$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json) Hash identifier: 29MsJxCO2djbYiG61e2HgFyVHcT0qFrn6Bbhfbo/wjg= Subject key identifier: D7:70:73:0D:3F:1D:D0:BC:E1:DB:DF:F7:8C:C3:2B:C4:7A:A9:C2:8B Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Certificate serial: 3CB97DB2395D1ACA248089A64DB4BB772815E919 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft Manifest number: 0215 Signing time: Sun 19 Oct 2025 08:51:37 +0000 Manifest this update: Sun 19 Oct 2025 08:46:37 +0000 Manifest next update: Wed 22 Oct 2025 12:34:37 +0000 Files and hashes: 1: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: cbskNXmKMHFwFmIQ3FDWF5EjKdvU3wlzcRgfdzuzqV4=) 2: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: +Y8f9IKZhXyPRNzOP8gLDO5FItamxPZwT5YuJiQ+z+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b9:7d:b2:39:5d:1a:ca:24:80:89:a6:4d:b4:bb:77:28:15:e9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Validity Not Before: Oct 19 08:46:37 2025 GMT Not After : Oct 22 12:34:37 2025 GMT Subject: CN=D770730D3F1DD0BCE1DBDFF78CC32BC47AA9C28B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:e4:ff:cc:b4:fc:1f:07:7e:1d:bd:18:ab: 84:74:52:d3:d2:c6:71:e4:3a:a9:9c:55:eb:eb:76: ea:7d:c3:8b:f2:46:9c:19:b7:14:ab:21:48:c6:95: 16:a9:82:d4:62:e3:d5:05:fa:5e:be:c4:b3:ec:97: 5d:90:61:de:0d:d4:0c:8d:95:11:ba:8d:45:d7:8a: 9b:a7:cc:bc:da:45:f8:79:31:ec:9e:8b:67:ab:84: 5d:0d:ea:d2:1c:df:9a:d6:57:c8:83:ab:58:96:f2: 6d:fc:0f:8f:ce:2d:34:ac:af:31:29:6c:43:ad:ed: 7e:e4:3e:b3:9a:96:da:83:38:6f:73:6b:02:48:41: 87:a8:6a:df:e2:7e:8a:df:4b:25:7c:4f:ef:4b:e2: d1:77:b4:5a:58:d2:8b:3e:4a:23:75:3e:fa:b4:9b: cc:65:90:8e:f5:6e:6e:5d:2c:f0:95:ed:cb:f3:f2: 29:ea:17:a1:20:64:b3:5b:8e:ad:6f:56:21:74:95: ca:2c:aa:cf:8e:02:4d:15:45:99:9b:43:b1:6c:69: d8:a5:af:5c:76:6d:93:92:35:8d:fe:2d:2e:e5:50: 96:e9:2f:5b:17:50:d3:b6:6a:b0:9e:b8:2e:d0:f1: f1:0f:9a:11:3f:45:34:74:10:e6:16:42:89:da:7b: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:70:73:0D:3F:1D:D0:BC:E1:DB:DF:F7:8C:C3:2B:C4:7A:A9:C2:8B X509v3 Authority Key Identifier: keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b1:e0:27:22:c3:a8:43:a4:07:9a:8b:2a:2e:b9:69:4c:62: 3b:22:72:f8:20:0c:6a:99:66:a8:57:7b:b7:0c:1c:e3:c5:6e: 14:08:38:e7:52:fc:00:56:6e:b7:7b:32:e2:1c:b8:06:51:96: 92:12:37:47:41:96:00:11:e9:27:1d:95:ab:c8:fc:07:e3:4d: 8e:11:e7:cd:25:11:f9:94:58:1a:81:83:9e:94:b3:71:2c:4c: 7b:e4:09:e5:61:05:ea:c6:18:b3:c8:0c:e6:98:29:78:66:c2: 8c:8f:dc:6a:a7:78:84:07:eb:2f:ab:01:66:76:aa:db:45:8e: d8:e9:ff:58:88:01:01:11:c8:15:c2:46:21:10:f7:ab:3b:03: ca:10:d1:a3:3b:4b:92:a7:1e:f7:a4:97:ef:a2:16:46:24:c5: 43:72:77:60:f7:3d:48:3c:03:60:67:a8:f5:1e:88:aa:a0:da: d4:1e:9e:ce:bd:55:db:63:d0:80:10:34:b2:ee:b9:df:27:3f: b2:56:61:c4:f2:85:46:b4:8a:56:9d:67:e9:08:34:a3:c0:8a: f8:1a:fc:df:f4:0a:e2:81:d2:17:36:5e:4b:bc:0a:70:f9:77: 11:5d:5c:8e:0f:ea:8c:a8:b4:5d:45:16:66:91:c8:54:84:c7: ad:a6:ca:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLl9sjldGsokgImmTbS7dygV6RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2 MkRDQjM0MDAeFw0yNTEwMTkwODQ2MzdaFw0yNTEwMjIxMjM0MzdaMDMxMTAvBgNV BAMTKEQ3NzA3MzBEM0YxREQwQkNFMURCREZGNzhDQzMyQkM0N0FBOUMyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiRuT/zLT8Hwd+Hb0Yq4R0UtPS xnHkOqmcVevrdup9w4vyRpwZtxSrIUjGlRapgtRi49UF+l6+xLPsl12QYd4N1AyN lRG6jUXXipunzLzaRfh5Meyei2erhF0N6tIc35rWV8iDq1iW8m38D4/OLTSsrzEp bEOt7X7kPrOaltqDOG9zawJIQYeoat/iforfSyV8T+9L4tF3tFpY0os+SiN1Pvq0 m8xlkI71bm5dLPCV7cvz8inqF6EgZLNbjq1vViF0lcosqs+OAk0VRZmbQ7Fsadil r1x2bZOSNY3+LS7lUJbpL1sXUNO2arCeuC7Q8fEPmhE/RTR0EOYWQonae5/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13BzDT8d0Lzh29/3jMMrxHqpwoswHwYDVR0j BBgwFoAUoZGMFWqaz83yRx3q/GGO4WLcs0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjhjN2EzNC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC9BMTkxOEMxNTZB OUFDRkNERjI0NzFERUFGQzYxOEVFMTYyRENCMzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2MkRD QjM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThF RTE2MkRDQjM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSx4Cciw6hDpAeaiyouuWlMYjsicvggDGqZ ZqhXe7cMHOPFbhQIOOdS/ABWbrd7MuIcuAZRlpISN0dBlgAR6ScdlavI/AfjTY4R 580lEfmUWBqBg56Us3EsTHvkCeVhBerGGLPIDOaYKXhmwoyP3GqneIQH6y+rAWZ2 qttFjtjp/1iIAQERyBXCRiEQ96s7A8oQ0aM7S5KnHvekl++iFkYkxUNyd2D3PUg8 A2BnqPUeiKqg2tQens69Vdtj0IAQNLLuud8nP7JWYcTyhUa0iladZ+kINKPAivga /N/0CuKB0hc2Xku8CnD5dxFdXI4P6oyotF1FFmaRyFSEx62mymE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:09 2025 by rpki-client