$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft File: 218F42D6775F39C04AD2042E61C557053D4A69FE.mft (raw, json) Hash identifier: zoBk6g2NN90yggbbpoNAovtntA1rWuO1TKajav9e7jE= Subject key identifier: 18:58:FC:2D:26:4A:6E:0C:3E:17:61:69:BB:EC:D1:FE:2A:B8:D5:3D Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE Certificate issuer: /CN=218F42D6775F39C04AD2042E61C557053D4A69FE Certificate serial: 6AA6A397C790B4D515926062A29E6A7AA772A4A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft Manifest number: BE Signing time: Sun 20 Sep 2026 21:03:01 +0000 Manifest this update: Sun 20 Sep 2026 20:58:01 +0000 Manifest next update: Mon 21 Sep 2026 22:07:01 +0000 Files and hashes: 1: 218F42D6775F39C04AD2042E61C557053D4A69FE.crl (hash: 5KhTT6D5ppitzlLNnYG8t6OT8dhDzpYxQpeNp87LNm0=) 2: 3130332e3138312e37372e302f32342d3234203d3e20313439333738.roa (hash: CTpJAxD8b2QNT5h88jTGFlELSNgnWrFO4BmZ/0YXD9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a6:a3:97:c7:90:b4:d5:15:92:60:62:a2:9e:6a:7a:a7:72:a4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE Validity Not Before: Sep 20 20:58:01 2026 GMT Not After : Sep 21 22:07:01 2026 GMT Subject: CN=1858FC2D264A6E0C3E176169BBECD1FE2AB8D53D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2d:c7:75:f2:62:03:84:5c:ad:a9:be:32:af: 3a:13:cf:9a:f1:89:d5:54:f2:35:e8:9a:ea:ba:07: e7:bc:9a:59:c3:3d:67:36:40:44:22:af:b3:3b:9b: 29:41:2e:25:05:1c:3f:f3:c7:2d:c4:66:96:b7:6e: e4:88:d2:17:87:c1:8c:55:7c:2c:f5:af:6d:3b:fd: 0b:2f:9c:c3:53:d1:0a:75:2f:49:d4:3b:5f:d6:2b: 2b:6d:a9:16:36:a9:d2:08:9a:d5:73:e9:76:09:18: 67:f0:ec:f8:f2:2f:b0:ec:5f:19:d6:e0:e3:56:c2: 7b:4d:21:4c:f3:6e:d8:05:fd:15:8b:e8:89:5e:46: 42:0c:03:04:5a:df:08:2f:36:86:45:07:94:57:10: 37:6b:0f:19:5d:c0:49:41:e5:38:51:43:68:78:30: 88:77:98:a0:7d:5d:c9:4d:e3:bf:6e:cf:8b:65:25: ec:8d:63:98:28:8b:a7:f9:4f:8b:15:24:75:19:59: 2f:de:94:f3:3b:76:1e:7c:45:9c:fa:42:c4:82:88: 17:98:25:e1:e4:75:cc:a5:30:c4:da:ce:9d:7f:bf: 2f:3f:83:04:08:79:45:f3:96:c7:91:53:f4:d6:ff: 2d:58:b2:dc:85:5d:2a:b6:8f:0c:07:d1:e8:b6:87: 93:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:58:FC:2D:26:4A:6E:0C:3E:17:61:69:BB:EC:D1:FE:2A:B8:D5:3D X509v3 Authority Key Identifier: keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:03:ae:01:d6:68:27:ed:28:04:d3:e7:a9:f2:25:55:0f:19: 08:f5:ec:8b:80:a0:6d:eb:13:82:77:0d:c6:06:16:af:05:c4: 