$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: mO1jE953T1hRWvqmLOlIwqqeMKThXhXUOrWizXzlgmg= Subject key identifier: 8F:6C:29:41:4B:DD:31:53:37:AA:67:70:BF:D8:FD:16:40:08:52:5D Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 3560F200D8FDB513FFE9EA6ADDFEF75C11539565 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 01CA Signing time: Fri 17 Apr 2026 07:32:21 +0000 Manifest this update: Fri 17 Apr 2026 07:27:21 +0000 Manifest next update: Mon 20 Apr 2026 17:30:21 +0000 Files and hashes: 1: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: i+rK94cunTmB3HYVoB9SjEzJx9MBTPvlyy7R0uhxmZY=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: 90AGQSZUT827FAhfK6m2RL5WFH3krw0cgILny+yUoj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:60:f2:00:d8:fd:b5:13:ff:e9:ea:6a:dd:fe:f7:5c:11:53:95:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Apr 17 07:27:21 2026 GMT Not After : Apr 20 17:30:21 2026 GMT Subject: CN=8F6C29414BDD315337AA6770BFD8FD164008525D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:9e:2f:f0:63:77:8f:fd:4e:23:37:16:ef: 75:cd:e9:48:30:66:a0:01:ae:33:b0:ad:eb:cf:77: 23:f6:d5:b3:79:e1:65:02:bf:be:47:fa:22:84:e2: 68:71:72:40:87:72:20:c8:a1:4e:77:17:32:0e:62: 6a:87:91:c1:be:96:2b:82:77:4e:fa:42:58:be:4e: bb:8c:20:92:e8:6a:63:f9:32:f0:c3:8b:7f:20:e6: ad:e5:a8:7b:b7:42:30:7f:1e:50:0d:68:4b:96:46: be:cb:02:b6:4e:a3:40:40:d8:ba:d2:c2:55:1f:b0: bb:ad:3f:c1:9d:15:5e:ba:40:cf:62:a4:29:b1:2c: 0e:24:93:e5:7c:74:66:af:e0:7d:70:8a:f0:ad:15: 0f:03:41:cc:9a:ff:58:22:07:56:bb:89:ca:0b:f6: de:55:79:e5:f4:79:0a:f1:73:04:4d:a3:aa:b4:e1: 4a:9e:7f:12:40:9d:7b:6f:4f:a2:bb:fc:5b:0b:22: b5:a2:a4:91:8f:79:0c:cc:63:ed:f3:66:01:4d:e6: 58:a1:51:bf:4a:12:06:48:cc:07:9c:65:27:71:c8: 3b:fb:a5:79:9a:3e:7d:87:89:52:f7:87:b0:bb:5a: b2:2c:cb:5a:90:98:ae:58:4f:71:c5:23:d9:5b:19: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6C:29:41:4B:DD:31:53:37:AA:67:70:BF:D8:FD:16:40:08:52:5D X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:83:34:ab:70:f3:31:c5:5d:2f:30:29:e7:a1:15:b7:c9:76: 0b:a2:21:ae:66:92:b5:25:85:82:32:89:64:f3:7d:21:7d:6f: 99:ed:b5:ae:08:b4:34:45:26:cd:c7:3a:24:1d:64:26:d1:10: 8e:a9:f3:e1:22:17:ed:f6:6a:54:ba:58:f4:08:19:ca:3a:36: 8e:a1:64:a4:62:04:c3:c6:70:68:2d:5e:fe:c4:47:f3:92:e0: 7a:b3:6c:49:a7:30:91:48:4d:ae:8c:05:6b:62:5e:1d:ae:4e: b6:28:dc:28:cd:b7:f1:86:1e:b6:97:4d:2a:71:07:fc:41:9f: 42:6c:0d:46:7a:bb:23:c9:10:89:72:65:1c:53:3e:bf:22:4c: 77:90:68:58:85:4e:36:60:b0:d4:6b:64:b5:5c:e4:f2:56:81: d5:fa:e8:86:e1:10:6e:92:57:1a:7f:fc:75:ad:4c:1d:ac:01: 46:0f:91:a2:a5:cf:6e:e8:c7:e5:3d:29:32:4b:73:c7:49:7b: 8c:53:5f:9c:54:f1:0c:a7:51:b0:3e:a7:3b:b4:48:3c:02:f1: 17:a8:f9:47:da:51:2a:81:c3:27:5d:88:a0:e8:75:96:b3:3b: ce:bf:db:eb:fe:5a:68:5f:89:aa:76:98:8d:46:7a:58:6e:57: 36:9f:86:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWDyANj9tRP/6epq3f73XBFTlWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNjA0MTcwNzI3MjFaFw0yNjA0MjAxNzMwMjFaMDMxMTAvBgNV BAMTKDhGNkMyOTQxNEJERDMxNTMzN0FBNjc3MEJGRDhGRDE2NDAwODUyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rJ4v8GN3j/1OIzcW73XN6Ugw ZqABrjOwrevPdyP21bN54WUCv75H+iKE4mhxckCHciDIoU53FzIOYmqHkcG+liuC d076Qli+TruMIJLoamP5MvDDi38g5q3lqHu3QjB/HlANaEuWRr7LArZOo0BA2LrS wlUfsLutP8GdFV66QM9ipCmxLA4kk+V8dGav4H1wivCtFQ8DQcya/1giB1a7icoL 9t5VeeX0eQrxcwRNo6q04UqefxJAnXtvT6K7/FsLIrWipJGPeQzMY+3zZgFN5lih Ub9KEgZIzAecZSdxyDv7pXmaPn2HiVL3h7C7WrIsy1qQmK5YT3HFI9lbGTbtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj2wpQUvdMVM3qmdwv9j9FkAIUl0wHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaDNKtw8zHFXS8wKeehFbfJdguiIa5mkrUl hYIyiWTzfSF9b5ntta4ItDRFJs3HOiQdZCbREI6p8+EiF+32alS6WPQIGco6No6h ZKRiBMPGcGgtXv7ER/OS4HqzbEmnMJFITa6MBWtiXh2uTrYo3CjNt/GGHraXTSpx B/xBn0JsDUZ6uyPJEIlyZRxTPr8iTHeQaFiFTjZgsNRrZLVc5PJWgdX66IbhEG6S Vxp//HWtTB2sAUYPkaKlz27ox+U9KTJLc8dJe4xTX5xU8QynUbA+pzu0SDwC8Reo +UfaUSqBwyddiKDodZazO86/2+v+Wmhfiap2mI1GelhuVzafhgw= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:48 2026 by rpki-client