
$ rpki-client -vvf rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
File: 18FC32F1670351EC283C40262E5055C462E12229.mft (raw, json)
Hash identifier: 2M9B9fAJbrPOn7R7dAz1MnC35kZFdyu1xxkTodTdKpY=
Subject key identifier: F0:68:F3:AC:A2:FE:63:AF:4D:EF:E7:70:C0:0B:60:1C:49:57:D3:9C
Authority key identifier: 18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29
Certificate issuer: /CN=18FC32F1670351EC283C40262E5055C462E12229
Certificate serial: 404ED10D9028F947F5CFE85D962F22BBC2C57B9A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
Manifest number: 92
Signing time: Wed 19 Aug 2026 08:34:14 +0000
Manifest this update: Wed 19 Aug 2026 08:29:14 +0000
Manifest next update: Thu 20 Aug 2026 11:02:14 +0000
Files and hashes: 1: 18FC32F1670351EC283C40262E5055C462E12229.crl (hash: b9KIeseKgIHPUvhO0+B5mzU0H3xVnteXpOdE2TlDSz8=)
2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: pkw1Y7i4f2xvVEY0Gh9GjhFjARpvJWCNngf9O/42y0o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl
rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 11:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4e:d1:0d:90:28:f9:47:f5:cf:e8:5d:96:2f:22:bb:c2:c5:7b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18FC32F1670351EC283C40262E5055C462E12229
Validity
Not Before: Aug 19 08:29:14 2026 GMT
Not After : Aug 20 11:02:14 2026 GMT
Subject: CN=F068F3ACA2FE63AF4DEFE770C00B601C4957D39C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:15:77:6f:12:e2:f0:b2:3e:d9:d9:96:c7:
36:8e:53:39:ce:e2:d4:5c:54:24:ba:b5:37:f4:c5:
de:b6:12:7f:3d:9b:07:1f:d7:d0:f1:fd:42:d0:91:
3f:24:9a:05:0c:9c:2a:22:f5:9e:cd:10:52:93:63:
6c:90:ae:98:76:0d:8c:0b:ff:2b:1a:83:6d:09:f7:
fa:5d:0f:cf:e9:b4:5a:10:94:f5:6a:89:98:a6:0d:
8e:9a:ae:d2:f0:2b:64:d0:9b:ed:bf:5d:97:72:5b:
1d:b8:61:d5:51:a2:93:e0:d7:ff:54:20:e2:f6:19:
1a:b9:04:c3:38:55:e1:48:9d:f5:53:57:1a:b4:85:
97:94:e9:e7:ce:f6:e6:be:5f:6a:d4:e6:21:e1:70:
14:25:2d:d2:20:07:26:a5:b8:b6:8b:3d:d4:ad:07:
8e:2c:dc:76:d0:e0:8d:1c:41:57:a7:ac:ce:13:de:
ad:21:91:24:24:76:68:cd:33:f2:a4:b6:88:4e:81:
22:f7:b9:b5:aa:7c:42:bd:cd:0c:7d:63:82:c1:43:
46:f7:a4:e2:bb:62:ec:87:dc:15:f0:57:02:b2:42:
45:f6:43:d0:c7:65:5e:98:5b:e1:2a:23:2c:ab:c4:
e7:db:76:c2:10:29:39:30:0a:ba:c8:8b:b8:0d:64:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:68:F3:AC:A2:FE:63:AF:4D:EF:E7:70:C0:0B:60:1C:49:57:D3:9C
X509v3 Authority Key Identifier:
keyid:18:FC:32:F1:67:03:51:EC:28:3C:40:26:2E:50:55:C4:62:E1:22:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FC32F1670351EC283C40262E5055C462E12229.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/18FC32F1670351EC283C40262E5055C462E12229.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:92:b0:e9:5d:82:9a:86:2f:99:05:f7:a5:44:9a:1c:4c:f2:
