$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft File: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json) Hash identifier: K8CPBGv9oRBUrx1KS+fQ62RokFCV+X15jmcU0Qu6p6Q= Subject key identifier: B6:AF:D2:B7:A0:7D:97:DE:86:FD:86:35:90:FA:8D:28:B5:B7:F9:98 Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 Certificate issuer: /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Certificate serial: 10DC1D07FD4351E4D9B07C4DDDC2FA2BB48B18E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 06:13:08 +0000 Manifest this update: Fri 25 Sep 2026 06:08:08 +0000 Manifest next update: Sat 26 Sep 2026 06:30:08 +0000 Files and hashes: 1: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: xUE86CJaj2GMUA15IUWXoWr96+5E4MNZA6ZCLBgf8Ok=) 2: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=) 3: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:dc:1d:07:fd:43:51:e4:d9:b0:7c:4d:dd:c2:fa:2b:b4:8b:18:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Validity Not Before: Sep 25 06:08:08 2026 GMT Not After : Sep 26 06:30:08 2026 GMT Subject: CN=B6AFD2B7A07D97DE86FD863590FA8D28B5B7F998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:6a:33:ca:82:13:29:eb:22:4d:b2:eb:31: 78:be:92:bd:cf:98:34:16:12:97:e0:25:91:e2:cf: 86:0a:be:ea:da:c7:2a:f3:f9:bc:68:47:c5:e4:4f: 11:46:f0:33:a2:a8:0d:c3:43:72:86:5b:8d:66:78: d4:0f:8b:cf:56:b3:d7:2b:17:fd:97:1b:b9:6d:f3: b1:89:01:0b:64:91:7e:48:a8:4f:09:24:56:b6:ef: 9a:d2:e7:38:fe:56:b2:50:65:62:d3:6c:a5:78:15: e5:28:31:11:89:ec:55:81:2c:ad:62:1a:62:0d:58: 74:90:b9:99:0f:e7:02:21:fa:75:93:07:11:11:85: ff:de:08:90:65:33:cf:23:d9:6a:9f:b9:80:6f:c1: b2:77:6a:00:8f:70:7b:24:fe:4b:57:54:55:eb:e7: 13:5c:bb:bc:1f:e3:00:d5:93:24:a6:b6:74:d6:b6: 84:29:50:fe:0c:8b:2c:c4:00:d9:d1:43:ad:37:0d: ab:88:1b:1b:f6:36:b1:80:82:b2:1a:0e:28:c0:99: f9:85:c1:b2:02:93:14:f9:53:98:44:9a:0f:84:1d: 2f:b6:68:96:42:e4:63:91:01:89:08:fd:10:cb:e4: f7:bb:00:85:3e:f9:f4:1e:36:72:c8:35:77:cd:69: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AF:D2:B7:A0:7D:97:DE:86:FD:86:35:90:FA:8D:28:B5:B7:F9:98 X509v3 Authority Key Identifier: keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:17:6d:2c:32:da:c6:b8:e9:a0:c5:f4:b6:67:76:10:e0:27: 28:17:20:a3:7d:b2:f7:df:5a:15:83:4b:6c:91:38:2e:9b:47: 20:e2:be:dc:56:da:2b:67:af:28:5c:40:8e:cf:9e:3f:6c:93: 00:a5:03:1b:f8:bd:03:96:dd:f9:f6:92:04:7a:1f:f6:48:30: b2:f0:28:1d:53:69:63:73:3a:58:32:0d:e9:a3:70:55:70:07: 07:f7:c0:9f:43:c9:ef:fa:14:eb:e8:b1:da:1a:8b:2b:e3:0a: d8:87:f1:05:99:ed:a6:98:cf:ce:41:6b:0a:02:22:c6:77:37: 50:fe:b7:04:40:3a:27:cc:d1:b1:ec:b9:33:36:37:ea:48:f4: f4:29:70:46:b4:20:26:9d:11:36:40:1e:ce:c5:54:b8:e1:3b: 81:62:2a:f1:df:b6:28:78:ce:f6:68:5e:92:d7:d7:47:c1:7b: b6:00:e7:1e:1e:d3:63:b2:5e:40:47:62:41:7e:cf:18:fc:7e: a2:29:ac:5a:cb:d8:e8:6b:2f:7f:b9:c7:8d:3a:dd:ee:77:8d: 5d:d4:32:f7:ab:90:7b:b7:d4:34:44:4a:b4:cd:57:88:3c:e3: de:02:d4:8e:bd:1c:98:9a:6a:c7:c2:fd:14:bf:dd:1b:c5:b7: f0:b0:55:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENwdB/1DUeTZsHxN3cL6K7SLGOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5 MjJENkFCOTAeFw0yNjA5MjUwNjA4MDhaFw0yNjA5MjYwNjMwMDhaMDMxMTAvBgNV BAMTKEI2QUZEMkI3QTA3RDk3REU4NkZEODYzNTkwRkE4RDI4QjVCN0Y5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95mozyoITKesiTbLrMXi+kr3P mDQWEpfgJZHiz4YKvuraxyrz+bxoR8XkTxFG8DOiqA3DQ3KGW41meNQPi89Ws9cr F/2XG7lt87GJAQtkkX5IqE8JJFa275rS5zj+VrJQZWLTbKV4FeUoMRGJ7FWBLK1i GmINWHSQuZkP5wIh+nWTBxERhf/eCJBlM88j2WqfuYBvwbJ3agCPcHsk/ktXVFXr 5xNcu7wf4wDVkySmtnTWtoQpUP4MiyzEANnRQ603DauIGxv2NrGAgrIaDijAmfmF wbICkxT5U5hEmg+EHS+2aJZC5GORAYkI/RDL5Pe7AIU++fQeNnLINXfNabPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtq/St6B9l96G/YY1kPqNKLW3+ZgwHwYDVR0j BBgwFoAUGMIAf+Vs7YOHm5VcuNqJ4JItarkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM3MDAzNTAtNjYzMi00OWUyLWI3ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZF NTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5MjJENkFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEMyMDA3RkU1NkNFRDgzODc5Qjk1NUNCOERBODlFMDkyMkQ2 QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5 RTA5MjJENkFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0XbSwy2sa46aDF9LZndhDgJygXIKN9svff WhWDS2yROC6bRyDivtxW2itnryhcQI7Pnj9skwClAxv4vQOW3fn2kgR6H/ZIMLLw KB1TaWNzOlgyDemjcFVwBwf3wJ9Dye/6FOvosdoaiyvjCtiH8QWZ7aaYz85BawoC IsZ3N1D+twRAOifM0bHsuTM2N+pI9PQpcEa0ICadETZAHs7FVLjhO4FiKvHftih4 zvZoXpLX10fBe7YA5x4e02OyXkBHYkF+zxj8fqIprFrL2OhrL3+5x4063e53jV3U MverkHu31DRESrTNV4g8494C1I69HJiaasfC/RS/3RvFt/CwVTA= -----END CERTIFICATE-----Generated at Fri Sep 25 12:11:42 2026 by rpki-client