$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: 6bV55Tmep2kK/u1ZlY4jBsNhMekEfo/UsiTXru6Ma9w= Subject key identifier: 85:3D:F7:ED:E2:CD:00:A6:BB:10:7A:9B:9C:F8:B0:08:36:44:68:B4 Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 48E2ED0513C80267E6EC55BB2FA708CB7E36A385 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: 0103 Signing time: Sat 14 Nov 2026 06:37:25 +0000 Manifest this update: Sat 14 Nov 2026 06:32:25 +0000 Manifest next update: Sun 15 Nov 2026 07:36:25 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: qkN6C3s//+T83mwoeBcSw1EYAR7gC5y5xd096W23CIk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e2:ed:05:13:c8:02:67:e6:ec:55:bb:2f:a7:08:cb:7e:36:a3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Nov 14 06:32:25 2026 GMT Not After : Nov 15 07:36:25 2026 GMT Subject: CN=853DF7EDE2CD00A6BB107A9B9CF8B008364468B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:34:79:d4:3a:7e:04:7f:b1:6b:fa:33:33:51: 84:1c:f6:fa:4a:17:d5:f3:2b:a8:f1:03:12:ce:7b: b8:cd:46:c2:df:54:49:db:e5:1d:b6:2e:35:50:f6: b7:4d:bd:09:16:c3:ba:76:89:e4:d3:4d:fd:16:2f: 3a:e1:2f:72:a1:8e:24:81:15:e9:d5:ea:5f:e0:13: 42:83:99:69:41:27:f6:a4:1f:c9:6f:a7:4c:6c:f3: 1e:56:30:5e:ae:05:81:f0:9c:b3:87:7c:cf:f9:c3: 63:03:00:28:74:50:cd:30:f5:b1:9f:77:16:60:7b: c6:ef:08:48:c3:81:0d:84:60:c2:70:43:c7:59:f0: 47:f5:46:d7:fb:09:62:01:96:b8:5a:cd:93:2e:10: 15:42:3f:8b:db:b5:f7:c3:2f:81:ac:a1:eb:bd:b3: f8:75:8a:0b:95:e5:a6:0a:6e:d6:65:13:97:02:f5: 5b:8f:ed:fa:9a:28:a5:75:65:96:a2:d2:1e:17:25: f3:e2:9c:c4:8c:64:46:a1:3e:4c:cd:dc:3e:cf:75: 2d:b4:30:81:ad:21:ec:bd:d2:5e:46:11:ac:d7:84: c9:05:4f:5f:33:bd:10:3e:3f:08:fa:95:0d:bc:a2: 48:9c:27:4a:12:d8:5c:f4:c9:f5:8a:0f:55:1b:45: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3D:F7:ED:E2:CD:00:A6:BB:10:7A:9B:9C:F8:B0:08:36:44:68:B4 X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b7:e3:bd:38:8d:26:69:c4:63:6b:ca:25:a5:d7:40:2a:ff: 63:f5:20:49:46:99:5f:54:2e:f8:75:12:bd:a2:01:c6:aa:e6: 40:68:22:4d:61:82:95:96:bd:bb:32:b6:01:74:fd:8f:cf:98: b4:52:9f:cd:cf:65:4a:20:0d:55:1b:ac:dd:19:fe:5b:83:e5: 77:ca:61:8a:60:ca:f4:c3:9c:ce:30:9a:24:35:f8:49:93:d1: d9:09:a1:45:ce:01:22:3b:43:01:ff:8a:b9:2e:94:63:95:37: 05:61:0f:04:7a:47:1f:c9:88:1a:77:c6:4d:e8:9e:35:89:52: 40:91:62:71:d6:b0:ab:d1:f8:b1:60:c7:70:d6:ea:c6:50:60: 7c:ca:c0:90:f6:5a:e6:e9:ba:61:7a:9c:b2:58:0f:b9:75:7f: a5:93:aa:47:64:82:f7:9c:e8:00:90:26:26:d1:82:27:5f:65: 9f:68:12:99:76:de:69:10:b4:55:5d:2c:57:0e:0f:73:bf:65: 44:5a:6d:d2:9d:a8:1b:0c:98:98:68:cd:d2:73:8d:14:4c:09: fd:41:d8:7a:c5:7a:43:79:48:fb:8d:d9:e2:b6:a3:87:26:af: 6d:34:4a:76:62:02:ef:f5:d6:6f:1a:ef:05:41:b4:49:6b:34: cb:6e:41:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOLtBRPIAmfm7FW7L6cIy342o4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjExMTQwNjMyMjVaFw0yNjExMTUwNzM2MjVaMDMxMTAvBgNV BAMTKDg1M0RGN0VERTJDRDAwQTZCQjEwN0E5QjlDRjhCMDA4MzY0NDY4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoNHnUOn4Ef7Fr+jMzUYQc9vpK F9XzK6jxAxLOe7jNRsLfVEnb5R22LjVQ9rdNvQkWw7p2ieTTTf0WLzrhL3KhjiSB FenV6l/gE0KDmWlBJ/akH8lvp0xs8x5WMF6uBYHwnLOHfM/5w2MDACh0UM0w9bGf dxZge8bvCEjDgQ2EYMJwQ8dZ8Ef1Rtf7CWIBlrhazZMuEBVCP4vbtffDL4Gsoeu9 s/h1iguV5aYKbtZlE5cC9VuP7fqaKKV1ZZai0h4XJfPinMSMZEahPkzN3D7PdS20 MIGtIey90l5GEazXhMkFT18zvRA+Pwj6lQ28okicJ0oS2Fz0yfWKD1UbRUX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhT337eLNAKa7EHqbnPiwCDZEaLQwHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHi34704jSZpxGNryiWl10Aq/2P1IElGmV9U Lvh1Er2iAcaq5kBoIk1hgpWWvbsytgF0/Y/PmLRSn83PZUogDVUbrN0Z/luD5XfK YYpgyvTDnM4wmiQ1+EmT0dkJoUXOASI7QwH/irkulGOVNwVhDwR6Rx/JiBp3xk3o njWJUkCRYnHWsKvR+LFgx3DW6sZQYHzKwJD2WubpumF6nLJYD7l1f6WTqkdkgvec 6ACQJibRgidfZZ9oEpl23mkQtFVdLFcOD3O/ZURabdKdqBsMmJhozdJzjRRMCf1B 2HrFekN5SPuN2eK2o4cmr200SnZiAu/11m8a7wVBtElrNMtuQW0= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:17 2026 by rpki-client