$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: OO2QxHflTkjhYQmSxNFEzWy0yWIOZcMeDjEmyBLWe/M= Subject key identifier: 70:77:FF:80:19:BE:BF:C4:5A:6B:49:08:31:1D:C4:16:27:E5:8B:8E Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 63A09308D63312BD872816A1E9CB36CBA45764F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 056F Signing time: Thu 16 Apr 2026 16:02:14 +0000 Manifest this update: Thu 16 Apr 2026 15:57:14 +0000 Manifest next update: Mon 20 Apr 2026 00:48:14 +0000 Files and hashes: 1: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 2: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) 3: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) 4: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 5: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: 0tNvO/3LieM29E07XdeKyPh8w/wFu4LbKmsRaol3VXw=) 6: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a0:93:08:d6:33:12:bd:87:28:16:a1:e9:cb:36:cb:a4:57:64:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Apr 16 15:57:14 2026 GMT Not After : Apr 20 00:48:14 2026 GMT Subject: CN=7077FF8019BEBFC45A6B4908311DC41627E58B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:4e:ce:ad:6d:fd:55:a2:c1:bd:1f:10:97: e9:9d:b2:b2:63:67:a8:29:4a:7f:8b:77:29:49:21: 73:ff:8a:43:4c:48:55:f2:35:88:5e:24:3e:79:87: 4e:48:fa:22:45:fb:5d:b1:45:b9:37:9b:14:2c:a1: 12:88:28:ff:66:c1:b5:20:88:4b:8d:6f:14:1c:52: 30:38:93:12:84:e4:5b:cb:c7:f9:72:a0:e2:9b:c2: 09:d3:2a:cc:f9:66:f3:4b:d6:c7:54:d3:03:e0:91: 75:e9:a5:5e:01:51:10:26:72:80:f1:1d:b5:96:7a: ea:b4:0b:3e:fa:a3:e9:86:6d:5c:3b:57:fb:c6:5f: 73:23:0c:93:63:54:42:5f:42:e6:b9:17:e9:d6:0f: 93:8d:7e:c5:9d:cc:b4:44:2b:c8:3d:f5:85:04:39: b2:63:9a:74:3d:61:5e:8c:7d:ba:75:8b:e9:f4:8f: e5:a4:44:1a:13:88:a8:66:e0:ca:65:50:18:1c:d9: 1d:50:88:69:ec:4a:8b:aa:95:42:b3:2a:b7:02:0e: 79:88:76:f4:54:cb:e3:c4:6a:22:25:d4:fe:3b:04: d8:63:14:84:59:ad:f7:07:a9:16:38:da:87:f4:94: 9b:3f:eb:dc:8f:60:f5:e9:ee:bd:ff:01:08:c9:f9: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:77:FF:80:19:BE:BF:C4:5A:6B:49:08:31:1D:C4:16:27:E5:8B:8E X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:de:8b:dd:9f:d0:2e:71:9a:ed:a4:60:b5:5e:d0:42:7b:31: f1:82:d2:0f:31:21:91:2b:ce:8d:dd:f7:99:3e:b4:3d:a0:ad: 84:cd:2d:3d:9f:f2:80:8d:11:88:ee:28:c2:a3:89:60:4e:7b: ba:00:44:80:59:c2:5b:89:1a:20:83:82:d0:9d:9f:2c:45:91: ca:64:6b:dd:9d:c8:fd:d9:33:73:8f:19:91:66:1b:67:c2:5a: 21:25:82:07:42:f4:74:9a:6c:55:5b:9b:f0:0e:93:fb:eb:ff: 1b:49:4e:86:3d:40:4d:55:3c:a3:03:c1:66:74:09:5a:45:21: b7:95:15:3b:c9:7f:ec:94:84:d9:c1:d8:c3:29:3b:96:e0:4f: 6b:c4:d7:58:47:9a:7a:df:6a:48:d2:88:dc:69:6d:c3:5d:38: ce:7c:ea:e4:94:13:fa:6f:eb:11:33:dd:12:af:ba:84:ee:a8: fc:9c:55:ea:9d:e8:1f:0b:3c:d0:76:a1:4f:4b:1c:d7:a8:c4: e1:f0:82:b7:54:93:98:ff:46:11:4d:ec:48:4b:65:23:2d:d3: af:8a:eb:69:98:76:43:9b:ef:78:82:76:c8:c3:c9:44:0c:fc: 38:ac:40:bf:34:41:b4:6f:b0:c3:db:83:37:7c:f3:ba:62:30: 41:be:13:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6CTCNYzEr2HKBah6cs2y6RXZPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNjA0MTYxNTU3MTRaFw0yNjA0MjAwMDQ4MTRaMDMxMTAvBgNV BAMTKDcwNzdGRjgwMTlCRUJGQzQ1QTZCNDkwODMxMURDNDE2MjdFNThCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfE7OrW39VaLBvR8Ql+mdsrJj Z6gpSn+LdylJIXP/ikNMSFXyNYheJD55h05I+iJF+12xRbk3mxQsoRKIKP9mwbUg iEuNbxQcUjA4kxKE5FvLx/lyoOKbwgnTKsz5ZvNL1sdU0wPgkXXppV4BURAmcoDx HbWWeuq0Cz76o+mGbVw7V/vGX3MjDJNjVEJfQua5F+nWD5ONfsWdzLREK8g99YUE ObJjmnQ9YV6Mfbp1i+n0j+WkRBoTiKhm4MplUBgc2R1QiGnsSouqlUKzKrcCDnmI dvRUy+PEaiIl1P47BNhjFIRZrfcHqRY42of0lJs/69yPYPXp7r3/AQjJ+XsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcHf/gBm+v8Raa0kIMR3EFifli44wHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfei92f0C5xmu2kYLVe0EJ7MfGC0g8xIZEr zo3d95k+tD2grYTNLT2f8oCNEYjuKMKjiWBOe7oARIBZwluJGiCDgtCdnyxFkcpk a92dyP3ZM3OPGZFmG2fCWiElggdC9HSabFVbm/AOk/vr/xtJToY9QE1VPKMDwWZ0 CVpFIbeVFTvJf+yUhNnB2MMpO5bgT2vE11hHmnrfakjSiNxpbcNdOM586uSUE/pv 6xEz3RKvuoTuqPycVeqd6B8LPNB2oU9LHNeoxOHwgrdUk5j/RhFN7EhLZSMt06+K 62mYdkOb73iCdsjDyUQM/DisQL80QbRvsMPbgzd887piMEG+E7s= -----END CERTIFICATE-----Generated at Sat Apr 18 07:23:21 2026 by rpki-client