$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft File: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft (raw, json) Hash identifier: pOGVXp6stBHU9k9VYW32OHDPljbh6hywYCZ/AlAcljE= Subject key identifier: AE:52:7C:62:E2:BB:AD:F4:E8:C4:C4:60:02:AF:9B:18:65:B5:84:6B Authority key identifier: D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 Certificate issuer: /CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Certificate serial: 231E89B26B96C5EAAD7A31C11E39FF66C05CE637 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:09:03 +0000 Manifest this update: Fri 19 Jun 2026 19:04:03 +0000 Manifest next update: Sat 20 Jun 2026 20:32:03 +0000 Files and hashes: 1: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl (hash: Elbz6ELOqSUBlpGlNt1v6AZ3dlWxfDC+Dvw0rXLaIDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1e:89:b2:6b:96:c5:ea:ad:7a:31:c1:1e:39:ff:66:c0:5c:e6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Validity Not Before: Jun 19 19:04:03 2026 GMT Not After : Jun 20 20:32:03 2026 GMT Subject: CN=AE527C62E2BBADF4E8C4C46002AF9B1865B5846B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fd:56:76:a9:14:7d:13:a9:9a:ae:9a:b6:1a: 6a:6d:5b:58:b8:82:6e:10:e8:0d:d7:1c:84:d9:a6: 64:25:b7:1d:39:14:93:ea:a0:df:9f:5f:81:e6:1c: ae:92:82:01:1b:44:3d:c4:69:37:99:4a:1d:d8:e0: b1:25:51:d7:c6:01:1e:b7:39:02:cc:3a:2e:78:67: c7:f7:33:f7:c1:6d:f1:dc:c1:21:72:82:29:bc:b8: 01:f9:7c:b6:98:49:f3:ae:6d:31:c9:4f:d1:d3:63: d6:a2:30:37:a8:87:70:d0:64:23:7c:e6:7e:d9:8a: 4e:ab:55:0e:10:37:05:06:67:28:11:27:81:3e:81: fa:8b:25:9c:1d:a9:fd:fc:08:e8:15:99:83:4d:6e: 05:a7:57:56:94:a9:64:2a:51:13:47:cc:dc:63:72: 2a:f9:a5:77:33:da:5b:f8:89:97:53:9c:03:1d:04: 59:6a:e3:66:bd:73:93:74:84:78:a6:01:53:77:35: 43:c6:21:e2:da:93:c3:86:37:7f:91:18:5a:7b:c1: e3:43:ee:cf:b1:67:2c:88:bd:7a:33:09:1b:d9:84: c9:8f:3d:ea:91:31:72:6b:63:1d:9a:df:fb:ec:47: 05:30:0a:ef:98:1c:94:a3:6f:b6:40:31:8a:11:d7: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:52:7C:62:E2:BB:AD:F4:E8:C4:C4:60:02:AF:9B:18:65:B5:84:6B X509v3 Authority Key Identifier: keyid:D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a7:db:94:03:37:f7:44:92:5d:3f:94:ee:06:8d:19:ec:0e: f7:7e:65:46:f1:58:fb:16:19:ac:d5:f9:8f:33:27:44:1a:44: 8f:c2:f7:25:e8:3a:ee:eb:82:d5:9c:ba:b5:d4:35:ad:6d:94: 84:a1:21:11:82:9b:96:df:1d:4f:74:67:4f:b2:78:37:1d:4a: 93:ab:1a:ee:4a:4a:29:bd:e3:91:57:49:02:18:00:a9:38:64: 91:ba:ab:17:9d:6e:d8:72:59:b6:b7:82:6c:19:44:6f:e9:1f: 58:bf:29:d9:9e:96:f5:ca:11:47:6b:96:7c:05:04:e4:aa:3e: 7f:3b:ca:32:e4:fc:0e:5c:01:9f:d5:fb:d0:34:10:63:4a:46: 2d:3c:3f:cb:3c:61:f5:63:c5:e5:6b:53:79:3b:d3:d0:96:9f: fe:73:ba:d8:d4:fe:c9:3a:88:cd:dc:85:f3:c4:ad:95:1e:d3: 4b:cd:40:15:be:20:4f:6f:3e:3b:80:d5:2a:50:10:63:74:f0: 0f:03:94:b9:16:9c:b0:23:8f:07:e6:ef:0e:86:a4:3f:d1:f3: d1:68:ec:19:7d:a9:25:0f:a0:c7:b9:1e:e9:e5:48:27:5d:b7: f6:42:49:08:44:f8:0e:e0:36:09:4c:0f:9d:75:35:a3:51:79: 0f:03:dd:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIx6JsmuWxeqtejHBHjn/ZsBc5jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1 Q0JGQ0NENTAeFw0yNjA2MTkxOTA0MDNaFw0yNjA2MjAyMDMyMDNaMDMxMTAvBgNV BAMTKEFFNTI3QzYyRTJCQkFERjRFOEM0QzQ2MDAyQUY5QjE4NjVCNTg0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/VZ2qRR9E6marpq2GmptW1i4 gm4Q6A3XHITZpmQltx05FJPqoN+fX4HmHK6SggEbRD3EaTeZSh3Y4LElUdfGAR63 OQLMOi54Z8f3M/fBbfHcwSFygim8uAH5fLaYSfOubTHJT9HTY9aiMDeoh3DQZCN8 5n7Zik6rVQ4QNwUGZygRJ4E+gfqLJZwdqf38COgVmYNNbgWnV1aUqWQqURNHzNxj cir5pXcz2lv4iZdTnAMdBFlq42a9c5N0hHimAVN3NUPGIeLak8OGN3+RGFp7weND 7s+xZyyIvXozCRvZhMmPPeqRMXJrYx2a3/vsRwUwCu+YHJSjb7ZAMYoR12JpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrlJ8YuK7rfToxMRgAq+bGGW1hGswHwYDVR0j BBgwFoAU0Yr5104eboCXnAY5/RBPD1y/zNUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0 RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1Q0JGQ0NENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMThBRjlENzRFMUU2RTgwOTc5QzA2MzlGRDEwNEYwRjVDQkZD Q0Q1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRG MEY1Q0JGQ0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGn25QDN/dEkl0/lO4GjRnsDvd+ZUbxWPsW GazV+Y8zJ0QaRI/C9yXoOu7rgtWcurXUNa1tlIShIRGCm5bfHU90Z0+yeDcdSpOr Gu5KSim945FXSQIYAKk4ZJG6qxedbthyWba3gmwZRG/pH1i/KdmelvXKEUdrlnwF BOSqPn87yjLk/A5cAZ/V+9A0EGNKRi08P8s8YfVjxeVrU3k709CWn/5zutjU/sk6 iM3chfPErZUe00vNQBW+IE9vPjuA1SpQEGN08A8DlLkWnLAjjwfm7w6GpD/R89Fo 7Bl9qSUPoMe5HunlSCddt/ZCSQhE+A7gNglMD511NaNReQ8D3eA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:05 2026 by rpki-client