$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: +UixawhedPVAyWDepp4Gbe9Ck7sLcenkRPOf7LCsn8w= Subject key identifier: D0:56:7B:C7:15:B5:79:6B:0B:60:08:E3:25:95:B0:85:B1:26:54:C6 Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 2F9A5ACB1F06C4B8117ED3C65EF87AE38B8CF63E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 050D Signing time: Tue 09 Sep 2025 09:11:56 +0000 Manifest this update: Tue 09 Sep 2025 09:06:56 +0000 Manifest next update: Fri 12 Sep 2025 12:57:56 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) 2: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) 3: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 4: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: xlhkvw3DxDBJGZWVAM7Q5afrOyQzrW8tT8hLXk7nhj0=) 5: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 6: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 12:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9a:5a:cb:1f:06:c4:b8:11:7e:d3:c6:5e:f8:7a:e3:8b:8c:f6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Sep 9 09:06:56 2025 GMT Not After : Sep 12 12:57:56 2025 GMT Subject: CN=D0567BC715B5796B0B6008E32595B085B12654C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:91:8c:af:66:e9:11:53:73:fa:65:27:d9:90: 63:1c:b2:88:58:39:a4:a2:64:fd:ed:89:b1:8d:f6: cc:d3:02:79:f4:06:85:26:94:46:66:2a:bc:4a:f7: 00:6a:28:53:09:96:70:c7:0b:4f:3e:8a:c2:46:6c: 06:cb:af:70:fe:6a:1a:ac:7b:26:00:c9:64:33:89: f4:5c:0a:b3:7d:f0:20:24:6a:a6:b0:f1:40:74:87: a1:fb:a2:c1:3c:88:25:45:e5:bf:ae:93:2d:8c:3c: 2f:da:0b:a7:65:ff:97:33:66:91:69:73:54:63:e4: 5f:73:a9:e8:d0:ca:54:2f:70:4d:ab:15:99:70:7e: e7:df:b8:5f:c5:82:c6:73:85:d1:ca:f2:4a:f0:0e: 58:09:fd:55:e2:1c:a2:71:a5:ae:10:6e:a1:49:3d: 8b:94:13:70:2e:43:04:2a:ed:31:86:bb:eb:a2:f0: 16:4d:f4:f3:6f:3a:ea:d0:df:d6:c3:e4:18:7e:b5: 9c:16:3e:c0:6c:2d:7a:09:aa:87:30:67:b7:aa:5b: eb:de:64:0e:57:ee:81:c6:24:a7:23:3e:61:21:13: e4:79:b5:bd:35:73:0a:e3:21:27:05:2d:5e:4e:3b: 5c:36:94:d6:72:d9:ae:ca:a7:bc:79:b7:26:7b:86: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:56:7B:C7:15:B5:79:6B:0B:60:08:E3:25:95:B0:85:B1:26:54:C6 X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3b:af:88:55:33:7f:52:7a:b4:73:57:7b:68:ba:97:ee:03: 77:46:be:7c:90:60:f3:2a:1b:b9:3c:6e:bb:35:05:5d:63:0a: dc:94:e6:df:f9:4c:0b:86:84:83:87:dc:72:47:75:eb:14:15: bb:39:34:70:4e:73:6e:65:b9:d9:9c:03:93:93:89:9c:39:eb: 28:8a:3d:76:d2:f4:0b:cc:62:09:3f:e3:7f:f5:91:0d:c0:e6: cd:40:b9:8f:3c:a9:6d:42:c5:dc:a5:0c:4d:63:80:67:2c:92: f6:10:81:c5:03:52:19:87:68:ae:ea:88:3b:83:c6:eb:b3:85: 95:ad:f4:9f:cd:0c:8e:64:12:1d:91:a4:ec:c3:40:4d:9b:af: 2f:f6:71:5b:ff:0d:71:16:58:5d:28:94:08:48:37:8c:b0:92: a0:a0:c9:4d:26:b2:f4:d5:b7:34:d1:f8:4d:01:41:52:b2:26: 62:08:94:2d:b4:c4:b7:f7:5c:35:6c:91:e1:7c:95:ae:a0:1e: b8:63:4b:b7:2f:75:ab:4f:9a:6f:81:d6:ca:32:01:92:4b:ae: e0:72:90:dd:c2:fb:98:ac:fb:f9:7a:a9:9d:db:b5:25:6e:70: 2e:24:a6:e7:4a:ce:b9:22:08:7b:69:18:6b:7a:b3:5a:ae:01: ff:22:fc:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5payx8GxLgRftPGXvh644uM9j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTA5MDkwOTA2NTZaFw0yNTA5MTIxMjU3NTZaMDMxMTAvBgNV BAMTKEQwNTY3QkM3MTVCNTc5NkIwQjYwMDhFMzI1OTVCMDg1QjEyNjU0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzkYyvZukRU3P6ZSfZkGMcsohY OaSiZP3tibGN9szTAnn0BoUmlEZmKrxK9wBqKFMJlnDHC08+isJGbAbLr3D+ahqs eyYAyWQzifRcCrN98CAkaqaw8UB0h6H7osE8iCVF5b+uky2MPC/aC6dl/5czZpFp c1Rj5F9zqejQylQvcE2rFZlwfuffuF/FgsZzhdHK8krwDlgJ/VXiHKJxpa4QbqFJ PYuUE3AuQwQq7TGGu+ui8BZN9PNvOurQ39bD5Bh+tZwWPsBsLXoJqocwZ7eqW+ve ZA5X7oHGJKcjPmEhE+R5tb01cwrjIScFLV5OO1w2lNZy2a7Kp7x5tyZ7hhJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0FZ7xxW1eWsLYAjjJZWwhbEmVMYwHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABc7r4hVM39SerRzV3toupfuA3dGvnyQYPMq G7k8brs1BV1jCtyU5t/5TAuGhIOH3HJHdesUFbs5NHBOc25ludmcA5OTiZw56yiK PXbS9AvMYgk/43/1kQ3A5s1AuY88qW1CxdylDE1jgGcskvYQgcUDUhmHaK7qiDuD xuuzhZWt9J/NDI5kEh2RpOzDQE2bry/2cVv/DXEWWF0olAhIN4ywkqCgyU0msvTV tzTR+E0BQVKyJmIIlC20xLf3XDVskeF8la6gHrhjS7cvdatPmm+B1soyAZJLruBy kN3C+5is+/l6qZ3btSVucC4kpudKzrkiCHtpGGt6s1quAf8i/Ds= -----END CERTIFICATE-----Generated at Tue Sep 9 13:49:22 2025 by rpki-client