$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft File: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft (raw, json) Hash identifier: +Vmj3lMLFQhIHoS24NK6TQ+yoLhQOQz328j9cwt6qT4= Subject key identifier: 30:F0:49:57:31:55:A8:E5:CC:10:66:BD:68:76:60:44:62:75:4B:68 Authority key identifier: D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 Certificate issuer: /CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Certificate serial: 21BA66B73DC7943549490695E16162FE142BD6B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:50:41 +0000 Manifest this update: Tue 16 Jun 2026 17:45:41 +0000 Manifest next update: Wed 17 Jun 2026 20:59:41 +0000 Files and hashes: 1: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl (hash: u517ezh+9/JtPWmmsudd7HBBABK0JwPQVKdmEf9zFsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ba:66:b7:3d:c7:94:35:49:49:06:95:e1:61:62:fe:14:2b:d6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Validity Not Before: Jun 16 17:45:41 2026 GMT Not After : Jun 17 20:59:41 2026 GMT Subject: CN=30F049573155A8E5CC1066BD6876604462754B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:43:c8:13:40:47:54:2b:b6:8f:8c:c4:46:64: 17:2c:1d:60:9e:f5:3c:6a:77:b9:a5:06:25:ed:22: cf:a6:e9:da:81:1b:52:ca:83:fc:84:a1:b4:6c:ad: 2e:06:5f:40:87:2f:fc:34:c5:fa:6d:f6:f4:33:31: 4c:88:07:77:62:f0:62:1b:5a:64:9c:e6:9f:44:b7: 35:a2:27:09:bc:2f:94:68:51:f0:4c:f6:ff:bd:47: 58:a7:e2:29:ab:ff:68:da:b6:b6:b6:b6:de:ad:74: 36:0e:76:02:46:04:28:18:e7:52:c1:47:f6:fa:e4: bf:ef:30:42:ce:48:40:04:11:11:b3:c2:68:df:d3: b4:26:bc:e8:cc:88:88:2e:09:94:dc:f0:a1:7c:48: 9a:09:c4:d1:95:72:d3:d9:61:aa:ba:a9:99:44:4c: d4:11:30:d4:f4:4e:dd:39:e5:c0:77:c1:84:db:43: 0f:34:b9:1a:85:f3:07:c6:67:0b:46:17:43:83:0a: 76:0b:7c:bc:d2:d0:f5:7f:e4:1a:3a:81:3b:a6:87: c5:fa:b4:f0:46:bd:5c:5b:f5:4f:4a:01:8c:38:44: c1:a3:82:0e:6f:31:43:8c:19:37:fd:5c:cd:df:fd: 17:98:6e:f4:67:73:db:5b:b7:d6:9d:bb:b5:2d:fd: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F0:49:57:31:55:A8:E5:CC:10:66:BD:68:76:60:44:62:75:4B:68 X509v3 Authority Key Identifier: keyid:D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:4c:d8:ca:b9:23:ea:90:2f:65:ee:1c:69:49:48:47:cc:cd: b2:c6:c8:9f:b1:e7:1c:a8:e7:62:f6:b9:40:e4:74:40:95:96: c8:42:b9:da:36:7a:d0:f9:22:55:11:6a:d0:f7:a4:fe:06:da: 3d:af:89:c6:02:9c:66:34:36:e4:cc:10:31:1c:90:bd:4d:f9: 73:1e:d2:18:00:01:7a:b3:46:a8:83:bc:97:b3:5e:c5:e7:de: 13:df:81:0c:65:7e:45:8d:28:0c:af:a4:87:65:13:9a:21:52: 6c:73:32:a0:9e:46:7a:6f:fb:7a:da:3b:d6:52:f6:35:2f:11: 95:7a:01:96:6b:0d:29:e9:85:c8:38:2f:a0:0c:f3:9e:5c:ce: 73:80:3e:79:a3:5a:c6:97:31:e6:3b:82:82:e5:bd:f4:60:33: 5b:19:63:8e:f2:af:57:31:69:7a:f7:25:b1:00:73:4c:a2:99: 7c:26:f7:aa:ac:cf:ec:8e:dd:a5:53:4f:bd:fa:35:f2:3e:21: 40:47:a7:a5:48:6c:c6:08:3f:da:0c:62:ba:df:1e:2d:c8:74: f0:1c:0e:f3:81:86:e3:1c:75:a0:57:38:71:7f:4d:78:c0:7e: 5b:04:bb:d8:3a:16:3f:70:0f:48:fd:2a:9f:47:13:9c:eb:e9: a1:d1:97:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbpmtz3HlDVJSQaV4WFi/hQr1rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1 Q0JGQ0NENTAeFw0yNjA2MTYxNzQ1NDFaFw0yNjA2MTcyMDU5NDFaMDMxMTAvBgNV BAMTKDMwRjA0OTU3MzE1NUE4RTVDQzEwNjZCRDY4NzY2MDQ0NjI3NTRCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQ8gTQEdUK7aPjMRGZBcsHWCe 9Txqd7mlBiXtIs+m6dqBG1LKg/yEobRsrS4GX0CHL/w0xfpt9vQzMUyIB3di8GIb WmSc5p9EtzWiJwm8L5RoUfBM9v+9R1in4imr/2jatra2tt6tdDYOdgJGBCgY51LB R/b65L/vMELOSEAEERGzwmjf07QmvOjMiIguCZTc8KF8SJoJxNGVctPZYaq6qZlE TNQRMNT0Tt055cB3wYTbQw80uRqF8wfGZwtGF0ODCnYLfLzS0PV/5Bo6gTumh8X6 tPBGvVxb9U9KAYw4RMGjgg5vMUOMGTf9XM3f/ReYbvRnc9tbt9adu7Ut/b2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMPBJVzFVqOXMEGa9aHZgRGJ1S2gwHwYDVR0j BBgwFoAU0Yr5104eboCXnAY5/RBPD1y/zNUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0 RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1Q0JGQ0NENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMThBRjlENzRFMUU2RTgwOTc5QzA2MzlGRDEwNEYwRjVDQkZD Q0Q1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRG MEY1Q0JGQ0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdM2Mq5I+qQL2XuHGlJSEfMzbLGyJ+x5xyo 52L2uUDkdECVlshCudo2etD5IlURatD3pP4G2j2vicYCnGY0NuTMEDEckL1N+XMe 0hgAAXqzRqiDvJezXsXn3hPfgQxlfkWNKAyvpIdlE5ohUmxzMqCeRnpv+3raO9ZS 9jUvEZV6AZZrDSnphcg4L6AM855cznOAPnmjWsaXMeY7goLlvfRgM1sZY47yr1cx aXr3JbEAc0yimXwm96qsz+yO3aVTT736NfI+IUBHp6VIbMYIP9oMYrrfHi3IdPAc DvOBhuMcdaBXOHF/TXjAflsEu9g6Fj9wD0j9Kp9HE5zr6aHRl5U= -----END CERTIFICATE-----Generated at Wed Jun 17 10:44:09 2026 by rpki-client