$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft File: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json) Hash identifier: tLU5DEJ0sKE7AUQUoarjbgGZ/R/QqWc2N+UiWlPca3A= Subject key identifier: 54:51:B4:7B:48:07:D2:87:CA:01:42:75:23:9B:2C:99:7A:25:6A:E6 Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 Certificate issuer: /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Certificate serial: 2C8FDF48591660673EC6C9AFCE9C9A06370BBE9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:39:06 +0000 Manifest this update: Tue 12 May 2026 18:34:06 +0000 Manifest next update: Wed 13 May 2026 22:00:06 +0000 Files and hashes: 1: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: 2iGnULXllDVwnwN/8DZoe5Cs5otICSdkh8X52xNWDdo=) 2: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=) 3: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8f:df:48:59:16:60:67:3e:c6:c9:af:ce:9c:9a:06:37:0b:be:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Validity Not Before: May 12 18:34:06 2026 GMT Not After : May 13 22:00:06 2026 GMT Subject: CN=5451B47B4807D287CA014275239B2C997A256AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:9e:9d:a4:57:a9:3d:d5:09:1b:d4:fe:6d: 5d:01:3d:a5:30:37:e9:5e:56:e4:d3:c2:ea:70:d7: 6c:2f:eb:5a:ad:0b:6f:db:c9:94:3b:b3:89:68:26: 10:5c:91:05:89:37:1d:28:93:cd:5f:79:41:53:a1: a7:5b:e8:c8:44:7f:96:81:fe:96:64:47:ed:bb:a9: 6e:36:65:39:6e:59:a5:e1:3c:d3:37:80:41:74:08: b3:5f:84:bb:93:02:61:e9:64:c9:89:68:4f:b0:84: bc:ba:cc:ce:c8:6a:c8:8c:70:4c:cd:4c:4a:4c:4f: c1:2d:53:50:00:5d:68:84:6a:d9:1e:6e:5a:0c:c9: da:d0:49:d0:70:56:e8:ea:e0:2d:2d:a2:14:0e:e0: 17:ec:d3:2b:0c:a1:b5:f6:ec:6b:42:80:8c:c3:05: ec:6d:0e:37:af:ea:d8:55:9b:24:d2:89:35:29:be: b5:3b:55:a8:7a:20:04:16:b6:34:11:65:af:e5:45: f5:fa:0e:70:d6:70:d0:84:58:e0:94:40:f6:70:92: 3c:24:09:fb:24:46:ef:52:fe:7f:a6:30:6e:33:12: e5:69:ba:88:70:97:e5:76:f6:35:0e:53:85:a5:6d: c0:8b:ee:0e:f2:5f:e6:3e:bd:43:c4:53:ad:83:27: 7c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:B4:7B:48:07:D2:87:CA:01:42:75:23:9B:2C:99:7A:25:6A:E6 X509v3 Authority Key Identifier: keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:75:83:36:3f:f3:38:a2:83:ef:62:96:f4:0a:92:b3:05:26: 82:14:57:19:80:75:82:d4:d0:52:1e:2a:08:6c:40:8c:98:a2: 7d:61:04:4a:69:f7:69:0a:d3:0f:31:84:7d:29:05:73:46:b1: 7f:2a:8b:d9:1f:1a:68:1f:1f:db:07:0b:41:c5:a1:3b:17:9f: 9a:bf:01:9b:a0:6c:ba:dd:c9:e3:42:2c:40:b0:94:7c:e5:53: c0:bd:5b:2a:ad:5f:2e:af:27:bf:56:9a:23:95:70:9c:e8:d4: e7:bd:ca:90:f1:9c:59:05:68:eb:5f:b6:32:a3:c9:73:70:31: f7:22:f5:ce:20:3c:ff:2e:d9:d2:23:5a:f7:41:f4:f6:29:fc: b9:58:35:9f:64:1a:1f:73:91:f3:bc:be:0b:92:2a:e7:c8:09: 52:fa:1d:22:97:19:62:86:c3:0c:24:51:06:e2:f7:10:c4:75: 1d:26:66:cb:ea:a2:5e:c3:3f:98:b8:5b:87:e3:a6:ad:95:18: 14:7f:5d:1e:ab:cf:27:6a:a3:92:2c:12:58:a1:72:cc:11:78: cd:ab:c0:79:da:79:c0:87:a4:75:0c:2c:4e:90:f4:53:11:99: 29:08:f5:ad:43:62:2f:07:da:1d:df:8e:1e:42:aa:97:54:cf: 5f:7b:98:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULI/fSFkWYGc+xsmvzpyaBjcLvp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5 MjJENkFCOTAeFw0yNjA1MTIxODM0MDZaFw0yNjA1MTMyMjAwMDZaMDMxMTAvBgNV BAMTKDU0NTFCNDdCNDgwN0QyODdDQTAxNDI3NTIzOUIyQzk5N0EyNTZBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8a56dpFepPdUJG9T+bV0BPaUw N+leVuTTwupw12wv61qtC2/byZQ7s4loJhBckQWJNx0ok81feUFToadb6MhEf5aB /pZkR+27qW42ZTluWaXhPNM3gEF0CLNfhLuTAmHpZMmJaE+whLy6zM7IasiMcEzN TEpMT8EtU1AAXWiEatkebloMydrQSdBwVujq4C0tohQO4Bfs0ysMobX27GtCgIzD BextDjev6thVmyTSiTUpvrU7Vah6IAQWtjQRZa/lRfX6DnDWcNCEWOCUQPZwkjwk CfskRu9S/n+mMG4zEuVpuohwl+V29jUOU4WlbcCL7g7yX+Y+vUPEU62DJ3ydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVFG0e0gH0ofKAUJ1I5ssmXolauYwHwYDVR0j BBgwFoAUGMIAf+Vs7YOHm5VcuNqJ4JItarkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM3MDAzNTAtNjYzMi00OWUyLWI3ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZF NTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5MjJENkFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEMyMDA3RkU1NkNFRDgzODc5Qjk1NUNCOERBODlFMDkyMkQ2 QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5 RTA5MjJENkFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD51gzY/8ziig+9ilvQKkrMFJoIUVxmAdYLU 0FIeKghsQIyYon1hBEpp92kK0w8xhH0pBXNGsX8qi9kfGmgfH9sHC0HFoTsXn5q/ AZugbLrdyeNCLECwlHzlU8C9WyqtXy6vJ79WmiOVcJzo1Oe9ypDxnFkFaOtftjKj yXNwMfci9c4gPP8u2dIjWvdB9PYp/LlYNZ9kGh9zkfO8vguSKufICVL6HSKXGWKG wwwkUQbi9xDEdR0mZsvqol7DP5i4W4fjpq2VGBR/XR6rzydqo5IsElihcswReM2r wHnaecCHpHUMLE6Q9FMRmSkI9a1DYi8H2h3fjh5CqpdUz197mDM= -----END CERTIFICATE-----Generated at Wed May 13 02:26:37 2026 by rpki-client