$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft File: 518CB795450041B0537FB0312901D771579DCEC4.mft (raw, json) Hash identifier: G6n/ti0LTirxvkJbSmLH0ws07W7Adx7gvt6AVJhjPtQ= Subject key identifier: A7:B8:49:4D:1B:DD:09:A0:46:FA:04:4D:6A:00:54:C7:D0:79:4B:C6 Authority key identifier: 51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4 Certificate issuer: /CN=518CB795450041B0537FB0312901D771579DCEC4 Certificate serial: 0C07A9742935B02D8CA58B1D81B6336FE38D42FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft Manifest number: DA Signing time: Mon 12 Oct 2026 19:00:23 +0000 Manifest this update: Mon 12 Oct 2026 18:55:23 +0000 Manifest next update: Tue 13 Oct 2026 20:44:23 +0000 Files and hashes: 1: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: GypeOWXaZk/hIkKcj8p9VzDp/KvisMSO2917iwkOduU=) 2: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: iCJ8MTvJq5y1PpIDZMP2NlWvXH8yCPvTkvBM8kuoTNA=) 3: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: X+iPKuq3a//oKJcRH7RCMyPd3wqSs+gr09rlg8og0vI=) 4: 518CB795450041B0537FB0312901D771579DCEC4.crl (hash: TXf9Lrv1uRUR3W4AFtKFAgdmJGQj13b8+4k5a1jPh6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:07:a9:74:29:35:b0:2d:8c:a5:8b:1d:81:b6:33:6f:e3:8d:42:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=518CB795450041B0537FB0312901D771579DCEC4 Validity Not Before: Oct 12 18:55:23 2026 GMT Not After : Oct 13 20:44:23 2026 GMT Subject: CN=A7B8494D1BDD09A046FA044D6A0054C7D0794BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:73:fb:c4:67:68:ca:96:ec:54:34:9f:c0: 0f:66:29:85:95:82:ba:8f:a3:46:6f:a2:b3:7c:5a: 11:66:97:d3:b9:05:eb:40:4d:ce:86:4e:b3:31:cb: e1:30:9f:2c:15:f2:4c:a3:9a:94:59:13:23:77:03: c0:c6:c3:1d:21:95:50:af:e9:dc:1f:e5:28:c5:dd: d7:01:60:36:13:7f:37:f4:93:bd:9b:61:d4:c9:bb: 0a:7f:88:ae:0b:d7:a4:56:c0:18:0d:bd:ef:17:97: 71:b5:63:92:d0:e0:73:92:0b:62:62:5c:b1:ae:56: f8:3b:33:5d:76:2e:84:aa:b8:b7:e9:ac:74:33:0c: b2:1f:66:2b:ae:60:33:71:f2:57:f3:8e:a8:2a:50: 91:a2:7f:09:5c:8e:05:76:64:4a:44:b6:ad:89:01: d7:60:ad:4c:ae:1d:c0:15:28:5d:b7:a7:7b:fc:89: 14:9c:54:57:53:d6:8c:ed:33:5e:e4:ab:19:a2:e0: 47:29:4f:d9:a5:36:a7:a8:50:ef:dc:4c:f2:ad:ee: 16:2d:61:f6:ed:b7:1e:64:37:59:d6:cd:ab:44:94: ba:e3:67:4a:32:24:f8:93:33:23:14:20:60:47:12: dd:6e:b6:1f:54:ce:cc:87:46:85:6a:70:69:36:23: 05:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B8:49:4D:1B:DD:09:A0:46:FA:04:4D:6A:00:54:C7:D0:79:4B:C6 X509v3 Authority Key Identifier: