$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: NKxI0lXczRjaB/MOlvVUTq4XGY5AL3QTd4WIKrSrMrc= Subject key identifier: A5:EF:23:A1:08:C0:3B:34:87:58:3D:89:69:78:2D:7B:6A:F4:8C:A3 Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 20A244359779DCBBEB75394AFA632EA4384A058C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 051F Signing time: Mon 20 Oct 2025 06:41:56 +0000 Manifest this update: Mon 20 Oct 2025 06:36:56 +0000 Manifest next update: Thu 23 Oct 2025 17:47:56 +0000 Files and hashes: 1: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: SNXb4q7vUxnBCXAyrupXMQwC/6mNEJEm+yAJkvfFaqU=) 2: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 3: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 4: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) 5: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) 6: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a2:44:35:97:79:dc:bb:eb:75:39:4a:fa:63:2e:a4:38:4a:05:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Oct 20 06:36:56 2025 GMT Not After : Oct 23 17:47:56 2025 GMT Subject: CN=A5EF23A108C03B3487583D8969782D7B6AF48CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:38:77:12:af:90:a8:a9:fe:1e:f7:43:05: 08:cc:6f:af:5b:c4:32:93:ee:c1:50:5e:dd:8d:de: fb:16:c8:08:10:53:8a:40:bc:cd:73:5c:a6:5c:3d: ef:ca:54:a8:02:fb:8a:dc:e2:2d:ba:8f:8a:e5:12: f3:b1:3c:5a:37:70:b2:97:d9:ae:79:a6:04:ff:d7: 41:d8:5a:20:57:f0:cf:e3:30:2d:0c:78:c2:b0:69: f9:4f:79:2c:0d:2c:24:bb:fa:df:ab:73:c9:53:57: d1:31:1a:26:24:73:24:8c:ad:15:bb:ae:bb:7f:c3: 00:46:0f:1a:f4:e8:d4:35:38:f5:e1:b3:d5:87:dd: d9:63:c6:0b:8e:97:23:66:d1:de:d8:e6:3e:b9:53: d4:32:e6:18:da:28:86:33:76:27:e5:f3:2f:60:64: ee:9f:a5:fa:34:7f:90:e0:c4:ad:d2:99:b9:9f:4d: db:75:aa:69:69:08:fe:93:8f:ed:34:b0:9f:c3:4e: 20:ff:76:d6:72:ad:52:83:41:b5:e2:05:f2:ae:fc: 22:b5:1d:c7:51:28:0f:9e:b3:4f:bf:14:a7:0e:5f: 4a:5f:62:bf:0c:75:05:bf:4f:5d:e7:c7:c5:80:26: d3:25:02:0b:1e:8d:39:ec:f6:c5:76:a1:1f:70:6a: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EF:23:A1:08:C0:3B:34:87:58:3D:89:69:78:2D:7B:6A:F4:8C:A3 X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ad:ab:eb:8a:99:ca:60:b5:91:e6:ed:f6:69:b6:3c:e0:fe: fa:a3:c8:ed:50:65:56:ce:7a:c9:71:34:50:a5:31:29:be:2e: 92:76:88:44:09:57:5f:f4:9e:f0:12:8d:e2:5b:ca:30:c6:73: 9e:52:c4:b8:03:2a:f0:9a:a3:fa:66:e6:0c:a4:bf:05:6f:58: 70:77:ab:2c:47:8f:84:df:59:2e:5b:22:9c:54:00:f8:2f:f7: f6:6c:1a:85:ac:c5:c4:49:6a:97:a9:df:6f:ad:cb:a4:93:a1: f1:47:4f:44:45:9b:c0:ea:52:f4:5c:24:19:ad:7c:0e:cc:c3: 78:cc:d1:0c:e7:b2:b3:b6:d7:43:d6:7a:ad:a3:19:5a:59:83: a9:76:06:84:89:b8:bf:6d:85:cd:57:73:18:eb:a1:eb:12:27: 1e:d5:d1:e4:e2:c4:71:e5:fc:09:47:32:27:7c:b0:eb:46:74: 2c:02:6d:0f:0c:3a:9b:ab:b4:87:e4:f9:98:c7:63:7f:25:04: e8:8b:29:53:cb:f4:8c:49:37:08:c5:f8:d2:13:7d:ee:82:5d: d6:a0:e5:72:d4:61:1a:e9:d5:91:75:6f:79:5d:ff:18:05:b6: a4:9c:13:d1:bc:b3:4c:7b:17:14:fe:f4:78:65:55:0c:56:8f: 33:31:cc:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKJENZd53LvrdTlK+mMupDhKBYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTEwMjAwNjM2NTZaFw0yNTEwMjMxNzQ3NTZaMDMxMTAvBgNV BAMTKEE1RUYyM0ExMDhDMDNCMzQ4NzU4M0Q4OTY5NzgyRDdCNkFGNDhDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQDh3Eq+QqKn+HvdDBQjMb69b xDKT7sFQXt2N3vsWyAgQU4pAvM1zXKZcPe/KVKgC+4rc4i26j4rlEvOxPFo3cLKX 2a55pgT/10HYWiBX8M/jMC0MeMKwaflPeSwNLCS7+t+rc8lTV9ExGiYkcySMrRW7 rrt/wwBGDxr06NQ1OPXhs9WH3dljxguOlyNm0d7Y5j65U9Qy5hjaKIYzdifl8y9g ZO6fpfo0f5DgxK3SmbmfTdt1qmlpCP6Tj+00sJ/DTiD/dtZyrVKDQbXiBfKu/CK1 HcdRKA+es0+/FKcOX0pfYr8MdQW/T13nx8WAJtMlAgsejTns9sV2oR9wapehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpe8joQjAOzSHWD2JaXgte2r0jKMwHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGatq+uKmcpgtZHm7fZptjzg/vqjyO1QZVbO eslxNFClMSm+LpJ2iEQJV1/0nvASjeJbyjDGc55SxLgDKvCao/pm5gykvwVvWHB3 qyxHj4TfWS5bIpxUAPgv9/ZsGoWsxcRJapep32+ty6STofFHT0RFm8DqUvRcJBmt fA7Mw3jM0QznsrO210PWeq2jGVpZg6l2BoSJuL9thc1XcxjroesSJx7V0eTixHHl /AlHMid8sOtGdCwCbQ8MOpurtIfk+ZjHY38lBOiLKVPL9IxJNwjF+NITfe6CXdag 5XLUYRrp1ZF1b3ld/xgFtqScE9G8s0x7FxT+9HhlVQxWjzMxzLU= -----END CERTIFICATE-----Generated at Mon Oct 20 17:07:36 2025 by rpki-client