$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft File: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft (raw, json) Hash identifier: MYEavhZgo1BKw7jIKBW74aFf1tCldKrEPkwjsd4QmdA= Subject key identifier: 41:C5:E2:06:A9:0D:8B:C8:F2:EC:9A:6C:75:DF:69:5B:40:96:8D:A1 Authority key identifier: 18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB Certificate issuer: /CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Certificate serial: 288D32608A746AC644F6795915B16D97A2DBA67C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 13:46:24 +0000 Manifest this update: Sat 13 Jun 2026 13:41:24 +0000 Manifest next update: Sun 14 Jun 2026 17:20:24 +0000 Files and hashes: 1: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl (hash: Nm+l/EzOKK+R6H0t6KMqEq5NU2rdr5v1eyh/7BwpDvM=) 2: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: sxzvGSUyyV+/Qltw/wPpDgdpQWS1gtDsJ90OR/mPxn8=) 3: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: anz/jr4eoJ5eQzfHR7W5xMlJS845ed+hSr6JxtIfUAA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8d:32:60:8a:74:6a:c6:44:f6:79:59:15:b1:6d:97:a2:db:a6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Validity Not Before: Jun 13 13:41:24 2026 GMT Not After : Jun 14 17:20:24 2026 GMT Subject: CN=41C5E206A90D8BC8F2EC9A6C75DF695B40968DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:39:31:04:49:09:b2:5e:7a:48:b1:07:c7: 4b:d3:b7:c0:f5:ad:84:12:68:d8:cf:13:93:c8:55: 77:3f:31:04:c5:81:45:d9:f5:12:5a:40:4d:22:37: e7:65:6b:50:e8:1a:d3:cf:88:bb:82:4e:c0:60:c1: fb:3c:a1:e3:22:7d:a4:d8:0f:10:59:7b:66:14:fa: 10:a8:a7:57:0a:b4:f1:cf:99:08:e1:bf:29:d2:0b: 63:47:a7:70:7f:66:d3:e5:3f:7e:a7:21:92:a8:d3: 74:ee:09:c5:be:c1:b2:d0:31:83:c0:07:5d:69:7d: ae:6f:e3:cc:ed:ca:16:f2:81:69:4d:14:56:a3:26: 9d:1a:ab:b9:18:39:f5:da:b9:f9:aa:1e:48:59:00: b7:3d:3b:54:c7:ab:3a:fd:52:79:31:d3:59:a1:bf: 90:0d:23:21:1e:23:d2:ad:ca:35:3a:f8:27:f9:b7: dd:21:6b:ef:dc:b0:6c:13:f4:ec:28:7c:de:21:5d: c2:39:33:25:b8:f3:1c:c1:39:9d:84:f7:d2:61:93: 53:33:8c:5b:fa:0d:fe:8e:c1:13:92:ed:40:66:64: d3:8b:db:ca:5d:39:96:3a:1c:76:df:5b:3e:c7:97: d9:c0:5d:73:ea:4e:ef:cf:f5:83:89:76:5b:a9:d2: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C5:E2:06:A9:0D:8B:C8:F2:EC:9A:6C:75:DF:69:5B:40:96:8D:A1 X509v3 Authority Key Identifier: keyid:18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:16:07:26:01:0c:6e:8d:c5:1d:86:b7:79:cc:ba:df:00:05: a3:f1:0f:b4:d1:d1:2d:75:00:ba:b9:c3:1a:09:bb:9c:c5:07: 29:a9:dd:16:08:40:4e:cc:31:78:d8:e1:3e:a3:09:0e:d2:b5: 5f:07:5b:aa:83:c9:ed:55:9d:44:76:29:a0:71:c9:94:f4:04: b9:ac:2c:dc:c8:3d:4d:70:bf:7e:c3:2b:33:f8:bd:b6:a1:0c: 4e:ff:7e:7e:ed:13:56:32:16:1b:0a:cc:94:91:9c:7a:04:09: 8d:15:50:1a:69:33:24:18:17:97:f4:14:79:fe:32:37:72:64: a4:73:b8:d6:2b:4b:e7:94:82:d1:6d:3e:16:af:70:06:20:ba: 07:dd:34:9e:93:de:03:68:cd:81:ce:b9:a7:3a:25:62:5a:94: ab:9a:f7:cf:79:9f:ed:26:e1:f3:2e:c7:48:ca:25:59:43:68: 96:ae:a6:7c:14:e1:e4:a2:aa:b0:bc:b8:e3:f6:1c:1a:b3:41: c2:3f:3a:5e:d5:fe:72:c8:9e:12:f4:f5:80:91:de:0c:e8:0a: 7e:46:99:a7:e9:f9:2e:58:51:3b:38:45:f9:b0:51:c0:08:c7: 02:e5:91:cc:24:90:bb:11:97:44:e4:79:bf:32:9d:7a:67:00: 26:76:34:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKI0yYIp0asZE9nlZFbFtl6LbpnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0 QTc1NTVBQjAeFw0yNjA2MTMxMzQxMjRaFw0yNjA2MTQxNzIwMjRaMDMxMTAvBgNV BAMTKDQxQzVFMjA2QTkwRDhCQzhGMkVDOUE2Qzc1REY2OTVCNDA5NjhEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKDkxBEkJsl56SLEHx0vTt8D1 rYQSaNjPE5PIVXc/MQTFgUXZ9RJaQE0iN+dla1DoGtPPiLuCTsBgwfs8oeMifaTY DxBZe2YU+hCop1cKtPHPmQjhvynSC2NHp3B/ZtPlP36nIZKo03TuCcW+wbLQMYPA B11pfa5v48ztyhbygWlNFFajJp0aq7kYOfXaufmqHkhZALc9O1THqzr9Unkx01mh v5ANIyEeI9KtyjU6+Cf5t90ha+/csGwT9OwofN4hXcI5MyW48xzBOZ2E99Jhk1Mz jFv6Df6OwROS7UBmZNOL28pdOZY6HHbfWz7Hl9nAXXPqTu/P9YOJdlup0mTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQcXiBqkNi8jy7Jpsdd9pW0CWjaEwHwYDVR0j BBgwFoAUGPvFblz8yaHehofiX7xt/Ep1VaswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ1OThlOTktZTlmZi00YWJlLWIwOGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1 Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0QTc1NTVBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEZCQzU2RTVDRkNDOUExREU4Njg3RTI1RkJDNkRGQzRBNzU1 NUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZE RkM0QTc1NTVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIWByYBDG6NxR2Gt3nMut8ABaPxD7TR0S11 ALq5wxoJu5zFBymp3RYIQE7MMXjY4T6jCQ7StV8HW6qDye1VnUR2KaBxyZT0BLms LNzIPU1wv37DKzP4vbahDE7/fn7tE1YyFhsKzJSRnHoECY0VUBppMyQYF5f0FHn+ MjdyZKRzuNYrS+eUgtFtPhavcAYgugfdNJ6T3gNozYHOuac6JWJalKua9895n+0m 4fMux0jKJVlDaJaupnwU4eSiqrC8uOP2HBqzQcI/Ol7V/nLInhL09YCR3gzoCn5G mafp+S5YUTs4RfmwUcAIxwLlkcwkkLsRl0Tkeb8ynXpnACZ2NOo= -----END CERTIFICATE-----Generated at Sun Jun 14 02:23:02 2026 by rpki-client