: c1:82:e7:b1:e8:2c:ea:6a:a0:a2:0d:fc:5b:77:c8: e7:86:9f:71:e3:df:f0:4c:f4:2e:b3:08:1c:b4:ca: 6e:0c:7b:08:d9:e0:fc:08:17:2d:e5:f4:d4:4b:c3: 67:9f:2a:0e:d0:92:11:bf:9c:7c:aa:ae:7d:33:1c: 99:ba:f3:95:71:2d:39:a0:8a:91:4f:81:13:bc:a6: cc:cd:13:26:ee:b4:a1:da:4a:70:25:fd:0a:28:ed: 89:46:d5:46:09:21:75:01:0c:6b:50:42:44:1a:04: 77:c9:a6:a2:26:df:99:df:33:43:d2:b9:f7:e8:97: 0d:13:bb:69:be:ba:86:a6:fd:01:6e:7b:74:70:dd: 17:b0:58:8e:c5:cf:a0:d0:1e:3c:92:0b:84:9e:2a: 99:36:f9:1a:a8:14:26:18:3a:85:ef:6c:d0:17:77: 03:8d:77:63:b5:aa:4b:6f:c1:c0:14:75:de:2d:87: 51:63:3f:42:9b:89:d9:eb:9e:7f:79:f1:1e:58:5b: 39:65:94:90:cf:1f:f8:ed:f3:50:7a:91:df:00:61: 1c:64:7b:cc:80:b5:af:db:60:ce:b4:c3:4e:d8:02: be:41:01:ab:80:a4:21:de:c4:57:18:8f:ca:05:00: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BA:BF:EE:82:81:2E:D0:96:24:4D:C9:70:99:23:14:70:E2:51:0A X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b3:56:52:a0:29:41:6f:47:8c:71:33:48:e8:62:03:28:d5: a9:90:85:5a:e8:84:11:13:f7:a9:73:3a:9f:e3:45:ae:a1:f4: ae:3f:5c:02:d5:ad:51:5e:b7:69:01:71:ff:82:85:f1:28:f4: d1:86:f1:11:fb:47:41:45:fc:25:56:18:11:2c:49:bc:4f:cb: 05:be:c1:31:bb:92:5e:86:1e:3f:78:b4:4d:ad:75:4b:db:ef: f6:d8:e8:e7:01:36:d3:0c:23:59:39:37:55:93:96:95:f7:a5: 60:b3:18:2f:9c:22:54:ef:e1:62:84:3f:f1:92:d3:a2:b4:b1: 3e:73:4d:83:d1:31:28:71:85:75:c2:df:50:d4:be:a2:34:0d: 17:b1:87:f8:ef:d9:19:15:eb:d6:27:66:32:91:5d:dc:da:8c: f2:62:f0:1c:d2:67:6d:86:f9:99:55:d7:3e:7b:24:fd:38:60: bc:68:72:bb:f5:0c:f5:02:3f:b0:5a:af:df:ba:46:53:7f:a9: 50:99:4b:e9:e2:82:ae:5d:bd:a9:91:da:a1:e5:b8:5d:1b:fc: 82:a3:46:13:2a:db:f4:b6:bc:0f:3d:b8:c5:ee:56:a1:21:1a: 29:38:c6:63:8b:a7:76:05:f0:2e:a9:e7:8a:31:65:53:78:fb: b5:44:74:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDiSAxQCsMQoUkG/2lJat3W+jjXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTA2MzAxMDA3MDVaFw0yNTA3MDMyMTEwMDVaMDMxMTAvBgNV BAMTKEE5QkFCRkVFODI4MTJFRDA5NjI0NERDOTcwOTkyMzE0NzBFMjUxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ueUz/4Hqqhm1DgeCV8GC57Ho LOpqoKIN/Ft3yOeGn3Hj3/BM9C6zCBy0ym4MewjZ4PwIFy3l9NRLw2efKg7QkhG/ nHyqrn0zHJm685VxLTmgipFPgRO8pszNEybutKHaSnAl/Qoo7YlG1UYJIXUBDGtQ QkQaBHfJpqIm35nfM0PSuffolw0Tu2m+uoam/QFue3Rw3RewWI7Fz6DQHjySC4Se Kpk2+RqoFCYYOoXvbNAXdwONd2O1qktvwcAUdd4th1FjP0Kbidnrnn958R5YWzll lJDPH/jt81B6kd8AYRxke8yAta/bYM60w07YAr5BAauApCHexFcYj8oFANMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqbq/7oKBLtCWJE3JcJkjFHDiUQowHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6zVlKgKUFvR4xxM0joYgMo1amQhVrohBET 96lzOp/jRa6h9K4/XALVrVFet2kBcf+ChfEo9NGG8RH7R0FF/CVWGBEsSbxPywW+ wTG7kl6GHj94tE2tdUvb7/bY6OcBNtMMI1k5N1WTlpX3pWCzGC+cIlTv4WKEP/GS 06K0sT5zTYPRMShxhXXC31DUvqI0DRexh/jv2RkV69YnZjKRXdzajPJi8BzSZ22G +ZlV1z57JP04YLxocrv1DPUCP7Bar9+6RlN/qVCZS+nigq5dvamR2qHluF0b/IKj RhMq2/S2vA89uMXuVqEhGik4xmOLp3YF8C6p54oxZVN4+7VEdPw= -----END CERTIFICATE-----Generated at Tue Jul 1 07:41:39 2025 by rpki-client