$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft File: 218F42D6775F39C04AD2042E61C557053D4A69FE.mft (raw, json) Hash identifier: WDypbCBvWHe0TAU6lWroVeqOfJX01jktFgReD6fdvfw= Subject key identifier: 2E:29:BF:46:53:81:E0:DB:E2:D8:90:D6:FB:99:48:1D:89:97:82:07 Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE Certificate issuer: /CN=218F42D6775F39C04AD2042E61C557053D4A69FE Certificate serial: 07DE56F0DC1CB613966DE9CD21A09E814FFA3DFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:54:43 +0000 Manifest this update: Thu 17 Sep 2026 00:49:43 +0000 Manifest next update: Fri 18 Sep 2026 01:33:43 +0000 Files and hashes: 1: 218F42D6775F39C04AD2042E61C557053D4A69FE.crl (hash: NNnom7zZLo1qH6e9arOktVVAhjDnvh5HrfbOWBOmMw0=) 2: 3130332e3138312e37372e302f32342d3234203d3e20313439333738.roa (hash: CTpJAxD8b2QNT5h88jTGFlELSNgnWrFO4BmZ/0YXD9c=) 3: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: umbo3UO1surjjSvNZv8AZicuTRNi2hpCJFPh1PPiOEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:de:56:f0:dc:1c:b6:13:96:6d:e9:cd:21:a0:9e:81:4f:fa:3d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE Validity Not Before: Sep 17 00:49:43 2026 GMT Not After : Sep 18 01:33:43 2026 GMT Subject: CN=2E29BF465381E0DBE2D890D6FB99481D89978207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:11:e4:8d:a8:89:2e:4a:7f:83:32:4e:be: 2d:57:0f:81:8c:f3:96:cc:39:22:1e:74:57:5f:68: de:e7:36:12:6a:a2:87:83:13:cc:da:38:ea:1d:fb: 1e:61:ef:db:35:08:e0:99:fa:db:15:a1:78:47:01: 8a:f0:fa:59:68:cc:86:9b:e4:7e:e2:9e:6c:5d:1e: 67:65:30:e0:e9:36:81:2f:2c:16:4b:75:33:2b:ca: db:38:9b:97:17:43:89:f7:9c:6b:50:10:14:23:f0: fa:f0:aa:0d:1a:75:13:d1:da:5e:09:4f:1a:40:c5: 03:58:d8:9a:2c:d1:e1:c8:5c:b1:8a:a7:25:c8:31: 54:c8:b8:0f:17:89:b9:cb:ac:19:ff:31:30:73:06: 27:91:dc:d6:20:bc:68:98:f9:8a:40:f0:28:29:ca: 93:0c:7c:c9:95:d9:77:53:a8:2b:4b:9b:0e:7b:5e: 47:aa:b5:64:a1:46:4f:9a:02:39:47:71:d5:31:20: b2:19:f8:59:1a:25:03:f0:95:06:e4:f4:54:3d:e6: aa:27:d5:00:05:cf:46:a2:6c:ba:87:28:8b:97:d6: a8:f5:1e:4c:8d:6e:13:cf:ae:c3:91:86:ba:5b:e8: 4f:d4:eb:b3:9a:8a:90:29:34:17:29:cf:13:73:5f: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:29:BF:46:53:81:E0:DB:E2:D8:90:D6:FB:99:48:1D:89:97:82:07 X509v3 Authority Key Identifier: keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ac:4b:93:24:d1:f9:11:03:c9:88:f9:83:55:71:5e:84:7b: be:68:83:6e:46:40:02:7d:46:e4:e8:5c:e9:26:08:e1:4c:e3: 