$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: 0o8oOo9hQ22IN2htC3u8vnnsyOOtLgMaeuAR0VUR6IU= Subject key identifier: F0:1A:8E:59:91:EE:49:AC:E8:1D:50:06:A3:90:CF:35:79:EB:D3:08 Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 16137E0DFF70EDC3BCB2F0DD90BC7857D3B08F8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 0180 Signing time: Mon 03 Nov 2025 04:42:08 +0000 Manifest this update: Mon 03 Nov 2025 04:37:08 +0000 Manifest next update: Thu 06 Nov 2025 15:16:08 +0000 Files and hashes: 1: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: fLCrsAY8N6TGjpfZ66Yk3qrALHKjPa/lqKCNjXGwfTs=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:13:7e:0d:ff:70:ed:c3:bc:b2:f0:dd:90:bc:78:57:d3:b0:8f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Nov 3 04:37:08 2025 GMT Not After : Nov 6 15:16:08 2025 GMT Subject: CN=F01A8E5991EE49ACE81D5006A390CF3579EBD308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:a0:ef:12:40:22:da:9a:53:ec:ec:9a:63: d0:59:01:7c:85:82:c8:d7:75:1d:f0:58:22:3d:1d: 46:18:62:ca:c4:b7:b0:06:8d:86:57:a3:65:e0:85: 27:33:ff:03:81:ca:28:ef:86:4f:d7:42:b7:52:5f: e4:20:82:7f:92:2f:7d:87:b6:03:af:b6:39:d2:68: 2a:c9:d4:64:e8:b2:70:64:60:7d:22:1f:21:84:84: 3e:63:a2:44:f2:ff:67:ab:b5:be:7c:ef:8c:22:22: 54:8a:c2:56:21:50:2c:13:80:ae:c9:a8:b7:78:11: 4b:cd:1b:16:3c:f5:19:fd:58:10:27:8b:33:9f:13: ee:1e:2d:c6:ef:f5:ce:aa:8c:45:4f:0d:3b:da:1e: 88:a2:e3:d2:5c:a8:fa:5c:ce:43:19:67:f4:13:9c: f1:64:99:91:58:aa:8d:84:2d:61:28:63:cf:88:37: f8:8d:20:47:b1:90:8f:04:f7:6f:10:9e:04:a2:a2: e8:61:c5:37:c8:67:c5:32:56:c5:1b:9b:08:56:50: 88:21:c2:c8:50:6f:10:f7:1e:9c:46:d0:7d:8a:77: 68:e5:1e:b0:53:40:9f:8c:55:0c:0a:e7:ea:75:0e: 2a:a6:06:8c:42:d2:f6:43:68:9c:40:c9:c1:41:5a: 9b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1A:8E:59:91:EE:49:AC:E8:1D:50:06:A3:90:CF:35:79:EB:D3:08 X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:95:20:8a:ed:57:73:94:29:73:e5:7d:e9:7c:88:79:3c:3c: e3:d7:7c:bd:17:08:ff:6b:16:e5:77:f0:22:d1:c6:15:bd:eb: b8:1d:05:62:f7:9e:c4:ac:38:29:d5:57:60:ac:fe:07:28:2f: 4b:db:7e:61:e1:16:15:2c:e8:cc:1d:32:ab:38:15:83:ac:a6: 3e:b4:98:46:d2:ed:77:7d:54:6a:da:21:e3:a2:bf:91:0a:49: 14:7b:e7:d7:50:5d:ec:2d:ff:0d:27:18:66:e3:09:64:cc:d1: e6:25:d4:44:b8:5c:0a:55:9d:43:05:50:cd:1b:37:06:7d:9d: 3b:01:56:26:af:f2:ff:1d:3d:d5:ca:7b:61:40:ac:7d:d7:60: d9:9d:3c:54:2c:0b:58:30:e1:a8:32:58:b9:0e:4a:57:f7:12: 4c:7e:83:fe:05:d6:a2:4d:73:9a:9f:d8:7b:d8:e4:96:e8:71: 45:d4:cf:dd:9d:2d:5b:5e:a2:d2:4d:52:a0:10:9c:b6:74:16: 73:36:7b:e7:b5:71:70:be:9f:42:2d:50:97:b3:6d:26:a7:ed: 24:10:28:d2:95:5d:cb:71:72:61:a9:69:3f:00:1e:cd:1b:eb: 54:38:ae:d4:5b:d8:1e:af:c8:13:cc:82:19:1e:d6:39:97:f6: 70:6d:6c:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhN+Df9w7cO8svDdkLx4V9Owj44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTExMDMwNDM3MDhaFw0yNTExMDYxNTE2MDhaMDMxMTAvBgNV BAMTKEYwMUE4RTU5OTFFRTQ5QUNFODFENTAwNkEzOTBDRjM1NzlFQkQzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx36DvEkAi2ppT7OyaY9BZAXyF gsjXdR3wWCI9HUYYYsrEt7AGjYZXo2XghScz/wOByijvhk/XQrdSX+Qggn+SL32H tgOvtjnSaCrJ1GTosnBkYH0iHyGEhD5jokTy/2ertb5874wiIlSKwlYhUCwTgK7J qLd4EUvNGxY89Rn9WBAnizOfE+4eLcbv9c6qjEVPDTvaHoii49JcqPpczkMZZ/QT nPFkmZFYqo2ELWEoY8+IN/iNIEexkI8E928QngSiouhhxTfIZ8UyVsUbmwhWUIgh wshQbxD3HpxG0H2Kd2jlHrBTQJ+MVQwK5+p1DiqmBoxC0vZDaJxAycFBWpsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8BqOWZHuSazoHVAGo5DPNXnr0wgwHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSVIIrtV3OUKXPlfel8iHk8POPXfL0XCP9r FuV38CLRxhW967gdBWL3nsSsOCnVV2Cs/gcoL0vbfmHhFhUs6MwdMqs4FYOspj60 mEbS7Xd9VGraIeOiv5EKSRR759dQXewt/w0nGGbjCWTM0eYl1ES4XApVnUMFUM0b NwZ9nTsBViav8v8dPdXKe2FArH3XYNmdPFQsC1gw4agyWLkOSlf3Ekx+g/4F1qJN c5qf2HvY5JbocUXUz92dLVteotJNUqAQnLZ0FnM2e+e1cXC+n0ItUJezbSan7SQQ KNKVXctxcmGpaT8AHs0b61Q4rtRb2B6vyBPMghke1jmX9nBtbP4= -----END CERTIFICATE-----Generated at Tue Nov 4 12:48:33 2025 by rpki-client