$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: xDbEkdaoH/xdTsdp3GOF0bg/cA4xaYhpm4x2THzfBv4= Subject key identifier: 2A:C1:08:5A:7A:82:A9:F3:56:AB:B5:01:FE:73:C0:EA:81:C0:39:8E Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 29990AAB261ADD40251D02D310EC1B368E684D77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: BF Signing time: Wed 23 Sep 2026 12:00:57 +0000 Manifest this update: Wed 23 Sep 2026 11:55:57 +0000 Manifest next update: Thu 24 Sep 2026 13:07:57 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: U9go5hf2c8DhTV9zT9U32UgR+psgDKfpZTMtZEYhQKU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:99:0a:ab:26:1a:dd:40:25:1d:02:d3:10:ec:1b:36:8e:68:4d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Sep 23 11:55:57 2026 GMT Not After : Sep 24 13:07:57 2026 GMT Subject: CN=2AC1085A7A82A9F356ABB501FE73C0EA81C0398E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:02:b9:d2:40:24:3d:7f:c2:4d:c9:53:db: 5b:72:3f:74:fc:ee:6a:91:98:d3:d1:91:41:65:d5: 3e:57:fd:64:37:6e:54:ea:55:50:91:31:ad:8e:80: 8b:d7:06:87:cf:09:c4:6c:24:e2:d2:bb:50:eb:51: a8:c8:75:cc:fd:23:a4:ff:a3:af:c6:b8:79:c2:d0: 13:c7:cd:db:40:6c:b9:65:9c:f0:5a:da:6d:a3:b2: 0e:5c:5c:da:a5:71:d9:3e:9b:fa:6c:4c:6c:77:c1: c7:c7:c5:2a:3a:44:56:ed:72:e8:a1:fe:97:d8:93: db:56:18:94:9a:85:b9:cd:43:60:d4:c9:6f:f1:a7: 65:a2:d6:2e:7b:6f:3d:de:1a:53:6d:be:9b:2e:a2: 87:a5:e7:9f:f0:76:36:8a:0d:8f:45:13:ce:e8:71: 63:4f:8d:b9:8c:f3:96:d1:3e:eb:c3:7a:d2:2a:c6: ce:85:69:26:45:85:42:a7:40:e4:c4:f6:41:1c:0f: 26:ee:37:d9:85:cd:12:5e:17:0c:2c:82:59:68:b2: fa:41:d8:a1:52:5a:d3:21:74:b2:b6:95:ef:21:58: 3f:02:23:91:d2:e4:d8:ee:4e:ae:6e:e8:88:f8:77: fe:a4:41:45:7e:b9:7c:ce:61:34:07:3f:5b:32:b5: 36:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C1:08:5A:7A:82:A9:F3:56:AB:B5:01:FE:73:C0:EA:81:C0:39:8E X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9c:b6:7f:09:d6:90:f3:89:3b:fb:c3:d8:84:2e:04:ff:52: 4b:96:8a:d0:e2:2b:68:b5:99:af:68:78:db:62:08:61:53:8e: 97:9a:7e:51:0f:6f:7c:e4:90:a3:6f:a2:af:c6:94:9c:b5:57: 4c:7f:0c:fb:f1:cc:90:e0:d5:5b:95:0b:47:c0:8a:4d:3e:23: 6a:11:4b:99:58:1f:4e:ee:9b:86:e2:4e:26:7e:56:d2:c8:5b: ae:aa:22:12:79:b0:32:53:b2:db:b9:7f:68:36:ad:44:ce:83: 67:02:e6:9c:fe:81:02:7d:01:81:4d:2c:9f:8a:c3:b6:11:01: a5:39:df:4a:cc:d8:24:a0:5c:3f:73:46:1c:25:45:3c:41:b7: 12:88:9b:87:f7:b4:ee:f8:50:a7:e1:56:ac:d2:bf:3a:78:85: 0a:2b:c4:01:30:ae:ee:20:fc:51:c2:c5:22:de:35:28:8b:ca: 49:24:3e:08:25:ea:9e:22:2b:01:d3:d5:8d:b2:91:5b:f9:00: 66:83:27:3e:a6:d8:a4:af:45:7e:5a:93:60:2d:71:09:be:7f: 6c:f0:35:1d:88:33:38:9f:20:50:3f:8a:7a:d7:49:2c:bf:50: 5d:01:ce:9e:a8:74:f6:ea:90:52:76:7e:e2:2a:64:75:4d:33: 84:0c:21:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZkKqyYa3UAlHQLTEOwbNo5oTXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjA5MjMxMTU1NTdaFw0yNjA5MjQxMzA3NTdaMDMxMTAvBgNV BAMTKDJBQzEwODVBN0E4MkE5RjM1NkFCQjUwMUZFNzNDMEVBODFDMDM5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXgK50kAkPX/CTclT21tyP3T8 7mqRmNPRkUFl1T5X/WQ3blTqVVCRMa2OgIvXBofPCcRsJOLSu1DrUajIdcz9I6T/ o6/GuHnC0BPHzdtAbLllnPBa2m2jsg5cXNqlcdk+m/psTGx3wcfHxSo6RFbtcuih /pfYk9tWGJSahbnNQ2DUyW/xp2Wi1i57bz3eGlNtvpsuooel55/wdjaKDY9FE87o cWNPjbmM85bRPuvDetIqxs6FaSZFhUKnQOTE9kEcDybuN9mFzRJeFwwsgllosvpB 2KFSWtMhdLK2le8hWD8CI5HS5NjuTq5u6Ij4d/6kQUV+uXzOYTQHP1sytTY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKsEIWnqCqfNWq7UB/nPA6oHAOY4wHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2ctn8J1pDziTv7w9iELgT/UkuWitDiK2i1 ma9oeNtiCGFTjpeaflEPb3zkkKNvoq/GlJy1V0x/DPvxzJDg1VuVC0fAik0+I2oR S5lYH07um4biTiZ+VtLIW66qIhJ5sDJTstu5f2g2rUTOg2cC5pz+gQJ9AYFNLJ+K w7YRAaU530rM2CSgXD9zRhwlRTxBtxKIm4f3tO74UKfhVqzSvzp4hQorxAEwru4g /FHCxSLeNSiLykkkPggl6p4iKwHT1Y2ykVv5AGaDJz6m2KSvRX5ak2AtcQm+f2zw NR2IMzifIFA/inrXSSy/UF0Bzp6odPbqkFJ2fuIqZHVNM4QMIa0= -----END CERTIFICATE-----Generated at Thu Sep 24 01:55:11 2026 by rpki-client