$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft File: 0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft (raw, json) Hash identifier: 8DsHg3xuocCzX/utJ8j/m/61dbY4mWHFJP8LXQWN414= Subject key identifier: 23:66:CF:13:0B:E0:C9:EA:46:6D:59:CB:DC:8F:85:B9:B6:2C:73:D3 Authority key identifier: 0B:18:9B:4D:9D:00:55:3E:F2:F8:75:5E:AD:7F:A4:4A:A8:E9:05:9F Certificate issuer: /CN=0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F Certificate serial: 6235E64822566CEB09495517908E9336F2D0402D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 05:28:17 +0000 Manifest this update: Tue 22 Sep 2026 05:23:17 +0000 Manifest next update: Wed 23 Sep 2026 08:29:17 +0000 Files and hashes: 1: 3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa (hash: qt8C98CNugMo7Hs3wPPfuZTKfdaxqA/LCjZgJh4oP7g=) 2: 0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl (hash: Ky3Y5BCF5G1GxlIHIZ6HQ96cBFgzr6K2ZAz4blomuZM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:35:e6:48:22:56:6c:eb:09:49:55:17:90:8e:93:36:f2:d0:40:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F Validity Not Before: Sep 22 05:23:17 2026 GMT Not After : Sep 23 08:29:17 2026 GMT Subject: CN=2366CF130BE0C9EA466D59CBDC8F85B9B62C73D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:9a:2b:39:9d:ce:a9:58:49:40:19:7e:bd: cf:af:d0:13:56:5a:33:4b:5f:42:4d:0f:e7:98:d7: 6b:e0:4a:a5:fe:53:1e:66:59:97:ef:0d:a7:99:c2: 00:cf:e7:cb:c4:41:c2:16:92:c3:36:e7:e8:25:20: 2b:7f:df:2d:8c:90:09:08:11:c4:5a:d8:bc:0e:29: 3e:3d:c1:66:d1:f1:b8:de:f6:ed:d7:21:85:1c:db: 6e:86:09:6b:c9:f2:05:01:6a:1e:87:80:24:b8:6a: 7c:5d:b7:f4:86:7c:d6:46:5e:de:16:05:29:b8:95: 44:56:37:30:f1:48:50:f1:23:66:9b:3b:f1:fd:10: a5:66:48:32:33:70:89:4b:fd:ba:2d:e7:75:ab:46: 38:20:9c:a9:f3:dd:8b:ce:9c:57:a6:c0:45:52:44: 53:97:b4:0f:46:b5:7e:5b:7e:0a:ef:38:92:a6:40: 4f:0e:32:eb:53:0f:cd:16:4d:41:e3:ff:b8:a4:55: 56:f4:06:d7:68:ba:7b:6b:da:19:26:18:7b:1f:91: 56:2c:ee:9a:6c:84:7b:ce:14:a5:ee:cb:b7:7d:12: ea:e6:6a:2b:98:32:e9:fe:99:da:2b:17:fb:06:98: a8:3f:f0:9e:e9:06:e2:91:1c:98:08:f1:14:ad:73: fa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:66:CF:13:0B:E0:C9:EA:46:6D:59:CB:DC:8F:85:B9:B6:2C:73:D3 X509v3 Authority Key Identifier: keyid:0B:18:9B:4D:9D:00:55:3E:F2:F8:75:5E:AD:7F:A4:4A:A8:E9:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:30:c5:5a:59:2f:bd:5a:df:3f:bf:fe:64:c5:20:99:8e:13: 5a:c4:0a:bf:df:42:99:54:d4:4d:ef:a8:b6:bb:2d:b3:6e:39: 