$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft File: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft (raw, json) Hash identifier: yT6rTpBmXkG6OcS8EEwoSr0lOHIX0ErsYCZEWZvPykU= Subject key identifier: DC:9E:1C:06:D1:DB:89:1C:75:CE:D5:86:FD:18:8D:60:22:0B:9C:CE Authority key identifier: 18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB Certificate issuer: /CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Certificate serial: 241A9E27FF30D87413278D5E018A090761BAA3CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft Manifest number: 0102 Signing time: Tue 10 Nov 2026 17:17:52 +0000 Manifest this update: Tue 10 Nov 2026 17:12:52 +0000 Manifest next update: Wed 11 Nov 2026 19:18:52 +0000 Files and hashes: 1: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl (hash: szeOmXjLi5AY+HXMpYrNKMjEvnv++EWNMzqdoAWD3/k=) 2: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: sxzvGSUyyV+/Qltw/wPpDgdpQWS1gtDsJ90OR/mPxn8=) 3: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: anz/jr4eoJ5eQzfHR7W5xMlJS845ed+hSr6JxtIfUAA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1a:9e:27:ff:30:d8:74:13:27:8d:5e:01:8a:09:07:61:ba:a3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Validity Not Before: Nov 10 17:12:52 2026 GMT Not After : Nov 11 19:18:52 2026 GMT Subject: CN=DC9E1C06D1DB891C75CED586FD188D60220B9CCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:d5:76:b1:0c:46:50:9e:a9:91:f1:2c:dc: e8:e9:7c:c8:3b:cb:9a:c1:50:f0:23:21:bc:ff:fd: c3:e6:5a:ba:2a:84:91:88:dd:d5:af:1c:e5:d9:a7: 1d:2e:5e:80:14:9b:71:e1:cb:dc:c4:dd:b9:b7:98: 6a:e9:28:6a:2b:b2:f0:fd:76:81:4f:c4:8d:7a:5e: af:76:16:1b:97:2c:96:d9:93:64:ac:e9:60:0b:e5: ef:a4:db:83:4c:f4:1b:0a:02:15:e7:99:0d:80:9e: 58:e7:13:eb:45:7a:f7:17:26:0a:a5:e4:b8:f2:25: 99:74:80:f7:eb:15:20:93:0f:16:3c:a1:3d:80:b4: 58:73:24:42:79:9f:ef:98:5e:72:10:40:29:e8:ab: 0c:a7:f3:14:76:18:3c:f1:d5:53:a4:26:55:d2:4f: 40:28:3e:6c:c2:e8:fd:5f:52:55:0c:89:0d:19:45: be:f1:e7:82:40:7e:9e:3d:6b:1a:72:7e:8b:47:a8: e9:65:86:ae:6b:ac:ad:4c:20:72:df:b3:d7:5d:14: f3:0e:93:7d:bb:d5:ef:d9:dd:2e:5f:1e:9b:03:bd: a9:3f:ac:d8:4c:b8:9e:83:f4:95:9d:32:6d:5d:db: cd:b7:ca:2d:d4:f8:c2:85:3f:83:28:07:11:53:d4: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9E:1C:06:D1:DB:89:1C:75:CE:D5:86:FD:18:8D:60:22:0B:9C:CE X509v3 Authority Key Identifier: keyid:18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8b:41:c8:36:94:18:65:3b:91:8d:10:1e:f8:e7:4e:72:62: 75:59:b5:22:b0:e8:f1:c7:08:92:18:fe:ad:ac:9c:3c:5e:0e: 26:5f:41:70:a3:d0:31:99:8c:4a:e6:55:3f:3d:6a:75:96:e5: fc:58:2f:2b:8e:13:d9:48:39:fb:86:dc:a3:0c:a8:dd:25:6a: 19:f4:32:dd:a3:40:b0:bd:82:41:e6:5e:97:5b:31:ed:d6:65: 87:4d:71:be:60:e8:f0:ce:89:f7:4e:10:6b:34:ee:13:ef:b1: f3:5a:59:94:8e:27:99:29:a4:18:c4:d8:86:c2:80:eb:61:4c: 55:40:66:55:41:a0:23:4a:dc:2f:0e:76:51:a8:00:47:02:60: 41:d2:b5:e8:ee:09:07:df:3a:a8:00:7a:0e:91:78:13:8d:d0: 8f:0f:f0:17:d3:b6:5b:7a:6b:26:13:57:46:f0:96:1c:47:50: ac:55:ec:da:bd:a4:85:68:a5:ae:8e:cb:19:c3:5f:dc:56:9f: db:9a:cc:a3:79:d2:27:a5:27:75:3d:7f:04:56:12:ad:eb:4c: be:e3:26:98:aa:01:a6:e2:7f:4a:06:5a:f2:4c:bb:46:81:52: ab:b9:95:fe:9d:36:17:ee:79:90:bb:ab:ab:c7:a3:60:24:ae: 1d:05:8a:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJBqeJ/8w2HQTJ41eAYoJB2G6o84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0 QTc1NTVBQjAeFw0yNjExMTAxNzEyNTJaFw0yNjExMTExOTE4NTJaMDMxMTAvBgNV BAMTKERDOUUxQzA2RDFEQjg5MUM3NUNFRDU4NkZEMTg4RDYwMjIwQjlDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgStV2sQxGUJ6pkfEs3OjpfMg7 y5rBUPAjIbz//cPmWroqhJGI3dWvHOXZpx0uXoAUm3Hhy9zE3bm3mGrpKGorsvD9 doFPxI16Xq92FhuXLJbZk2Ss6WAL5e+k24NM9BsKAhXnmQ2AnljnE+tFevcXJgql 5LjyJZl0gPfrFSCTDxY8oT2AtFhzJEJ5n++YXnIQQCnoqwyn8xR2GDzx1VOkJlXS T0AoPmzC6P1fUlUMiQ0ZRb7x54JAfp49axpyfotHqOllhq5rrK1MIHLfs9ddFPMO k3271e/Z3S5fHpsDvak/rNhMuJ6D9JWdMm1d2823yi3U+MKFP4MoBxFT1Jt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3J4cBtHbiRx1ztWG/RiNYCILnM4wHwYDVR0j BBgwFoAUGPvFblz8yaHehofiX7xt/Ep1VaswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ1OThlOTktZTlmZi00YWJlLWIwOGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1 Q0ZDQzlBMURFODY4N0UyNUZCQzZERkM0QTc1NTVBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xOEZCQzU2RTVDRkNDOUExREU4Njg3RTI1RkJDNkRGQzRBNzU1 NUFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvMThGQkM1NkU1Q0ZDQzlBMURFODY4N0UyNUZCQzZE RkM0QTc1NTVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKLQcg2lBhlO5GNEB74505yYnVZtSKw6PHH CJIY/q2snDxeDiZfQXCj0DGZjErmVT89anWW5fxYLyuOE9lIOfuG3KMMqN0lahn0 Mt2jQLC9gkHmXpdbMe3WZYdNcb5g6PDOifdOEGs07hPvsfNaWZSOJ5kppBjE2IbC gOthTFVAZlVBoCNK3C8OdlGoAEcCYEHStejuCQffOqgAeg6ReBON0I8P8BfTtlt6 ayYTV0bwlhxHUKxV7Nq9pIVopa6OyxnDX9xWn9uazKN50ielJ3U9fwRWEq3rTL7j JpiqAabif0oGWvJMu0aBUqu5lf6dNhfueZC7q6vHo2Akrh0FikI= -----END CERTIFICATE-----Generated at Wed Nov 11 01:30:46 2026 by rpki-client