$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: hQa2870fTUcpkJBf0VUDU8HiSq0iksoMG2blSU7sGCo= Subject key identifier: 06:41:FB:3B:59:54:F9:F3:B2:C4:F1:4E:EC:C4:B4:03:C6:3C:D9:B4 Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 1F3B46F0CFF29801BF5506125270A1D56D6395A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 01BF Signing time: Tue 24 Mar 2026 18:22:24 +0000 Manifest this update: Tue 24 Mar 2026 18:17:24 +0000 Manifest next update: Fri 27 Mar 2026 22:19:24 +0000 Files and hashes: 1: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: RSH5z8wkfHUwNi8NlbfQ0cv9u/9PZGo4XqATSTpGlO4=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3b:46:f0:cf:f2:98:01:bf:55:06:12:52:70:a1:d5:6d:63:95:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Mar 24 18:17:24 2026 GMT Not After : Mar 27 22:19:24 2026 GMT Subject: CN=0641FB3B5954F9F3B2C4F14EECC4B403C63CD9B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:eb:53:b9:ae:dd:79:8d:a3:1d:5e:a0:5f: 0a:57:48:0f:b4:cc:1b:9c:1c:ab:fe:a2:59:3d:3b: 98:5a:9a:c0:22:b6:6a:be:4e:56:7a:8f:0e:66:50: c4:d7:41:72:1b:55:b8:ca:4d:a5:d0:23:80:5a:bd: f5:97:54:bd:8f:f5:4c:63:b6:3d:92:0c:6e:84:d7: 45:75:67:1a:77:49:1f:eb:f8:96:3f:95:52:24:a3: d2:cc:ce:0a:9d:46:4c:6b:82:69:19:d6:2a:67:3d: 67:77:bd:b2:bf:df:71:ba:2a:c7:70:c1:9a:de:90: 44:9f:0e:83:94:e4:d6:9f:9e:aa:d0:5b:e0:0e:16: 52:dc:24:db:28:c9:d4:ad:1d:c7:52:33:fe:bd:e6: 50:bd:7c:3c:1b:2b:aa:8d:70:1c:8c:85:39:fd:56: 76:29:76:43:d4:0a:41:3a:67:b1:42:13:18:b9:cd: 35:c5:fd:0c:9e:82:63:4d:49:ed:07:e3:fd:41:52: 84:8c:b2:92:bf:cb:18:cb:7a:23:cf:50:c7:fb:cd: ec:58:69:37:7c:d1:00:1a:91:41:85:af:36:68:bb: c3:d5:8a:d6:8a:3a:32:85:5d:a9:68:7b:dc:ce:99: 02:5e:7a:c8:a7:40:c8:03:6e:ab:15:92:07:76:e0: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:41:FB:3B:59:54:F9:F3:B2:C4:F1:4E:EC:C4:B4:03:C6:3C:D9:B4 X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a3:91:d5:77:cc:57:3c:32:fa:c8:55:9c:83:80:d0:20:0b: c9:d1:23:5b:d2:ad:25:0f:78:f1:69:d2:7b:f3:8a:de:ca:e4: 61:38:7f:53:44:ae:46:c5:48:7a:8f:d2:60:33:bb:58:0f:93: 87:dd:c0:44:94:4c:72:d2:d3:45:5a:21:44:2b:4c:bd:52:ba: a6:f2:d6:0b:1e:32:86:32:29:ac:71:c1:0d:44:ad:f1:ba:f6: 1d:98:45:52:6f:8b:e8:74:0b:34:51:6b:1c:0b:f2:de:2b:96: b2:23:77:03:13:89:d7:42:93:e1:a9:34:4d:b7:6b:ef:18:e2: 28:be:20:88:5b:ee:6e:41:60:81:dd:af:07:2b:d5:b4:41:72: 1e:d9:09:ac:64:18:a4:72:31:f4:8e:f1:d6:cf:1b:3e:ae:6d: 94:65:59:25:57:ee:64:2a:4d:e7:28:70:1a:36:eb:d1:88:3b: 49:c1:6e:cf:85:50:59:13:3b:78:09:f6:6b:2f:18:c9:bb:46: 73:91:91:a7:a9:2e:c3:46:96:e8:33:b1:09:e4:9d:13:e1:80: e5:6c:58:87:e2:2b:a0:4a:44:88:df:67:16:8f:5c:04:71:88: 3b:bb:4f:cf:6b:a2:d4:3b:49:8e:3a:b7:6d:6a:b2:4d:05:1b: b7:ec:58:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHztG8M/ymAG/VQYSUnCh1W1jlaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNjAzMjQxODE3MjRaFw0yNjAzMjcyMjE5MjRaMDMxMTAvBgNV BAMTKDA2NDFGQjNCNTk1NEY5RjNCMkM0RjE0RUVDQzRCNDAzQzYzQ0Q5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXetTua7deY2jHV6gXwpXSA+0 zBucHKv+olk9O5hamsAitmq+TlZ6jw5mUMTXQXIbVbjKTaXQI4BavfWXVL2P9Uxj tj2SDG6E10V1Zxp3SR/r+JY/lVIko9LMzgqdRkxrgmkZ1ipnPWd3vbK/33G6Ksdw wZrekESfDoOU5NafnqrQW+AOFlLcJNsoydStHcdSM/695lC9fDwbK6qNcByMhTn9 VnYpdkPUCkE6Z7FCExi5zTXF/QyegmNNSe0H4/1BUoSMspK/yxjLeiPPUMf7zexY aTd80QAakUGFrzZou8PVitaKOjKFXaloe9zOmQJeesinQMgDbqsVkgd24OV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBkH7O1lU+fOyxPFO7MS0A8Y82bQwHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2jkdV3zFc8MvrIVZyDgNAgC8nRI1vSrSUP ePFp0nvzit7K5GE4f1NErkbFSHqP0mAzu1gPk4fdwESUTHLS00VaIUQrTL1Suqby 1gseMoYyKaxxwQ1ErfG69h2YRVJvi+h0CzRRaxwL8t4rlrIjdwMTiddCk+GpNE23 a+8Y4ii+IIhb7m5BYIHdrwcr1bRBch7ZCaxkGKRyMfSO8dbPGz6ubZRlWSVX7mQq TecocBo269GIO0nBbs+FUFkTO3gJ9msvGMm7RnORkaepLsNGlugzsQnknRPhgOVs WIfiK6BKRIjfZxaPXARxiDu7T89rotQ7SY46t21qsk0FG7fsWEs= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:43 2026 by rpki-client