$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: nnPyUXhrANeFtcK0h/GW7cWWoup1q9eg1/iGym6pO3o= Subject key identifier: 97:F2:56:FA:6C:76:07:08:E2:33:86:C4:0B:94:FC:3B:E6:AF:4E:6A Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 240832E941DAB95B79DCAC26B0834C326FA92C20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: BB Signing time: Sun 20 Sep 2026 13:18:30 +0000 Manifest this update: Sun 20 Sep 2026 13:13:30 +0000 Manifest next update: Mon 21 Sep 2026 13:53:30 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: 1DLrJO69zOKFBN1WNBf1Sk00qY6QX0Up6Xqk5ktx0CY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:08:32:e9:41:da:b9:5b:79:dc:ac:26:b0:83:4c:32:6f:a9:2c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Sep 20 13:13:30 2026 GMT Not After : Sep 21 13:53:30 2026 GMT Subject: CN=97F256FA6C760708E23386C40B94FC3BE6AF4E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:d8:13:2e:e4:c1:42:a3:33:53:64:03:0c: 83:5b:c2:5b:6c:75:6b:99:91:03:b6:9c:9c:28:15: bd:48:00:27:af:d4:73:e0:28:60:d4:6a:68:cc:1c: c6:7d:05:7e:48:11:58:5e:9e:92:07:8d:39:28:83: 76:7a:f0:c9:21:22:8a:ef:27:e7:40:c9:d2:64:d1: ec:69:30:ed:9b:52:c3:95:2b:99:c4:be:48:15:97: f1:9a:7a:cd:a0:39:39:eb:cb:32:6d:e7:31:91:57: 57:db:6e:1c:f9:7c:02:72:e3:06:7f:d4:eb:de:d7: 75:fb:a6:20:f7:08:f8:5e:8d:f2:72:fb:d4:e3:ec: ef:08:5e:d5:38:7d:a9:6f:00:06:3c:45:97:4c:c8: 71:bf:43:a4:1b:6c:5d:84:06:a5:63:33:fd:d7:3b: bf:d1:6c:92:21:dc:40:b4:b6:6d:53:5f:d6:c8:48: f2:15:0f:0b:d7:7e:41:f2:f9:f6:bf:00:cc:31:8b: 0b:92:ff:f6:73:4d:2b:2a:60:49:8a:b7:34:29:78: ee:cc:2b:a6:32:8e:3a:4e:e0:23:c9:de:4f:66:c5: 3e:f0:04:f2:4c:2d:5a:d8:b4:4f:78:d6:6a:65:01: 2e:ec:25:71:95:cf:a6:c7:09:e4:52:8f:06:95:31: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:56:FA:6C:76:07:08:E2:33:86:C4:0B:94:FC:3B:E6:AF:4E:6A X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9f:0c:cc:66:3c:74:d0:96:ae:55:10:4c:d4:f5:3b:a3:9d: e7:eb:10:97:1e:f9:05:95:52:06:73:f4:be:49:45:d4:fc:f3: 98:5e:db:b2:3b:33:40:d9:ed:17:b1:c3:bf:74:a9:e5:0f:2b: 0a:f3:77:d2:92:54:ef:64:f9:b6:17:3b:7c:6b:d1:72:d6:45: 8c:4f:14:20:3b:d5:67:5c:51:04:e7:02:16:04:39:ee:0d:db: 01:1c:db:45:2b:03:da:02:1b:b7:5d:d3:ff:45:3f:f0:a7:47: 31:04:9e:05:70:d5:e3:d8:85:d2:40:12:f1:d3:44:fd:f5:2a: aa:f0:42:3b:1e:fe:ba:50:f8:01:f0:5a:39:59:66:b0:f9:86: d5:c1:b1:7d:86:1b:a1:5b:f7:66:0e:22:c5:78:8c:06:20:c6: c0:be:78:ef:b6:bc:8a:57:12:ac:1d:e8:93:2e:2c:63:fa:57: 8f:9f:36:d5:e9:91:e6:35:64:8a:c4:e8:28:b4:36:db:3c:8d: 2f:f4:a7:fb:82:34:8b:0b:3d:ce:53:17:9b:20:ac:4f:11:77: c2:33:65:2c:81:09:b5:cc:34:dc:8d:09:44:27:33:13:35:6f: b5:c3:e0:ec:36:07:95:fd:66:46:57:2c:07:78:f4:54:20:f6: ad:a1:20:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJAgy6UHauVt53KwmsINMMm+pLCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjA5MjAxMzEzMzBaFw0yNjA5MjExMzUzMzBaMDMxMTAvBgNV BAMTKDk3RjI1NkZBNkM3NjA3MDhFMjMzODZDNDBCOTRGQzNCRTZBRjRFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6NgTLuTBQqMzU2QDDINbwlts dWuZkQO2nJwoFb1IACev1HPgKGDUamjMHMZ9BX5IEVhenpIHjTkog3Z68MkhIorv J+dAydJk0expMO2bUsOVK5nEvkgVl/Gaes2gOTnryzJt5zGRV1fbbhz5fAJy4wZ/ 1Ove13X7piD3CPhejfJy+9Tj7O8IXtU4falvAAY8RZdMyHG/Q6QbbF2EBqVjM/3X O7/RbJIh3EC0tm1TX9bISPIVDwvXfkHy+fa/AMwxiwuS//ZzTSsqYEmKtzQpeO7M K6YyjjpO4CPJ3k9mxT7wBPJMLVrYtE941mplAS7sJXGVz6bHCeRSjwaVMfetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl/JW+mx2BwjiM4bEC5T8O+avTmowHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqfDMxmPHTQlq5VEEzU9TujnefrEJce+QWV UgZz9L5JRdT885he27I7M0DZ7Rexw790qeUPKwrzd9KSVO9k+bYXO3xr0XLWRYxP FCA71WdcUQTnAhYEOe4N2wEc20UrA9oCG7dd0/9FP/CnRzEEngVw1ePYhdJAEvHT RP31KqrwQjse/rpQ+AHwWjlZZrD5htXBsX2GG6Fb92YOIsV4jAYgxsC+eO+2vIpX Eqwd6JMuLGP6V4+fNtXpkeY1ZIrE6Ci0Nts8jS/0p/uCNIsLPc5TF5sgrE8Rd8Iz ZSyBCbXMNNyNCUQnMxM1b7XD4Ow2B5X9ZkZXLAd49FQg9q2hII0= -----END CERTIFICATE-----Generated at Mon Sep 21 05:18:41 2026 by rpki-client