$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft File: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft (raw, json) Hash identifier: PBpeCK/7ym1SyFSLrkvXylP/ZO3CZndz0Fc6ccAuKcE= Subject key identifier: 89:EF:1B:6E:3B:F9:12:75:D0:C9:0F:2F:AD:7E:49:10:57:A8:15:77 Authority key identifier: 18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC Certificate issuer: /CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Certificate serial: 2F987252B8E42C0265241BAA656624C70B23577E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft Manifest number: BF Signing time: Mon 21 Sep 2026 00:27:03 +0000 Manifest this update: Mon 21 Sep 2026 00:22:03 +0000 Manifest next update: Tue 22 Sep 2026 04:08:03 +0000 Files and hashes: 1: 1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl (hash: QPD0W+k5L3okn4ZqdIbFKxZPwBd28Md5mGzjYrnz+jI=) 2: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: XT0qu0X/ewJ1G8Ps14eM7XvkOXUBLJSpuICPqH+2rFs=) 3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: vrdxMLho5nkxNsVzaZL33riDh9yKFKVbCWaknvqb6JM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:98:72:52:b8:e4:2c:02:65:24:1b:aa:65:66:24:c7:0b:23:57:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1890224BACCE8C551C127A7F4052ECE0A68BC6AC Validity Not Before: Sep 21 00:22:03 2026 GMT Not After : Sep 22 04:08:03 2026 GMT Subject: CN=89EF1B6E3BF91275D0C90F2FAD7E491057A81577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:50:db:0a:39:d7:14:dd:52:d8:47:80:ad: e1:07:83:6e:50:6f:0c:ae:98:a9:7e:c1:ee:59:34: 0a:50:8e:c8:ba:b4:3b:8e:f3:ef:1c:ae:9c:75:12: a7:04:91:d4:23:bd:8c:53:ca:a5:27:d2:96:5c:a5: 61:20:ce:4a:5e:fb:9a:21:76:47:85:f9:a4:3c:8e: 99:43:38:b5:b7:6f:4c:de:ed:2c:d5:5e:0f:0e:13: db:dd:d9:e0:83:cd:b6:67:23:61:3c:7d:97:7c:2e: 35:d3:11:c4:e9:5e:6b:fd:ed:50:ea:e4:17:a5:28: a5:dc:e1:73:83:88:ac:62:ec:dd:cc:ab:01:ea:3e: a4:19:2b:f2:f7:01:ae:6c:ad:79:05:20:4c:d9:e8: 18:f8:44:96:1a:b2:5a:bc:05:8f:da:18:40:b9:cc: da:99:eb:75:6a:63:2a:b7:58:47:cd:64:25:63:30: 24:d7:24:f3:4c:17:ae:55:8c:6e:52:89:86:d3:d8: f9:43:a5:26:17:7c:fe:58:ba:f0:e0:54:b5:ec:94: 3b:36:52:61:5b:46:68:1c:50:54:ef:a9:db:0e:45: ac:86:d4:15:1c:90:58:fb:6e:35:ca:2f:1f:25:0c: 0e:4c:bd:22:c4:88:14:49:05:40:6f:e1:c2:82:5b: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EF:1B:6E:3B:F9:12:75:D0:C9:0F:2F:AD:7E:49:10:57:A8:15:77 X509v3 Authority Key Identifier: keyid:18:90:22:4B:AC:CE:8C:55:1C:12:7A:7F:40:52:EC:E0:A6:8B:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/1890224BACCE8C551C127A7F4052ECE0A68BC6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:95:09:d9:39:cb:9a:61:fd:57:63:ec:56:c4:cb:c4:e2:fa: 