$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft File: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json) Hash identifier: bOveQvoQREAiH1D1dc2yqUB6FXVl4BJO9B6pDA3uQE4= Subject key identifier: 2A:EE:50:63:9C:57:B1:FD:45:80:9A:19:D5:0E:97:1C:38:36:DB:22 Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 Certificate issuer: /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Certificate serial: 5B789F70C81990F9BA3D81A07E3475A5B8E043BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft Manifest number: F0 Signing time: Wed 28 Oct 2026 02:12:39 +0000 Manifest this update: Wed 28 Oct 2026 02:07:39 +0000 Manifest next update: Thu 29 Oct 2026 03:01:39 +0000 Files and hashes: 1: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: ntFbOLaH9A1DppJNGzHM8TDJaMJBYe4Jq6ttryENvJ8=) 2: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=) 3: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:78:9f:70:c8:19:90:f9:ba:3d:81:a0:7e:34:75:a5:b8:e0:43:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Validity Not Before: Oct 28 02:07:39 2026 GMT Not After : Oct 29 03:01:39 2026 GMT Subject: CN=2AEE50639C57B1FD45809A19D50E971C3836DB22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:1e:30:eb:4e:2b:be:ae:97:04:7f:d1:3e: e2:b4:96:7e:52:d6:21:7c:30:2d:96:b5:13:aa:dd: e3:b6:03:ad:d7:41:9b:8d:28:ea:c1:f0:2a:a5:dc: b0:55:25:a4:53:a7:22:3c:ff:79:47:bc:ee:4b:e7: 19:01:2e:0b:60:83:a3:1f:b0:cb:3b:34:c4:22:4c: 2a:25:b5:e3:4b:ff:29:57:65:0f:26:b6:c4:1d:c9: 5b:77:fc:f5:5c:44:17:5a:f7:50:f6:04:21:fa:09: a0:6e:70:1d:b5:a1:15:d4:79:55:c5:42:70:51:f5: 43:cb:cd:57:fe:f6:cc:10:5c:38:b1:7f:9c:f3:00: 0c:fa:f0:20:3c:3d:df:3e:42:6d:9e:87:18:db:27: fd:f2:27:9b:ca:01:69:df:0d:1b:d1:a1:df:a4:aa: d6:d2:9e:30:94:64:19:50:8a:3a:dc:6a:a4:70:02: b2:76:17:3e:1f:71:33:9f:86:2b:9d:a1:8f:3c:0a: 6c:42:72:7e:b1:40:47:c5:53:53:2a:4d:51:dc:cf: 7a:5d:b7:07:5c:ff:1c:a6:2d:a8:6f:35:b3:21:ed: 81:75:e9:35:69:08:27:04:2e:fb:6f:34:c8:cb:3c: c3:6a:76:c3:94:4a:81:7a:a9:03:99:79:29:7b:67: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EE:50:63:9C:57:B1:FD:45:80:9A:19:D5:0E:97:1C:38:36:DB:22 X509v3 Authority Key Identifier: keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f7:21:65:33:f4:a8:cb:0f:66:9b:d2:80:6c:6b:7a:ae:19: 82:11:c9:a4:11:46:45:f0:95:46:da:c0:88:15:48:cc:e6:52: 4f:6d:57:c7:b4:b0:e0:91:45:69:21:c0:07:67:7d:b6:00:a5: cd:c8:61:10:c0:b1:dc:18:40:63:98:10:a0:0e:49:17:19:3f: 7e:14:98:76:9c:c8:5b:88:8f:30:76:0c:47:29:ce:6d:07:b8: 93:50:a7:95:24:b7:a4:78:10:13:6a:b6:0a:3e:e1:1c:c8:d5: 85:56:ca:fc:8f:0b:36:31:38:5c:bf:9d:0c:99:09:32:7c:42: 6b:ab:a6:ab:af:c0:10:89:7f:88:72:8b:8b:b9:b1:cd:45:ee: 55:69:46:7f:62:d9:03:bb:e3:3a:af:a3:a1:03:c7:49:f5:02: 37:14:1f:18:ce:c9:84:0c:dc:4b:48:8e:97:ec:a3:3a:e2:0f: 5d:3d:db:eb:82:91:ed:30:3b:39:a0:fd:c6:a1:48:09:b1:6f: 59:01:7c:60:2b:ef:45:5b:de:bd:29:26:9b:f6:03:5a:10:de: a3:b9:e0:d7:dd:69:c8:72:26:84:e4:51:11:7f:96:6b:97:c7: 3c:bb:d6:95:f4:98:1b:54:e8:03:c6:04:b2:e1:ca:47:d3:a8: cf:a3:6d:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW3ifcMgZkPm6PYGgfjR1pbjgQ70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5 MjJENkFCOTAeFw0yNjEwMjgwMjA3MzlaFw0yNjEwMjkwMzAxMzlaMDMxMTAvBgNV BAMTKDJBRUU1MDYzOUM1N0IxRkQ0NTgwOUExOUQ1MEU5NzFDMzgzNkRCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8R4w604rvq6XBH/RPuK0ln5S 1iF8MC2WtROq3eO2A63XQZuNKOrB8Cql3LBVJaRTpyI8/3lHvO5L5xkBLgtgg6Mf sMs7NMQiTColteNL/ylXZQ8mtsQdyVt3/PVcRBda91D2BCH6CaBucB21oRXUeVXF QnBR9UPLzVf+9swQXDixf5zzAAz68CA8Pd8+Qm2ehxjbJ/3yJ5vKAWnfDRvRod+k qtbSnjCUZBlQijrcaqRwArJ2Fz4fcTOfhiudoY88CmxCcn6xQEfFU1MqTVHcz3pd twdc/xymLahvNbMh7YF16TVpCCcELvtvNMjLPMNqdsOUSoF6qQOZeSl7Z6xbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKu5QY5xXsf1FgJoZ1Q6XHDg22yIwHwYDVR0j BBgwFoAUGMIAf+Vs7YOHm5VcuNqJ4JItarkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM3MDAzNTAtNjYzMi00OWUyLWI3ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZF NTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5MjJENkFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEMyMDA3RkU1NkNFRDgzODc5Qjk1NUNCOERBODlFMDkyMkQ2 QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5 RTA5MjJENkFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGv3IWUz9KjLD2ab0oBsa3quGYIRyaQRRkXw lUbawIgVSMzmUk9tV8e0sOCRRWkhwAdnfbYApc3IYRDAsdwYQGOYEKAOSRcZP34U mHacyFuIjzB2DEcpzm0HuJNQp5Ukt6R4EBNqtgo+4RzI1YVWyvyPCzYxOFy/nQyZ CTJ8QmurpquvwBCJf4hyi4u5sc1F7lVpRn9i2QO74zqvo6EDx0n1AjcUHxjOyYQM 3EtIjpfsozriD1092+uCke0wOzmg/cahSAmxb1kBfGAr70Vb3r0pJpv2A1oQ3qO5 4NfdachyJoTkURF/lmuXxzy71pX0mBtU6APGBLLhykfTqM+jbeA= -----END CERTIFICATE-----Generated at Wed Oct 28 11:22:33 2026 by rpki-client