$ rpki-client -vvf rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft File: 894922C88540134FD0720922490A7B1A86BB095D.mft (raw, json) Hash identifier: SlzECMY6wrwC6G49ptewEHlBPQvsmFekUBgnmP8JH+8= Subject key identifier: C7:DF:47:F3:FF:15:A6:07:95:CA:87:CB:CA:2C:4D:F1:9F:C0:F0:B1 Authority key identifier: 89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D Certificate issuer: /CN=894922C88540134FD0720922490A7B1A86BB095D Certificate serial: 29787D2EAFAC5C67840A24DC0DA8748F8D48EB9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:05:10 +0000 Manifest this update: Wed 17 Jun 2026 06:00:10 +0000 Manifest next update: Thu 18 Jun 2026 08:13:10 +0000 Files and hashes: 1: 894922C88540134FD0720922490A7B1A86BB095D.crl (hash: ILpYwC1e/GFVUdo79i9YDXHBPQMOl9FlcShSyK2gWLQ=) 2: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (hash: 8OzcRZA1lD3AdbPpL4Nzj+FjTPuwBtmQz/Ml05mIlM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:78:7d:2e:af:ac:5c:67:84:0a:24:dc:0d:a8:74:8f:8d:48:eb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894922C88540134FD0720922490A7B1A86BB095D Validity Not Before: Jun 17 06:00:10 2026 GMT Not After : Jun 18 08:13:10 2026 GMT Subject: CN=C7DF47F3FF15A60795CA87CBCA2C4DF19FC0F0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:1d:fd:0e:d2:61:70:f3:bb:1a:06:d4:5d: 8c:17:80:e4:f6:6c:cc:7c:56:22:24:17:b5:08:70: 60:e5:58:28:50:27:ee:ab:97:2b:88:ce:f5:7e:30: d7:2d:12:cf:22:07:70:22:9e:91:d5:8c:49:62:9d: 61:ca:21:84:56:f0:39:3e:34:b5:23:5c:01:82:11: 1e:ff:b3:c7:da:35:a2:a6:5f:95:6d:7c:3f:48:eb: c7:9c:d2:96:2b:60:c9:64:90:38:08:4d:62:3d:da: fe:af:ac:68:10:aa:a5:ed:79:de:5d:fd:25:95:04: 4c:98:ec:ad:92:db:fd:33:41:63:35:87:8f:f3:f6: f6:56:41:1d:26:7d:ed:4e:8e:20:66:2a:14:e3:d8: 33:1a:8c:18:22:d9:8c:64:09:60:64:b2:d7:a7:ba: f4:2e:80:99:61:ec:a0:be:ba:7a:09:d9:9d:81:2c: 45:5a:f0:3b:7c:0b:e5:5f:23:a5:0f:1d:18:86:69: 6e:6d:2d:fa:66:0b:26:82:9e:22:89:c6:b4:33:b9: 3f:97:10:2d:10:e7:84:8d:33:5d:27:b4:ab:af:05: f8:9b:a7:c4:f7:fb:55:bf:f6:2b:fc:4a:d0:9b:80: 94:1e:03:3c:cb:95:e8:37:f0:53:89:01:b8:bb:8d: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DF:47:F3:FF:15:A6:07:95:CA:87:CB:CA:2C:4D:F1:9F:C0:F0:B1 X509v3 Authority Key Identifier: keyid:89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ca:cd:f4:98:f6:db:e9:ca:bf:54:c9:95:8d:7b:fd:88:75: 3c:d7:62:ea:7d:e5:a3:11:20:ea:a5:99:12:96:7c:c8:68:d6: 51:0e:e2:fe:53:bc:bd:2a:ca:1c:e1:47:9a:89:1d:b1:f1:7a: 16:96:8e:ff:f9:93:3d:d8:fa:39:11:a3:fe:51:7c:00:54:a7: f3:7e:bb:7c:18:14:c2:88:ef:d8:ab:19:3b:64:83:97:38:64: da:e9:d5:0c:7a:8a:75:72:19:d5:07:fb:e5:4b:cb:3a:b8:eb: f6:25:b8:69:29:f7:e7:2a:c4:36:cb:f4:b7:d4:84:b6:96:47: 39:da:af:85:54:ad:44:ce:f8:60:04:bf:2b:fb:a1:27:8a:44: d9:22:83:31:11:c6:74:fd:8b:54:64:cf:46:b0:5c:93:e5:d7: a4:21:bc:2c:80:b8:08:bb:31:e9:67:dd:38:1d:d8:ee:8f:83: 36:14:7c:5f:d3:8e:82:06:41:90:3b:c0:ac:4d:b5:3e:ba:4a: 01:48:e6:05:06:fd:3b:67:91:6a:50:89:9c:f1:b1:2b:66:a3: f4:11:80:d0:c8:34:0b:26:04:fa:ed:e1:93:03:ea:12:41:d2: f7:fd:8d:80:02:b9:70:22:39:dd:c7:ee:97:bc:83:b4:2f:94: 9d:83:0c:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXh9Lq+sXGeECiTcDah0j41I654wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4 NkJCMDk1RDAeFw0yNjA2MTcwNjAwMTBaFw0yNjA2MTgwODEzMTBaMDMxMTAvBgNV BAMTKEM3REY0N0YzRkYxNUE2MDc5NUNBODdDQkNBMkM0REYxOUZDMEYwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwB39DtJhcPO7GgbUXYwXgOT2 bMx8ViIkF7UIcGDlWChQJ+6rlyuIzvV+MNctEs8iB3AinpHVjElinWHKIYRW8Dk+ NLUjXAGCER7/s8faNaKmX5VtfD9I68ec0pYrYMlkkDgITWI92v6vrGgQqqXted5d /SWVBEyY7K2S2/0zQWM1h4/z9vZWQR0mfe1OjiBmKhTj2DMajBgi2YxkCWBksten uvQugJlh7KC+unoJ2Z2BLEVa8Dt8C+VfI6UPHRiGaW5tLfpmCyaCniKJxrQzuT+X EC0Q54SNM10ntKuvBfibp8T3+1W/9iv8StCbgJQeAzzLleg38FOJAbi7jXhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx99H8/8VpgeVyofLyixN8Z/A8LEwHwYDVR0j BBgwFoAUiUkiyIVAE0/QcgkiSQp7Goa7CV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM2ZDZhNGYtY2MzOS00ZDllLTg0MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4 NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4NkJCMDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTQ5MjJDODg1NDAxMzRGRDA3MjA5MjI0OTBBN0IxQTg2QkIw OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYtY2MzOS00ZDllLTg0 MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdC MUE4NkJCMDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETKzfSY9tvpyr9UyZWNe/2IdTzXYup95aMR IOqlmRKWfMho1lEO4v5TvL0qyhzhR5qJHbHxehaWjv/5kz3Y+jkRo/5RfABUp/N+ u3wYFMKI79irGTtkg5c4ZNrp1Qx6inVyGdUH++VLyzq46/YluGkp9+cqxDbL9LfU hLaWRznar4VUrUTO+GAEvyv7oSeKRNkigzERxnT9i1Rkz0awXJPl16QhvCyAuAi7 Meln3Tgd2O6PgzYUfF/TjoIGQZA7wKxNtT66SgFI5gUG/TtnkWpQiZzxsStmo/QR gNDINAsmBPrt4ZMD6hJB0vf9jYACuXAiOd3H7pe8g7QvlJ2DDGc= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:08 2026 by rpki-client