$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft File: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft (raw, json) Hash identifier: 1wH5MD7200j4GFV+8UiAUqctOK1M9N7lp5F51uoP9vQ= Subject key identifier: 09:C8:05:F0:2D:72:0F:D0:74:76:C9:04:11:DE:16:4A:86:2C:C0:92 Authority key identifier: D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 Certificate issuer: /CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Certificate serial: 12F74761F4E3DB69DD472C73C3789157230AB21B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:44:17 +0000 Manifest this update: Tue 12 May 2026 01:39:17 +0000 Manifest next update: Wed 13 May 2026 04:17:17 +0000 Files and hashes: 1: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl (hash: cG9oqlUVUX6eV5n7hkYyXZ6FBc/poPlDW5zsbLT8984=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f7:47:61:f4:e3:db:69:dd:47:2c:73:c3:78:91:57:23:0a:b2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Validity Not Before: May 12 01:39:17 2026 GMT Not After : May 13 04:17:17 2026 GMT Subject: CN=09C805F02D720FD07476C90411DE164A862CC092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fd:1d:26:f4:85:a0:36:0c:22:f1:71:59:7d: 0a:f4:b0:6d:68:ab:f8:e8:62:dc:b9:1e:cb:5d:15: 91:79:e6:0b:75:04:70:bf:9d:fc:7d:bb:39:5d:11: 33:f8:50:26:cf:e4:7c:8b:2b:e2:b3:39:05:e3:0a: 60:87:78:8c:85:c7:96:cd:96:00:00:69:36:f2:cd: 6b:ce:c4:b7:35:71:9f:9c:57:68:51:27:b2:69:c9: 9d:7c:a0:65:21:ab:4a:05:52:d4:8b:0e:76:02:b2: 44:86:6b:dd:50:53:01:90:a6:47:89:2b:0c:70:b6: 8a:28:2f:57:a7:7f:ec:c9:e4:5c:04:9a:49:c7:5c: 1c:74:33:7b:3d:99:fd:35:83:50:7f:32:ae:13:67: 79:da:5e:25:29:1d:1a:33:77:48:75:de:6a:bc:47: bc:96:ff:15:27:f7:88:c6:09:92:03:07:c0:d0:6a: bc:03:e7:de:1b:5a:ab:d9:ae:8f:58:a7:89:de:83: 6a:56:94:7e:84:1b:e4:c3:c2:77:ec:10:21:e5:f4: b6:53:dd:17:41:e0:88:96:d0:a8:97:b5:ef:76:94: 01:6e:64:8b:fa:05:bd:56:d9:36:63:e5:93:cb:eb: 9d:06:77:43:1b:58:db:e8:be:b6:93:df:f8:b4:cf: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C8:05:F0:2D:72:0F:D0:74:76:C9:04:11:DE:16:4A:86:2C:C0:92 X509v3 Authority Key Identifier: keyid:D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bb:60:08:dc:6a:51:71:e4:bd:29:6e:3b:d3:7a:1c:27:c2: aa:80:9f:60:7b:46:82:6f:cb:8e:a2:c6:af:36:ef:21:47:a6: aa:4e:d2:41:63:2b:ed:52:16:69:6f:02:ed:ee:92:13:24:96: 6a:bb:bc:92:18:70:c7:4a:15:3d:4e:d1:eb:03:37:c6:c7:1c: 91:64:69:c1:d4:b8:04:c3:99:2a:46:41:01:fa:1c:e0:d2:a7: 9b:43:44:3d:4f:cd:69:e1:d9:c6:33:de:46:67:d8:19:0d:c4: 7b:7f:8f:f9:a8:7f:6e:e5:46:09:0f:1c:ee:f0:0e:d5:b2:4c: d1:57:be:86:ce:f8:15:3e:7b:8f:97:08:83:51:2a:6b:4d:2a: b7:b9:93:33:56:89:02:24:41:1e:0e:c1:b4:34:e7:27:63:5c: aa:95:1b:e7:c8:5d:99:e8:9f:ab:25:82:84:05:7b:bd:e2:81: 6b:b7:d7:75:61:5a:6e:4c:24:7b:d2:47:a3:9a:5c:17:ed:e8: 89:19:d7:f0:3c:0f:04:cb:79:a5:b3:99:5a:0e:c9:82:b3:d4: 1f:ed:f4:64:c6:46:0f:92:c8:71:ee:b8:d7:dd:a8:cc:ea:a3: cb:c4:4a:cb:89:49:d5:f1:73:18:c5:81:35:de:9c:b0:e5:cc: 2b:2c:2d:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEvdHYfTj22ndRyxzw3iRVyMKshswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1 Q0JGQ0NENTAeFw0yNjA1MTIwMTM5MTdaFw0yNjA1MTMwNDE3MTdaMDMxMTAvBgNV BAMTKDA5QzgwNUYwMkQ3MjBGRDA3NDc2QzkwNDExREUxNjRBODYyQ0MwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR/R0m9IWgNgwi8XFZfQr0sG1o q/joYty5HstdFZF55gt1BHC/nfx9uzldETP4UCbP5HyLK+KzOQXjCmCHeIyFx5bN lgAAaTbyzWvOxLc1cZ+cV2hRJ7JpyZ18oGUhq0oFUtSLDnYCskSGa91QUwGQpkeJ KwxwtoooL1enf+zJ5FwEmknHXBx0M3s9mf01g1B/Mq4TZ3naXiUpHRozd0h13mq8 R7yW/xUn94jGCZIDB8DQarwD594bWqvZro9Yp4neg2pWlH6EG+TDwnfsECHl9LZT 3RdB4IiW0KiXte92lAFuZIv6Bb1W2TZj5ZPL650Gd0MbWNvovraT3/i0z7sbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCcgF8C1yD9B0dskEEd4WSoYswJIwHwYDVR0j BBgwFoAU0Yr5104eboCXnAY5/RBPD1y/zNUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0 RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1Q0JGQ0NENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMThBRjlENzRFMUU2RTgwOTc5QzA2MzlGRDEwNEYwRjVDQkZD Q0Q1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRG MEY1Q0JGQ0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu7YAjcalFx5L0pbjvTehwnwqqAn2B7RoJv y46ixq827yFHpqpO0kFjK+1SFmlvAu3ukhMklmq7vJIYcMdKFT1O0esDN8bHHJFk acHUuATDmSpGQQH6HODSp5tDRD1PzWnh2cYz3kZn2BkNxHt/j/mof27lRgkPHO7w DtWyTNFXvobO+BU+e4+XCINRKmtNKre5kzNWiQIkQR4OwbQ05ydjXKqVG+fIXZno n6slgoQFe73igWu313VhWm5MJHvSR6OaXBft6IkZ1/A8DwTLeaWzmVoOyYKz1B/t 9GTGRg+SyHHuuNfdqMzqo8vESsuJSdXxcxjFgTXenLDlzCssLag= -----END CERTIFICATE-----Generated at Tue May 12 22:19:36 2026 by rpki-client