24:46:d1:fc:2a:cf:0d:d7:5c:9e:91:1a:f1:e7:7a:c0:4a:55: 1d:2f:0f:b1:15:13:15:f8:39:7c:4a:45:4b:b8:bb:1c:33:64: 36:eb:9f:e2:71:0b:c9:69:ea:56:ba:f7:79:0a:18:f7:b5:db: 60:44:e5:39:ab:3e:56:7b:08:86:12:68:b2:76:56:3b:25:68: 00:6e:fd:a0:86:3b:ae:25:d6:bb:88:24:d1:f2:d2:39:be:b2: ba:6d:31:fc:8d:f9:1f:19:a1:73:fd:c0:82:f0:f1:8d:f3:9b: 12:e2:8e:06:59:85:d7:4d:87:ec:f0:f6:f2:ed:64:25:16:75: 41:fe:30:fe:85:ae:38:36:0f:fa:26:3c:b5:57:38:ab:56:66: f1:a1:90:3b:74:ef:a1:15:98:4d:8b:b6:32:d4:89:53:a1:62: 10:d8:51:b8:7f:85:bf:88:1e:94:49:e1:82:f4:8a:6b:69:62: 69:57:17:bc:09:24:14:61:d0:e8:6c:07:8a:2c:f0:de:80:19: 67:a8:0f:cb:d7:78:1d:d5:ee:32:b5:a0:76:46:d5:cd:a2:7a: b7:85:a9:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjXmSCJWbOsJSVUXkI6TNvLQQC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIxODlCNEQ5RDAwNTUzRUYyRjg3NTVFQUQ3RkE0NEFB OEU5MDU5RjAeFw0yNjA5MjIwNTIzMTdaFw0yNjA5MjMwODI5MTdaMDMxMTAvBgNV BAMTKDIzNjZDRjEzMEJFMEM5RUE0NjZENTlDQkRDOEY4NUI5QjYyQzczRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UJorOZ3OqVhJQBl+vc+v0BNW WjNLX0JND+eY12vgSqX+Ux5mWZfvDaeZwgDP58vEQcIWksM25+glICt/3y2MkAkI EcRa2LwOKT49wWbR8bje9u3XIYUc226GCWvJ8gUBah6HgCS4anxdt/SGfNZGXt4W BSm4lURWNzDxSFDxI2abO/H9EKVmSDIzcIlL/bot53WrRjggnKnz3YvOnFemwEVS RFOXtA9GtX5bfgrvOJKmQE8OMutTD80WTUHj/7ikVVb0Btdountr2hkmGHsfkVYs 7ppshHvOFKXuy7d9EurmaiuYMun+mdorF/sGmKg/8J7pBuKRHJgI8RStc/pHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI2bPEwvgyepGbVnL3I+FubYsc9MwHwYDVR0j BBgwFoAUCxibTZ0AVT7y+HVerX+kSqjpBZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFjZDRhNjctYmM4Yi00YWQ3LTgxYTEtYzAyNGM1YTYyZDMwLzAvMEIxODlCNEQ5 RDAwNTUzRUYyRjg3NTVFQUQ3RkE0NEFBOEU5MDU5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjE4OUI0RDlEMDA1NTNFRjJGODc1NUVBRDdGQTQ0QUE4RTkw NTlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFjZDRhNjctYmM4Yi00YWQ3LTgx YTEtYzAyNGM1YTYyZDMwLzAvMEIxODlCNEQ5RDAwNTUzRUYyRjg3NTVFQUQ3RkE0 NEFBOEU5MDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYwxVpZL71a3z+//mTFIJmOE1rECr/fQplU 1E3vqLa7LbNuOSRG0fwqzw3XXJ6RGvHnesBKVR0vD7EVExX4OXxKRUu4uxwzZDbr n+JxC8lp6la693kKGPe122BE5TmrPlZ7CIYSaLJ2VjslaABu/aCGO64l1ruIJNHy 0jm+srptMfyN+R8ZoXP9wILw8Y3zmxLijgZZhddNh+zw9vLtZCUWdUH+MP6Frjg2 D/omPLVXOKtWZvGhkDt076EVmE2LtjLUiVOhYhDYUbh/hb+IHpRJ4YL0imtpYmlX F7wJJBRh0OhsB4os8N6AGWeoD8vXeB3V7jK1oHZG1c2iereFqVk= -----END CERTIFICATE-----Generated at Tue Sep 22 10:45:08 2026 by rpki-client