keyid:51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:04:d6:28:f5:66:5b:64:a6:a8:6d:8e:43:a2:a9:e2:e9:f3: 9c:94:d8:d5:52:86:da:1c:0e:ec:70:bf:2d:14:da:57:db:da: 30:3e:c4:12:ff:65:b9:d2:b6:1b:1f:21:10:e6:37:6d:e9:52: e4:e8:32:c9:e4:0c:44:fe:cc:1f:05:b3:5f:bb:4b:7e:ef:ad: ad:2b:94:ea:4d:7c:28:c2:c8:8c:84:73:76:17:e2:d9:52:51: ab:0f:2c:c4:df:f2:78:2d:f0:12:46:ea:e8:cf:8d:10:7d:f6: 5d:cc:64:88:23:d2:0e:9e:f4:51:4a:6a:57:87:11:d0:32:35: 6b:fd:3e:14:e4:a5:44:91:e8:87:8f:30:f6:69:f4:8c:9a:8a: 3e:02:0c:c0:db:66:42:ba:05:5a:18:ab:23:16:71:0f:0f:2c: cf:2a:4d:fe:aa:96:db:9d:68:ed:ca:56:dc:4d:b9:e0:1e:af: 03:51:19:4d:01:7c:df:18:3a:da:1c:c9:58:e0:70:89:54:54: a4:7a:a5:c2:1c:8d:8f:1a:3d:f3:16:6a:6a:2e:26:96:f4:93: bc:47:f5:4e:71:18:a5:76:19:55:7c:d9:49:21:5c:98:db:bf: b8:76:fb:f2:93:5a:8f:c9:84:e4:76:70:cf:83:30:4e:b1:d9: ce:23:ad:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAepdCk1sC2MpYsdgbYzb+ONQv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE4Q0I3OTU0NTAwNDFCMDUzN0ZCMDMxMjkwMUQ3NzE1 NzlEQ0VDNDAeFw0yNjEwMTIxODU1MjNaFw0yNjEwMTMyMDQ0MjNaMDMxMTAvBgNV BAMTKEE3Qjg0OTREMUJERDA5QTA0NkZBMDQ0RDZBMDA1NEM3RDA3OTRCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JnP7xGdoypbsVDSfwA9mKYWV grqPo0ZvorN8WhFml9O5BetATc6GTrMxy+EwnywV8kyjmpRZEyN3A8DGwx0hlVCv 6dwf5SjF3dcBYDYTfzf0k72bYdTJuwp/iK4L16RWwBgNve8Xl3G1Y5LQ4HOSC2Ji XLGuVvg7M112LoSquLfprHQzDLIfZiuuYDNx8lfzjqgqUJGifwlcjgV2ZEpEtq2J AddgrUyuHcAVKF23p3v8iRScVFdT1oztM17kqxmi4EcpT9mlNqeoUO/cTPKt7hYt Yfbttx5kN1nWzatElLrjZ0oyJPiTMyMUIGBHEt1uth9UzsyHRoVqcGk2IwWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp7hJTRvdCaBG+gRNagBUx9B5S8YwHwYDVR0j BBgwFoAUUYy3lUUAQbBTf7AxKQHXcVedzsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcwMzY5NzQtODEzMS00NWFmLTk0Y2UtZjQ5YjQ4MTFjMTczLzAvNTE4Q0I3OTU0 NTAwNDFCMDUzN0ZCMDMxMjkwMUQ3NzE1NzlEQ0VDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MThDQjc5NTQ1MDA0MUIwNTM3RkIwMzEyOTAxRDc3MTU3OURD RUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvNTE4Q0I3OTU0NTAwNDFCMDUzN0ZCMDMxMjkwMUQ3 NzE1NzlEQ0VDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0E1ij1ZltkpqhtjkOiqeLp85yU2NVShtoc Duxwvy0U2lfb2jA+xBL/ZbnSthsfIRDmN23pUuToMsnkDET+zB8Fs1+7S37vra0r lOpNfCjCyIyEc3YX4tlSUasPLMTf8ngt8BJG6ujPjRB99l3MZIgj0g6e9FFKaleH EdAyNWv9PhTkpUSR6IePMPZp9Iyaij4CDMDbZkK6BVoYqyMWcQ8PLM8qTf6qltud aO3KVtxNueAerwNRGU0BfN8YOtocyVjgcIlUVKR6pcIcjY8aPfMWamouJpb0k7xH 9U5xGKV2GVV82UkhXJjbv7h2+/KTWo/JhOR2cM+DME6x2c4jrfs= -----END CERTIFICATE-----Generated at Tue Oct 13 13:35:48 2026 by rpki-client