$ rpki-client -vvvf rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft File: 18FC32F1670351EC283C40262E5055C462E12229.mft (raw, json) Hash identifier: drNzG5BfFUxlynbz5STUFbYUVBnWIbm5mTU2mPVlf2o= Subject key identifier: DF:9A:C8:C9:5D:62:81:36:A1:65:82:37:19:D5:6C:80:6D:3C:03:41 Authority key identifier: 18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29 Certificate issuer: /CN=18FC32F1670351EC283C40262E5055C462E12229 Certificate serial: 57A5D1C8CBAFB0C90DACDC018EDBB58124051480 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:56:49 +0000 Manifest this update: Thu 24 Sep 2026 08:51:49 +0000 Manifest next update: Fri 25 Sep 2026 11:27:49 +0000 Files and hashes: 1: 18FC32F1670351EC283C40262E5055C462E12229.crl (hash: MNGuGraJ7LawGJgKt6WuWlY6j2P0RLx3ijGV2DLLfZE=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: pkw1Y7i4f2xvVEY0Gh9GjhFjARpvJWCNngf9O/42y0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a5:d1:c8:cb:af:b0:c9:0d:ac:dc:01:8e:db:b5:81:24:05:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18FC32F1670351EC283C40262E5055C462E12229 Validity Not Before: Sep 24 08:51:49 2026 GMT Not After : Sep 25 11:27:49 2026 GMT Subject: CN=DF9AC8C95D628136A165823719D56C806D3C0341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:94:70:1a:26:28:db:7f:68:6a:9d:32:2c: 9e:1c:71:ea:3c:87:db:5d:03:b4:69:e1:2b:af:4d: c1:1e:d1:10:e9:b0:bb:0b:d8:c0:27:67:91:b0:24: 32:71:ea:94:72:fb:60:c5:53:c8:c0:88:fd:84:97: 55:2c:95:16:96:c2:dc:5d:8b:53:6e:7c:57:d9:29: 6c:2e:60:17:d5:e7:f2:87:20:5c:f5:13:76:5a:74: ec:1f:0f:95:13:9f:8d:21:96:54:f9:75:ae:39:5b: a1:fd:a8:97:77:a4:72:b4:96:41:71:f5:92:40:e0: 06:83:f7:f2:46:11:8b:33:87:97:db:5b:0f:3d:dc: 48:68:39:43:ed:03:a9:b1:03:43:34:3d:10:ab:76: d0:c2:2c:82:19:f6:bb:82:02:85:9e:f2:f7:66:1d: 93:5a:76:55:94:89:63:a3:b3:8b:55:65:08:16:45: 6e:7f:5a:8d:f7:25:96:e7:59:0a:fc:1c:a0:9d:92: ac:58:a9:f9:c7:cc:64:ab:32:dc:48:3d:90:17:a5: 02:2c:4a:c9:c0:0d:1c:bc:70:74:1a:db:99:3c:a9: 96:f4:94:87:16:04:5b:a3:4b:5b:0e:a7:9e:b3:56: ac:fd:71:5d:54:4e:91:cc:61:eb:3d:f5:7f:ea:3f: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9A:C8:C9:5D:62:81:36:A1:65:82:37:19:D5:6C:80:6D:3C:03:41 X509v3 Authority Key Identifier: keyid:18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f0:d2:aa:fc:ca:50:56:eb:ab:49:44:c6:00:d2:a5:0c:5c: 81:15:c1:a8:4e:7a:4c:cc:c8:92:7a:3f:d8:76:2e:fd:a4:40: 