$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: s2G7GREC2zIOJk42fiAi7m78oSYJK9lKJFeVoc4oC2Y= Subject key identifier: 35:8A:6B:9A:2A:85:BA:2D:56:3F:BF:3C:E3:3A:DE:A2:D8:99:F1:2F Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 1E3AEADB1275C2A873A4294197CF0622FF6915EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 0565 Signing time: Thu 26 Mar 2026 01:32:11 +0000 Manifest this update: Thu 26 Mar 2026 01:27:11 +0000 Manifest next update: Sun 29 Mar 2026 02:29:11 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) 2: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 3: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: eilW4lIkdF2a678ajw0yNfZy4nYBvz1SEP7P2bLet1Q=) 4: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) 5: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 6: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3a:ea:db:12:75:c2:a8:73:a4:29:41:97:cf:06:22:ff:69:15:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Mar 26 01:27:11 2026 GMT Not After : Mar 29 02:29:11 2026 GMT Subject: CN=358A6B9A2A85BA2D563FBF3CE33ADEA2D899F12F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d3:22:fd:82:a9:c6:05:62:4d:55:cc:67:1c: 6b:52:c5:9a:f1:14:c5:ff:07:cd:5f:ff:19:6a:00: be:31:40:1d:16:b0:5c:85:cb:91:93:5a:f7:17:64: 6e:9b:d0:b4:b8:11:1f:aa:68:7e:f6:3e:e2:51:5b: 8e:3b:c1:b4:2c:8b:8c:cb:a7:62:ab:4d:0f:82:56: b2:00:67:0a:cd:5b:20:b4:d4:5e:de:08:47:52:4e: a4:c8:28:8e:f2:9b:66:7f:50:5a:cf:64:ee:c1:0d: 10:16:65:54:2f:9e:db:fa:3f:e8:f2:3e:3a:6b:a3: cc:6d:d4:e1:30:a7:58:e9:c9:bb:c7:a7:a2:f2:b8: c8:26:58:5e:b7:0d:a4:d8:ad:98:35:6b:5b:5c:ff: 09:b2:29:16:98:4d:fc:f1:90:35:6c:0d:8b:11:89: bb:3a:f0:00:1c:00:ef:0c:6b:d7:a5:8f:1b:ce:3b: 5a:5f:2b:3d:8f:9b:c8:8c:11:26:6e:93:36:49:d1: 9b:77:39:7c:82:15:dd:5a:cb:aa:eb:e2:fa:80:03: 05:07:54:f4:ad:79:a8:e9:87:f9:2a:c9:0d:ad:3b: 39:23:9d:a4:16:a2:6c:86:60:d1:f9:36:94:58:ba: 19:e3:eb:c9:18:84:51:ef:e2:94:61:c8:19:89:d7: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8A:6B:9A:2A:85:BA:2D:56:3F:BF:3C:E3:3A:DE:A2:D8:99:F1:2F X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5e:39:d8:ae:26:86:10:c9:db:65:c8:55:7a:51:6c:ab:95: dd:99:70:98:ed:36:b0:07:02:cd:e7:17:99:21:0e:44:71:71: 3d:71:75:5a:58:e1:7b:4c:dd:7e:44:c3:5d:62:35:68:30:07: e1:f7:af:1a:3d:f8:e8:e3:09:a3:72:97:13:90:dc:5e:b4:e7: 92:17:91:11:5f:0a:23:02:cf:90:c0:fb:0c:5b:a0:c5:9a:c1: 35:f3:33:88:cf:c9:4f:68:54:88:fb:e4:85:54:50:72:70:65: d1:68:af:01:7e:8b:ce:8e:cc:89:83:bd:b0:75:bb:36:c9:52: ef:28:44:b7:03:7e:2b:6f:61:b5:83:00:1b:af:f1:92:21:e5: 5e:13:6e:47:fd:11:f6:57:40:32:de:1c:5b:c5:a4:c5:fb:60: a3:a2:f0:42:e7:c7:aa:35:b4:2c:e4:c4:03:11:fa:b5:88:a4: 62:ff:07:76:f7:7a:9a:75:45:71:4f:a2:cd:ef:35:93:86:ed: 45:8f:3b:b9:cc:33:c0:ae:7c:c4:68:92:f9:ad:5b:8f:ef:81: 3e:d6:16:a1:64:3b:f3:97:7d:5d:2d:5a:c3:10:51:46:00:30: 38:ab:ce:6a:2f:78:c8:b0:17:b1:e2:26:bd:93:80:24:fd:06: 41:c2:18:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjrq2xJ1wqhzpClBl88GIv9pFewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNjAzMjYwMTI3MTFaFw0yNjAzMjkwMjI5MTFaMDMxMTAvBgNV BAMTKDM1OEE2QjlBMkE4NUJBMkQ1NjNGQkYzQ0UzM0FERUEyRDg5OUYxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD60yL9gqnGBWJNVcxnHGtSxZrx FMX/B81f/xlqAL4xQB0WsFyFy5GTWvcXZG6b0LS4ER+qaH72PuJRW447wbQsi4zL p2KrTQ+CVrIAZwrNWyC01F7eCEdSTqTIKI7ym2Z/UFrPZO7BDRAWZVQvntv6P+jy Pjpro8xt1OEwp1jpybvHp6LyuMgmWF63DaTYrZg1a1tc/wmyKRaYTfzxkDVsDYsR ibs68AAcAO8Ma9eljxvOO1pfKz2Pm8iMESZukzZJ0Zt3OXyCFd1ay6rr4vqAAwUH VPSteajph/kqyQ2tOzkjnaQWomyGYNH5NpRYuhnj68kYhFHv4pRhyBmJ10u/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNYprmiqFui1WP7884zreotiZ8S8wHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1eOdiuJoYQydtlyFV6UWyrld2ZcJjtNrAH As3nF5khDkRxcT1xdVpY4XtM3X5Ew11iNWgwB+H3rxo9+OjjCaNylxOQ3F6055IX kRFfCiMCz5DA+wxboMWawTXzM4jPyU9oVIj75IVUUHJwZdForwF+i86OzImDvbB1 uzbJUu8oRLcDfitvYbWDABuv8ZIh5V4Tbkf9EfZXQDLeHFvFpMX7YKOi8ELnx6o1 tCzkxAMR+rWIpGL/B3b3epp1RXFPos3vNZOG7UWPO7nMM8CufMRokvmtW4/vgT7W FqFkO/OXfV0tWsMQUUYAMDirzmoveMiwF7HiJr2TgCT9BkHCGHU= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:12 2026 by rpki-client