$ rpki-client -vvf rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft File: 894922C88540134FD0720922490A7B1A86BB095D.mft (raw, json) Hash identifier: +bopx3FVRrjY3iSSwhtmT60bCKQTAH8jlbMJ+t/MAiE= Subject key identifier: 9F:EE:0E:FD:87:D8:53:93:F1:DE:D9:30:B9:C3:3A:52:B9:1E:4A:65 Authority key identifier: 89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D Certificate issuer: /CN=894922C88540134FD0720922490A7B1A86BB095D Certificate serial: 526D2DEAA9663B0395060EE4A55FF9833EA628D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 08:09:30 +0000 Manifest this update: Fri 24 Jul 2026 08:04:30 +0000 Manifest next update: Sat 25 Jul 2026 10:11:30 +0000 Files and hashes: 1: 894922C88540134FD0720922490A7B1A86BB095D.crl (hash: Io9ARSjTJsX1Rzfxr9nOsJ7i9L50MLtdp30552IIF/w=) 2: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (hash: 8OzcRZA1lD3AdbPpL4Nzj+FjTPuwBtmQz/Ml05mIlM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6d:2d:ea:a9:66:3b:03:95:06:0e:e4:a5:5f:f9:83:3e:a6:28:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894922C88540134FD0720922490A7B1A86BB095D Validity Not Before: Jul 24 08:04:30 2026 GMT Not After : Jul 25 10:11:30 2026 GMT Subject: CN=9FEE0EFD87D85393F1DED930B9C33A52B91E4A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:d0:1f:db:b8:dc:35:1b:1f:e8:d1:10:dd: 64:26:b5:e4:dc:58:39:d9:da:ca:6a:71:76:72:ef: c1:c6:c4:a0:d6:38:96:66:80:89:d2:0f:73:24:fb: 64:09:8a:ba:85:55:c6:6f:7e:6c:ce:c0:99:1c:32: 8e:48:23:74:91:5d:4f:c4:93:29:e9:46:cd:96:2c: 6f:63:c9:dc:4d:34:27:3b:a3:43:e9:ca:d8:7d:1e: 1c:61:5b:fd:7f:ff:5c:2a:34:eb:3c:4d:70:77:63: 4f:a0:4c:b8:b4:ee:da:be:c1:f6:91:a9:18:5e:de: 3f:4c:5c:01:fc:89:e6:c0:ae:c7:25:0d:24:74:d2: e4:35:50:f8:f0:a7:b8:02:07:88:36:7e:88:2c:50: d1:0e:f9:2f:6c:13:da:d5:1b:13:c4:0a:b0:4f:bc: b9:30:a2:2e:cb:df:a1:ad:f3:28:d4:7a:93:5a:6d: 27:dc:8b:b5:ad:1d:55:59:f1:15:01:59:85:65:7f: e6:97:a6:cc:c2:0a:1f:55:59:52:ba:63:ca:44:01: b3:fb:fc:a5:f0:0b:08:80:e8:3a:eb:4d:62:2a:db: ad:2f:c2:54:12:51:74:95:d6:95:4c:ab:f1:25:bc: 72:b0:c1:7c:b5:46:b6:03:29:7c:f5:a8:bb:d1:fd: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EE:0E:FD:87:D8:53:93:F1:DE:D9:30:B9:C3:3A:52:B9:1E:4A:65 X509v3 Authority Key Identifier: keyid:89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:93:04:77:5e:21:b7:94:36:a8:95:7b:79:da:bd:a9:b4:b2: d7:71:98:64:f3:fc:8a:41:01:04:c6:5f:3d:81:04:18:6a:75: 1a:7c:7d:fc:43:31:5a:9f:71:8b:37:30:79:63:ce:39:82:0a: ac:79:1d:ad:ce:bb:78:87:27:a7:10:89:e2:a8:21:fd:b8:9e: 2b:14:bc:0d:c8:7c:92:67:af:99:e1:97:9e:37:13:ce:03:4e: 82:3e:a6:99:53:b9:37:42:e8:c9:a3:f2:f0:17:98:5b:e6:3a: 2c:b6:9e:45:26:2a:43:01:8e:f1:01:47:30:17:8a:3f:ee:3d: 63:9d:2a:9b:c6:0f:2c:be:00:ff:0f:ba:bf:2b:89:11:12:30: 24:31:d5:a3:08:f6:e1:ae:3a:fb:06:62:d4:5c:de:eb:f4:ff: 86:b0:63:c5:a9:64:1e:49:d6:90:d7:ab:c2:fd:c5:cd:ef:af: a9:21:17:87:1c:db:e8:cd:47:cc:98:ee:39:4f:07:25:f8:c1: a0:48:79:95:72:f3:3e:57:ae:63:d5:c8:3b:15:30:53:c3:85: e8:fc:f0:bb:34:13:fa:84:50:99:25:5b:da:8d:ee:89:3c:43: d6:26:d2:f5:a0:52:e3:40:d1:3d:b8:a0:ce:3d:9e:00:4f:09: 41:9f:af:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUm0t6qlmOwOVBg7kpV/5gz6mKNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4 NkJCMDk1RDAeFw0yNjA3MjQwODA0MzBaFw0yNjA3MjUxMDExMzBaMDMxMTAvBgNV BAMTKDlGRUUwRUZEODdEODUzOTNGMURFRDkzMEI5QzMzQTUyQjkxRTRBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmpNAf27jcNRsf6NEQ3WQmteTc WDnZ2spqcXZy78HGxKDWOJZmgInSD3Mk+2QJirqFVcZvfmzOwJkcMo5II3SRXU/E kynpRs2WLG9jydxNNCc7o0Ppyth9HhxhW/1//1wqNOs8TXB3Y0+gTLi07tq+wfaR qRhe3j9MXAH8iebArsclDSR00uQ1UPjwp7gCB4g2fogsUNEO+S9sE9rVGxPECrBP vLkwoi7L36Gt8yjUepNabSfci7WtHVVZ8RUBWYVlf+aXpszCCh9VWVK6Y8pEAbP7 /KXwCwiA6DrrTWIq260vwlQSUXSV1pVMq/ElvHKwwXy1RrYDKXz1qLvR/b2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn+4O/YfYU5Px3tkwucM6UrkeSmUwHwYDVR0j BBgwFoAUiUkiyIVAE0/QcgkiSQp7Goa7CV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM2ZDZhNGYtY2MzOS00ZDllLTg0MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4 NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4NkJCMDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTQ5MjJDODg1NDAxMzRGRDA3MjA5MjI0OTBBN0IxQTg2QkIw OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYtY2MzOS00ZDllLTg0 MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdC MUE4NkJCMDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+TBHdeIbeUNqiVe3navam0stdxmGTz/IpB AQTGXz2BBBhqdRp8ffxDMVqfcYs3MHljzjmCCqx5Ha3Ou3iHJ6cQieKoIf24nisU vA3IfJJnr5nhl543E84DToI+pplTuTdC6Mmj8vAXmFvmOiy2nkUmKkMBjvEBRzAX ij/uPWOdKpvGDyy+AP8Pur8riRESMCQx1aMI9uGuOvsGYtRc3uv0/4awY8WpZB5J 1pDXq8L9xc3vr6khF4cc2+jNR8yY7jlPByX4waBIeZVy8z5XrmPVyDsVMFPDhej8 8Ls0E/qEUJklW9qN7ok8Q9Ym0vWgUuNA0T24oM49ngBPCUGfr7k= -----END CERTIFICATE-----Generated at Fri Jul 24 12:36:30 2026 by rpki-client