34:97:ef:61:3e:ea:65:62:18:90:b7:fd:f0:a4:2c:1a:b3:f7: b9:49:e9:e9:63:0f:7c:6d:38:7e:60:ab:d3:40:6a:02:bd:1c: c1:59:8f:8b:ad:58:2f:90:55:fe:29:54:24:e1:55:87:49:c5: 4f:9f:0b:31:c3:f7:74:4b:22:e2:61:7a:41:71:42:29:db:cf: 43:9e:b4:15:bc:80:12:0b:2c:bf:91:9a:59:47:39:36:9d:a5: 34:1f:00:cf:9f:31:14:ee:0c:58:ab:4a:e7:f4:88:f4:75:7f: 41:b6:07:15:bc:5b:39:69:a6:30:d2:9e:95:a5:d4:6a:bb:63: 0b:29:29:b5:57:e0:ae:d2:7f:0c:2c:0a:6f:21:b4:f3:1b:80: c5:2b:93:61:cd:a4:ca:97:57:05:7f:5d:07:a8:01:77:f6:4b: ab:f1:0f:11:89:99:ae:57:d9:d6:12:cb:1e:db:7d:eb:0e:ac: 1d:b9:56:85:eb:07:52:ca:2d:07:fb:e5:a3:2c:f1:59:06:9e: 62:d0:05:9f:90:4d:6d:d1:0c:b7:01:1d:c1:2c:08:a5:da:91: 09:7c:b3:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB95W8NwcthOWbenNIaCegU/6Pf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4RjQyRDY3NzVGMzlDMDRBRDIwNDJFNjFDNTU3MDUz RDRBNjlGRTAeFw0yNjA5MTcwMDQ5NDNaFw0yNjA5MTgwMTMzNDNaMDMxMTAvBgNV BAMTKDJFMjlCRjQ2NTM4MUUwREJFMkQ4OTBENkZCOTk0ODFEODk5NzgyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyxHkjaiJLkp/gzJOvi1XD4GM 85bMOSIedFdfaN7nNhJqooeDE8zaOOod+x5h79s1COCZ+tsVoXhHAYrw+llozIab 5H7inmxdHmdlMODpNoEvLBZLdTMryts4m5cXQ4n3nGtQEBQj8Prwqg0adRPR2l4J TxpAxQNY2Jos0eHIXLGKpyXIMVTIuA8XibnLrBn/MTBzBieR3NYgvGiY+YpA8Cgp ypMMfMmV2XdTqCtLmw57XkeqtWShRk+aAjlHcdUxILIZ+FkaJQPwlQbk9FQ95qon 1QAFz0aibLqHKIuX1qj1HkyNbhPPrsORhrpb6E/U67OaipApNBcpzxNzX683AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULim/RlOB4Nvi2JDW+5lIHYmXggcwHwYDVR0j BBgwFoAUIY9C1ndfOcBK0gQuYcVXBT1Kaf4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZjYzQ3MzQtYmViNi00ZTMzLTliMWMtNDZkY2QxNjQyNWExLzAvMjE4RjQyRDY3 NzVGMzlDMDRBRDIwNDJFNjFDNTU3MDUzRDRBNjlGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMThGNDJENjc3NUYzOUMwNEFEMjA0MkU2MUM1NTcwNTNENEE2 OUZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMjE4RjQyRDY3NzVGMzlDMDRBRDIwNDJFNjFDNTU3 MDUzRDRBNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEysS5Mk0fkRA8mI+YNVcV6Ee75og25GQAJ9 RuToXOkmCOFM4zSX72E+6mViGJC3/fCkLBqz97lJ6eljD3xtOH5gq9NAagK9HMFZ j4utWC+QVf4pVCThVYdJxU+fCzHD93RLIuJhekFxQinbz0OetBW8gBILLL+RmllH OTadpTQfAM+fMRTuDFirSuf0iPR1f0G2BxW8WzlppjDSnpWl1Gq7YwspKbVX4K7S fwwsCm8htPMbgMUrk2HNpMqXVwV/XQeoAXf2S6vxDxGJma5X2dYSyx7bfesOrB25 VoXrB1LKLQf75aMs8VkGnmLQBZ+QTW3RDLcBHcEsCKXakQl8s6I= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:00 2026 by rpki-client