$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: R612GRa3pFbegxrkpAxltWOtzUxq5wP1zR3F18x5Ac0= Subject key identifier: 2F:DE:38:BC:27:A8:79:9D:6E:B8:B0:04:68:65:E4:72:67:A3:95:B4 Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 58275155D4D9710FB339935C21433AE95BD23263 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 15:25:39 +0000 Manifest this update: Tue 28 Jul 2026 15:20:39 +0000 Manifest next update: Wed 29 Jul 2026 19:07:39 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: qlaxzglXiEice7iSsLKDlB63ROQ6w9d8UcebUoej0fM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:27:51:55:d4:d9:71:0f:b3:39:93:5c:21:43:3a:e9:5b:d2:32:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Jul 28 15:20:39 2026 GMT Not After : Jul 29 19:07:39 2026 GMT Subject: CN=2FDE38BC27A8799D6EB8B0046865E47267A395B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:75:27:62:a5:c8:b3:95:6f:ee:91:d1:1d: 2a:e9:98:ea:cb:95:0d:60:5b:f0:e2:2f:d9:64:54: 86:c6:32:e8:2a:7b:a0:ea:d9:13:81:c9:ef:7d:ce: cc:05:11:dc:86:0a:99:68:ba:ff:48:d6:da:2d:ac: cd:8e:96:5a:28:4d:6c:6c:63:0c:39:ec:6c:e5:55: 04:a2:74:d0:08:5f:a1:b7:05:a9:b4:c2:f9:a4:7f: 28:27:9d:d8:59:90:3c:d4:d6:a2:0d:3c:ce:19:95: 76:c5:4d:27:7f:a7:9d:00:60:6f:f7:ea:8d:4d:c2: 54:20:87:7d:76:91:6c:af:67:b6:9e:fa:81:8b:45: 4b:58:af:ed:e7:88:82:1e:e0:aa:94:9c:39:ba:6f: bf:9c:66:5e:dc:61:88:36:da:1c:1d:30:44:38:ed: 97:94:ee:da:c7:77:51:23:4a:5b:82:7c:a4:c7:66: 40:4a:f6:8a:b0:80:bc:03:f9:98:0a:ef:a8:0e:75: 3a:22:c3:dd:3f:e3:d1:28:fe:69:e3:b6:50:1f:08: 44:29:5a:bd:d5:2a:a4:5c:bf:59:99:8e:e2:84:a0: e3:4f:df:f0:cc:98:ea:f9:2e:a0:1c:29:76:8f:7b: 8b:65:ca:89:1d:7b:31:55:23:fc:df:7f:75:3c:5a: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DE:38:BC:27:A8:79:9D:6E:B8:B0:04:68:65:E4:72:67:A3:95:B4 X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:80:9a:c1:95:d6:a5:9d:6b:d4:de:25:27:b6:f9:9d:f0:9c: d7:4a:9e:2e:7e:1b:7d:9f:99:a4:96:ba:1d:14:c7:0b:b2:2e: 13:23:4c:b2:73:c1:e2:0c:47:96:30:ef:0d:55:00:96:9e:47: a6:85:f5:be:18:f0:4f:f8:19:7a:72:fc:6c:35:94:0e:8b:f1: 99:a5:3d:bb:8b:62:80:4d:86:51:ce:ea:af:77:2d:19:e1:46: f6:e3:d7:52:1f:03:5e:71:90:d9:9b:0d:26:7c:5e:13:22:92: f0:a0:4e:56:15:94:52:3e:70:4b:a0:4b:30:5d:48:64:f1:07: 50:7b:29:d1:36:6a:ed:24:09:2f:cd:45:8f:e7:df:2b:d1:b9: 0d:3a:d5:bd:85:e7:13:61:0b:e6:ce:dd:81:fe:f3:a6:b7:23: ad:ea:09:04:43:a6:89:29:20:a5:32:d1:ff:7e:f6:2d:62:bf: 47:65:9a:46:b6:88:8d:c8:2b:41:01:1a:f2:f9:0a:32:84:61: 44:2c:f4:d8:f8:42:58:c6:9c:24:70:a7:19:d0:97:72:69:4b: d3:97:00:78:a2:93:22:ae:0f:09:49:50:d3:c6:0e:35:c6:1b: ce:07:b0:49:03:86:fb:4c:0e:08:de:f7:71:d4:b0:e5:72:11: b3:ed:96:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWCdRVdTZcQ+zOZNcIUM66VvSMmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjA3MjgxNTIwMzlaFw0yNjA3MjkxOTA3MzlaMDMxMTAvBgNV BAMTKDJGREUzOEJDMjdBODc5OUQ2RUI4QjAwNDY4NjVFNDcyNjdBMzk1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAX3UnYqXIs5Vv7pHRHSrpmOrL lQ1gW/DiL9lkVIbGMugqe6Dq2ROBye99zswFEdyGCplouv9I1totrM2OllooTWxs Yww57GzlVQSidNAIX6G3Bam0wvmkfygnndhZkDzU1qINPM4ZlXbFTSd/p50AYG/3 6o1NwlQgh312kWyvZ7ae+oGLRUtYr+3niIIe4KqUnDm6b7+cZl7cYYg22hwdMEQ4 7ZeU7trHd1EjSluCfKTHZkBK9oqwgLwD+ZgK76gOdToiw90/49Eo/mnjtlAfCEQp Wr3VKqRcv1mZjuKEoONP3/DMmOr5LqAcKXaPe4tlyokdezFVI/zff3U8WuajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL944vCeoeZ1uuLAEaGXkcmejlbQwHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSAmsGV1qWda9TeJSe2+Z3wnNdKni5+G32f maSWuh0UxwuyLhMjTLJzweIMR5Yw7w1VAJaeR6aF9b4Y8E/4GXpy/Gw1lA6L8Zml PbuLYoBNhlHO6q93LRnhRvbj11IfA15xkNmbDSZ8XhMikvCgTlYVlFI+cEugSzBd SGTxB1B7KdE2au0kCS/NRY/n3yvRuQ061b2F5xNhC+bO3YH+86a3I63qCQRDpokp IKUy0f9+9i1iv0dlmka2iI3IK0EBGvL5CjKEYUQs9Nj4QljGnCRwpxnQl3JpS9OX AHiikyKuDwlJUNPGDjXGG84HsEkDhvtMDgje93HUsOVyEbPtlp4= -----END CERTIFICATE-----Generated at Wed Jul 29 05:03:31 2026 by rpki-client