$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft File: 218F42D6775F39C04AD2042E61C557053D4A69FE.mft (raw, json) Hash identifier: v+JHafT3Ze+J33gJhtc6on8NIopqQKjFGC5P1XDLTS4= Subject key identifier: A1:02:21:B0:F5:63:C1:31:4D:4A:7A:28:1D:9F:54:2E:AB:67:C2:22 Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE Certificate issuer: /CN=218F42D6775F39C04AD2042E61C557053D4A69FE Certificate serial: 7241A0C7ABD52CCEA2CA84A7004CF41EF3FE416B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 15:50:22 +0000 Manifest this update: Thu 24 Sep 2026 15:45:22 +0000 Manifest next update: Fri 25 Sep 2026 15:53:22 +0000 Files and hashes: 1: 3130332e3138312e37372e302f32342d3234203d3e20313439333738.roa (hash: CTpJAxD8b2QNT5h88jTGFlELSNgnWrFO4BmZ/0YXD9c=) 2: 218F42D6775F39C04AD2042E61C557053D4A69FE.crl (hash: ojdDoGwxZAKwpBE6ySjRDShbAQH+yPVIbsSgb+Gowos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:41:a0:c7:ab:d5:2c:ce:a2:ca:84:a7:00:4c:f4:1e:f3:fe:41:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE Validity Not Before: Sep 24 15:45:22 2026 GMT Not After : Sep 25 15:53:22 2026 GMT Subject: CN=A10221B0F563C1314D4A7A281D9F542EAB67C222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:27:c6:9c:65:49:5c:9b:65:f3:aa:af:ae: 09:55:cc:77:3c:c5:81:10:13:fb:ec:b3:fa:aa:87: b5:4f:6f:36:8f:d3:64:76:d5:20:ae:34:8e:80:d3: 90:36:95:6d:16:57:8b:87:4c:b2:96:b4:b7:a8:ab: 92:fa:be:4a:82:b5:62:b1:02:03:9a:76:ce:9c:8a: cf:4c:38:5d:d5:1d:dc:a3:88:3d:e6:c3:fc:7c:f2: e3:1d:69:1b:e3:46:8d:44:5f:68:19:cd:ea:d7:b4: c7:a3:30:6b:39:20:6e:7f:ca:58:b6:2f:1f:6c:ea: 24:a5:22:a8:b6:0e:d8:f9:48:c3:68:56:88:38:2c: d5:72:07:04:f4:c8:2c:78:82:74:e8:4c:61:aa:76: b7:52:af:7e:a5:fe:e3:0c:6c:3f:76:a9:fd:e2:ef: 5f:6a:41:31:b0:fd:f0:28:14:ba:05:26:06:bc:e8: 0c:47:eb:52:35:1a:fb:ad:e6:09:43:52:ca:2e:86: bd:82:0e:e2:28:eb:85:80:ff:69:69:14:3c:4e:d3: 87:a2:db:a7:12:85:25:2f:6e:87:85:99:2a:d0:26: ac:00:cb:ff:7e:60:a6:09:4e:c4:ec:78:c6:83:2b: d6:78:b4:06:f9:16:07:2e:65:3c:1d:bb:ae:9d:10: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:02:21:B0:F5:63:C1:31:4D:4A:7A:28:1D:9F:54:2E:AB:67:C2:22 X509v3 Authority Key Identifier: keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:41:03:26:03:e9:a4:41:06:53:e0:55:00:1d:62:ba:96:d2: 24:65:b4:2c:8a:72:43:a1:de:5c:c6:9d:21:33:79:49:9d:99: