$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: uhIiQIHn8p23J/AAMctr1RB11XARgVtRyWBz0XMVjY8= Subject key identifier: 2C:0B:65:21:EB:2B:9F:5A:1B:F7:65:56:7B:E1:B0:E1:AB:BD:09:5E Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 097E2620C7064047E51FF3267235060EB3F51D36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:33:35 +0000 Manifest this update: Thu 23 Jul 2026 23:28:35 +0000 Manifest next update: Sat 25 Jul 2026 03:29:35 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: QsBJu96OWK3yzzM6ZUtYoWUH2O9ZixUIQ+hXdLF7JOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7e:26:20:c7:06:40:47:e5:1f:f3:26:72:35:06:0e:b3:f5:1d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Jul 23 23:28:35 2026 GMT Not After : Jul 25 03:29:35 2026 GMT Subject: CN=2C0B6521EB2B9F5A1BF765567BE1B0E1ABBD095E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:3f:9f:4a:c9:07:0c:dd:f2:c6:8f:f2:d3: 10:9e:44:39:15:45:39:fd:6e:c5:fe:77:bc:94:66: 76:66:2a:e5:2f:94:c1:a2:70:01:af:ac:14:ee:e7: b9:f0:98:5d:10:c4:22:06:2f:51:bc:b1:ef:0b:92: df:d2:7b:89:c3:2d:de:42:fd:9e:fd:b4:1a:81:60: 3a:10:c1:7b:ac:99:9c:c5:4a:54:27:e1:23:de:91: 66:60:97:a1:ff:b2:73:a7:25:d4:d2:03:9a:29:98: a4:05:42:6f:fe:81:2c:a5:ec:6d:dc:f2:70:e6:ba: 28:a1:30:56:f2:d1:bd:e9:d1:31:6f:52:18:e9:82: 57:10:a9:60:7a:48:4e:09:e0:dc:9d:fc:a0:7e:d9: 78:01:d1:b8:62:48:90:5b:34:db:18:4d:49:c1:f5: 4a:bc:72:de:7d:55:5e:1d:0a:5c:6e:74:13:5f:08: 2e:a0:bc:24:78:fa:e0:03:a3:a6:8d:b8:58:5e:fb: 0b:44:23:9a:bb:77:07:ca:a9:5c:2d:91:13:26:be: 05:9d:4a:d7:16:e3:39:5d:c3:af:7b:d5:35:30:06: b5:a3:e4:80:bf:ac:98:28:84:da:1d:d2:78:38:77: f4:24:eb:a6:70:9a:1b:b7:ed:0b:b8:06:30:48:4e: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0B:65:21:EB:2B:9F:5A:1B:F7:65:56:7B:E1:B0:E1:AB:BD:09:5E X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e3:c9:21:aa:f0:9a:12:c6:7a:53:1f:f1:39:9a:87:49:04: 0d:61:34:ff:75:2c:fc:8b:40:de:99:8b:4b:11:b2:da:cd:e0: d4:6d:07:bc:91:86:b8:96:fb:6d:83:f2:39:10:1a:c7:45:96: 32:d0:7e:93:3f:43:35:9e:af:f1:30:72:1b:23:05:bf:d4:2a: 8a:e2:75:48:76:86:93:13:c5:de:9f:f0:e0:07:d9:9e:62:0f: 80:a3:a7:1b:94:4c:8b:99:98:d9:3a:42:b2:79:e9:75:71:28: 10:ec:2c:69:bb:fb:20:91:a3:02:44:fe:ab:29:d7:cf:b8:be: 15:35:dd:a3:f2:48:6c:57:df:93:ff:24:d3:0c:e1:fc:56:5f: 36:11:67:a3:b6:c4:04:67:d9:6f:1d:41:f3:80:c1:92:06:c0: a5:35:e7:4c:92:de:c1:79:83:ae:f3:d8:67:f6:9e:60:68:56: 07:70:2a:62:9a:2e:ef:33:41:1b:4e:b1:ec:f8:1e:7e:3e:9d: a2:cf:61:a2:9f:2c:46:56:5b:08:10:c7:f1:69:e6:fc:69:fb: bc:33:31:47:e6:c4:e0:1d:91:91:f6:8c:9a:c7:79:58:59:e9: ff:a4:6b:a9:78:be:7d:6f:cc:b4:ea:86:2f:38:80:9b:db:f1: d4:99:db:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCX4mIMcGQEflH/MmcjUGDrP1HTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjA3MjMyMzI4MzVaFw0yNjA3MjUwMzI5MzVaMDMxMTAvBgNV BAMTKDJDMEI2NTIxRUIyQjlGNUExQkY3NjU1NjdCRTFCMEUxQUJCRDA5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPz+fSskHDN3yxo/y0xCeRDkV RTn9bsX+d7yUZnZmKuUvlMGicAGvrBTu57nwmF0QxCIGL1G8se8Lkt/Se4nDLd5C /Z79tBqBYDoQwXusmZzFSlQn4SPekWZgl6H/snOnJdTSA5opmKQFQm/+gSyl7G3c 8nDmuiihMFby0b3p0TFvUhjpglcQqWB6SE4J4Nyd/KB+2XgB0bhiSJBbNNsYTUnB 9Uq8ct59VV4dClxudBNfCC6gvCR4+uADo6aNuFhe+wtEI5q7dwfKqVwtkRMmvgWd StcW4zldw6971TUwBrWj5IC/rJgohNod0ng4d/Qk66Zwmhu37Qu4BjBITsiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULAtlIesrn1ob92VWe+Gw4au9CV4wHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPjySGq8JoSxnpTH/E5modJBA1hNP91LPyL QN6Zi0sRstrN4NRtB7yRhriW+22D8jkQGsdFljLQfpM/QzWer/EwchsjBb/UKori dUh2hpMTxd6f8OAH2Z5iD4CjpxuUTIuZmNk6QrJ56XVxKBDsLGm7+yCRowJE/qsp 18+4vhU13aPySGxX35P/JNMM4fxWXzYRZ6O2xARn2W8dQfOAwZIGwKU150yS3sF5 g67z2Gf2nmBoVgdwKmKaLu8zQRtOsez4Hn4+naLPYaKfLEZWWwgQx/Fp5vxp+7wz MUfmxOAdkZH2jJrHeVhZ6f+ka6l4vn1vzLTqhi84gJvb8dSZ2+w= -----END CERTIFICATE-----Generated at Fri Jul 24 05:06:09 2026 by rpki-client