$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft File: 894922C88540134FD0720922490A7B1A86BB095D.mft (raw, json) Hash identifier: Yab25AShlHY3hbteNPiIGzljhlfy7ddx6KUtTr8/QQE= Subject key identifier: C0:64:CC:49:AB:68:D3:56:D8:89:40:A8:66:81:98:84:89:6B:02:F6 Authority key identifier: 89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D Certificate issuer: /CN=894922C88540134FD0720922490A7B1A86BB095D Certificate serial: 535C9769664D1F6EE97ADCCD6FFEE24AC8BA4526 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:10:34 +0000 Manifest this update: Tue 22 Sep 2026 03:05:34 +0000 Manifest next update: Wed 23 Sep 2026 03:58:34 +0000 Files and hashes: 1: 894922C88540134FD0720922490A7B1A86BB095D.crl (hash: YSQUHNOjAeMyklrDSUgh86gt9Fqy8ROqvIhn5zVwueQ=) 2: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (hash: 8OzcRZA1lD3AdbPpL4Nzj+FjTPuwBtmQz/Ml05mIlM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5c:97:69:66:4d:1f:6e:e9:7a:dc:cd:6f:fe:e2:4a:c8:ba:45:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894922C88540134FD0720922490A7B1A86BB095D Validity Not Before: Sep 22 03:05:34 2026 GMT Not After : Sep 23 03:58:34 2026 GMT Subject: CN=C064CC49AB68D356D88940A866819884896B02F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:64:1f:05:f9:f2:c7:4f:e6:16:bd:ec:26:13: a9:a4:95:a3:8f:3e:df:8f:88:a3:d6:2c:27:d1:0c: 61:9f:52:c7:60:24:1c:63:4d:74:9d:f0:6f:4d:81: 61:c4:83:83:c3:6d:9d:1e:0a:9d:d3:2a:80:70:5a: 80:26:e6:70:06:a4:e3:34:33:c0:c4:28:91:eb:4c: b7:8f:37:c2:f6:3e:f6:9a:e8:10:e2:0c:e1:94:e4: 33:4b:c5:c6:f5:ed:05:dc:7a:f2:7c:5f:b7:65:0b: 9a:41:f5:94:e8:54:f1:a7:60:d0:12:14:9d:d6:9b: 8e:b6:27:d9:66:da:fa:bf:0f:a9:d1:bf:26:9b:c6: 4f:35:de:9a:0d:28:24:ba:13:20:ba:0d:53:69:46: 7f:89:3e:54:68:61:a1:f0:72:a4:ff:c5:bc:96:b2: 50:6f:e4:0d:a0:5d:9e:7b:d6:7e:dc:0d:ca:7c:2f: 54:5b:28:80:00:a8:d9:c3:5a:4f:b9:19:6a:89:d4: de:69:cf:cb:3e:65:35:ab:02:a9:b0:97:46:aa:38: 8f:95:9c:22:ae:99:69:a0:ff:b7:6b:4d:7e:5a:90: 5b:0d:2d:04:6c:e2:c3:0f:e6:b8:fe:0e:17:9c:4e: 2e:f8:a3:ad:e2:81:a4:d0:6e:8b:b3:d5:d4:ce:13: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:64:CC:49:AB:68:D3:56:D8:89:40:A8:66:81:98:84:89:6B:02:F6 X509v3 Authority Key Identifier: keyid:89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:80:f0:06:e1:4c:76:5d:99:e0:30:2e:9b:fd:29:fd:e1:aa: 08:70:bc:70:70:02:9d:43:64:2b:18:10:74:a1:62:ce:0d:d8: cd:64:51:72:bc:c5:05:c6:50:1d:e5:fd:dd:cd:4a:81:b4:e1: 41:c5:ef:52:2e:c5:ba:b8:01:7f:eb:64:60:07:17:3b:a1:16: 50:ae:25:e5:ca:4b:ab:78:62:42:de:c8:8a:3d:74:d0:75:8e: ac:53:5f:e1:85:e3:f4:d7:50:c8:c3:9a:6c:8f:81:87:87:dd: 9a:bf:cc:07:fd:77:bb:b6:2c:61:06:36:71:2e:ce:f1:2b:93: 1d:af:4c:bb:f9:e5:09:ca:7a:03:69:b3:88:a8:96:18:ea:f5: 42:55:c2:c4:29:fe:f7:ab:cc:d0:50:9d:9c:df:ac:e5:a7:27: b6:07:61:f7:73:ca:d5:26:9c:31:af:b8:73:d2:cd:5d:e4:e5: 90:c6:57:cd:f3:96:9e:1d:38:62:fe:c5:8e:15:bc:b3:ad:63: a2:ae:6c:0e:ac:2f:f0:95:99:48:df:9a:1e:2a:28:58:40:7e: 5a:de:4a:fc:84:de:a9:4a:8c:00:86:30:24:75:24:58:bc:5d: 36:1e:56:cb:53:db:8b:ab:5a:1d:b3:9e:43:2a:7d:62:85:75: 20:eb:9b:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1yXaWZNH27petzNb/7iSsi6RSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4 NkJCMDk1RDAeFw0yNjA5MjIwMzA1MzRaFw0yNjA5MjMwMzU4MzRaMDMxMTAvBgNV BAMTKEMwNjRDQzQ5QUI2OEQzNTZEODg5NDBBODY2ODE5ODg0ODk2QjAyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeZB8F+fLHT+YWvewmE6mklaOP Pt+PiKPWLCfRDGGfUsdgJBxjTXSd8G9NgWHEg4PDbZ0eCp3TKoBwWoAm5nAGpOM0 M8DEKJHrTLePN8L2Pvaa6BDiDOGU5DNLxcb17QXcevJ8X7dlC5pB9ZToVPGnYNAS FJ3Wm462J9lm2vq/D6nRvyabxk813poNKCS6EyC6DVNpRn+JPlRoYaHwcqT/xbyW slBv5A2gXZ571n7cDcp8L1RbKIAAqNnDWk+5GWqJ1N5pz8s+ZTWrAqmwl0aqOI+V nCKumWmg/7drTX5akFsNLQRs4sMP5rj+DhecTi74o63igaTQbouz1dTOE4zpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwGTMSato01bYiUCoZoGYhIlrAvYwHwYDVR0j BBgwFoAUiUkiyIVAE0/QcgkiSQp7Goa7CV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM2ZDZhNGYtY2MzOS00ZDllLTg0MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4 NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4NkJCMDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTQ5MjJDODg1NDAxMzRGRDA3MjA5MjI0OTBBN0IxQTg2QkIw OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYtY2MzOS00ZDllLTg0 MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdC MUE4NkJCMDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuA8AbhTHZdmeAwLpv9Kf3hqghwvHBwAp1D ZCsYEHShYs4N2M1kUXK8xQXGUB3l/d3NSoG04UHF71Iuxbq4AX/rZGAHFzuhFlCu JeXKS6t4YkLeyIo9dNB1jqxTX+GF4/TXUMjDmmyPgYeH3Zq/zAf9d7u2LGEGNnEu zvErkx2vTLv55QnKegNps4iolhjq9UJVwsQp/verzNBQnZzfrOWnJ7YHYfdzytUm nDGvuHPSzV3k5ZDGV83zlp4dOGL+xY4VvLOtY6KubA6sL/CVmUjfmh4qKFhAflre SvyE3qlKjACGMCR1JFi8XTYeVstT24urWh2znkMqfWKFdSDrm6E= -----END CERTIFICATE-----Generated at Tue Sep 22 16:03:31 2026 by rpki-client