$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft File: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft (raw, json) Hash identifier: 22Yt92WYEUaCnhdClVZVRT5t1G+u+BgbG4CYZvUyGlc= Subject key identifier: 42:F1:8A:A9:A6:CD:C7:63:BB:A6:E6:4D:63:53:1A:98:73:ED:0E:22 Authority key identifier: 18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB Certificate issuer: /CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Certificate serial: 1E1D261CBB033E3FC4232F20327BC5586A54AB02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft Manifest number: EF Signing time: Tue 27 Oct 2026 05:57:35 +0000 Manifest this update: Tue 27 Oct 2026 05:52:35 +0000 Manifest next update: Wed 28 Oct 2026 09:31:35 +0000 Files and hashes: 1: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: anz/jr4eoJ5eQzfHR7W5xMlJS845ed+hSr6JxtIfUAA=) 2: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl (hash: ymNacb3cfWbPEpTza+DkdiovoTjQAMdTdIjf2m/DjUw=) 3: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: sxzvGSUyyV+/Qltw/wPpDgdpQWS1gtDsJ90OR/mPxn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 08:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1d:26:1c:bb:03:3e:3f:c4:23:2f:20:32:7b:c5:58:6a:54:ab:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Validity Not Before: Oct 27 05:52:35 2026 GMT Not After : Oct 28 09:31:35 2026 GMT Subject: CN=42F18AA9A6CDC763BBA6E64D63531A9873ED0E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:04:3d:7e:b8:4b:86:c3:fc:bd:84:6e:b4: ff:3d:24:27:54:fe:46:c3:c0:e6:b4:fb:e9:73:8b: 28:eb:95:cc:26:e7:b5:10:64:a5:35:03:e2:dd:a2: 32:e1:ef:1e:63:55:64:f8:d1:87:83:9d:43:02:6c: c0:00:05:49:35:8a:06:bd:27:39:d8:9f:f8:f6:7e: f8:6f:5c:26:d3:d5:61:38:47:c3:88:15:21:a8:0b: 5e:f3:65:88:cb:8c:b9:ec:55:f5:94:49:9d:6a:2f: cf:49:7e:0f:39:c3:f2:b4:38:b8:6e:e7:19:c8:a5: 54:43:c0:07:89:67:39:bd:b3:ea:aa:ec:be:83:4b: 70:78:4f:de:26:ee:9e:f6:ac:34:ab:77:5b:8b:5c: 29:93:e4:ed:0a:50:1f:9c:35:7f:7a:43:4a:70:f1: a6:0e:9d:b2:83:ba:96:cf:c0:c9:2e:2e:4a:44:d7: 4e:7e:bb:d7:92:33:37:9e:07:7b:be:b1:c4:88:28: 48:2b:b4:b1:f7:02:fe:ca:36:8f:63:b7:39:81:e6: 5f:8b:df:2f:d8:94:6e:1e:64:65:65:43:b0:28:b8: 0f:92:e9:09:32:51:e4:4a:d2:55:eb:05:81:26:55: 57:03:f6:29:6e:50:b9:82:d2:e3:ce:a4:64:b9:b4: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F1:8A:A9:A6:CD:C7:63:BB:A6:E6:4D:63:53:1A:98:73:ED:0E:22 X509v3 Authority Key Identifier: keyid:18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:39:be:23:c4:c3:bb:b9:2c:45:39:c0:38:34:db:9b:4c:85: 1d:62:fb:b5:7e:0b:4a:cd:b3:32:3a:b9:79:09:ce:cb:d8:f6: ea:30:1f:2a:fd:84:88:bc:e8:6c:e0:9e:ad:be:8e:95:75:bf: 63:39:c6:47:67:a8:f1:f0:ea:13:f0:ac:8a:41:14:a8:81:52: 5a:ba:2e:d3:c1:7e:66:57:55:c8:2b:5d:af:95:f5:74:cf:f4: 77:94:7e:d9:cd:3e:fa:25:44:68:37:de:b9:cb:39:45:c8:b9: 1f:ed:f4:bd:8c:fc:2f:99:64:eb:04:44:cc:de:ce:84:87:6a: 59:a2:4a:29:1b:4a:36:8b:36:ed:82:d7:53:0b:4d:13:c3:ff: 79:f4:98:06:6f:d8:ed:1e:ea:29:e3:40:cb:41:af:11:c5:44: 21:8a:1e:ed:5e:6f:9f:0f:99:40:31:e9:37:71:b6:8e:c4:aa: 5a:87:8b:17:d7:bf:ba:ae:af:33:97:26:16:dd:76:25:0f:60: 19:7c:11:41:27:57:ef:5f:0c:9c:b2:37:b0:64:42:6b:02:d8: e9:36:1b:1c:35:7e:21:13:b5:04:de:4f:20:b3:46:24:12:bf: 9a:9d:5f:5e:d0:14:17:03:14:12:1d:1b:eb:f4:5a:ad:31:01: 94:e9:fb:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHh0mHLsDPj/EIy8gMnvFWGpUqwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0 QTc1NTVBQjAeFw0yNjEwMjcwNTUyMzVaFw0yNjEwMjgwOTMxMzVaMDMxMTAvBgNV BAMTKDQyRjE4QUE5QTZDREM3NjNCQkE2RTY0RDYzNTMxQTk4NzNFRDBFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrwQ9frhLhsP8vYRutP89JCdU /kbDwOa0++lziyjrlcwm57UQZKU1A+LdojLh7x5jVWT40YeDnUMCbMAABUk1iga9 JznYn/j2fvhvXCbT1WE4R8OIFSGoC17zZYjLjLnsVfWUSZ1qL89Jfg85w/K0OLhu 5xnIpVRDwAeJZzm9s+qq7L6DS3B4T94m7p72rDSrd1uLXCmT5O0KUB+cNX96Q0pw 8aYOnbKDupbPwMkuLkpE105+u9eSMzeeB3u+scSIKEgrtLH3Av7KNo9jtzmB5l+L 3y/YlG4eZGVlQ7AouA+S6QkyUeRK0lXrBYEmVVcD9iluULmC0uPOpGS5tCzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQvGKqabNx2O7puZNY1MamHPtDiIwHwYDVR0j BBgwFoAUGPvFblz8yaHehofiX7xt/Ep1VaswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ1OThlOTktZTlmZi00YWJlLWIwOGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1 Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0QTc1NTVBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEZCQzU2RTVDRkNDOUExREU4Njg3RTI1RkJDNkRGQzRBNzU1 NUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZE RkM0QTc1NTVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJc5viPEw7u5LEU5wDg025tMhR1i+7V+C0rN szI6uXkJzsvY9uowHyr9hIi86Gzgnq2+jpV1v2M5xkdnqPHw6hPwrIpBFKiBUlq6 LtPBfmZXVcgrXa+V9XTP9HeUftnNPvolRGg33rnLOUXIuR/t9L2M/C+ZZOsERMze zoSHalmiSikbSjaLNu2C11MLTRPD/3n0mAZv2O0e6injQMtBrxHFRCGKHu1eb58P mUAx6Tdxto7EqlqHixfXv7qurzOXJhbddiUPYBl8EUEnV+9fDJyyN7BkQmsC2Ok2 Gxw1fiETtQTeTyCzRiQSv5qdX17QFBcDFBIdG+v0Wq0xAZTp+5I= -----END CERTIFICATE-----Generated at Tue Oct 27 08:49:09 2026 by rpki-client