$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: hxkXW8GPt3eK9c/WdwsMOFUwKBnPcAOiSXBF4gKgw34= Subject key identifier: 36:2D:B5:CC:B9:DE:C8:53:AD:6C:CB:DF:21:7D:7D:1D:DC:46:65:EA Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 27C0225A00DAF6D54BE9A44B05079F99F7EF1F46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 0179 Signing time: Sat 18 Oct 2025 21:12:09 +0000 Manifest this update: Sat 18 Oct 2025 21:07:09 +0000 Manifest next update: Wed 22 Oct 2025 00:15:09 +0000 Files and hashes: 1: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) 2: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: Ysoq7CEkrWCK8eaq32v1G5ls5h6//RHpcIojguNObos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c0:22:5a:00:da:f6:d5:4b:e9:a4:4b:05:07:9f:99:f7:ef:1f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Oct 18 21:07:09 2025 GMT Not After : Oct 22 00:15:09 2025 GMT Subject: CN=362DB5CCB9DEC853AD6CCBDF217D7D1DDC4665EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:bc:a5:bc:2b:57:29:a0:f5:79:03:d9:19: 6a:aa:96:86:c9:db:61:7a:50:73:45:c2:8c:4e:44: 61:b4:72:34:75:f8:f7:53:3f:3a:2e:e5:2c:48:20: 17:58:bf:26:19:84:e0:71:7c:ee:8e:02:b7:5e:d3: b5:a4:fa:9c:68:c7:9c:a9:c5:6b:f8:ac:e9:59:cd: 46:81:af:02:38:a3:96:02:b2:85:cf:a6:af:f4:b4: b6:f7:a4:7a:9c:f7:10:e4:f0:a3:4f:9f:39:85:ba: 7f:6b:64:a4:1b:d5:5e:7f:71:c5:d3:87:c4:2f:35: e8:50:38:ba:53:ca:f2:ee:43:9a:bc:9f:41:71:89: 94:3d:32:3b:3d:b4:f8:18:1f:18:86:40:b6:0c:50: 49:62:7a:77:dc:92:f4:a6:b8:95:40:4a:ca:40:4a: 3e:10:1f:bb:7e:f7:32:6d:7e:67:af:3e:df:a3:1a: 04:08:fc:37:51:dc:fa:47:58:58:f3:b2:2c:94:93: 0b:91:00:b7:3d:8c:37:cb:be:7c:9c:45:6e:c8:c8: 71:bf:42:b7:cf:d4:55:71:6d:54:93:32:53:e4:1e: 7f:5c:5c:ef:0d:d3:a3:61:b6:45:b8:e3:ea:8a:6e: ba:ba:41:85:c1:24:17:ba:e8:fc:02:f4:da:02:92: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:B5:CC:B9:DE:C8:53:AD:6C:CB:DF:21:7D:7D:1D:DC:46:65:EA X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:3d:ca:2a:a1:af:4c:fa:73:fa:60:e3:03:07:8c:d8:69:31: 84:8b:dc:5b:57:8a:10:14:b2:6f:68:37:a8:96:8e:25:42:26: 8a:e3:8c:92:fd:17:1d:96:9e:2f:72:63:9b:54:56:2a:1d:ef: 71:b6:07:55:47:65:f4:4a:6d:01:b3:6f:ea:15:e2:1b:3e:6e: 47:19:b1:93:7f:66:75:a9:e9:fe:78:ff:d7:31:8c:e9:ef:39: 51:63:7f:1c:1f:9b:c9:b4:4e:e0:91:9c:68:01:76:d2:89:d4: b3:74:c1:20:d4:2c:ef:14:67:5b:7b:7b:4c:a0:4a:54:5e:4a: 1a:c3:b1:6c:de:bd:85:a2:0f:cc:98:f7:8d:31:f0:6b:f6:fa: 40:2b:f7:0d:a7:fb:e8:5b:bc:aa:82:cc:ec:07:c4:f9:77:90: 66:68:05:6c:b7:66:21:dc:bc:c7:4e:02:95:a4:0b:1d:29:f3: ad:2d:5a:e8:1b:02:ed:2c:9a:dd:0a:4d:41:8b:df:60:32:6f: e3:d5:8e:9b:71:0e:2b:02:4b:8e:1f:7f:0c:16:94:bf:24:19: c2:ba:fb:53:6e:85:7c:a1:27:b5:03:f6:f3:2a:58:13:b6:76: b8:28:44:48:d1:4a:67:92:a7:b2:a0:e4:33:7d:b4:a4:dc:5b: b7:3b:71:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8AiWgDa9tVL6aRLBQefmffvH0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTEwMTgyMTA3MDlaFw0yNTEwMjIwMDE1MDlaMDMxMTAvBgNV BAMTKDM2MkRCNUNDQjlERUM4NTNBRDZDQ0JERjIxN0Q3RDFEREM0NjY1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzbylvCtXKaD1eQPZGWqqlobJ 22F6UHNFwoxORGG0cjR1+PdTPzou5SxIIBdYvyYZhOBxfO6OArde07Wk+pxox5yp xWv4rOlZzUaBrwI4o5YCsoXPpq/0tLb3pHqc9xDk8KNPnzmFun9rZKQb1V5/ccXT h8QvNehQOLpTyvLuQ5q8n0FxiZQ9Mjs9tPgYHxiGQLYMUElienfckvSmuJVASspA Sj4QH7t+9zJtfmevPt+jGgQI/DdR3PpHWFjzsiyUkwuRALc9jDfLvnycRW7IyHG/ QrfP1FVxbVSTMlPkHn9cXO8N06NhtkW44+qKbrq6QYXBJBe66PwC9NoCkqwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNi21zLneyFOtbMvfIX19HdxGZeowHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL09yiqhr0z6c/pg4wMHjNhpMYSL3FtXihAU sm9oN6iWjiVCJorjjJL9Fx2Wni9yY5tUViod73G2B1VHZfRKbQGzb+oV4hs+bkcZ sZN/ZnWp6f54/9cxjOnvOVFjfxwfm8m0TuCRnGgBdtKJ1LN0wSDULO8UZ1t7e0yg SlReShrDsWzevYWiD8yY940x8Gv2+kAr9w2n++hbvKqCzOwHxPl3kGZoBWy3ZiHc vMdOApWkCx0p860tWugbAu0smt0KTUGL32Ayb+PVjptxDisCS44ffwwWlL8kGcK6 +1NuhXyhJ7UD9vMqWBO2drgoREjRSmeSp7Kg5DN9tKTcW7c7cbE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:44 2025 by rpki-client