$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft File: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft (raw, json) Hash identifier: bupX5YKeN7K4MTAwTwKW7H9Cj4F9FXuGtzDutDJ2V6g= Subject key identifier: F6:AB:2B:1A:C5:03:DB:C9:C2:1C:BC:F2:72:B4:CB:B0:B7:15:35:74 Authority key identifier: D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 Certificate issuer: /CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Certificate serial: 70210B3242E4975D512C42419D6BAD6954B5AC34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 17:22:09 +0000 Manifest this update: Thu 24 Sep 2026 17:17:09 +0000 Manifest next update: Fri 25 Sep 2026 20:21:09 +0000 Files and hashes: 1: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl (hash: 0msi9E/4vEnuSgkrhaDsJrSQ9Z2YN/Ft/SIkL1C7ELk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:21:0b:32:42:e4:97:5d:51:2c:42:41:9d:6b:ad:69:54:b5:ac:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Validity Not Before: Sep 24 17:17:09 2026 GMT Not After : Sep 25 20:21:09 2026 GMT Subject: CN=F6AB2B1AC503DBC9C21CBCF272B4CBB0B7153574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:d3:36:78:dc:53:df:fc:22:82:db:6a:72: 38:38:32:44:1c:1d:8d:7b:7e:5e:83:1f:a0:09:9c: ad:a3:ff:e1:2c:ef:d7:a4:f4:43:ff:d7:33:2d:4c: 0f:19:76:d8:d6:59:cc:c5:b7:14:43:82:f2:6c:9b: 14:78:1a:39:9b:0e:1e:20:01:35:fe:fc:dd:af:40: db:c5:02:6e:ca:0c:98:12:49:a9:b1:8f:d7:c7:50: 0e:96:dc:94:d3:c2:4b:82:33:ff:29:bc:35:31:fe: 51:78:95:d9:81:db:72:69:7b:c9:6c:e1:90:4b:4f: 63:6f:86:69:69:24:8b:b4:a0:e8:04:8e:ab:7a:d3: fe:cc:f2:31:e0:5f:c3:88:47:84:75:7c:b0:48:33: 4c:2c:b7:9c:4b:32:be:58:35:d1:16:20:82:9e:b1: 25:b5:7b:a1:0a:6e:3f:ab:a0:c8:ea:64:84:80:96: 3d:03:20:64:d3:09:00:4f:97:ca:51:6a:5b:ed:8b: f3:74:8b:8a:41:7e:01:30:49:79:8d:29:68:e6:4a: 89:b4:14:3c:f4:5a:91:48:02:55:dc:02:ab:a1:ac: 46:b4:91:92:1e:31:b1:23:a8:49:6c:1b:ca:29:fd: be:45:cb:fa:57:70:a3:3b:92:d2:bf:06:8b:2b:02: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AB:2B:1A:C5:03:DB:C9:C2:1C:BC:F2:72:B4:CB:B0:B7:15:35:74 X509v3 Authority Key Identifier: keyid:D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b8:0b:49:3a:7e:d2:02:38:e4:01:8a:0c:f2:22:6b:ec:74: 05:f9:ff:ac:7f:56:0b:d8:da:2d:85:88:56:01:28:fb:d8:dd: 7b:1b:fb:ca:22:28:42:ac:1a:03:44:81:f4:e2:54:48:ac:d8: a5:1a:68:de:09:5e:dc:5c:e4:87:2d:5d:d2:b1:43:0e:32:40: 25:b3:99:01:42:93:90:1d:24:15:24:2a:9f:23:08:35:8f:92: 0f:39:44:66:ae:86:ae:a7:7f:eb:dd:b3:9c:cc:75:65:e9:45: 39:f5:f0:bb:1e:39:f6:2b:be:96:3d:02:41:eb:92:85:ed:41: 87:31:2c:7c:92:40:4f:9c:4e:f7:dd:b6:6c:a4:fa:6c:f4:c1: ff:41:c4:13:ae:87:50:4a:38:f4:c0:30:48:05:8f:f2:3a:53: dd:c4:93:6e:06:64:fd:b6:7b:d8:e6:a7:b6:49:e6:7c:34:0a: be:af:be:98:b9:f0:32:28:36:63:24:cd:64:d6:f2:0b:a6:ff: 82:ed:97:8b:0c:62:f9:2b:ce:23:24:76:03:bb:39:a9:19:a7: 8f:f3:f9:e1:fa:da:be:da:11:8d:aa:b3:8a:bc:9b:23:a2:9c: 12:e2:19:f5:79:54:05:e4:ba:19:86:4f:13:8c:eb:d3:20:bf: b9:38:59:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCELMkLkl11RLEJBnWutaVS1rDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1 Q0JGQ0NENTAeFw0yNjA5MjQxNzE3MDlaFw0yNjA5MjUyMDIxMDlaMDMxMTAvBgNV BAMTKEY2QUIyQjFBQzUwM0RCQzlDMjFDQkNGMjcyQjRDQkIwQjcxNTM1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+tM2eNxT3/wigttqcjg4MkQc HY17fl6DH6AJnK2j/+Es79ek9EP/1zMtTA8ZdtjWWczFtxRDgvJsmxR4GjmbDh4g ATX+/N2vQNvFAm7KDJgSSamxj9fHUA6W3JTTwkuCM/8pvDUx/lF4ldmB23Jpe8ls 4ZBLT2NvhmlpJIu0oOgEjqt60/7M8jHgX8OIR4R1fLBIM0wst5xLMr5YNdEWIIKe sSW1e6EKbj+roMjqZISAlj0DIGTTCQBPl8pRalvti/N0i4pBfgEwSXmNKWjmSom0 FDz0WpFIAlXcAquhrEa0kZIeMbEjqElsG8op/b5Fy/pXcKM7ktK/BosrApARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9qsrGsUD28nCHLzycrTLsLcVNXQwHwYDVR0j BBgwFoAU0Yr5104eboCXnAY5/RBPD1y/zNUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0 RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1Q0JGQ0NENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMThBRjlENzRFMUU2RTgwOTc5QzA2MzlGRDEwNEYwRjVDQkZD Q0Q1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRG MEY1Q0JGQ0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAu4C0k6ftICOOQBigzyImvsdAX5/6x/VgvY 2i2FiFYBKPvY3Xsb+8oiKEKsGgNEgfTiVEis2KUaaN4JXtxc5IctXdKxQw4yQCWz mQFCk5AdJBUkKp8jCDWPkg85RGauhq6nf+vds5zMdWXpRTn18LseOfYrvpY9AkHr koXtQYcxLHySQE+cTvfdtmyk+mz0wf9BxBOuh1BKOPTAMEgFj/I6U93Ek24GZP22 e9jmp7ZJ5nw0Cr6vvpi58DIoNmMkzWTW8gum/4Ltl4sMYvkrziMkdgO7OakZp4/z +eH62r7aEY2qs4q8myOinBLiGfV5VAXkuhmGTxOM69Mgv7k4WXI= -----END CERTIFICATE-----Generated at Fri Sep 25 04:48:33 2026 by rpki-client