66:7b:a1:0a:08:03:b6:3b:0b:1a:91:ef:79:02:25:13:0e:a9: fc:09:28:32:a5:28:fa:6e:f3:6d:e4:5f:37:b7:15:b9:ed:27: 2d:74:9d:b6:a8:70:49:b3:cd:6f:15:7b:5c:ef:68:43:6a:6a: be:be:dd:75:c0:9f:e1:78:dc:35:b5:60:51:b6:6c:f2:cc:d2: cd:bc:aa:83:e1:64:9a:d1:7e:43:d4:00:68:61:a3:87:e4:98: 7c:b4:b2:ba:cd:b7:b1:89:cf:a6:05:65:e9:c6:5f:f3:26:45: 9f:7d:96:98:d6:ca:8a:59:2f:a0:9a:d3:05:68:fe:99:0f:ab: 7b:d7:97:ce:ee:23:9b:e2:0b:72:aa:71:d5:db:8c:86:c3:de: 4f:61:68:a6:14:d7:ef:82:ae:69:d8:e8:3e:a9:e4:7e:7e:2b: bf:7b:2a:b1:bd:72:c6:76:1e:7d:a9:1d:26:bc:c9:2e:da:58: 0c:3e:f4:0b:c6:fa:e7:f1:87:39:45:ca:0d:dd:33:11:62:58: 9b:38:4d:47:da:10:99:d7:70:ae:0b:32:71:d0:ab:f9:83:a2: f2:63:b7:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqajl8eQtNUVkmBiop5qeqdypKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4RjQyRDY3NzVGMzlDMDRBRDIwNDJFNjFDNTU3MDUz RDRBNjlGRTAeFw0yNjA5MjAyMDU4MDFaFw0yNjA5MjEyMjA3MDFaMDMxMTAvBgNV BAMTKDE4NThGQzJEMjY0QTZFMEMzRTE3NjE2OUJCRUNEMUZFMkFCOEQ1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNLcd18mIDhFytqb4yrzoTz5rx idVU8jXomuq6B+e8mlnDPWc2QEQir7M7mylBLiUFHD/zxy3EZpa3buSI0heHwYxV fCz1r207/QsvnMNT0Qp1L0nUO1/WKyttqRY2qdIImtVz6XYJGGfw7PjyL7DsXxnW 4ONWwntNIUzzbtgF/RWL6IleRkIMAwRa3wgvNoZFB5RXEDdrDxldwElB5ThRQ2h4 MIh3mKB9XclN479uz4tlJeyNY5goi6f5T4sVJHUZWS/elPM7dh58RZz6QsSCiBeY JeHkdcylMMTazp1/vy8/gwQIeUXzlseRU/TW/y1YstyFXSq2jwwH0ei2h5PxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGFj8LSZKbgw+F2Fpu+zR/iq41T0wHwYDVR0j BBgwFoAUIY9C1ndfOcBK0gQuYcVXBT1Kaf4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZjYzQ3MzQtYmViNi00ZTMzLTliMWMtNDZkY2QxNjQyNWExLzAvMjE4RjQyRDY3 NzVGMzlDMDRBRDIwNDJFNjFDNTU3MDUzRDRBNjlGRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMThGNDJENjc3NUYzOUMwNEFEMjA0MkU2MUM1NTcwNTNENEE2 OUZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMjE4RjQyRDY3NzVGMzlDMDRBRDIwNDJFNjFDNTU3 MDUzRDRBNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcDrgHWaCftKATT56nyJVUPGQj17IuAoG3r E4J3DcYGFq8FxGZ7oQoIA7Y7CxqR73kCJRMOqfwJKDKlKPpu823kXze3FbntJy10 nbaocEmzzW8Ve1zvaENqar6+3XXAn+F43DW1YFG2bPLM0s28qoPhZJrRfkPUAGhh o4fkmHy0srrNt7GJz6YFZenGX/MmRZ99lpjWyopZL6Ca0wVo/pkPq3vXl87uI5vi C3KqcdXbjIbD3k9haKYU1++CrmnY6D6p5H5+K797KrG9csZ2Hn2pHSa8yS7aWAw+ 9AvG+ufxhzlFyg3dMxFiWJs4TUfaEJnXcK4LMnHQq/mDovJjt3I= -----END CERTIFICATE-----Generated at Mon Sep 21 04:53:47 2026 by rpki-client