$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: G8RC507IEW1UVEwamYB70Juq/cPXOgIFdiH23w1Rqds= Subject key identifier: 71:68:64:EC:B5:6D:A3:96:5D:D8:B5:8A:BC:B6:5D:9C:87:A7:F7:34 Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 7B610C09153FDE64970F37F6933EFF928D63A1F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: 0D Signing time: Tue 12 May 2026 11:37:17 +0000 Manifest this update: Tue 12 May 2026 11:32:17 +0000 Manifest next update: Wed 13 May 2026 15:19:17 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: 2VLxBSm4bafEvKjtMlbtzj4Qzz/75zGPi52kQ9jztgQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:61:0c:09:15:3f:de:64:97:0f:37:f6:93:3e:ff:92:8d:63:a1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: May 12 11:32:17 2026 GMT Not After : May 13 15:19:17 2026 GMT Subject: CN=716864ECB56DA3965DD8B58ABCB65D9C87A7F734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:25:a8:73:3f:fa:d9:52:69:39:23:a6:bc: fe:a4:d4:66:c6:d1:00:96:dc:1e:c2:5c:af:0e:bb: 6b:95:19:6a:16:c2:61:8b:a8:36:00:97:69:2b:7a: 66:4a:0e:fd:c6:dd:d2:f1:f1:26:38:a3:42:e5:1a: 28:2b:13:75:99:22:9b:44:62:22:c9:1e:be:74:d3: 21:df:68:0e:4b:6d:4c:65:36:95:d4:5a:22:d9:f1: 43:fe:79:7d:19:72:96:89:69:0c:38:5e:ad:a4:6e: 4c:68:d3:05:aa:b0:6a:08:61:56:73:9e:80:ad:47: e7:64:5e:77:ce:d3:35:8d:47:e2:52:9c:d6:7f:d5: 56:c7:36:9d:66:ed:63:d6:de:23:12:c6:bc:a2:a2: 7a:df:f9:99:fb:7e:63:44:be:0b:6b:6c:5b:f8:a0: dd:14:f5:fa:de:c5:10:02:ac:12:3e:df:95:a1:2c: fb:b7:20:41:39:1d:75:78:88:47:33:79:61:2e:6c: 3b:1b:ac:b8:ed:2f:28:77:2a:b2:83:fd:46:35:8f: ff:a8:9f:9a:84:50:d6:de:e1:55:b2:69:10:46:5e: c9:53:ff:4a:f0:de:1e:fc:c2:c2:ca:be:8d:8e:29: 2b:5d:60:6e:75:f6:97:4d:0a:58:0e:8e:20:15:64: 27:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:68:64:EC:B5:6D:A3:96:5D:D8:B5:8A:BC:B6:5D:9C:87:A7:F7:34 X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a2:18:c3:d9:5f:7a:f7:38:10:b8:e7:a5:43:51:55:69:b4: b9:dc:e2:a9:02:f9:22:15:34:44:c6:0b:e3:7a:64:56:e2:cd: a1:6b:81:fc:c3:2a:f9:31:c0:eb:46:b3:99:0a:6b:35:e2:34: 47:07:57:f2:22:72:5e:70:6a:95:6d:a5:17:c6:12:36:d7:1f: df:d0:30:30:76:bf:d7:57:a5:79:15:6d:b1:0f:e3:1c:87:42: ef:f2:71:c1:ba:0a:5c:c9:9f:66:51:52:ce:45:63:ba:ce:f3: c9:9a:0c:7c:9f:25:16:9b:a2:5c:7e:05:69:53:f8:5f:f0:9a: 04:a0:f6:c6:55:23:3b:fc:e0:c1:81:d0:40:02:e1:e7:a9:c0: d3:9b:4e:0d:70:86:e2:f4:e7:9d:57:86:5c:13:85:5a:e7:fb: eb:dc:df:f2:dc:8a:31:a0:7b:0c:7b:8a:2b:c1:5e:4a:9d:8c: 42:54:a8:8c:58:97:02:be:a8:e0:1f:f6:ae:71:1e:54:65:58: 37:4e:bc:75:59:a7:97:6f:80:64:e7:2b:2a:8b:f1:49:01:8d: 4b:f4:88:6f:34:10:90:24:1e:a5:14:b4:17:d7:99:09:3e:22: 7d:a3:64:0f:52:90:7a:42:5d:9a:f4:cf:39:be:a2:ae:c2:3f: 37:4b:41:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2EMCRU/3mSXDzf2kz7/ko1jofAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjA1MTIxMTMyMTdaFw0yNjA1MTMxNTE5MTdaMDMxMTAvBgNV BAMTKDcxNjg2NEVDQjU2REEzOTY1REQ4QjU4QUJDQjY1RDlDODdBN0Y3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX1CWocz/62VJpOSOmvP6k1GbG 0QCW3B7CXK8Ou2uVGWoWwmGLqDYAl2kremZKDv3G3dLx8SY4o0LlGigrE3WZIptE YiLJHr500yHfaA5LbUxlNpXUWiLZ8UP+eX0ZcpaJaQw4Xq2kbkxo0wWqsGoIYVZz noCtR+dkXnfO0zWNR+JSnNZ/1VbHNp1m7WPW3iMSxryionrf+Zn7fmNEvgtrbFv4 oN0U9frexRACrBI+35WhLPu3IEE5HXV4iEczeWEubDsbrLjtLyh3KrKD/UY1j/+o n5qEUNbe4VWyaRBGXslT/0rw3h78wsLKvo2OKStdYG519pdNClgOjiAVZCfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcWhk7LVto5Zd2LWKvLZdnIen9zQwHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOiGMPZX3r3OBC456VDUVVptLnc4qkC+SIV NETGC+N6ZFbizaFrgfzDKvkxwOtGs5kKazXiNEcHV/Iicl5wapVtpRfGEjbXH9/Q MDB2v9dXpXkVbbEP4xyHQu/yccG6ClzJn2ZRUs5FY7rO88maDHyfJRabolx+BWlT +F/wmgSg9sZVIzv84MGB0EAC4eepwNObTg1whuL0551XhlwThVrn++vc3/LcijGg ewx7iivBXkqdjEJUqIxYlwK+qOAf9q5xHlRlWDdOvHVZp5dvgGTnKyqL8UkBjUv0 iG80EJAkHqUUtBfXmQk+In2jZA9SkHpCXZr0zzm+oq7CPzdLQe8= -----END CERTIFICATE-----Generated at Tue May 12 22:47:36 2026 by rpki-client