$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: ucC+AOy2FcV8EKqbln4GvYXq0IFOzuAvpcfj+e6Td4o= Subject key identifier: E6:64:DE:B7:10:60:9C:3C:E5:53:B0:C0:23:13:F4:66:2F:A4:E4:0E Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 34F2CFF681FEA6A0B17C1F302F48261D26B940A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 6C Signing time: Sun 19 Oct 2025 07:41:16 +0000 Manifest this update: Sun 19 Oct 2025 07:36:16 +0000 Manifest next update: Wed 22 Oct 2025 13:41:16 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: UEpQOB9yT2faMoqxp4X/okwpY8x03pLatswQIsiKwBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f2:cf:f6:81:fe:a6:a0:b1:7c:1f:30:2f:48:26:1d:26:b9:40:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Oct 19 07:36:16 2025 GMT Not After : Oct 22 13:41:16 2025 GMT Subject: CN=E664DEB710609C3CE553B0C02313F4662FA4E40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:d0:49:40:80:7e:c7:65:9c:a8:a9:16:71: c7:2d:4a:a2:59:d4:65:db:04:1d:24:4e:2e:dd:6f: 98:48:2a:55:80:8c:6e:03:b1:cf:6f:35:68:4e:41: 96:e6:69:c2:a9:bb:3b:a8:27:45:95:57:d5:e3:6a: f2:fe:be:3d:64:e9:53:ad:76:e6:b6:55:51:a4:b6: 69:90:c7:04:8c:62:3a:06:c4:a2:d8:58:d9:19:f9: 6a:4f:d0:b1:c4:34:9a:9c:77:be:d5:1f:ff:92:8d: 12:88:1f:ec:0f:6d:9c:03:c6:13:7c:a3:c7:df:6e: 7d:68:5b:a9:b0:15:e4:2a:4a:76:28:17:a1:2e:aa: d1:e5:7d:f2:f2:d5:c1:c8:78:4f:78:cc:72:c6:29: 48:68:5c:cb:29:8a:28:28:99:75:e8:07:d0:76:f9: 60:5e:f4:e5:e1:19:fd:64:bc:59:5e:9a:f7:10:6c: b9:62:66:b2:6b:31:4d:e3:f5:fd:94:ca:bb:72:80: 3c:b7:46:c0:9f:c7:d4:88:7b:80:59:c9:3a:12:c9: 11:01:2d:fe:63:b8:ae:7c:36:19:4c:cd:5e:db:16: b9:c9:cf:da:03:80:a1:cc:9b:7f:18:b5:44:da:b8: ac:ba:df:81:ca:b5:7e:55:bf:01:07:ad:01:db:e7: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:64:DE:B7:10:60:9C:3C:E5:53:B0:C0:23:13:F4:66:2F:A4:E4:0E X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e3:89:f4:9e:0a:da:7e:9b:c0:4c:ef:d0:70:c5:46:ea:9d: e5:b4:ef:35:f9:f8:eb:0c:29:c7:b4:c4:8d:c1:bf:8f:24:ef: 4a:9c:4c:4c:0e:9a:d8:02:de:c9:ea:64:bc:77:0c:9d:08:c5: 56:dc:10:3b:15:2b:bb:d3:dd:1f:89:83:50:76:e1:98:be:0b: 5b:e1:ee:8e:bb:73:fb:ec:d3:39:76:56:43:b8:99:27:f8:39: 22:13:71:9b:64:29:f2:9c:c4:39:6a:25:49:60:4a:21:ee:5c: 3d:0b:be:d2:99:fe:26:4d:18:71:41:a2:37:80:eb:a6:15:c4: 64:71:9a:6a:46:b3:07:8b:f4:98:65:c7:c8:1b:29:8b:c9:81: 90:ab:55:e4:d0:4d:ca:7b:3a:5a:c0:2f:2f:f0:48:3f:81:2c: 51:16:ca:a5:09:73:de:50:d4:4b:2d:79:f0:60:08:7a:a4:ec: f3:93:bf:36:d4:37:7c:51:d8:02:9d:cd:62:47:24:a4:a3:12: 7d:00:2d:5b:ed:9d:9b:7c:cf:3c:36:b9:15:d2:c0:51:75:35: 5e:3c:8b:b6:62:61:57:8e:24:b9:ea:61:7e:68:37:2e:66:a5: 26:1a:29:6b:73:0e:8c:e0:c1:fa:4b:33:26:3d:59:39:54:38: 53:1d:ac:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPLP9oH+pqCxfB8wL0gmHSa5QKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTEwMTkwNzM2MTZaFw0yNTEwMjIxMzQxMTZaMDMxMTAvBgNV BAMTKEU2NjRERUI3MTA2MDlDM0NFNTUzQjBDMDIzMTNGNDY2MkZBNEU0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIP9BJQIB+x2WcqKkWccctSqJZ 1GXbBB0kTi7db5hIKlWAjG4Dsc9vNWhOQZbmacKpuzuoJ0WVV9XjavL+vj1k6VOt dua2VVGktmmQxwSMYjoGxKLYWNkZ+WpP0LHENJqcd77VH/+SjRKIH+wPbZwDxhN8 o8ffbn1oW6mwFeQqSnYoF6EuqtHlffLy1cHIeE94zHLGKUhoXMspiigomXXoB9B2 +WBe9OXhGf1kvFlemvcQbLliZrJrMU3j9f2UyrtygDy3RsCfx9SIe4BZyToSyREB Lf5juK58NhlMzV7bFrnJz9oDgKHMm38YtUTauKy634HKtX5VvwEHrQHb5xsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5mTetxBgnDzlU7DAIxP0Zi+k5A4wHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrjifSeCtp+m8BM79BwxUbqneW07zX5+OsM Kce0xI3Bv48k70qcTEwOmtgC3snqZLx3DJ0IxVbcEDsVK7vT3R+Jg1B24Zi+C1vh 7o67c/vs0zl2VkO4mSf4OSITcZtkKfKcxDlqJUlgSiHuXD0LvtKZ/iZNGHFBojeA 66YVxGRxmmpGsweL9Jhlx8gbKYvJgZCrVeTQTcp7OlrALy/wSD+BLFEWyqUJc95Q 1EstefBgCHqk7POTvzbUN3xR2AKdzWJHJKSjEn0ALVvtnZt8zzw2uRXSwFF1NV48 i7ZiYVeOJLnqYX5oNy5mpSYaKWtzDozgwfpLMyY9WTlUOFMdrIs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:07 2025 by rpki-client