$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft File: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft (raw, json) Hash identifier: i9X+bLpRQTbzX9b+5DMv3qrdQ2u+s6pqGTe2S45mtZE= Subject key identifier: F0:DF:AC:B6:28:83:BF:64:63:39:0F:09:60:CB:93:CD:8D:7C:37:9A Authority key identifier: 18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB Certificate issuer: /CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Certificate serial: 245439AF599779C5287F7EB441F584CD7A009E56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft Manifest number: 74 Signing time: Mon 27 Jul 2026 00:28:18 +0000 Manifest this update: Mon 27 Jul 2026 00:23:18 +0000 Manifest next update: Tue 28 Jul 2026 02:15:18 +0000 Files and hashes: 1: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: anz/jr4eoJ5eQzfHR7W5xMlJS845ed+hSr6JxtIfUAA=) 2: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl (hash: klUwj2GiG+0sDSK1jqFZvnzlFJweYCjDB0c7I2swS34=) 3: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: sxzvGSUyyV+/Qltw/wPpDgdpQWS1gtDsJ90OR/mPxn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:54:39:af:59:97:79:c5:28:7f:7e:b4:41:f5:84:cd:7a:00:9e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Validity Not Before: Jul 27 00:23:18 2026 GMT Not After : Jul 28 02:15:18 2026 GMT Subject: CN=F0DFACB62883BF6463390F0960CB93CD8D7C379A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:58:d3:17:d1:4f:e8:8f:6e:ad:f8:ef:61:3c: 85:e6:fa:a4:45:36:92:95:ea:e7:e4:88:91:0a:39: 3d:27:6a:5c:97:35:72:b2:e6:10:27:80:63:52:79: c4:80:c1:b6:6c:e7:69:4c:f1:2f:f2:4f:84:d8:06: 82:e7:de:22:39:e4:3d:e5:a1:52:f8:ee:51:99:1a: 1d:dc:80:79:70:04:9d:63:e1:71:f3:06:65:f9:2b: 69:90:08:2b:26:f8:37:1b:23:c3:ff:3c:3d:55:39: ba:44:8a:bf:36:5e:3e:bd:08:12:2d:63:d1:9d:a7: b7:f8:f5:6f:2d:6a:32:a2:15:28:9c:f9:a6:93:c7: 8a:f6:a2:aa:e6:e9:5d:09:98:0a:55:28:fa:23:b6: b0:4c:8e:65:d5:06:9c:b9:3a:68:59:22:fd:61:fb: 6c:74:fc:37:8f:c8:c5:d7:ee:52:bf:89:1e:dc:d5: 2e:10:81:e3:e7:af:34:0e:eb:6f:b2:c0:77:14:b8: f0:bc:6b:c8:71:e6:37:3a:e2:1b:d0:47:a1:90:d7: 14:32:6c:d9:fa:8a:ad:74:d7:46:cc:0d:99:8c:98: 4d:c1:ce:7d:44:ea:c6:9a:48:9f:2b:ad:cb:db:c8: de:66:b6:4e:c3:e6:11:e0:0e:4c:e2:70:d6:fa:5b: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DF:AC:B6:28:83:BF:64:63:39:0F:09:60:CB:93:CD:8D:7C:37:9A X509v3 Authority Key Identifier: keyid:18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:33:10:23:4b:bb:89:23:0a:3d:af:08:cc:4f:80:5e:7f:64: 82:84:4c:62:2f:55:8c:f9:84:a6:95:b6:f0:11:b3:ba:af:6f: 4e:22:f6:c1:ab:b3:2a:29:03:1d:87:ee:ed:9a:74:4e:2f:ea: 69:fa:59:d9:e3:cc:26:fb:f3:d0:ea:ba:1f:10:d8:2a:17:d9: 2c:a3:f7:f1:91:7c:94:9f:85:a5:cb:eb:e4:e7:77:94:e2:2a: 22:3f:3c:44:27:0a:34:f2:29:6e:83:5e:b9:a1:92:54:c9:fa: 35:de:38:a4:f0:23:a8:ea:94:2b:51:6e:80:01:94:40:c6:06: 8f:9a:5a:d2:52:68:83:70:5e:1b:c5:36:d1:36:ac:0b:bb:cd: 68:e2:ea:42:02:bc:41:fb:5f:62:6c:03:f0:01:f8:a4:a6:46: d3:15:1d:af:30:b0:1f:be:f1:ad:5a:c5:b1:9a:18:5e:bc:56: c7:f8:1c:f8:16:c2:e2:63:48:94:71:7b:c5:60:5d:5e:a6:79: c0:b8:4e:e5:14:de:34:a9:a2:bf:de:c9:d1:ed:5d:8a:8b:46: a8:f3:cc:f3:2d:d8:a9:3f:ca:e5:11:e8:48:e2:2d:94:ab:26: 6a:6c:e2:eb:15:9a:84:ee:fe:c3:18:90:5c:21:9e:37:c4:d4: cb:38:56:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJFQ5r1mXecUof360QfWEzXoAnlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0 QTc1NTVBQjAeFw0yNjA3MjcwMDIzMThaFw0yNjA3MjgwMjE1MThaMDMxMTAvBgNV BAMTKEYwREZBQ0I2Mjg4M0JGNjQ2MzM5MEYwOTYwQ0I5M0NEOEQ3QzM3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWNMX0U/oj26t+O9hPIXm+qRF NpKV6ufkiJEKOT0nalyXNXKy5hAngGNSecSAwbZs52lM8S/yT4TYBoLn3iI55D3l oVL47lGZGh3cgHlwBJ1j4XHzBmX5K2mQCCsm+DcbI8P/PD1VObpEir82Xj69CBIt Y9Gdp7f49W8tajKiFSic+aaTx4r2oqrm6V0JmApVKPojtrBMjmXVBpy5OmhZIv1h +2x0/DePyMXX7lK/iR7c1S4QgePnrzQO62+ywHcUuPC8a8hx5jc64hvQR6GQ1xQy bNn6iq1010bMDZmMmE3Bzn1E6saaSJ8rrcvbyN5mtk7D5hHgDkzicNb6W/m9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8N+stiiDv2RjOQ8JYMuTzY18N5owHwYDVR0j BBgwFoAUGPvFblz8yaHehofiX7xt/Ep1VaswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ1OThlOTktZTlmZi00YWJlLWIwOGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1 Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0QTc1NTVBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEZCQzU2RTVDRkNDOUExREU4Njg3RTI1RkJDNkRGQzRBNzU1 NUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZE RkM0QTc1NTVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQzECNLu4kjCj2vCMxPgF5/ZIKETGIvVYz5 hKaVtvARs7qvb04i9sGrsyopAx2H7u2adE4v6mn6WdnjzCb789Dquh8Q2CoX2Syj 9/GRfJSfhaXL6+Tnd5TiKiI/PEQnCjTyKW6DXrmhklTJ+jXeOKTwI6jqlCtRboAB lEDGBo+aWtJSaINwXhvFNtE2rAu7zWji6kICvEH7X2JsA/AB+KSmRtMVHa8wsB++ 8a1axbGaGF68Vsf4HPgWwuJjSJRxe8VgXV6mecC4TuUU3jSpor/eydHtXYqLRqjz zPMt2Kk/yuUR6EjiLZSrJmps4usVmoTu/sMYkFwhnjfE1Ms4VsI= -----END CERTIFICATE-----Generated at Mon Jul 27 14:19:13 2026 by rpki-client