a5:68:d4:f2:8e:c2:68:73:0b:6a:c5:16:4e:83:06:f7:bd:99:
4c:bc:5b:31:32:f1:83:20:df:ae:8d:14:d5:a3:dd:d7:d4:ef:
69:5e:45:21:a0:bd:23:02:36:e0:2f:56:99:cf:c0:e0:86:3d:
32:51:b6:cb:31:c9:13:19:6b:90:4b:1e:8e:2c:45:f0:4e:21:
ae:04:77:22:89:ce:5b:c0:74:72:c9:c2:96:42:ee:59:dd:43:
60:59:bf:8f:d7:92:a9:f6:26:f4:4e:42:6b:10:dd:a0:97:6d:
10:23:fe:95:71:c1:8f:52:ad:09:f9:31:9a:de:0e:fd:22:21:
83:48:fb:34:a0:07:12:76:17:1a:1c:df:49:04:36:d3:4b:3f:
22:23:78:dc:66:a2:0f:97:89:e1:25:49:37:76:14:a4:ec:4d:
2e:f3:38:6d:26:ac:c5:4b:f3:3a:a3:9a:73:e9:73:71:ed:87:
7e:b4:17:b6:dc:ca:d1:49:57:65:3b:20:84:d3:69:74:e9:89:
2f:58:2a:1f:7d:78:de:d2:10:40:70:90:d6:77:2a:b8:5b:ea:
35:75:69:f2:2a:67:15:ba:8b:af:b7:58:9a:5a:d2:d6:c8:b9:
c4:61:3c:6b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQE7RDZAo+Uf1z+hdli8iu8LFe5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThGQzMyRjE2NzAzNTFFQzI4M0M0MDI2MkU1MDU1QzQ2
MkUxMjIyOTAeFw0yNjA4MTkwODI5MTRaFw0yNjA4MjAxMTAyMTRaMDMxMTAvBgNV
BAMTKEYwNjhGM0FDQTJGRTYzQUY0REVGRTc3MEMwMEI2MDFDNDk1N0QzOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyhV3bxLi8LI+2dmWxzaOUznO
4tRcVCS6tTf0xd62En89mwcf19Dx/ULQkT8kmgUMnCoi9Z7NEFKTY2yQrph2DYwL
/ysag20J9/pdD8/ptFoQlPVqiZimDY6artLwK2TQm+2/XZdyWx24YdVRopPg1/9U
IOL2GRq5BMM4VeFInfVTVxq0hZeU6efO9ua+X2rU5iHhcBQlLdIgByaluLaLPdSt
B44s3HbQ4I0cQVenrM4T3q0hkSQkdmjNM/KktohOgSL3ubWqfEK9zQx9Y4LBQ0b3
pOK7YuyH3BXwVwKyQkX2Q9DHZV6YW+EqIyyrxOfbdsIQKTkwCrrIi7gNZP5PAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8GjzrKL+Y69N7+dwwAtgHElX05wwHwYDVR0j
BBgwFoAUGPwy8WcDUewoPEAmLlBVxGLhIikwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDQxZTRhYzktYzA2Yi00MzQzLTg1MjYtM2ExZjFiMWI1ZDgyLzAvMThGQzMyRjE2
NzAzNTFFQzI4M0M0MDI2MkU1MDU1QzQ2MkUxMjIyOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xOEZDMzJGMTY3MDM1MUVDMjgzQzQwMjYyRTUwNTVDNDYyRTEy
MjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1
MjYtM2ExZjFiMWI1ZDgyLzAvMThGQzMyRjE2NzAzNTFFQzI4M0M0MDI2MkU1MDU1
QzQ2MkUxMjIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE+SsOldgpqGL5kF96VEmhxM8qVo1PKOwmhz
C2rFFk6DBve9mUy8WzEy8YMg366NFNWj3dfU72leRSGgvSMCNuAvVpnPwOCGPTJR
tssxyRMZa5BLHo4sRfBOIa4EdyKJzlvAdHLJwpZC7lndQ2BZv4/Xkqn2JvROQmsQ
3aCXbRAj/pVxwY9SrQn5MZreDv0iIYNI+zSgBxJ2Fxoc30kENtNLPyIjeNxmog+X
ieElSTd2FKTsTS7zOG0mrMVL8zqjmnPpc3Hth360F7bcytFJV2U7IITTaXTpiS9Y
Kh99eN7SEEBwkNZ3Krhb6jV1afIqZxW6i6+3WJpa0tbIucRhPGs=
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:09:51 2026 by rpki-client