$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json) Hash identifier: ShuLKPrpjBZDPoJHz+SBoPunQl+LivX75QFGS4aZJ8A= Subject key identifier: 72:66:35:1B:CD:4D:0C:00:DD:75:5B:8B:33:6D:45:84:E6:44:91:97 Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Certificate serial: 6D5E29BCC6C89C939B86DDF8B72A7101C70430E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft Manifest number: 021D Signing time: Thu 06 Nov 2025 12:01:39 +0000 Manifest this update: Thu 06 Nov 2025 11:56:39 +0000 Manifest next update: Sun 09 Nov 2025 18:55:39 +0000 Files and hashes: 1: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: 4jy2Sr+DdpuAt+WtJ+ksX74cHQzhXIMlam4U38lavvo=) 2: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: +Y8f9IKZhXyPRNzOP8gLDO5FItamxPZwT5YuJiQ+z+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5e:29:bc:c6:c8:9c:93:9b:86:dd:f8:b7:2a:71:01:c7:04:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Validity Not Before: Nov 6 11:56:39 2025 GMT Not After : Nov 9 18:55:39 2025 GMT Subject: CN=7266351BCD4D0C00DD755B8B336D4584E6449197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:58:3f:eb:55:da:d1:cd:04:b5:af:3b:af: b0:21:c4:d6:8b:7b:e4:0c:ae:10:28:8a:d0:4c:7f: 11:cd:2d:16:aa:49:b7:64:d8:d1:1c:1f:dd:de:ce: 7c:d4:99:06:3e:6b:99:90:df:5a:e5:92:79:b7:70: ad:01:66:48:d1:41:41:75:2c:f6:ed:5c:6d:45:a9: 21:21:f2:f6:de:3b:8e:f3:c3:43:c3:10:be:5c:9b: 0c:7b:e6:44:ea:cc:d9:f0:91:c3:61:7c:e7:21:16: 9c:77:06:37:24:cd:2a:2f:b3:c0:87:87:c3:20:67: cf:3d:2a:ad:ad:8a:06:9b:1c:80:5c:36:02:d1:27: 8c:6a:81:9c:07:ca:9b:c7:e3:7f:1a:c8:c4:1b:4e: a2:8c:bc:e1:7c:ea:8b:f0:a5:5b:0d:23:85:6d:14: 6c:f0:47:a2:56:2a:4f:a9:31:14:e5:c0:db:2f:eb: 58:ba:4f:4c:0f:72:9e:84:b6:1d:78:84:9e:5a:92: 2f:c9:5e:ac:61:61:98:0a:24:28:f9:30:4a:9b:b8: dd:8c:3e:70:aa:2b:fe:21:47:35:09:b7:43:b7:00: 82:cb:86:89:74:d2:9c:b0:5f:0a:f1:a7:5a:7a:27: ea:fa:54:8a:cc:36:8b:29:ad:6a:c5:eb:46:53:7e: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:66:35:1B:CD:4D:0C:00:DD:75:5B:8B:33:6D:45:84:E6:44:91:97 X509v3 Authority Key Identifier: keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f3:33:69:8e:d0:ac:a9:c6:52:4c:f6:64:95:82:17:45:42: 23:14:c5:7b:74:9d:c5:d7:b9:01:ae:b8:b8:f6:d0:16:b6:99: 38:16:20:54:b8:79:c1:43:9b:34:7b:bd:71:05:88:03:fb:38: 35:3d:46:17:f9:95:a6:fd:f2:82:92:53:9a:a6:64:3b:cf:3e: 40:a5:7a:1e:38:51:f9:7c:21:31:0f:dc:07:4c:e8:a7:51:5d: 72:90:09:d5:3b:76:1c:21:96:5c:b6:e4:88:76:54:67:69:40: f5:fa:bf:42:2d:e7:bd:49:70:42:57:b0:b4:45:fe:e6:da:d8: 5b:27:76:ec:70:5c:fb:e7:75:24:fe:39:20:83:3b:99:aa:3b: 97:90:08:b4:96:ba:89:31:e9:b0:73:b2:fb:e5:69:8e:05:3d: 75:72:8a:08:70:c2:c8:2d:40:51:f0:f3:35:16:78:42:23:24: 5d:46:c7:ec:7d:d9:19:eb:00:56:6c:a7:3e:d6:6b:a8:fe:01: 94:d7:4e:5f:e1:37:14:98:71:01:ce:3c:57:bd:6d:6b:d5:e4: 4b:9a:be:f5:ff:d7:82:bb:1a:1b:73:eb:30:3e:cf:66:7d:36: be:8f:db:c0:78:3f:1c:ed:1e:6a:ce:26:21:b5:24:e3:59:5e: 24:ed:c2:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbV4pvMbInJObht34typxAccEMOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2 MkRDQjM0MDAeFw0yNTExMDYxMTU2MzlaFw0yNTExMDkxODU1MzlaMDMxMTAvBgNV BAMTKDcyNjYzNTFCQ0Q0RDBDMDBERDc1NUI4QjMzNkQ0NTg0RTY0NDkxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZ1g/61Xa0c0Eta87r7AhxNaL e+QMrhAoitBMfxHNLRaqSbdk2NEcH93eznzUmQY+a5mQ31rlknm3cK0BZkjRQUF1 LPbtXG1FqSEh8vbeO47zw0PDEL5cmwx75kTqzNnwkcNhfOchFpx3BjckzSovs8CH h8MgZ889Kq2tigabHIBcNgLRJ4xqgZwHypvH438ayMQbTqKMvOF86ovwpVsNI4Vt FGzwR6JWKk+pMRTlwNsv61i6T0wPcp6Eth14hJ5aki/JXqxhYZgKJCj5MEqbuN2M PnCqK/4hRzUJt0O3AILLhol00pywXwrxp1p6J+r6VIrMNosprWrF60ZTfrctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcmY1G81NDADddVuLM21FhOZEkZcwHwYDVR0j BBgwFoAUoZGMFWqaz83yRx3q/GGO4WLcs0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjhjN2EzNC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC9BMTkxOEMxNTZB OUFDRkNERjI0NzFERUFGQzYxOEVFMTYyRENCMzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2MkRD QjM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThF RTE2MkRDQjM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzzM2mO0KypxlJM9mSVghdFQiMUxXt0ncXX uQGuuLj20Ba2mTgWIFS4ecFDmzR7vXEFiAP7ODU9Rhf5lab98oKSU5qmZDvPPkCl eh44Ufl8ITEP3AdM6KdRXXKQCdU7dhwhlly25Ih2VGdpQPX6v0It571JcEJXsLRF /uba2FsnduxwXPvndST+OSCDO5mqO5eQCLSWuokx6bBzsvvlaY4FPXVyighwwsgt QFHw8zUWeEIjJF1Gx+x92RnrAFZspz7Wa6j+AZTXTl/hNxSYcQHOPFe9bWvV5Eua vvX/14K7Ghtz6zA+z2Z9Nr6P28B4PxztHmrOJiG1JONZXiTtwnA= -----END CERTIFICATE-----Generated at Fri Nov 7 23:11:33 2025 by rpki-client