$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft File: 894922C88540134FD0720922490A7B1A86BB095D.mft (raw, json) Hash identifier: 9riSwTn2gUsrYoSQhMZfwlzGQjUB+Ars1TWl1LhKu/w= Subject key identifier: AC:81:8C:8E:3B:AE:11:5A:51:68:1B:2A:AC:91:45:5C:C1:F0:3C:BF Authority key identifier: 89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D Certificate issuer: /CN=894922C88540134FD0720922490A7B1A86BB095D Certificate serial: 40EB61E43A7943C66B2F2E8E91247AC1B4BB7925 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 01:01:16 +0000 Manifest this update: Fri 25 Sep 2026 00:56:16 +0000 Manifest next update: Sat 26 Sep 2026 04:03:16 +0000 Files and hashes: 1: 894922C88540134FD0720922490A7B1A86BB095D.crl (hash: 2pP7SRE33SiGLWD3AtrIvn/6szSG4HqTff+zh0R7B5Y=) 2: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (hash: 8OzcRZA1lD3AdbPpL4Nzj+FjTPuwBtmQz/Ml05mIlM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:eb:61:e4:3a:79:43:c6:6b:2f:2e:8e:91:24:7a:c1:b4:bb:79:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894922C88540134FD0720922490A7B1A86BB095D Validity Not Before: Sep 25 00:56:16 2026 GMT Not After : Sep 26 04:03:16 2026 GMT Subject: CN=AC818C8E3BAE115A51681B2AAC91455CC1F03CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:bf:e7:ef:b7:6d:00:7e:fb:b4:a4:84:68: 17:16:f4:08:f9:46:8a:ee:e9:0d:f4:0a:ae:1b:6c: 20:e5:d9:6c:e4:b9:f1:82:aa:a1:fa:78:44:29:3b: 74:22:87:e5:cf:75:74:71:cc:3d:21:a0:ea:2d:f8: ee:25:b7:cc:16:6a:af:db:32:5e:b9:9d:90:89:ea: a6:24:8b:4c:c8:c9:51:5d:3e:19:9b:f2:2d:d0:57: b7:6f:62:c3:d7:28:22:94:e2:a3:5b:8d:e9:56:77: 18:28:d1:f2:f9:7e:fa:88:72:5f:8f:37:75:f5:3d: 4e:77:74:70:2a:80:9c:aa:3b:4e:35:ef:a1:d3:54: 34:da:91:52:fb:37:79:19:31:d3:cb:f2:42:3c:d5: f2:4a:7f:b8:30:95:7e:1e:81:a6:6d:8f:a7:16:c2: d7:e4:27:14:6c:5f:72:9f:c9:ac:be:62:9c:d1:f9: 11:94:d3:c7:0a:b0:f4:0b:0c:b8:42:88:52:a2:36: 89:a9:dd:3e:4d:b0:43:49:8e:89:0f:6b:38:f0:2f: 23:97:cf:2d:75:bd:9e:6f:21:4e:f6:b2:4d:71:1d: 86:1e:ee:2a:d4:17:45:ed:42:93:2b:4b:e5:15:a0: 37:05:0b:42:8e:8f:76:bd:d4:4c:d4:31:98:04:2e: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:81:8C:8E:3B:AE:11:5A:51:68:1B:2A:AC:91:45:5C:C1:F0:3C:BF X509v3 Authority Key Identifier: keyid:89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fc:5e:e0:aa:8f:78:37:86:f1:7e:4a:4d:34:17:31:0b:2f: c8:2d:e7:91:97:14:e5:d3:b4:15:c4:3b:6f:96:26:c1:80:d8: 39:58:31:7a:9c:53:f1:97:07:2c:65:ae:5e:37:f5:7c:8a:32: 7d:04:22:9a:0a:88:22:11:d2:05:bb:f8:2f:08:87:00:af:2a: 56:60:0b:04:92:35:32:b6:1b:11:03:10:2c:b4:2a:2c:b5:a8: b2:59:0c:d9:b2:ec:31:79:d7:ec:68:8d:34:d4:b9:ff:4d:5e: 88:94:7e:5b:f1:af:00:18:4a:51:c7:3b:63:b0:8e:d5:27:5b: 55:52:39:79:2f:f9:02:93:93:c8:90:90:30:fc:c1:a9:f7:f6: f7:38:1d:b7:83:e3:87:8c:54:74:72:7c:39:f7:a3:79:23:4c: d2:b2:ea:ab:de:81:9f:2a:bf:d3:d6:45:1d:04:a0:65:dc:c7: f9:87:07:c3:e1:f7:07:61:12:41:f0:68:54:8b:d5:72:17:03: b7:ce:37:7f:5f:48:76:70:5e:83:17:0f:57:32:7f:96:66:a3: e0:30:60:a5:70:18:30:29:c9:b8:94:1c:65:0c:5a:4e:8f:c4: 5f:da:95:af:9e:4b:5f:08:ea:34:a1:f4:8e:5f:b5:87:a8:30: 11:a4:ec:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQOth5Dp5Q8ZrLy6OkSR6wbS7eSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4 NkJCMDk1RDAeFw0yNjA5MjUwMDU2MTZaFw0yNjA5MjYwNDAzMTZaMDMxMTAvBgNV BAMTKEFDODE4QzhFM0JBRTExNUE1MTY4MUIyQUFDOTE0NTVDQzFGMDNDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZIr/n77dtAH77tKSEaBcW9Aj5 Roru6Q30Cq4bbCDl2WzkufGCqqH6eEQpO3Qih+XPdXRxzD0hoOot+O4lt8wWaq/b Ml65nZCJ6qYki0zIyVFdPhmb8i3QV7dvYsPXKCKU4qNbjelWdxgo0fL5fvqIcl+P N3X1PU53dHAqgJyqO04176HTVDTakVL7N3kZMdPL8kI81fJKf7gwlX4egaZtj6cW wtfkJxRsX3Kfyay+YpzR+RGU08cKsPQLDLhCiFKiNomp3T5NsENJjokPazjwLyOX zy11vZ5vIU72sk1xHYYe7irUF0XtQpMrS+UVoDcFC0KOj3a91EzUMZgELqMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrIGMjjuuEVpRaBsqrJFFXMHwPL8wHwYDVR0j BBgwFoAUiUkiyIVAE0/QcgkiSQp7Goa7CV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM2ZDZhNGYtY2MzOS00ZDllLTg0MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4 NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4NkJCMDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTQ5MjJDODg1NDAxMzRGRDA3MjA5MjI0OTBBN0IxQTg2QkIw OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYtY2MzOS00ZDllLTg0 MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdC MUE4NkJCMDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL8XuCqj3g3hvF+Sk00FzELL8gt55GXFOXT tBXEO2+WJsGA2DlYMXqcU/GXByxlrl439XyKMn0EIpoKiCIR0gW7+C8IhwCvKlZg CwSSNTK2GxEDECy0Kiy1qLJZDNmy7DF51+xojTTUuf9NXoiUflvxrwAYSlHHO2Ow jtUnW1VSOXkv+QKTk8iQkDD8wan39vc4HbeD44eMVHRyfDn3o3kjTNKy6qvegZ8q v9PWRR0EoGXcx/mHB8Ph9wdhEkHwaFSL1XIXA7fON39fSHZwXoMXD1cyf5Zmo+Aw YKVwGDApybiUHGUMWk6PxF/ala+eS18I6jSh9I5ftYeoMBGk7Is= -----END CERTIFICATE-----Generated at Fri Sep 25 04:48:43 2026 by rpki-client