d4:27:c9:d5:97:ff:d0:4f:2a:60:4d:41:12:0c:58:ea:dd:80: 95:0c:0d:3b:92:35:ab:46:41:3a:26:39:bc:9a:9e:04:ee:26: 5e:ac:37:2d:97:a9:d0:37:af:74:66:db:37:2f:1e:5b:67:d0: 2a:1a:c8:45:72:fe:50:1f:8e:6a:d4:9d:97:46:52:b3:83:56: 72:28:f3:0b:9d:78:58:58:31:dd:f6:5b:7a:98:9b:01:d3:25: f1:04:21:9f:02:f0:51:84:f1:f5:c7:31:bf:fa:3d:30:32:ed: 3b:4d:6a:0a:35:83:e1:87:6f:d1:e3:78:08:84:fc:37:b7:29: 7f:0b:59:ce:2d:78:43:9e:8b:d9:55:34:4c:87:0f:df:dc:49: 6a:2c:b5:90:a6:38:a4:bb:a0:e7:06:57:d6:30:d9:5c:d2:30: 4f:0e:70:ca:69:e9:8b:f0:f1:e1:0c:02:a9:22:b4:ce:a7:9d: 8c:4e:35:37:cb:8d:ad:40:68:63:30:82:79:00:02:2a:19:e4: 01:5a:99:36:94:55:24:d8:bf:b8:38:8e:e2:67:86:0a:99:62: 7d:6f:69:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckGgx6vVLM6iyoSnAEz0HvP+QWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4RjQyRDY3NzVGMzlDMDRBRDIwNDJFNjFDNTU3MDUz RDRBNjlGRTAeFw0yNjA5MjQxNTQ1MjJaFw0yNjA5MjUxNTUzMjJaMDMxMTAvBgNV BAMTKEExMDIyMUIwRjU2M0MxMzE0RDRBN0EyODFEOUY1NDJFQUI2N0MyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWayfGnGVJXJtl86qvrglVzHc8 xYEQE/vss/qqh7VPbzaP02R21SCuNI6A05A2lW0WV4uHTLKWtLeoq5L6vkqCtWKx AgOads6cis9MOF3VHdyjiD3mw/x88uMdaRvjRo1EX2gZzerXtMejMGs5IG5/yli2 Lx9s6iSlIqi2Dtj5SMNoVog4LNVyBwT0yCx4gnToTGGqdrdSr36l/uMMbD92qf3i 719qQTGw/fAoFLoFJga86AxH61I1Gvut5glDUsouhr2CDuIo64WA/2lpFDxO04ei 26cShSUvboeFmSrQJqwAy/9+YKYJTsTseMaDK9Z4tAb5FgcuZTwdu66dEE0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQIhsPVjwTFNSnooHZ9ULqtnwiIwHwYDVR0j BBgwFoAUIY9C1ndfOcBK0gQuYcVXBT1Kaf4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZjYzQ3MzQtYmViNi00ZTMzLTliMWMtNDZkY2QxNjQyNWExLzAvMjE4RjQyRDY3 NzVGMzlDMDRBRDIwNDJFNjFDNTU3MDUzRDRBNjlGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMThGNDJENjc3NUYzOUMwNEFEMjA0MkU2MUM1NTcwNTNENEE2 OUZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMjE4RjQyRDY3NzVGMzlDMDRBRDIwNDJFNjFDNTU3 MDUzRDRBNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5BAyYD6aRBBlPgVQAdYrqW0iRltCyKckOh 3lzGnSEzeUmdmdQnydWX/9BPKmBNQRIMWOrdgJUMDTuSNatGQTomObyangTuJl6s Ny2XqdA3r3Rm2zcvHltn0CoayEVy/lAfjmrUnZdGUrODVnIo8wudeFhYMd32W3qY mwHTJfEEIZ8C8FGE8fXHMb/6PTAy7TtNago1g+GHb9HjeAiE/De3KX8LWc4teEOe i9lVNEyHD9/cSWostZCmOKS7oOcGV9Yw2VzSME8OcMpp6Yvw8eEMAqkitM6nnYxO NTfLja1AaGMwgnkAAioZ5AFamTaUVSTYv7g4juJnhgqZYn1vaeA= -----END CERTIFICATE-----Generated at Fri Sep 25 04:46:22 2026 by rpki-client