$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft File: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft (raw, json) Hash identifier: 4JUGappmeQqF6AJmcctoAPVXql43Yl5e+aAJL+zw2BQ= Subject key identifier: 4C:02:49:22:6C:B2:92:69:2E:53:BC:BD:62:92:59:BA:2F:C6:07:22 Authority key identifier: 18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB Certificate issuer: /CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Certificate serial: 40554ECD342C7CB7FD00F2FCA94DF6708B65CEF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:08:06 +0000 Manifest this update: Tue 12 May 2026 01:03:06 +0000 Manifest next update: Wed 13 May 2026 04:43:06 +0000 Files and hashes: 1: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: anz/jr4eoJ5eQzfHR7W5xMlJS845ed+hSr6JxtIfUAA=) 2: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl (hash: tjFSEG/YynNbQrIyqy50Ob33dJh7vS/D+qwPDkWn4BM=) 3: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: sxzvGSUyyV+/Qltw/wPpDgdpQWS1gtDsJ90OR/mPxn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:55:4e:cd:34:2c:7c:b7:fd:00:f2:fc:a9:4d:f6:70:8b:65:ce:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Validity Not Before: May 12 01:03:06 2026 GMT Not After : May 13 04:43:06 2026 GMT Subject: CN=4C0249226CB292692E53BCBD629259BA2FC60722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b2:20:86:1b:3a:cf:64:01:a2:ee:20:28:b9: ad:ff:a0:e7:f8:5e:b1:77:ad:bc:fe:f0:9a:0f:78: 21:62:5d:d8:57:c7:d0:ef:74:d3:8b:f7:de:2e:7a: cb:ad:53:b7:86:1e:13:c1:7b:06:ce:d1:7c:4b:71: e9:8d:dd:5b:f1:5b:de:48:c7:a6:44:46:57:42:dd: 7a:d5:0f:5c:bc:48:78:29:d2:53:c2:ef:c2:18:9c: 62:c3:6d:10:ff:30:f6:c3:89:6f:af:73:9c:b1:66: 68:45:c5:fd:b7:8a:34:ae:e4:34:fe:f3:a5:46:ae: 21:3d:fa:84:85:f4:7b:33:93:93:33:7f:d4:3b:51: d3:bf:9d:b2:38:55:bd:4f:db:3d:a7:61:8c:17:9f: d0:20:f8:b8:cf:63:d8:79:43:fb:d9:d0:40:b9:e1: b4:1e:7a:2d:25:b0:78:5f:9f:eb:fa:35:1a:29:99: 07:2e:fc:0f:33:62:39:93:23:59:ee:95:2e:01:a7: 69:87:34:2e:8a:a7:79:95:1e:e1:f8:33:b2:4c:f8: d7:87:3f:ba:81:b3:74:35:10:62:c7:3b:50:b0:5b: 5b:a1:83:89:91:37:97:75:4b:76:c9:0d:ed:72:54: a8:bd:3e:97:ff:f3:f6:af:2e:3b:5a:55:0f:c2:33: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:02:49:22:6C:B2:92:69:2E:53:BC:BD:62:92:59:BA:2F:C6:07:22 X509v3 Authority Key Identifier: keyid:18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:80:31:bb:a5:ef:a8:a2:5b:a2:21:db:66:c0:2f:8f:b4:f3: b7:7d:81:1f:97:bb:a1:12:c3:6a:67:87:1d:36:9c:d8:cb:64: 72:d4:2f:05:62:38:ca:33:27:71:92:51:71:cb:95:b6:da:af: 02:69:f5:d3:e7:66:b6:d1:e0:63:9e:5a:21:b6:94:97:4f:b8: 39:14:f9:6f:30:fc:67:97:71:12:32:d2:e1:bd:3b:7e:26:86: e0:47:8d:54:d1:7e:e6:bd:ea:26:87:d8:88:1a:5f:db:c1:01: 0f:a9:ac:0c:bd:70:bb:68:90:31:9a:a2:85:87:bf:fd:1c:cf: 2b:b0:6b:22:2f:bd:12:ae:22:ba:bc:73:f9:ed:11:37:a5:8e: 6e:2b:71:19:06:94:8c:5d:05:be:0a:75:5b:eb:3e:9a:d9:31: 79:31:3b:2b:62:e6:cf:c3:41:f8:10:fd:23:97:5e:56:1b:d9: 0d:a0:a5:c5:67:d5:76:21:13:7b:1e:df:52:92:88:3d:38:d8: 78:06:f8:ab:a7:81:31:17:07:1a:94:11:12:bd:2b:bb:94:8d: 9a:3e:8d:ca:ff:5f:1c:ae:f9:52:11:2d:8e:21:51:36:0a:69: fa:c8:d3:ca:59:e4:c6:dd:94:57:65:73:19:40:b1:bc:53:5f: c1:51:82:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFVOzTQsfLf9APL8qU32cItlzvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0 QTc1NTVBQjAeFw0yNjA1MTIwMTAzMDZaFw0yNjA1MTMwNDQzMDZaMDMxMTAvBgNV BAMTKDRDMDI0OTIyNkNCMjkyNjkyRTUzQkNCRDYyOTI1OUJBMkZDNjA3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvsiCGGzrPZAGi7iAoua3/oOf4 XrF3rbz+8JoPeCFiXdhXx9DvdNOL994uesutU7eGHhPBewbO0XxLcemN3VvxW95I x6ZERldC3XrVD1y8SHgp0lPC78IYnGLDbRD/MPbDiW+vc5yxZmhFxf23ijSu5DT+ 86VGriE9+oSF9Hszk5Mzf9Q7UdO/nbI4Vb1P2z2nYYwXn9Ag+LjPY9h5Q/vZ0EC5 4bQeei0lsHhfn+v6NRopmQcu/A8zYjmTI1nulS4Bp2mHNC6Kp3mVHuH4M7JM+NeH P7qBs3Q1EGLHO1CwW1uhg4mRN5d1S3bJDe1yVKi9Ppf/8/avLjtaVQ/CM/HXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTAJJImyykmkuU7y9YpJZui/GByIwHwYDVR0j BBgwFoAUGPvFblz8yaHehofiX7xt/Ep1VaswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ1OThlOTktZTlmZi00YWJlLWIwOGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1 Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0QTc1NTVBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEZCQzU2RTVDRkNDOUExREU4Njg3RTI1RkJDNkRGQzRBNzU1 NUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZE RkM0QTc1NTVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCAMbul76iiW6Ih22bAL4+087d9gR+Xu6ES w2pnhx02nNjLZHLULwViOMozJ3GSUXHLlbbarwJp9dPnZrbR4GOeWiG2lJdPuDkU +W8w/GeXcRIy0uG9O34mhuBHjVTRfua96iaH2IgaX9vBAQ+prAy9cLtokDGaooWH v/0czyuwayIvvRKuIrq8c/ntETeljm4rcRkGlIxdBb4KdVvrPprZMXkxOyti5s/D QfgQ/SOXXlYb2Q2gpcVn1XYhE3se31KSiD042HgG+KungTEXBxqUERK9K7uUjZo+ jcr/Xxyu+VIRLY4hUTYKafrI08pZ5MbdlFdlcxlAsbxTX8FRgi0= -----END CERTIFICATE-----Generated at Tue May 12 22:13:34 2026 by rpki-client