$ rpki-client -vvf rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft File: 894922C88540134FD0720922490A7B1A86BB095D.mft (raw, json) Hash identifier: 1L8oFMRMh4aLiSVPqj3TJKdktsooI0ong4phFZekyRg= Subject key identifier: 36:00:78:7E:CA:0E:68:01:D5:25:C0:63:57:35:44:BE:18:63:C6:62 Authority key identifier: 89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D Certificate issuer: /CN=894922C88540134FD0720922490A7B1A86BB095D Certificate serial: 1031B141296961A70F3AE5E26BF408B51BDACE13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:16:59 +0000 Manifest this update: Tue 12 May 2026 17:11:59 +0000 Manifest next update: Wed 13 May 2026 18:51:59 +0000 Files and hashes: 1: 894922C88540134FD0720922490A7B1A86BB095D.crl (hash: BgiDrilVrx4crnTLehn33mxG/uzyx8rccQHWcwBQ4R0=) 2: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (hash: 8OzcRZA1lD3AdbPpL4Nzj+FjTPuwBtmQz/Ml05mIlM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:31:b1:41:29:69:61:a7:0f:3a:e5:e2:6b:f4:08:b5:1b:da:ce:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894922C88540134FD0720922490A7B1A86BB095D Validity Not Before: May 12 17:11:59 2026 GMT Not After : May 13 18:51:59 2026 GMT Subject: CN=3600787ECA0E6801D525C063573544BE1863C662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:ee:ad:94:f3:00:83:b6:3a:ae:f9:31:4d: 7b:63:8f:2f:48:f4:c7:b9:17:de:13:ff:d8:cb:9c: f6:86:42:21:68:a1:52:35:28:f5:10:78:e1:22:d2: c6:b0:98:59:43:fa:d6:4d:7e:3b:72:f1:a7:45:fd: 9d:aa:11:60:6d:ec:df:b6:ee:fa:dc:88:5e:a7:87: 0d:2d:9b:b4:cd:c0:4d:c1:e1:f8:b7:d2:bf:91:0c: 6e:62:70:bb:07:1a:bc:65:8c:66:9f:b5:2e:bf:5e: c7:54:61:c4:a1:9b:d9:9a:62:91:fd:99:11:49:01: da:66:c4:16:1a:85:73:c1:ef:bc:1e:79:82:85:69: 39:d8:34:a7:e6:93:f9:30:73:cf:7a:88:84:42:46: f4:f6:6c:64:d2:47:f6:d4:44:23:d7:c2:5c:be:ac: 45:e3:c0:02:0e:22:26:a6:98:12:08:60:35:e2:07: 16:69:b3:45:05:5f:9c:87:e7:cf:5f:39:7c:de:af: b3:b9:84:32:1b:70:b3:e2:55:e8:c6:c3:a9:00:5d: 8f:6e:ef:cb:32:cd:8f:84:ae:de:88:44:34:96:1a: 47:49:4e:51:83:51:4b:2b:ae:dd:05:a5:0a:44:c9: 29:30:6e:18:67:d4:8b:ee:f0:b3:8f:7f:68:f6:0a: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:00:78:7E:CA:0E:68:01:D5:25:C0:63:57:35:44:BE:18:63:C6:62 X509v3 Authority Key Identifier: keyid:89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:63:de:52:ca:ca:fd:59:bf:89:85:16:be:ec:9b:3f:0b:70: e2:4a:f6:40:a2:c7:b3:80:89:29:1a:2b:4e:00:8d:fd:93:e3: a7:46:10:10:30:30:91:e4:fb:15:9d:c3:17:41:25:8c:9d:00: 6b:d0:b3:4d:52:64:6b:ee:ba:c0:6b:a2:20:37:e2:40:28:03: 5f:75:92:c0:ea:2b:49:b5:c8:b6:f0:83:a0:4b:61:35:5e:be: 92:97:e7:77:e4:fa:d3:99:19:9b:01:5c:80:7f:c6:43:c6:e6: 6a:85:8d:1a:f7:e6:33:61:4c:68:68:78:07:33:fb:eb:7e:63: 02:a7:47:3b:53:9c:f0:bd:94:dc:9b:c0:75:04:31:fe:ed:dd: c0:a2:75:b1:d9:1f:42:f5:6f:b7:23:26:a3:41:49:f4:fc:ef: 0b:c4:09:ae:f7:2e:c2:f1:25:36:f5:2c:c0:ea:de:4c:69:75: da:7d:a4:f1:f9:04:09:ef:c7:5e:24:2b:6b:38:02:fc:4c:4c: 37:f1:ed:16:7f:ca:bf:30:5f:3b:d5:1d:6b:c4:2d:80:b4:96: d4:01:67:be:f1:12:f5:10:56:30:64:0f:af:ef:b0:51:bb:f2: 65:35:2c:71:55:cd:21:2e:8d:94:64:31:4b:0d:ce:5f:64:a3: da:4b:b0:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDGxQSlpYacPOuXia/QItRvazhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4 NkJCMDk1RDAeFw0yNjA1MTIxNzExNTlaFw0yNjA1MTMxODUxNTlaMDMxMTAvBgNV BAMTKDM2MDA3ODdFQ0EwRTY4MDFENTI1QzA2MzU3MzU0NEJFMTg2M0M2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAu6tlPMAg7Y6rvkxTXtjjy9I 9Me5F94T/9jLnPaGQiFooVI1KPUQeOEi0sawmFlD+tZNfjty8adF/Z2qEWBt7N+2 7vrciF6nhw0tm7TNwE3B4fi30r+RDG5icLsHGrxljGaftS6/XsdUYcShm9maYpH9 mRFJAdpmxBYahXPB77weeYKFaTnYNKfmk/kwc896iIRCRvT2bGTSR/bURCPXwly+ rEXjwAIOIiammBIIYDXiBxZps0UFX5yH589fOXzer7O5hDIbcLPiVejGw6kAXY9u 78syzY+Ert6IRDSWGkdJTlGDUUsrrt0FpQpEySkwbhhn1Ivu8LOPf2j2CnBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNgB4fsoOaAHVJcBjVzVEvhhjxmIwHwYDVR0j BBgwFoAUiUkiyIVAE0/QcgkiSQp7Goa7CV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM2ZDZhNGYtY2MzOS00ZDllLTg0MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4 NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4NkJCMDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTQ5MjJDODg1NDAxMzRGRDA3MjA5MjI0OTBBN0IxQTg2QkIw OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYtY2MzOS00ZDllLTg0 MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdC MUE4NkJCMDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlj3lLKyv1Zv4mFFr7smz8LcOJK9kCix7OA iSkaK04Ajf2T46dGEBAwMJHk+xWdwxdBJYydAGvQs01SZGvuusBroiA34kAoA191 ksDqK0m1yLbwg6BLYTVevpKX53fk+tOZGZsBXIB/xkPG5mqFjRr35jNhTGhoeAcz ++t+YwKnRztTnPC9lNybwHUEMf7t3cCidbHZH0L1b7cjJqNBSfT87wvECa73LsLx JTb1LMDq3kxpddp9pPH5BAnvx14kK2s4AvxMTDfx7RZ/yr8wXzvVHWvELYC0ltQB Z77xEvUQVjBkD6/vsFG78mU1LHFVzSEujZRkMUsNzl9ko9pLsIg= -----END CERTIFICATE-----Generated at Wed May 13 00:54:33 2026 by rpki-client