$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: GqMrGDQQQpg2ZPzD45xmk8c0T16vdgOv3lr9UtsuLpg= Subject key identifier: D0:3E:2F:15:7A:2D:17:AA:1F:88:F8:EB:E0:03:20:08:92:39:5E:3A Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 4BDB93626EF24EDCBFA35DCB943581ACAE51966B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 04E3 Signing time: Fri 06 Jun 2025 08:11:55 +0000 Manifest this update: Fri 06 Jun 2025 08:06:55 +0000 Manifest next update: Mon 09 Jun 2025 19:55:55 +0000 Files and hashes: 1: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 2: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: fIAZJQRdc8KtDMugJm1HvAiImbOSq132x0qDhsfcvRU=) 3: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) 4: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: 0fpof/Xi9yHslCngFyOxsm3BGmq7hOc9WgdHP1lT/Wk=) 5: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: NCFMTB+6CHYXkcepHvjhz7TzV8Mxuk6TBlwx3WylIcU=) 6: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: jFxa5TGLO0MGAVcUi+nEHeeu3cP0/977LeEHIt31vM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:db:93:62:6e:f2:4e:dc:bf:a3:5d:cb:94:35:81:ac:ae:51:96:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Jun 6 08:06:55 2025 GMT Not After : Jun 9 19:55:55 2025 GMT Subject: CN=D03E2F157A2D17AA1F88F8EBE003200892395E3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:e3:2f:2b:12:5c:c2:cb:b1:11:9e:4c:ad: 8b:3c:07:68:07:36:c7:42:fd:fb:59:f1:b3:99:bd: 5c:1e:63:91:45:71:6c:c0:73:a1:75:01:61:40:6e: a0:96:51:09:eb:72:3a:c9:2b:a5:fa:6f:78:f7:98: 84:1f:d3:c8:79:7e:f1:09:d1:b0:50:7c:72:21:a0: 88:63:72:b8:79:11:ed:02:d5:6d:79:c1:da:e7:7a: 39:c2:0b:79:ff:b1:4a:5d:55:56:f3:fe:63:d0:2e: e2:14:74:bf:8c:44:2a:a4:62:f0:08:aa:8b:88:1b: 67:00:72:43:51:78:95:18:2f:2d:cb:87:0b:b2:33: 07:d3:ce:b2:80:cc:62:c9:2a:dd:ff:1b:80:20:b8: f4:23:52:55:27:0d:cd:c2:54:2b:b3:bd:a4:b9:c4: d2:19:3c:0e:76:4d:a4:ca:da:fd:e8:31:54:1b:20: 90:17:d8:bb:54:99:1e:06:10:ad:23:58:05:d4:05: ee:c3:61:ab:64:72:36:42:ba:a3:ae:ec:ce:52:6d: 0a:6f:6c:72:10:c5:7e:81:bd:48:bf:e1:0a:1c:05: ee:15:0f:e9:1b:91:59:79:44:46:94:f5:6c:6f:a1: d8:53:4a:9e:7d:51:72:2d:77:d3:8f:35:2c:7c:8c: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3E:2F:15:7A:2D:17:AA:1F:88:F8:EB:E0:03:20:08:92:39:5E:3A X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f1:97:d0:f9:3d:1d:58:50:fa:61:ff:b2:df:4a:d3:45:f9: 83:3a:34:93:26:ff:d7:33:f8:0e:da:f9:9a:40:9b:a0:cc:4c: 57:8c:e4:4e:4e:74:29:ab:d8:1e:d5:fe:0b:54:34:4f:2f:3b: 86:f5:37:b6:d8:e1:34:00:45:c2:07:77:1b:52:64:a4:89:72: 4e:62:c8:af:81:fe:69:2c:a0:ee:ba:84:b5:8f:9b:f3:c4:4c: 6a:37:23:a4:59:52:c3:51:0f:19:80:6e:5f:ad:0e:43:81:68: cd:21:71:39:47:2f:b0:f5:0f:26:82:1a:05:bc:5d:c1:4f:25: 81:7d:cb:9e:bf:83:4f:2b:db:b0:81:c9:7a:6a:b1:87:31:71: 2d:69:20:a7:a3:6b:75:80:79:33:44:ce:80:7b:ab:14:a6:06: 07:1f:cf:53:31:49:1e:f7:d0:1a:8b:13:e9:df:06:82:1e:7a: 1e:d1:de:29:6e:c5:8a:ec:78:8c:f7:70:fe:60:00:2f:ee:e0: 28:2b:36:47:79:e8:fa:27:db:a9:c6:df:9d:83:47:5a:ec:e8: c3:b8:47:2f:38:e7:b3:59:83:98:af:4c:bf:da:b0:8f:45:94: d1:59:e8:b2:25:86:e9:ad:28:48:7b:32:7c:e9:2d:fd:1a:aa: e9:a9:a1:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9uTYm7yTty/o13LlDWBrK5RlmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTA2MDYwODA2NTVaFw0yNTA2MDkxOTU1NTVaMDMxMTAvBgNV BAMTKEQwM0UyRjE1N0EyRDE3QUExRjg4RjhFQkUwMDMyMDA4OTIzOTVFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0deMvKxJcwsuxEZ5MrYs8B2gH NsdC/ftZ8bOZvVweY5FFcWzAc6F1AWFAbqCWUQnrcjrJK6X6b3j3mIQf08h5fvEJ 0bBQfHIhoIhjcrh5Ee0C1W15wdrnejnCC3n/sUpdVVbz/mPQLuIUdL+MRCqkYvAI qouIG2cAckNReJUYLy3LhwuyMwfTzrKAzGLJKt3/G4AguPQjUlUnDc3CVCuzvaS5 xNIZPA52TaTK2v3oMVQbIJAX2LtUmR4GEK0jWAXUBe7DYatkcjZCuqOu7M5SbQpv bHIQxX6BvUi/4QocBe4VD+kbkVl5REaU9WxvodhTSp59UXItd9OPNSx8jEj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0D4vFXotF6ofiPjr4AMgCJI5XjowHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfxl9D5PR1YUPph/7LfStNF+YM6NJMm/9cz +A7a+ZpAm6DMTFeM5E5OdCmr2B7V/gtUNE8vO4b1N7bY4TQARcIHdxtSZKSJck5i yK+B/mksoO66hLWPm/PETGo3I6RZUsNRDxmAbl+tDkOBaM0hcTlHL7D1DyaCGgW8 XcFPJYF9y56/g08r27CByXpqsYcxcS1pIKeja3WAeTNEzoB7qxSmBgcfz1MxSR73 0BqLE+nfBoIeeh7R3iluxYrseIz3cP5gAC/u4CgrNkd56Pon26nG352DR1rs6MO4 Ry8457NZg5ivTL/asI9FlNFZ6LIlhumtKEh7MnzpLf0aqumpoS0= -----END CERTIFICATE-----Generated at Sat Jun 7 17:27:05 2025 by rpki-client