$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: MO9eaIv6sE0nKi7RzYvGBqukq8wLnXdG+tRq80OUjK8= Subject key identifier: F7:4E:81:8E:45:DE:29:49:3A:6F:06:F4:5A:1F:9A:B3:E3:5B:B6:89 Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 4C9D7D56B971917A1D231AE38C39147BA002A3EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: FD Signing time: Mon 09 Nov 2026 14:08:38 +0000 Manifest this update: Mon 09 Nov 2026 14:03:38 +0000 Manifest next update: Tue 10 Nov 2026 17:21:38 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: cb5Ugqp/KLA7sCCTTqKyH5u21ptkmE+QK/nlfLj8G4Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 17:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9d:7d:56:b9:71:91:7a:1d:23:1a:e3:8c:39:14:7b:a0:02:a3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Nov 9 14:03:38 2026 GMT Not After : Nov 10 17:21:38 2026 GMT Subject: CN=F74E818E45DE29493A6F06F45A1F9AB3E35BB689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:f0:97:9c:91:d5:41:b2:1e:11:46:34:ca: ca:89:d6:b3:16:d3:85:25:91:7c:30:13:9b:6d:8c: ee:8c:09:b7:6f:0a:8e:9e:5a:52:b2:86:17:7a:0e: e5:3f:9d:aa:7a:67:43:53:ee:80:5f:0d:7d:c3:db: 24:0c:bb:74:60:ef:8c:eb:ca:1a:41:cb:ca:e8:46: 1a:1a:02:a5:b3:32:6a:94:71:0e:0d:3a:60:58:73: 7b:d1:34:4d:3a:55:9d:ed:a3:21:48:93:a6:86:c0: c3:a5:c2:00:76:a3:75:27:a7:7a:89:13:c4:cd:30: a7:c0:db:d9:26:f7:27:9e:93:df:25:24:f4:df:85: 79:59:43:20:6c:03:a7:29:c9:0a:5a:5f:60:f3:2e: 5c:48:13:48:fc:31:f6:95:68:bd:51:a7:61:a2:c8: 94:8d:ca:8c:26:2e:09:7d:5e:75:c6:9a:7f:3c:26: a1:e5:72:fe:64:4d:9b:73:ca:a7:41:6b:02:2b:09: bd:bf:d6:bb:f3:0a:4e:53:28:fa:3e:47:48:0e:d4: 67:82:b9:43:68:5c:9d:b4:cc:73:f0:3e:2e:e6:dc: 64:1e:91:09:d6:c6:bb:78:2c:5c:7e:ed:70:0a:9c: 8d:5e:bc:ed:d0:e9:2e:d9:67:5b:4a:f1:94:25:40: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4E:81:8E:45:DE:29:49:3A:6F:06:F4:5A:1F:9A:B3:E3:5B:B6:89 X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:62:c1:76:da:da:94:bf:88:6e:d6:69:f1:1f:bf:28:19:64: 26:d3:e4:b2:0f:4d:58:c7:ab:ff:8d:48:ae:10:f3:42:2a:04: 14:9d:39:34:06:8c:12:82:77:37:50:4b:53:62:14:35:b2:3c: e9:3a:95:80:cf:b1:01:d6:79:3d:77:01:62:3e:a2:bb:27:59: e6:55:a9:f2:1b:64:8f:14:bf:f8:31:8b:74:2f:c9:4b:e3:55: d4:94:b1:05:65:ba:dd:34:3d:6b:4d:67:71:c2:c0:0c:43:4f: 74:5e:c3:27:6d:4b:b4:2a:bb:93:d1:12:ee:7e:70:dc:77:31: 5a:5a:7b:05:b9:76:a2:bc:69:c4:56:31:ba:3b:ab:f9:90:f1: 5d:93:ea:f1:f2:83:23:25:7e:90:51:5b:7a:03:14:39:55:ad: f6:21:f1:20:af:94:9f:4b:a6:23:82:ad:3e:cb:a9:93:c0:10: 9d:b7:41:3e:e4:96:78:82:ff:d5:ca:09:d9:b7:94:94:f7:3b: 0d:9a:6a:27:8a:69:83:1d:d0:fb:28:29:0b:7f:14:b2:57:0d: 38:e7:7d:ad:d1:f5:9f:f1:87:6e:78:a4:99:63:f5:76:0e:44: e5:b4:6d:44:bc:8f:38:36:dd:8e:e5:ec:ed:18:e4:d8:92:dc: 26:2e:3f:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJ19VrlxkXodIxrjjDkUe6ACo+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjExMDkxNDAzMzhaFw0yNjExMTAxNzIxMzhaMDMxMTAvBgNV BAMTKEY3NEU4MThFNDVERTI5NDkzQTZGMDZGNDVBMUY5QUIzRTM1QkI2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOl/CXnJHVQbIeEUY0ysqJ1rMW 04UlkXwwE5ttjO6MCbdvCo6eWlKyhhd6DuU/nap6Z0NT7oBfDX3D2yQMu3Rg74zr yhpBy8roRhoaAqWzMmqUcQ4NOmBYc3vRNE06VZ3toyFIk6aGwMOlwgB2o3Unp3qJ E8TNMKfA29km9yeek98lJPTfhXlZQyBsA6cpyQpaX2DzLlxIE0j8MfaVaL1Rp2Gi yJSNyowmLgl9XnXGmn88JqHlcv5kTZtzyqdBawIrCb2/1rvzCk5TKPo+R0gO1GeC uUNoXJ20zHPwPi7m3GQekQnWxrt4LFx+7XAKnI1evO3Q6S7ZZ1tK8ZQlQN1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU906BjkXeKUk6bwb0Wh+as+NbtokwHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtiwXba2pS/iG7WafEfvygZZCbT5LIPTVjH q/+NSK4Q80IqBBSdOTQGjBKCdzdQS1NiFDWyPOk6lYDPsQHWeT13AWI+orsnWeZV qfIbZI8Uv/gxi3QvyUvjVdSUsQVlut00PWtNZ3HCwAxDT3RewydtS7Qqu5PREu5+ cNx3MVpaewW5dqK8acRWMbo7q/mQ8V2T6vHygyMlfpBRW3oDFDlVrfYh8SCvlJ9L piOCrT7LqZPAEJ23QT7klniC/9XKCdm3lJT3Ow2aaieKaYMd0PsoKQt/FLJXDTjn fa3R9Z/xh254pJlj9XYOROW0bUS8jzg23Y7l7O0Y5NiS3CYuPxY= -----END CERTIFICATE-----Generated at Tue Nov 10 06:35:00 2026 by rpki-client