$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft File: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json) Hash identifier: 9+544SM8pVW7TSoMZ0HEeGkE5jf+RISxEPPPXwRKnIc= Subject key identifier: C1:FC:0B:B9:0C:FE:B1:17:97:36:94:AB:F7:52:81:70:0B:33:73:6F Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 Certificate issuer: /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Certificate serial: 29AFEC8D2CE06DCAE9A4D43E3F798AD33864780A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:38:49 +0000 Manifest this update: Fri 24 Jul 2026 07:33:49 +0000 Manifest next update: Sat 25 Jul 2026 09:09:49 +0000 Files and hashes: 1: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=) 2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=) 3: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: ycpY1e5NZpnwPWaVmKwm9vyxAY8LZlFTPiXduBU+yf0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:af:ec:8d:2c:e0:6d:ca:e9:a4:d4:3e:3f:79:8a:d3:38:64:78:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Validity Not Before: Jul 24 07:33:49 2026 GMT Not After : Jul 25 09:09:49 2026 GMT Subject: CN=C1FC0BB90CFEB117973694ABF75281700B33736F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:b4:78:bb:74:94:7d:99:af:24:6c:2c:2b: 26:3b:29:cf:60:eb:da:d1:8f:34:90:06:53:01:86: c2:df:20:3a:b4:75:62:9b:01:01:15:6d:a8:14:ab: 02:ff:c3:f1:2a:49:94:c5:72:bc:3f:80:29:8f:6d: 7b:1f:cd:55:8a:18:1e:ee:9f:b5:5c:22:4b:70:55: da:d9:2d:e2:c1:e3:76:6a:e2:1e:86:27:ec:e7:0b: 0f:0a:22:ad:58:71:e8:f4:ab:a9:50:04:e5:cd:37: e6:f7:25:7c:4a:f0:7b:cd:5c:55:14:d9:0a:31:e0: 95:23:2a:ea:e4:b8:fe:2f:00:0a:09:b5:f8:0f:db: 33:87:c3:84:8b:47:5a:bc:ee:08:70:ed:39:92:44: 47:80:02:ab:bd:29:c0:ad:1d:c1:52:b3:13:0a:f3: 80:30:60:bc:ea:17:a8:c8:6c:8a:46:bd:27:aa:86: 6a:c1:27:a2:30:da:13:36:71:ae:8f:cf:dc:66:af: 74:61:e7:8c:a4:f4:43:a0:c1:7b:0d:e1:36:12:9b: fa:c4:11:3c:8d:f2:06:15:f6:70:42:32:ce:60:b6: 2b:a6:5f:12:9f:a7:10:56:da:d3:b5:53:b0:47:43: e3:3d:c9:f5:73:bd:95:ee:b6:a4:96:61:39:a3:77: 3b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FC:0B:B9:0C:FE:B1:17:97:36:94:AB:F7:52:81:70:0B:33:73:6F X509v3 Authority Key Identifier: keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a2:0c:4c:fb:1e:a4:5a:59:3b:1e:ee:8c:1a:62:d5:c3:73: 11:27:1d:dd:9b:0f:cf:35:e8:08:3e:13:d0:3e:a6:d2:cd:d8: f6:b8:6d:4b:d4:9b:8d:1e:75:b8:bd:a9:ff:2c:aa:8a:d7:3e: 65:8b:49:52:2e:3a:a2:2e:bd:55:88:a7:20:6f:a7:e9:22:43: da:39:61:1d:53:e4:8d:d2:1a:46:bf:59:d6:01:b1:fd:20:fc: 17:9d:c8:25:88:49:7b:38:26:9c:a5:31:3c:69:22:cf:89:c2: 4f:42:66:d4:8a:a8:a6:81:ea:a4:99:4e:03:03:fb:df:d1:7a: d9:6b:9a:9b:8b:d2:bc:0c:6c:41:d5:59:42:07:f9:4a:33:7f: 2e:dd:dc:69:05:88:f9:c4:41:63:36:82:69:86:ea:43:a2:6f: 59:26:39:a0:75:4b:26:07:c9:6a:a1:ed:6f:ae:cf:68:08:af: 1d:1f:8e:c1:01:a2:25:71:dc:62:0a:57:69:fb:95:5c:b0:d2: 8e:bf:85:67:b4:c7:6e:19:7a:4c:3f:9d:2c:5c:d0:5d:e5:eb: 9c:39:73:5e:12:19:af:70:a0:71:5d:82:25:d3:86:02:d6:77: 8c:7e:25:1c:ae:2d:fb:41:a5:3f:2c:0e:42:f0:99:25:e1:9e: a5:d9:58:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKa/sjSzgbcrppNQ+P3mK0zhkeAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5 MjJENkFCOTAeFw0yNjA3MjQwNzMzNDlaFw0yNjA3MjUwOTA5NDlaMDMxMTAvBgNV BAMTKEMxRkMwQkI5MENGRUIxMTc5NzM2OTRBQkY3NTI4MTcwMEIzMzczNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcAbR4u3SUfZmvJGwsKyY7Kc9g 69rRjzSQBlMBhsLfIDq0dWKbAQEVbagUqwL/w/EqSZTFcrw/gCmPbXsfzVWKGB7u n7VcIktwVdrZLeLB43Zq4h6GJ+znCw8KIq1Ycej0q6lQBOXNN+b3JXxK8HvNXFUU 2Qox4JUjKurkuP4vAAoJtfgP2zOHw4SLR1q87ghw7TmSREeAAqu9KcCtHcFSsxMK 84AwYLzqF6jIbIpGvSeqhmrBJ6Iw2hM2ca6Pz9xmr3Rh54yk9EOgwXsN4TYSm/rE ETyN8gYV9nBCMs5gtiumXxKfpxBW2tO1U7BHQ+M9yfVzvZXutqSWYTmjdzsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwfwLuQz+sReXNpSr91KBcAszc28wHwYDVR0j BBgwFoAUGMIAf+Vs7YOHm5VcuNqJ4JItarkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM3MDAzNTAtNjYzMi00OWUyLWI3ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZF NTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5MjJENkFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEMyMDA3RkU1NkNFRDgzODc5Qjk1NUNCOERBODlFMDkyMkQ2 QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5 RTA5MjJENkFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyiDEz7HqRaWTse7owaYtXDcxEnHd2bD881 6Ag+E9A+ptLN2Pa4bUvUm40edbi9qf8sqorXPmWLSVIuOqIuvVWIpyBvp+kiQ9o5 YR1T5I3SGka/WdYBsf0g/BedyCWISXs4JpylMTxpIs+Jwk9CZtSKqKaB6qSZTgMD +9/RetlrmpuL0rwMbEHVWUIH+Uozfy7d3GkFiPnEQWM2gmmG6kOib1kmOaB1SyYH yWqh7W+uz2gIrx0fjsEBoiVx3GIKV2n7lVyw0o6/hWe0x24Zekw/nSxc0F3l65w5 c14SGa9woHFdgiXThgLWd4x+JRyuLftBpT8sDkLwmSXhnqXZWKs= -----END CERTIFICATE-----Generated at Fri Jul 24 10:03:42 2026 by rpki-client