$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: +WQJdue6OHZ6L7LqEGzl9hFTqRx6oowdXwpUNZm9ULU= Subject key identifier: F6:88:3C:2D:CB:FA:CB:EB:0B:5E:88:87:CD:1E:68:7A:FF:23:EF:B6 Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 59E1535D4B456E780C124344ACFFACA576650781 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 0525 Signing time: Mon 03 Nov 2025 05:12:00 +0000 Manifest this update: Mon 03 Nov 2025 05:07:00 +0000 Manifest next update: Thu 06 Nov 2025 05:49:00 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) 2: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) 3: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 4: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 5: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) 6: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: d0M3yqI9HgwpHXunudEZLEvi+vgCM8e+1GJ6Vg8WdBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e1:53:5d:4b:45:6e:78:0c:12:43:44:ac:ff:ac:a5:76:65:07:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Nov 3 05:07:00 2025 GMT Not After : Nov 6 05:49:00 2025 GMT Subject: CN=F6883C2DCBFACBEB0B5E8887CD1E687AFF23EFB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fb:38:56:49:1f:ea:bd:c1:c8:c5:65:4a:a4: 3a:e2:25:2d:ab:4c:47:44:b4:c9:41:ad:7b:ab:54: 4c:c0:d3:1c:e2:5c:85:2d:86:4c:e4:a9:d5:a7:d3: cf:f6:d4:f2:dd:d9:57:a7:99:45:42:cb:ca:90:c7: 03:80:10:3f:24:6d:28:45:9d:5c:96:59:9e:c1:f2: 53:7b:05:fc:e1:0b:85:29:ef:2c:a5:7f:4c:bc:56: 4b:76:e5:a4:25:b1:cc:13:18:33:7d:cc:d8:ad:3d: d5:d4:38:75:03:bc:e7:15:25:57:c1:b1:82:68:ce: 5a:26:3e:ef:b0:9c:37:a6:2e:44:04:49:c5:a9:16: 79:cf:e9:28:41:ec:d9:96:fb:44:30:24:81:5a:d6: c1:1f:07:47:a3:52:8b:22:fe:fa:19:36:6c:97:7b: d0:ba:58:d1:ce:35:17:1d:77:14:ff:71:ee:db:87: 7d:32:3d:fc:b8:04:b3:22:6e:be:27:d6:f1:4e:17: 1a:9b:c4:6f:7e:13:8c:03:09:5f:51:73:76:e4:b6: 53:ad:da:4e:a1:45:5b:bb:39:4e:d4:26:9d:d5:06: e0:86:64:a5:1a:e8:ef:e3:92:24:d9:b5:d6:74:f2: 6e:7e:34:ea:41:7e:26:82:af:5f:39:46:d6:c1:d4: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:88:3C:2D:CB:FA:CB:EB:0B:5E:88:87:CD:1E:68:7A:FF:23:EF:B6 X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e3:b3:fc:4d:7d:21:c7:d7:05:b9:04:de:08:ab:b1:22:23: 17:eb:f3:da:80:69:47:5d:26:c9:f6:8e:d9:7f:1c:5e:b4:30: 67:3b:8a:91:e1:76:7e:0d:f2:9c:fa:bd:3a:14:fd:de:50:79: e1:67:8f:11:84:31:fd:07:61:42:5b:24:05:cd:87:5c:ba:89: 98:70:c0:f9:ae:e2:ff:b1:d3:70:d1:7c:18:98:41:b8:04:a4: 54:7e:17:e9:3f:85:f8:02:f8:27:6e:9d:3d:3e:00:90:c7:fb: 69:06:b5:c9:2d:ed:32:56:05:36:94:07:e3:ad:40:06:94:5d: 3a:2e:5a:55:55:f2:54:b6:65:4d:85:35:46:41:cd:d5:73:af: c1:2d:ab:16:30:9d:28:e9:e2:8d:80:a3:f3:52:df:35:28:8b: 73:1c:d1:b6:ac:ae:bc:3c:72:39:7a:fb:b6:26:f8:00:6e:e8: 93:49:45:49:93:92:bb:45:42:2d:8c:cc:8c:09:50:4f:14:da: 20:7d:84:5f:3c:c5:36:bd:23:37:6b:5e:a1:b5:51:a6:70:12: cf:d1:4b:c8:71:23:f1:11:12:45:4e:e9:64:32:de:e9:1c:cc: a7:75:17:47:c4:1f:7c:2d:40:00:02:0e:aa:bd:30:e9:c1:8a: e7:22:87:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeFTXUtFbngMEkNErP+spXZlB4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTExMDMwNTA3MDBaFw0yNTExMDYwNTQ5MDBaMDMxMTAvBgNV BAMTKEY2ODgzQzJEQ0JGQUNCRUIwQjVFODg4N0NEMUU2ODdBRkYyM0VGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+zhWSR/qvcHIxWVKpDriJS2r TEdEtMlBrXurVEzA0xziXIUthkzkqdWn08/21PLd2VenmUVCy8qQxwOAED8kbShF nVyWWZ7B8lN7BfzhC4Up7yylf0y8Vkt25aQlscwTGDN9zNitPdXUOHUDvOcVJVfB sYJozlomPu+wnDemLkQEScWpFnnP6ShB7NmW+0QwJIFa1sEfB0ejUosi/voZNmyX e9C6WNHONRcddxT/ce7bh30yPfy4BLMibr4n1vFOFxqbxG9+E4wDCV9Rc3bktlOt 2k6hRVu7OU7UJp3VBuCGZKUa6O/jkiTZtdZ08m5+NOpBfiaCr185RtbB1BjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9og8Lcv6y+sLXoiHzR5oev8j77YwHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/js/xNfSHH1wW5BN4Iq7EiIxfr89qAaUdd Jsn2jtl/HF60MGc7ipHhdn4N8pz6vToU/d5QeeFnjxGEMf0HYUJbJAXNh1y6iZhw wPmu4v+x03DRfBiYQbgEpFR+F+k/hfgC+CdunT0+AJDH+2kGtckt7TJWBTaUB+Ot QAaUXTouWlVV8lS2ZU2FNUZBzdVzr8EtqxYwnSjp4o2Ao/NS3zUoi3Mc0basrrw8 cjl6+7Ym+ABu6JNJRUmTkrtFQi2MzIwJUE8U2iB9hF88xTa9IzdrXqG1UaZwEs/R S8hxI/EREkVO6WQy3ukczKd1F0fEH3wtQAACDqq9MOnBiucih3Y= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:25 2025 by rpki-client