$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: gVSb008WtYdvXqY2x9NOExT6upQufi/EYoC1lmsIMTM= Subject key identifier: 64:4D:BF:D8:9D:B3:C8:E9:5A:78:22:22:7A:EB:87:F3:2D:4C:2F:93 Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 48581B6362BF29151A5BBCF233F9A64987F15FA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 0165 Signing time: Wed 03 Sep 2025 13:52:06 +0000 Manifest this update: Wed 03 Sep 2025 13:47:06 +0000 Manifest next update: Sat 06 Sep 2025 15:06:06 +0000 Files and hashes: 1: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: VzaFZJCJ7LKIgJEdQPr3GAMCnBiz/LJPJWoH4EHAIFQ=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:58:1b:63:62:bf:29:15:1a:5b:bc:f2:33:f9:a6:49:87:f1:5f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Sep 3 13:47:06 2025 GMT Not After : Sep 6 15:06:06 2025 GMT Subject: CN=644DBFD89DB3C8E95A7822227AEB87F32D4C2F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:eb:ca:2a:60:9b:37:9d:9a:55:b9:08:e5: d8:84:c2:c9:cd:71:67:61:16:cc:7d:dc:72:e2:95: ce:fd:07:55:c6:ef:5c:4b:ed:21:20:62:de:1f:2b: 02:5e:ab:ca:b5:54:1e:d5:43:3f:49:db:c2:73:29: 1f:1e:35:c7:3d:9e:87:35:31:d4:86:c1:d0:80:70: 1d:65:bb:1f:da:4e:20:c2:37:e3:c5:3f:e3:f4:ab: 48:f4:13:a6:e7:2b:95:92:b6:02:c2:7d:f7:ce:15: 0a:54:71:e5:5c:79:62:66:38:cf:f2:ed:ec:34:eb: 3b:ca:be:e4:08:bf:e6:bf:9c:5f:a6:50:a7:a1:83: cb:0c:14:0e:fd:c0:97:70:6f:38:e4:40:4f:15:5a: e9:e1:6d:2a:f6:78:c7:08:2a:91:d5:de:db:0d:bc: 42:d6:19:ac:19:81:70:fa:f1:65:c1:04:d4:be:dd: 54:63:94:93:b5:a8:16:cf:59:97:ed:af:e3:7f:36: 1d:76:05:06:9d:00:bb:1f:88:96:62:da:e2:ff:bd: 9f:2e:b2:18:9c:05:10:df:f9:6d:b0:90:8a:81:a2: 9f:aa:75:01:15:fd:f7:da:1b:9e:f7:8c:de:1e:5f: 71:8e:7f:1e:c5:bc:28:cb:df:c7:54:8a:0a:da:b0: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4D:BF:D8:9D:B3:C8:E9:5A:78:22:22:7A:EB:87:F3:2D:4C:2F:93 X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cf:54:33:21:89:2a:28:05:ce:4f:f1:53:6e:f1:3f:38:6c: 67:91:8a:1a:84:13:cb:c2:ee:e8:bd:b4:af:49:bc:5c:fd:eb: a3:22:2c:83:c8:71:6e:a8:c2:72:45:5a:4a:d7:f4:e2:ea:c9: 5d:65:be:d9:58:1b:27:77:5c:ca:a8:18:aa:5e:64:f5:a3:7c: 6c:0e:9e:18:12:87:08:cc:ec:12:2a:99:20:09:e1:2d:2b:67: ce:7e:e5:e4:9c:2c:26:8a:39:5c:a5:32:40:9a:39:b5:22:60: ce:c3:77:12:d9:93:18:2e:f1:e1:e8:3e:ca:a6:1b:e2:b7:43: f6:79:d9:e8:2c:f8:fd:f9:c7:d2:68:45:2b:0a:60:47:e6:c5: 9a:8d:72:ab:19:92:20:e4:67:95:0b:9d:8d:4c:50:db:3d:81: d6:11:ec:49:ab:98:ea:c8:e9:49:d7:4e:6f:1f:c8:b3:d2:3c: be:fa:c1:ac:95:d5:d1:91:58:de:a1:f4:64:1b:f3:2e:65:b2: d5:e5:b3:a8:74:ca:d9:e1:09:19:6e:3b:56:b6:ee:3f:28:0e: fa:89:4d:cf:ff:b9:6d:a9:0b:0a:d5:af:1b:bc:f6:71:ba:1c: b3:d1:a4:f2:91:f7:99:f6:03:45:b2:ae:fa:0a:f1:28:25:95: c3:b8:37:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFgbY2K/KRUaW7zyM/mmSYfxX6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTA5MDMxMzQ3MDZaFw0yNTA5MDYxNTA2MDZaMDMxMTAvBgNV BAMTKDY0NERCRkQ4OURCM0M4RTk1QTc4MjIyMjdBRUI4N0YzMkQ0QzJGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6OvKKmCbN52aVbkI5diEwsnN cWdhFsx93HLilc79B1XG71xL7SEgYt4fKwJeq8q1VB7VQz9J28JzKR8eNcc9noc1 MdSGwdCAcB1lux/aTiDCN+PFP+P0q0j0E6bnK5WStgLCfffOFQpUceVceWJmOM/y 7ew06zvKvuQIv+a/nF+mUKehg8sMFA79wJdwbzjkQE8VWunhbSr2eMcIKpHV3tsN vELWGawZgXD68WXBBNS+3VRjlJO1qBbPWZftr+N/Nh12BQadALsfiJZi2uL/vZ8u shicBRDf+W2wkIqBop+qdQEV/ffaG573jN4eX3GOfx7FvCjL38dUigrasEfNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZE2/2J2zyOlaeCIieuuH8y1ML5MwHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPPVDMhiSooBc5P8VNu8T84bGeRihqEE8vC 7ui9tK9JvFz966MiLIPIcW6ownJFWkrX9OLqyV1lvtlYGyd3XMqoGKpeZPWjfGwO nhgShwjM7BIqmSAJ4S0rZ85+5eScLCaKOVylMkCaObUiYM7DdxLZkxgu8eHoPsqm G+K3Q/Z52egs+P35x9JoRSsKYEfmxZqNcqsZkiDkZ5ULnY1MUNs9gdYR7EmrmOrI 6UnXTm8fyLPSPL76wayV1dGRWN6h9GQb8y5lstXls6h0ytnhCRluO1a27j8oDvqJ Tc//uW2pCwrVrxu89nG6HLPRpPKR95n2A0WyrvoK8SgllcO4N2c= -----END CERTIFICATE-----Generated at Fri Sep 5 12:43:49 2025 by rpki-client