
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft
File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json)
Hash identifier: 5RlZbHhCSDCHou2IeW3NbWomu+mKkzoWb8zF7n6ervE=
Subject key identifier: A3:67:11:4D:B5:DA:BC:55:31:D4:EA:E6:66:FD:DB:58:0C:77:31:E4
Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6
Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6
Certificate serial: 0F73ABC10FA6B92FB1A49571DF6B0DB69C457792
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft
Manifest number: 37
Signing time: Sat 13 Jun 2026 03:02:47 +0000
Manifest this update: Sat 13 Jun 2026 02:57:47 +0000
Manifest next update: Sun 14 Jun 2026 03:08:47 +0000
Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: oHeEsmbrN8nbB3rptaeTIojwRr7PECiOKKOuCNHQ9lc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl
rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 03:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:73:ab:c1:0f:a6:b9:2f:b1:a4:95:71:df:6b:0d:b6:9c:45:77:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6
Validity
Not Before: Jun 13 02:57:47 2026 GMT
Not After : Jun 14 03:08:47 2026 GMT
Subject: CN=A367114DB5DABC5531D4EAE666FDDB580C7731E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:f4:16:29:65:05:4c:ea:4c:34:6d:b5:5b:
37:c1:54:ea:51:58:8d:e8:02:24:3c:57:54:93:1a:
06:e2:0a:9e:45:21:04:13:62:24:82:df:9f:97:6a:
c8:04:e5:52:54:96:45:03:7c:12:f0:6b:44:ee:0b:
79:37:d9:37:d9:5e:50:36:c0:c4:00:a3:56:e0:da:
56:f0:db:28:5a:b8:55:0e:e8:67:2e:9e:6f:46:39:
93:85:3b:c0:ce:0d:ca:d9:17:06:a7:ab:bc:80:93:
7c:38:c4:03:1f:fe:a5:15:55:26:31:e6:d5:21:1c:
9d:10:cb:76:c7:f7:2a:1f:c3:81:14:32:a1:2a:4e:
10:52:20:b3:e8:b3:fc:4f:95:f4:b0:eb:6c:23:cd:
df:57:1d:dc:e9:66:0c:f9:48:e2:9b:75:2f:3f:7e:
c2:a8:7d:2c:67:3b:0e:ee:04:47:22:5f:ff:77:9f:
0e:2f:dc:dc:c1:c7:c0:9e:1f:ec:ed:74:93:84:74:
f7:c2:c1:be:f4:44:ba:c3:63:a8:fa:cd:29:16:9e:
ca:a2:cf:15:f6:26:9f:8c:f2:6f:e9:ce:e2:9a:1f:
c1:60:bc:2f:dc:11:f7:72:17:e7:29:99:95:86:bd:
e0:99:e1:ad:0c:5e:87:9b:d7:32:2a:81:d3:fe:03:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:11:4D:B5:DA:BC:55:31:D4:EA:E6:66:FD:DB:58:0C:77:31:E4
X509v3 Authority Key Identifier:
keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:80:e3:49:61:df:8a:be:05:1d:aa:d7:29:21:03:70:e8:60:
80:e3:38:aa:10:bc:7c:cb:06:e5:46:5d:c2:96:8c:d2:94:60:
2e:b1:d0:c3:c7:1f:52:bd:a0:71:76:0b:8c:e2:f2:10:43:22:
1b:68:4d:6c:96:f5:23:fe:91:41:0d:66:be:53:30:a9:e0:94:
da:8e:37:e9:f0:c6:88:c5:ab:7c:78:8d:64:6d:85:91:cd:55:
df:e8:9e:a3:9c:76:2e:c4:c7:44:9e:08:f7:09:50:0a:9a:40:
ea:2f:65:6b:66:91:3b:fd:d1:c7:38:bd:b1:6a:c6:53:bb:88:
2c:39:e6:f6:26:1f:39:e5:ca:83:59:5c:40:2d:ca:74:95:67:
46:d6:cb:46:b1:0c:58:3b:e9:e3:38:18:d7:4f:bf:e8:34:2d:
db:83:37:28:6a:fa:d6:26:a0:0a:5b:d2:8e:a5:52:4c:54:22:
74:f8:d1:1e:af:07:b9:1c:36:a0:cf:8b:5b:00:6c:04:f6:37:
20:88:f4:13:2e:0f:e5:8c:e3:ce:50:49:e3:37:52:89:65:6d:
75:d2:f6:75:b4:86:fa:bd:fd:40:8b:fc:28:0a:28:d7:53:65:
ea:f4:de:13:d3:af:2c:97:2f:de:5a:d5:b6:87:55:a0:65:0d:
9a:8f:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:27:35 2026 by rpki-client