$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft File: B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft (raw, json) Hash identifier: +TTp+P6+aY8dvqITmkP7T/1orTLGs9YPfsZhBrZH7SY= Subject key identifier: 89:85:AB:0C:8E:A8:5F:BE:01:9E:4F:A9:B9:0C:5D:D0:72:3C:E7:71 Authority key identifier: B1:8A:EF:ED:66:08:A6:B3:AD:72:FC:CB:B8:52:AD:9A:DF:B8:C4:9E Certificate issuer: /CN=B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E Certificate serial: 5D453B53D4A6B39891A8EEEA855C008FB3B2306D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:17:24 +0000 Manifest this update: Thu 17 Sep 2026 07:12:24 +0000 Manifest next update: Fri 18 Sep 2026 08:55:24 +0000 Files and hashes: 1: B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.crl (hash: TqwW+g1b+1Wp755rrH5aHXlUFiYBB1+g++BhlSzgK9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.crl rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:45:3b:53:d4:a6:b3:98:91:a8:ee:ea:85:5c:00:8f:b3:b2:30:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E Validity Not Before: Sep 17 07:12:24 2026 GMT Not After : Sep 18 08:55:24 2026 GMT Subject: CN=8985AB0C8EA85FBE019E4FA9B90C5DD0723CE771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2a:dd:47:f8:28:eb:bd:a1:a1:a1:fb:4e:7b: 87:26:c0:29:84:2b:1a:9c:27:ea:bd:70:06:17:36: ca:62:4d:01:6d:fa:9a:38:48:a9:b3:26:6a:23:69: e9:bf:72:d0:f8:42:59:0c:bc:eb:27:82:f4:54:a7: de:af:00:6a:fd:4b:44:bb:3b:5a:aa:1e:c8:00:b9: 21:b2:c7:9b:8b:c1:13:59:89:86:a3:8d:ef:e3:4e: 7b:16:f3:11:bf:39:4f:be:b9:44:d8:27:fd:67:15: 16:8a:d7:f9:80:f7:9c:ab:6c:0c:d1:91:1c:c9:f9: d6:89:0a:cf:e3:22:3d:37:63:ab:2a:ea:23:88:c5: f4:c4:33:af:41:fa:e3:14:a0:53:4a:b1:7a:9c:bb: ec:5c:d7:1a:47:31:85:95:fe:02:5b:c8:f5:9e:b3: c4:05:76:f0:91:a7:0d:60:e5:e2:a2:87:7b:35:38: 27:f2:fa:1c:47:cd:1f:69:d6:45:6b:70:20:59:a6: 3a:5c:7b:ee:cc:40:d7:df:53:1f:23:65:e4:13:ed: 33:ed:de:07:68:7b:20:f0:3a:e1:aa:80:4b:06:38: 0c:35:d1:4d:b5:c9:d1:ed:62:35:b1:44:2a:c6:e7: 42:da:7c:f9:70:25:ea:62:e1:85:ff:eb:32:d5:39: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:85:AB:0C:8E:A8:5F:BE:01:9E:4F:A9:B9:0C:5D:D0:72:3C:E7:71 X509v3 Authority Key Identifier: keyid:B1:8A:EF:ED:66:08:A6:B3:AD:72:FC:CB:B8:52:AD:9A:DF:B8:C4:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:42:8a:27:0b:7e:41:ea:9b:5f:7b:31:34:d2:a5:70:0f:8c: e8:99:6e:b5:c9:2e:99:cd:07:43:57:72:e6:36:68:6a:d0:fd: 