68:a9:26:7a:3a:4d:bc:9d:15:ee:6b:c5:8e:24:67:73:52:a9: 4f:5c:50:db:e5:58:17:bd:f7:48:52:f6:f0:d4:49:c1:9f:13: a8:bb:d8:31:67:67:7f:b5:bd:4d:c1:d1:22:65:60:3f:62:38: 85:df:47:41:8a:6c:fb:b9:e6:81:9e:f7:62:4f:04:db:f7:33: de:f6:5b:00:22:11:04:2e:a6:bc:8b:33:cc:c5:e6:cc:16:0a: bb:9e:d7:45:86:43:62:3a:b6:b3:58:47:f3:83:cf:1d:bd:d5: 75:d2:92:2d:64:a3:90:df:8d:13:14:0e:05:a3:a5:79:d3:36: f4:93:66:3d:00:56:15:bb:af:a3:c7:d4:d6:5a:8f:15:e0:bc: 43:51:38:b9:1b:df:bd:ce:76:2f:a1:d9:b9:29:ec:46:87:d4: 44:e9:2f:ce:7b:b0:e5:58:97:1d:50:17:94:97:fa:49:49:45: 63:62:6b:be:f7:ce:20:78:db:1e:41:56:b3:a6:f5:ea:47:4b: 1d:5a:ef:7b:0f:9b:e1:a4:b6:9b:29:e6:e9:b1:ea:51:7a:cd: 3b:e1:fe:e9:93:b7:5f:31:1f:98:0e:da:c2:f1:53:41:0d:03: 0a:5e:35:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5hyUrjkLAJlJBuqZWYkxwsjV34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBB NjhCQzZBQzAeFw0yNjA5MjEwMDIyMDNaFw0yNjA5MjIwNDA4MDNaMDMxMTAvBgNV BAMTKDg5RUYxQjZFM0JGOTEyNzVEMEM5MEYyRkFEN0U0OTEwNTdBODE1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrf1DbCjnXFN1S2EeAreEHg25Q bwyumKl+we5ZNApQjsi6tDuO8+8crpx1EqcEkdQjvYxTyqUn0pZcpWEgzkpe+5oh dkeF+aQ8jplDOLW3b0ze7SzVXg8OE9vd2eCDzbZnI2E8fZd8LjXTEcTpXmv97VDq 5BelKKXc4XODiKxi7N3MqwHqPqQZK/L3Aa5srXkFIEzZ6Bj4RJYaslq8BY/aGEC5 zNqZ63VqYyq3WEfNZCVjMCTXJPNMF65VjG5SiYbT2PlDpSYXfP5YuvDgVLXslDs2 UmFbRmgcUFTvqdsORayG1BUckFj7bjXKLx8lDA5MvSLEiBRJBUBv4cKCW6CvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUie8bbjv5EnXQyQ8vrX5JEFeoFXcwHwYDVR0j BBgwFoAUGJAiS6zOjFUcEnp/QFLs4KaLxqwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg1M2FmZGQtMmUwOS00NzczLThiZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJB Q0NFOEM1NTFDMTI3QTdGNDA1MkVDRTBBNjhCQzZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xODkwMjI0QkFDQ0U4QzU1MUMxMjdBN0Y0MDUyRUNFMEE2OEJD NkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvMTg5MDIyNEJBQ0NFOEM1NTFDMTI3QTdGNDA1MkVD RTBBNjhCQzZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaVCdk5y5ph/Vdj7FbEy8Ti+mipJno6Tbyd Fe5rxY4kZ3NSqU9cUNvlWBe990hS9vDUScGfE6i72DFnZ3+1vU3B0SJlYD9iOIXf R0GKbPu55oGe92JPBNv3M972WwAiEQQupryLM8zF5swWCrue10WGQ2I6trNYR/OD zx291XXSki1ko5DfjRMUDgWjpXnTNvSTZj0AVhW7r6PH1NZajxXgvENROLkb373O di+h2bkp7EaH1ETpL857sOVYlx1QF5SX+klJRWNia773ziB42x5BVrOm9epHSx1a 73sPm+Gktpsp5umx6lF6zTvh/umTt18xH5gO2sLxU0ENAwpeNVs= -----END CERTIFICATE-----Generated at Mon Sep 21 16:21:35 2026 by rpki-client