$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft File: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft (raw, json) Hash identifier: d3xsCAEVGxlYRVNOG4H7ywD5myXAC4M2S0Kbp9cf4SU= Subject key identifier: FD:24:70:AA:88:B6:07:14:CC:00:FA:A1:D3:40:E7:93:3C:B5:0F:58 Authority key identifier: 18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 Certificate issuer: /CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Certificate serial: 2F4ECB2DDDF2B1A05E16892411357D634D73402B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft Manifest number: B1 Signing time: Fri 11 Sep 2026 05:02:18 +0000 Manifest this update: Fri 11 Sep 2026 04:57:18 +0000 Manifest next update: Sat 12 Sep 2026 07:24:18 +0000 Files and hashes: 1: 18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl (hash: tEu/yTbjmCjwwU6i5ymeReAeoXErCx7ZBURqTkfql1w=) 2: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (hash: ictls1d8fDHoUd3C28juE/v5HQdxwfMf3GiA749+DqU=) 3: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (hash: gFD5ZtfkV8WLuWBlQkaPkrNIjj5Z4cE3YofpumoYjys=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 07:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4e:cb:2d:dd:f2:b1:a0:5e:16:89:24:11:35:7d:63:4d:73:40:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18C2007FE56CED83879B955CB8DA89E0922D6AB9 Validity Not Before: Sep 11 04:57:18 2026 GMT Not After : Sep 12 07:24:18 2026 GMT Subject: CN=FD2470AA88B60714CC00FAA1D340E7933CB50F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:54:86:37:6c:6d:2e:c0:d0:b4:78:99:1d: 4f:13:23:b7:8e:5f:c3:89:b0:79:05:84:da:c2:e3: b3:cf:9c:f7:8e:f7:69:7e:b9:61:b8:f8:3c:d6:c9: 9f:17:3a:46:ae:95:72:be:7d:32:77:a2:34:b5:97: 5a:77:62:6a:08:a5:6a:c8:10:59:cc:59:3a:c8:e6: 1e:56:fe:03:04:c8:ce:53:6d:2c:53:de:f2:a7:35: 4e:eb:44:48:fb:73:ec:05:5f:11:0f:93:14:15:7c: c5:ac:3e:34:c2:ac:c9:0e:25:e9:eb:b2:45:c9:e6: 97:51:82:22:12:01:dd:35:e3:96:f8:9e:1d:5a:ad: cc:50:e2:20:3a:b0:38:e6:44:bd:c3:12:00:d2:09: fd:22:52:bc:db:36:55:54:07:b1:b0:1b:be:1a:b9: e2:e3:7a:82:ea:e8:92:10:59:bf:ba:9e:a8:04:61: 13:57:39:d1:82:b6:8f:84:f1:ba:17:9e:2d:6e:be: 0a:59:7a:43:e1:99:9a:33:7b:c8:2d:5a:6e:1e:a3: 88:89:d1:b1:bd:e4:ca:3b:d8:cf:a3:a9:f7:75:2c: b9:2e:c7:f8:5a:d8:ca:9d:76:bc:57:ad:ec:a9:b8: 84:d2:d4:4f:d1:70:e1:20:ce:76:38:5c:46:d2:4f: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:24:70:AA:88:B6:07:14:CC:00:FA:A1:D3:40:E7:93:3C:B5:0F:58 X509v3 Authority Key Identifier: