$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft File: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft (raw, json) Hash identifier: GykVQKzXd+uPgsCweuH5SZMJYLP6r+ycWUhj3zskqlw= Subject key identifier: C0:BE:D1:F5:9D:5D:80:95:76:5F:96:85:5D:50:CF:ED:19:45:15:D8 Authority key identifier: D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 Certificate issuer: /CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Certificate serial: 42B4A7BBFE5B91A70EE6F8D94403D91C8E49F3CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft Manifest number: BB Signing time: Sun 20 Sep 2026 03:26:18 +0000 Manifest this update: Sun 20 Sep 2026 03:21:18 +0000 Manifest next update: Mon 21 Sep 2026 04:33:18 +0000 Files and hashes: 1: D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl (hash: i21nSqE3vX13kv2ad4skhBoocEG6uQ1lziC4RcF7wlM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 04:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b4:a7:bb:fe:5b:91:a7:0e:e6:f8:d9:44:03:d9:1c:8e:49:f3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5 Validity Not Before: Sep 20 03:21:18 2026 GMT Not After : Sep 21 04:33:18 2026 GMT Subject: CN=C0BED1F59D5D8095765F96855D50CFED194515D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:d4:d3:8a:52:9a:44:8e:2c:a1:ab:e5:1b: a0:45:88:1e:a0:5c:b1:4d:2c:e4:fc:d2:43:3f:87: 81:a3:7d:2e:cc:4e:73:8f:5f:d9:7d:aa:d7:5a:13: 18:29:fc:86:d8:e8:2f:d7:77:88:52:e0:0c:25:7e: 96:c3:2e:7f:fe:03:c0:96:35:e6:a6:cd:2b:2d:0a: 1b:ca:e7:d6:bd:c4:d6:e6:b5:fa:72:21:34:9e:30: 7d:67:65:f4:18:26:5e:77:05:0a:54:13:51:98:33: 51:7e:0c:72:27:47:ad:f5:7c:90:b6:2a:8b:30:9d: f5:55:dd:be:85:a6:d7:81:91:d8:4a:69:87:bd:96: a7:a3:a3:0d:63:21:40:8e:2e:6f:48:75:9c:15:72: 53:97:7b:bf:e5:6a:70:e5:83:22:37:4e:b9:4d:6d: ce:ca:08:80:ed:66:c4:dc:89:8b:bb:d5:98:0c:ae: b9:0f:4e:07:7a:32:c5:99:eb:9b:71:cd:e0:34:ad: 3c:5a:11:2a:bb:85:b9:ae:c6:50:96:2d:45:04:c7: 27:37:89:7c:74:94:c9:e6:ab:69:09:2a:2f:df:88: 6f:2b:b9:52:ad:4f:73:61:68:ef:29:ad:37:b1:83: 9c:65:06:ac:7c:ba:fd:7b:1c:72:c0:a4:ae:6b:a3: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BE:D1:F5:9D:5D:80:95:76:5F:96:85:5D:50:CF:ED:19:45:15:D8 X509v3 Authority Key Identifier: keyid:D1:8A:F9:D7:4E:1E:6E:80:97:9C:06:39:FD:10:4F:0F:5C:BF:CC:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/D18AF9D74E1E6E80979C0639FD104F0F5CBFCCD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:98:28:6d:9c:f6:8e:b8:8e:85:d3:41:26:03:fc:96:b1:ef: c8:a5:15:f1:eb:6f:e5:e3:95:1c:6c:7a:20:4a:fc:ae:7d:09: e3:f5:c9:3a:5d:c4:6f:0a:c9:39:bc:42:81:05:1c:eb:10:87: ed:d0:61:af:94:12:6e:97:b7:ee:17:55:07:a1:45:b6:93:50: 4d:f8:49:96:09:ee:94:2a:06:44:38:8d:66:02:72:d8:c6:17: f1:ed:ce:81:88:ad:0d:a6:24:78:6a:76:da:7a:e7:45:ca:65: 01:80:fd:4a:86:4c:85:3e:cc:c7:1c:1c:72:f8:2b:3b:06:a9: 7d:1d:9c:cf:c7:ab:8d:ea:94:e6:2b:5e:01:34:bd:fc:54:d8: ae:e8:62:f7:5e:91:59:f9:da:6b:30:7f:a7:87:6d:36:de:df: 1a:e5:4a:6f:72:21:68:c0:13:b7:83:38:53:29:c0:31:b2:c0: 24:41:aa:62:08:f7:63:9e:e6:24:e0:4c:85:2a:08:88:ea:74: 39:c6:50:31:cb:f1:8a:81:a4:50:de:94:09:ed:81:be:85:ec: 13:93:8f:98:70:94:a5:e8:64:d7:23:5a:a5:2c:96:e7:c6:43: fd:ca:78:01:24:d6:37:ce:38:1a:81:c2:cb:38:6f:eb:f3:fc: 68:52:b6:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrSnu/5bkacO5vjZRAPZHI5J88swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1 Q0JGQ0NENTAeFw0yNjA5MjAwMzIxMThaFw0yNjA5MjEwNDMzMThaMDMxMTAvBgNV BAMTKEMwQkVEMUY1OUQ1RDgwOTU3NjVGOTY4NTVENTBDRkVEMTk0NTE1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DdTTilKaRI4soavlG6BFiB6g XLFNLOT80kM/h4GjfS7MTnOPX9l9qtdaExgp/IbY6C/Xd4hS4AwlfpbDLn/+A8CW NeamzSstChvK59a9xNbmtfpyITSeMH1nZfQYJl53BQpUE1GYM1F+DHInR631fJC2 KoswnfVV3b6FpteBkdhKaYe9lqejow1jIUCOLm9IdZwVclOXe7/lanDlgyI3TrlN bc7KCIDtZsTciYu71ZgMrrkPTgd6MsWZ65txzeA0rTxaESq7hbmuxlCWLUUExyc3 iXx0lMnmq2kJKi/fiG8ruVKtT3NhaO8prTexg5xlBqx8uv17HHLApK5ro62LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwL7R9Z1dgJV2X5aFXVDP7RlFFdgwHwYDVR0j BBgwFoAU0Yr5104eboCXnAY5/RBPD1y/zNUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0 RTFFNkU4MDk3OUMwNjM5RkQxMDRGMEY1Q0JGQ0NENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMThBRjlENzRFMUU2RTgwOTc5QzA2MzlGRDEwNEYwRjVDQkZD Q0Q1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvRDE4QUY5RDc0RTFFNkU4MDk3OUMwNjM5RkQxMDRG MEY1Q0JGQ0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiYKG2c9o64joXTQSYD/Jax78ilFfHrb+Xj lRxseiBK/K59CeP1yTpdxG8KyTm8QoEFHOsQh+3QYa+UEm6Xt+4XVQehRbaTUE34 SZYJ7pQqBkQ4jWYCctjGF/HtzoGIrQ2mJHhqdtp650XKZQGA/UqGTIU+zMccHHL4 KzsGqX0dnM/Hq43qlOYrXgE0vfxU2K7oYvdekVn52mswf6eHbTbe3xrlSm9yIWjA E7eDOFMpwDGywCRBqmII92Oe5iTgTIUqCIjqdDnGUDHL8YqBpFDelAntgb6F7BOT j5hwlKXoZNcjWqUslufGQ/3KeAEk1jfOOBqBwss4b+vz/GhStng= -----END CERTIFICATE-----Generated at Sun Sep 20 20:12:53 2026 by rpki-client