4f:d5:02:4d:f6:d8:f0:c0:0b:f2:3d:1b:1e:11:4b:c6:6f:88: e5:2c:99:0d:6d:6c:2b:81:73:cf:f0:52:b6:8f:cd:87:3c:eb: 41:15:9f:1f:25:55:46:2c:88:e2:f2:bc:b3:58:65:7c:85:96: 93:b9:5e:2e:84:a4:62:12:4b:96:7e:15:53:1f:95:7b:1d:e7: ab:db:e4:6f:46:45:d7:e3:36:59:35:22:d5:ec:35:b0:f5:9b: a7:ac:57:75:48:d9:78:62:a1:9b:8d:e2:30:61:05:47:95:10: cc:9f:eb:0a:39:e1:5c:c2:f8:ab:3c:55:71:e8:61:a3:ae:a2: 6d:fc:c5:e3:f0:06:05:75:7b:6d:cb:00:c4:82:8c:9e:b6:03: 72:ce:db:a1:a6:e6:4f:78:a0:e1:1b:54:29:eb:39:70:6b:39: db:6a:b0:d1:9f:7a:1f:ec:c0:a9:8d:e0:68:92:53:79:bc:f3: 6b:51:89:97:7e:e3:a9:e2:ee:b6:fb:9a:eb:bc:c0:1f:f2:2e: d9:eb:ee:24:f1:55:c3:eb:e8:aa:22:5b:67:95:e5:66:bc:5b: ee:11:93:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6XRyMuvsMkNrNwBjtu1gSQFFIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThGQzMyRjE2NzAzNTFFQzI4M0M0MDI2MkU1MDU1QzQ2 MkUxMjIyOTAeFw0yNjA5MjQwODUxNDlaFw0yNjA5MjUxMTI3NDlaMDMxMTAvBgNV BAMTKERGOUFDOEM5NUQ2MjgxMzZBMTY1ODIzNzE5RDU2QzgwNkQzQzAzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6JRwGiYo239oap0yLJ4cceo8 h9tdA7Rp4SuvTcEe0RDpsLsL2MAnZ5GwJDJx6pRy+2DFU8jAiP2El1UslRaWwtxd i1NufFfZKWwuYBfV5/KHIFz1E3ZadOwfD5UTn40hllT5da45W6H9qJd3pHK0lkFx 9ZJA4AaD9/JGEYszh5fbWw893EhoOUPtA6mxA0M0PRCrdtDCLIIZ9ruCAoWe8vdm HZNadlWUiWOjs4tVZQgWRW5/Wo33JZbnWQr8HKCdkqxYqfnHzGSrMtxIPZAXpQIs SsnADRy8cHQa25k8qZb0lIcWBFujS1sOp56zVqz9cV1UTpHMYes99X/qP2P5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU35rIyV1igTahZYI3GdVsgG08A0EwHwYDVR0j BBgwFoAUGPwy8WcDUewoPEAmLlBVxGLhIikwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQxZTRhYzktYzA2Yi00MzQzLTg1MjYtM2ExZjFiMWI1ZDgyLzAvMThGQzMyRjE2 NzAzNTFFQzI4M0M0MDI2MkU1MDU1QzQ2MkUxMjIyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEZDMzJGMTY3MDM1MUVDMjgzQzQwMjYyRTUwNTVDNDYyRTEy MjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvMThGQzMyRjE2NzAzNTFFQzI4M0M0MDI2MkU1MDU1 QzQ2MkUxMjIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXw0qr8ylBW66tJRMYA0qUMXIEVwahOekzM yJJ6P9h2Lv2kQE/VAk322PDAC/I9Gx4RS8ZviOUsmQ1tbCuBc8/wUraPzYc860EV nx8lVUYsiOLyvLNYZXyFlpO5Xi6EpGISS5Z+FVMflXsd56vb5G9GRdfjNlk1ItXs NbD1m6esV3VI2XhioZuN4jBhBUeVEMyf6wo54VzC+Ks8VXHoYaOuom38xePwBgV1 e23LAMSCjJ62A3LO26Gm5k94oOEbVCnrOXBrOdtqsNGfeh/swKmN4GiSU3m882tR iZd+46ni7rb7muu8wB/yLtnr7iTxVcPr6KoiW2eV5Wa8W+4Rk2E= -----END CERTIFICATE-----Generated at Thu Sep 24 15:20:00 2026 by rpki-client