1c:25:30:de:f1:49:a8:8a:74:4a:7c:0f:fa:c4:8b:2f:ea:44: 4c:af:16:48:22:af:15:f1:17:db:d7:a8:0b:96:b8:6b:77:1d: 10:6d:75:3a:2b:ef:81:f2:6e:ce:b1:5b:d5:37:88:53:16:4c: 4e:9a:11:00:16:fb:af:08:b7:01:2c:69:c4:97:da:2f:d4:f0: 9d:e8:80:8b:c7:22:aa:c9:b8:e3:76:f0:85:b4:55:2d:d5:25: e5:77:2b:53:52:d0:f2:d8:e0:fa:2d:49:25:c2:2b:25:30:49: 2a:4d:c5:fa:a5:a6:e6:29:e6:5c:47:44:5e:7f:3d:0a:8b:17: bd:c5:10:57:62:2f:97:60:7d:f1:58:fd:c9:87:b6:02:0b:e9: 8e:bc:42:3b:e4:fb:93:92:14:2d:b8:49:b5:dc:a9:02:28:bd: 58:dc:0f:b2:2e:14:1b:d5:cc:4c:b8:08:a9:86:90:92:89:7a: d9:45:04:fc:b3:43:d9:06:a4:6d:a2:c6:8b:86:2d:8c:81:3d: 5a:8e:73:24:a9:4e:b0:f8:71:bb:54:7a:ee:60:28:58:e2:75: 23:94:0f:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUU7U9Sms5iRqO7qhVwAj7OyMG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE4QUVGRUQ2NjA4QTZCM0FENzJGQ0NCQjg1MkFEOUFE RkI4QzQ5RTAeFw0yNjA5MTcwNzEyMjRaFw0yNjA5MTgwODU1MjRaMDMxMTAvBgNV BAMTKDg5ODVBQjBDOEVBODVGQkUwMTlFNEZBOUI5MEM1REQwNzIzQ0U3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXKt1H+CjrvaGhoftOe4cmwCmE KxqcJ+q9cAYXNspiTQFt+po4SKmzJmojaem/ctD4QlkMvOsngvRUp96vAGr9S0S7 O1qqHsgAuSGyx5uLwRNZiYajje/jTnsW8xG/OU++uUTYJ/1nFRaK1/mA95yrbAzR kRzJ+daJCs/jIj03Y6sq6iOIxfTEM69B+uMUoFNKsXqcu+xc1xpHMYWV/gJbyPWe s8QFdvCRpw1g5eKih3s1OCfy+hxHzR9p1kVrcCBZpjpce+7MQNffUx8jZeQT7TPt 3gdoeyDwOuGqgEsGOAw10U21ydHtYjWxRCrG50LafPlwJepi4YX/6zLVOTFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiYWrDI6oX74Bnk+puQxd0HI853EwHwYDVR0j BBgwFoAUsYrv7WYIprOtcvzLuFKtmt+4xJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA4MmJhMGQtMjdlMS00MDAwLWFjZmEtYTE5ZWI5ZTBmNjM3LzAvQjE4QUVGRUQ2 NjA4QTZCM0FENzJGQ0NCQjg1MkFEOUFERkI4QzQ5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMThBRUZFRDY2MDhBNkIzQUQ3MkZDQ0JCODUyQUQ5QURGQjhD NDlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjA4MmJhMGQtMjdlMS00MDAwLWFj ZmEtYTE5ZWI5ZTBmNjM3LzAvQjE4QUVGRUQ2NjA4QTZCM0FENzJGQ0NCQjg1MkFE OUFERkI4QzQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVCiicLfkHqm197MTTSpXAPjOiZbrXJLpnN B0NXcuY2aGrQ/RwlMN7xSaiKdEp8D/rEiy/qREyvFkgirxXxF9vXqAuWuGt3HRBt dTor74Hybs6xW9U3iFMWTE6aEQAW+68ItwEsacSX2i/U8J3ogIvHIqrJuON28IW0 VS3VJeV3K1NS0PLY4PotSSXCKyUwSSpNxfqlpuYp5lxHRF5/PQqLF73FEFdiL5dg ffFY/cmHtgIL6Y68Qjvk+5OSFC24SbXcqQIovVjcD7IuFBvVzEy4CKmGkJKJetlF BPyzQ9kGpG2ixouGLYyBPVqOcySpTrD4cbtUeu5gKFjidSOUD3o= -----END CERTIFICATE-----Generated at Thu Sep 17 13:56:19 2026 by rpki-client