$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: j14fyOZf4s9zOVIN8DM6b5xZ2eNcVb42SGUIfI3iBLY= Subject key identifier: 3C:2A:5D:5B:AC:82:73:22:F4:E9:8F:BD:5C:FB:3B:EC:04:0F:80:1E Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 76D29171CB5AC2B0676C4A4F1309D2FE38589523 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 055A Signing time: Sat 28 Feb 2026 23:32:11 +0000 Manifest this update: Sat 28 Feb 2026 23:27:11 +0000 Manifest next update: Wed 04 Mar 2026 07:24:11 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) 2: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) 3: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 4: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: QxfGRYe8P9mwpdGtJwKu+IH5nLOv/KsKqEX47pqQQhQ=) 5: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 6: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d2:91:71:cb:5a:c2:b0:67:6c:4a:4f:13:09:d2:fe:38:58:95:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Feb 28 23:27:11 2026 GMT Not After : Mar 4 07:24:11 2026 GMT Subject: CN=3C2A5D5BAC827322F4E98FBD5CFB3BEC040F801E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:22:aa:60:3d:20:f2:84:4a:0d:3a:2f:41:24: 29:26:53:3f:79:f1:49:bc:1d:e0:2d:3e:11:7c:ec: 16:37:61:8b:e4:1a:77:2c:ef:02:93:09:88:63:0f: 5d:ff:30:99:e1:fe:36:80:49:53:aa:dc:33:12:d2: 32:c1:83:f6:fc:02:e6:38:c7:e6:f0:a3:76:08:13: d0:eb:b1:11:9a:66:c2:7d:a1:d4:3d:99:c7:8e:b7: f5:4f:4a:61:84:1f:68:f2:90:d9:3f:5d:60:40:e5: 1d:7b:2c:6f:d8:f3:5b:4e:ec:13:6b:67:d9:92:73: 61:8c:3d:78:f8:e9:3f:db:b0:9c:34:98:48:01:2a: 87:68:bf:69:82:2e:70:3f:eb:ea:59:d3:db:f9:be: ee:ab:ba:c6:3e:a0:d8:69:87:f1:30:b4:e1:a4:13: 12:01:97:d1:01:8b:ba:de:d8:a5:95:a3:09:7f:b9: fc:1a:3e:14:4d:99:82:8a:d2:b0:82:47:e5:80:04: b6:19:25:09:a0:cf:c4:24:d5:22:e2:a1:07:49:dd: bb:5a:d0:65:2e:9e:33:55:5d:10:fb:56:19:1f:2a: e3:33:80:cd:10:2d:e3:7b:75:a5:89:d9:52:72:f6: 2e:e1:d6:31:2f:ef:11:ee:66:06:39:f1:3f:7b:25: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2A:5D:5B:AC:82:73:22:F4:E9:8F:BD:5C:FB:3B:EC:04:0F:80:1E X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0d:31:10:91:b2:08:f0:4d:94:48:39:cc:b4:2e:35:6e:ec: 95:2b:2f:d8:75:f0:ab:ff:f0:e1:b2:bd:0f:3c:a6:cc:b3:7f: ca:b7:bc:11:bb:1f:26:2b:6c:29:90:90:a2:cd:b6:f9:83:ad: 9e:d6:51:0c:b3:4a:74:d2:09:bd:4b:71:ee:01:49:85:52:04: 22:ba:2f:28:2f:a5:aa:91:56:cb:f1:99:0e:c4:8f:e4:a0:d0: a6:b8:0f:15:86:1b:9d:3c:7e:a8:08:c7:e6:20:de:f8:52:48: ac:bf:28:a3:52:6a:bb:08:ec:ad:9d:38:c0:b7:79:65:4b:36: c8:3b:ba:f7:fa:ee:04:44:e5:b9:49:65:c4:29:1a:ba:f1:4b: b7:f4:e6:7a:e2:ea:92:22:ca:cf:68:e4:31:ef:6c:b5:32:4e: c0:fd:88:11:08:b5:44:28:59:50:ae:4a:9a:52:ca:49:fd:e7: 44:35:dd:46:15:6b:eb:74:61:85:7d:cc:28:a8:df:3b:05:0e: c4:d4:75:b6:32:60:46:a3:09:a9:c7:97:04:a4:59:da:68:5c: 72:7e:99:9d:2c:00:57:e3:5f:44:10:d5:43:af:b7:bd:96:61: 51:1a:aa:be:4b:36:0c:38:9f:2a:49:8c:9e:f7:9f:96:49:d6: 61:48:ca:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtKRcctawrBnbEpPEwnS/jhYlSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNjAyMjgyMzI3MTFaFw0yNjAzMDQwNzI0MTFaMDMxMTAvBgNV BAMTKDNDMkE1RDVCQUM4MjczMjJGNEU5OEZCRDVDRkIzQkVDMDQwRjgwMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1IqpgPSDyhEoNOi9BJCkmUz95 8Um8HeAtPhF87BY3YYvkGncs7wKTCYhjD13/MJnh/jaASVOq3DMS0jLBg/b8AuY4 x+bwo3YIE9DrsRGaZsJ9odQ9mceOt/VPSmGEH2jykNk/XWBA5R17LG/Y81tO7BNr Z9mSc2GMPXj46T/bsJw0mEgBKodov2mCLnA/6+pZ09v5vu6rusY+oNhph/EwtOGk ExIBl9EBi7re2KWVowl/ufwaPhRNmYKK0rCCR+WABLYZJQmgz8Qk1SLioQdJ3bta 0GUunjNVXRD7VhkfKuMzgM0QLeN7daWJ2VJy9i7h1jEv7xHuZgY58T97JbFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPCpdW6yCcyL06Y+9XPs77AQPgB4wHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGANMRCRsgjwTZRIOcy0LjVu7JUrL9h18Kv/ 8OGyvQ88psyzf8q3vBG7HyYrbCmQkKLNtvmDrZ7WUQyzSnTSCb1Lce4BSYVSBCK6 LygvpaqRVsvxmQ7Ej+Sg0Ka4DxWGG508fqgIx+Yg3vhSSKy/KKNSarsI7K2dOMC3 eWVLNsg7uvf67gRE5blJZcQpGrrxS7f05nri6pIiys9o5DHvbLUyTsD9iBEItUQo WVCuSppSykn950Q13UYVa+t0YYV9zCio3zsFDsTUdbYyYEajCanHlwSkWdpoXHJ+ mZ0sAFfjX0QQ1UOvt72WYVEaqr5LNgw4nypJjJ73n5ZJ1mFIyj4= -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:59 2026 by rpki-client