$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft File: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft (raw, json) Hash identifier: 8u3KvLF98HwUWXXXyrZHAyuOEvzLWmgmQ2nFU9RiakA= Subject key identifier: 61:D1:EB:52:13:76:C3:62:98:D4:C0:55:B3:FD:9E:FB:18:1D:22:86 Authority key identifier: D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 Certificate issuer: /CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Certificate serial: 793F4FA926D066120E6D933BF3DB23C401E003EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:16:08 +0000 Manifest this update: Thu 23 Jul 2026 17:11:08 +0000 Manifest next update: Fri 24 Jul 2026 19:30:08 +0000 Files and hashes: 1: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl (hash: cfKmkDecW4kVkLqVgBqbTc7RBGGaurTFEpQxHQ23g9w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:3f:4f:a9:26:d0:66:12:0e:6d:93:3b:f3:db:23:c4:01:e0:03:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Validity Not Before: Jul 23 17:11:08 2026 GMT Not After : Jul 24 19:30:08 2026 GMT Subject: CN=61D1EB521376C36298D4C055B3FD9EFB181D2286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:40:b3:9b:da:e1:49:b9:f8:77:44:13:cc: 58:55:97:0b:ed:11:9c:09:45:b3:e4:90:8b:43:6a: 1a:4c:aa:77:ea:b3:35:57:70:37:25:8c:06:a6:28: bb:44:46:7f:a2:5e:a9:35:6f:d7:6d:60:59:65:74: 3f:d2:6f:81:e0:5a:58:83:ac:82:4c:bf:85:69:12: 9c:37:a7:23:c8:00:f8:e4:83:4d:8e:19:a6:85:d9: 30:67:76:44:2f:35:3a:58:8f:e2:ae:62:d5:46:56: 13:32:80:a5:17:fa:b6:b4:75:0a:e7:62:f8:80:8e: e3:2d:6c:4b:43:08:41:fa:0f:58:a7:34:3c:c5:52: bf:34:a0:fd:78:08:f1:27:ee:c4:fe:4f:ab:93:ce: 45:a1:86:90:c3:44:c7:d3:37:b6:2e:db:11:ff:80: 57:93:54:2a:12:42:db:8f:4c:37:66:f0:03:5b:42: a7:4b:d5:9d:5f:63:5a:9e:92:36:73:27:14:37:42: f3:c8:76:89:9e:19:cc:7f:31:cf:d2:ae:ef:00:94: c4:9e:73:2f:3d:85:1b:28:1e:06:7a:b5:56:8c:cd: be:b8:a5:d0:c2:1c:bd:e3:96:50:48:40:f0:a7:ac: 97:66:eb:f3:9c:2d:60:2a:ce:28:e4:62:ab:f7:7c: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D1:EB:52:13:76:C3:62:98:D4:C0:55:B3:FD:9E:FB:18:1D:22:86 X509v3 Authority Key Identifier: keyid:D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:8e:b8:e1:5a:ed:d8:df:33:49:27:68:04:c1:43:e7:7e:91: 71:c1:f9:d2:24:fa:9f:6d:43:13:10:44:4c:7c:70:13:1e:34: bb:2b:d6:5a:60:f3:ca:4f:77:b6:a6:91:44:9e:fd:c5:42:6d: 47:53:e2:68:4d:81:d2:d6:1c:68:28:ab:f7:22:f5:94:fd:b8: f9:68:b4:fe:9e:db:46:15:dd:88:5c:77:4a:67:f3:50:6a:4a: 5f:13:d0:5e:32:d2:45:4a:c7:dd:dd:99:7e:05:ae:bd:bf:3e: 90:e3:5f:1f:08:0a:e5:c7:91:60:69:94:67:6e:b5:3b:ec:8b: 71:9d:fb:7c:e5:6b:ef:ed:33:ef:36:37:20:6a:63:3c:22:ca: df:4a:cc:d7:ac:fe:55:20:e3:9e:c4:17:13:1c:b6:79:11:02: e8:2a:34:19:b5:d6:98:a5:e1:b5:6b:bb:8f:3c:23:4e:0c:74: 0f:4d:1c:ac:b0:21:b8:14:63:25:6c:fe:8e:4c:b2:1d:8a:64: c0:e5:c5:f3:bb:b5:b8:1c:19:61:ae:5c:7b:c7:cd:43:ac:18: fa:68:f2:b6:68:ba:27:7e:0a:e3:ad:36:24:e6:ef:13:22:88: 9f:be:ae:ce:2c:83:ee:a2:ff:05:12:bc:bc:92:6f:9f:f5:19: 29:a8:81:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeT9PqSbQZhIObZM789sjxAHgA+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1 Q0JGQ0NENTAeFw0yNjA3MjMxNzExMDhaFw0yNjA3MjQxOTMwMDhaMDMxMTAvBgNV BAMTKDYxRDFFQjUyMTM3NkMzNjI5OEQ0QzA1NUIzRkQ5RUZCMTgxRDIyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHUCzm9rhSbn4d0QTzFhVlwvt EZwJRbPkkItDahpMqnfqszVXcDcljAamKLtERn+iXqk1b9dtYFlldD/Sb4HgWliD rIJMv4VpEpw3pyPIAPjkg02OGaaF2TBndkQvNTpYj+KuYtVGVhMygKUX+ra0dQrn YviAjuMtbEtDCEH6D1inNDzFUr80oP14CPEn7sT+T6uTzkWhhpDDRMfTN7Yu2xH/ gFeTVCoSQtuPTDdm8ANbQqdL1Z1fY1qekjZzJxQ3QvPIdomeGcx/Mc/Sru8AlMSe cy89hRsoHgZ6tVaMzb64pdDCHL3jllBIQPCnrJdm6/OcLWAqzijkYqv3fChHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYdHrUhN2w2KY1MBVs/2e+xgdIoYwHwYDVR0j BBgwFoAU0Yr5104eboCXnAY5/RBPD1y/zNUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0 RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1Q0JGQ0NENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMThBRjlENzRFMUU2RTgwOTc5QzA2MzlGRDEwNEYwRjVDQkZD Q0Q1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRG MEY1Q0JGQ0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiOuOFa7djfM0knaATBQ+d+kXHB+dIk+p9t QxMQREx8cBMeNLsr1lpg88pPd7amkUSe/cVCbUdT4mhNgdLWHGgoq/ci9ZT9uPlo tP6e20YV3Yhcd0pn81BqSl8T0F4y0kVKx93dmX4Frr2/PpDjXx8ICuXHkWBplGdu tTvsi3Gd+3zla+/tM+82NyBqYzwiyt9KzNes/lUg457EFxMctnkRAugqNBm11pil 4bVru488I04MdA9NHKywIbgUYyVs/o5Msh2KZMDlxfO7tbgcGWGuXHvHzUOsGPpo 8rZouid+CuOtNiTm7xMiiJ++rs4sg+6i/wUSvLySb5/1GSmogWc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:17 2026 by rpki-client