keyid:18:C2:00:7F:E5:6C:ED:83:87:9B:95:5C:B8:DA:89:E0:92:2D:6A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18C2007FE56CED83879B955CB8DA89E0922D6AB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/18C2007FE56CED83879B955CB8DA89E0922D6AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ff:b1:f2:c6:3d:90:82:f5:c5:fd:a0:01:e5:42:d6:16:84: 16:b1:85:75:43:8b:d2:fc:69:8d:50:6c:e8:e9:a9:7b:32:e0: 27:64:6f:12:ba:b9:58:4b:80:41:0f:62:39:0c:0b:7e:d7:bd: 3d:18:a5:93:06:98:b9:e5:b2:45:d7:db:a9:b4:c5:27:80:07: 1a:a0:0e:33:25:62:de:d4:ba:c0:ee:3a:f4:34:01:0b:69:44: fc:87:28:fe:65:1c:ec:f0:79:ea:11:87:f1:e7:60:08:2c:58: 94:0e:cb:b4:eb:fd:45:82:d6:83:37:bb:ec:92:a4:2c:a4:5a: b4:43:b8:57:fe:10:91:6c:fe:5e:74:e5:10:f7:cd:fb:4a:63: 83:ba:8f:d4:29:b0:7c:85:cb:e8:00:71:7e:88:19:2f:53:22: 8a:95:69:1d:11:bd:7f:ef:5e:3c:8a:fe:58:f5:6e:cd:ab:5c: 93:bd:66:ab:fd:96:2e:ad:42:45:54:a5:8f:56:8c:9f:16:ae: 42:75:4a:1b:cf:13:97:b6:a6:e4:96:2b:ef:47:94:8e:ca:06: 41:0c:30:5f:82:cb:25:c3:c5:20:cf:f5:2d:23:f7:99:63:6e: b2:c0:0e:b7:ba:91:7c:f3:75:a1:ad:70:2a:b5:3c:12:ed:da: de:06:d3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL07LLd3ysaBeFokkETV9Y01zQCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5 MjJENkFCOTAeFw0yNjA5MTEwNDU3MThaFw0yNjA5MTIwNzI0MThaMDMxMTAvBgNV BAMTKEZEMjQ3MEFBODhCNjA3MTRDQzAwRkFBMUQzNDBFNzkzM0NCNTBGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbFSGN2xtLsDQtHiZHU8TI7eO X8OJsHkFhNrC47PPnPeO92l+uWG4+DzWyZ8XOkaulXK+fTJ3ojS1l1p3YmoIpWrI EFnMWTrI5h5W/gMEyM5TbSxT3vKnNU7rREj7c+wFXxEPkxQVfMWsPjTCrMkOJenr skXJ5pdRgiISAd0145b4nh1arcxQ4iA6sDjmRL3DEgDSCf0iUrzbNlVUB7GwG74a ueLjeoLq6JIQWb+6nqgEYRNXOdGCto+E8boXni1uvgpZekPhmZoze8gtWm4eo4iJ 0bG95Mo72M+jqfd1LLkux/ha2MqddrxXreypuITS1E/RcOEgznY4XEbSTzdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/SRwqoi2BxTMAPqh00Dnkzy1D1gwHwYDVR0j BBgwFoAUGMIAf+Vs7YOHm5VcuNqJ4JItarkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWM3MDAzNTAtNjYzMi00OWUyLWI3ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZF NTZDRUQ4Mzg3OUI5NTVDQjhEQTg5RTA5MjJENkFCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEMyMDA3RkU1NkNFRDgzODc5Qjk1NUNCOERBODlFMDkyMkQ2 QUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWM3MDAzNTAtNjYzMi00OWUyLWI3 ZTMtNWQ1NzMyMjRjNTZjLzAvMThDMjAwN0ZFNTZDRUQ4Mzg3OUI5NTVDQjhEQTg5 RTA5MjJENkFCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3/sfLGPZCC9cX9oAHlQtYWhBaxhXVDi9L8 aY1QbOjpqXsy4CdkbxK6uVhLgEEPYjkMC37XvT0YpZMGmLnlskXX26m0xSeABxqg DjMlYt7UusDuOvQ0AQtpRPyHKP5lHOzweeoRh/HnYAgsWJQOy7Tr/UWC1oM3u+yS pCykWrRDuFf+EJFs/l505RD3zftKY4O6j9QpsHyFy+gAcX6IGS9TIoqVaR0RvX/v XjyK/lj1bs2rXJO9Zqv9li6tQkVUpY9WjJ8WrkJ1ShvPE5e2puSWK+9HlI7KBkEM MF+CyyXDxSDP9S0j95ljbrLADre6kXzzdaGtcCq1PBLt2t4G0/g= -----END CERTIFICATE-----Generated at Fri Sep 11 19:11:06 2026 by rpki-client