$ rpki-client -vvf rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft File: 894922C88540134FD0720922490A7B1A86BB095D.mft (raw, json) Hash identifier: R+seedT0WA/J0qP7MUqW7ZaRVNdWhWWf+ikzyjeiDt8= Subject key identifier: 9C:4A:4E:C8:B1:27:23:B5:FB:94:CA:4E:19:8F:A8:56:02:00:7C:8D Authority key identifier: 89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D Certificate issuer: /CN=894922C88540134FD0720922490A7B1A86BB095D Certificate serial: 22A5CC584F4D03E161175C98E3F1288C5F62F0AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:49:40 +0000 Manifest this update: Tue 02 Jun 2026 23:44:40 +0000 Manifest next update: Wed 03 Jun 2026 23:53:40 +0000 Files and hashes: 1: 894922C88540134FD0720922490A7B1A86BB095D.crl (hash: yqScrEuvhLF4VrnlFGGa9RTJUy1RdK+Sb91MFNNH+qs=) 2: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (hash: 8OzcRZA1lD3AdbPpL4Nzj+FjTPuwBtmQz/Ml05mIlM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a5:cc:58:4f:4d:03:e1:61:17:5c:98:e3:f1:28:8c:5f:62:f0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894922C88540134FD0720922490A7B1A86BB095D Validity Not Before: Jun 2 23:44:40 2026 GMT Not After : Jun 3 23:53:40 2026 GMT Subject: CN=9C4A4EC8B12723B5FB94CA4E198FA85602007C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6b:ee:cd:1f:58:78:b9:9e:3d:6b:03:f2:01: 38:78:41:0a:08:a8:b1:22:ad:28:dd:c4:c4:41:55: 83:18:01:91:b7:fd:86:50:e5:99:b9:dd:46:7c:55: 7b:c1:3d:b4:c3:e8:b1:3d:e5:6d:b5:ac:8f:e1:a6: 4a:27:9e:5d:d3:1f:19:84:50:53:df:cc:56:8c:20: dd:8d:c8:85:d6:82:8e:11:aa:80:10:95:84:0d:f9: 1a:3e:56:4e:63:97:08:c6:50:cc:d5:b4:94:dd:73: 97:e1:96:a3:a9:5d:08:37:8d:a8:9b:0f:ca:b7:a8: 32:23:0a:9d:8d:9d:de:b1:a8:87:cd:74:fd:57:59: bc:31:13:8d:0e:7e:11:ef:41:c2:fb:18:c3:3e:98: 81:bb:16:d5:47:ca:46:a2:6e:61:45:60:b6:b2:7a: 7b:00:11:a3:a7:14:8e:97:1a:99:92:a3:ab:55:68: 23:0c:55:90:3d:bb:e7:a7:e2:9b:cc:dc:5a:1d:00: f7:0b:c3:ff:25:c6:9a:52:70:70:5c:a1:31:73:14: 43:81:02:f7:75:6c:1e:20:66:21:ed:a1:51:e7:e8: de:28:a4:b5:4e:69:cf:62:f9:8d:54:6e:e3:72:e4: 2d:54:bb:06:b4:35:06:17:df:89:31:f9:eb:39:8d: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4A:4E:C8:B1:27:23:B5:FB:94:CA:4E:19:8F:A8:56:02:00:7C:8D X509v3 Authority Key Identifier: keyid:89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7f:a8:14:80:31:6b:ba:eb:8c:7c:92:af:ae:6a:65:2d:26: 82:90:1d:fc:c2:eb:d6:61:74:4e:be:20:e1:bc:bf:3f:de:42: d8:6c:66:8e:34:41:41:2f:16:37:f2:06:b3:df:c0:82:ea:f9: 8c:cb:77:98:71:93:81:40:aa:b5:c5:b7:f5:89:20:6f:f7:ed: 55:b5:6c:4e:8a:b4:3a:81:1c:c9:20:3a:71:6d:0e:fd:c5:a3: 47:8d:ab:10:29:12:be:aa:5b:16:f6:14:4a:78:52:30:a8:76: 03:a5:6b:72:1a:cf:10:33:3d:20:9b:26:37:1d:c9:ec:e2:fd: aa:71:36:b7:14:9d:46:17:6d:32:5e:62:1c:1e:15:2b:27:92: 32:b5:a6:07:16:fa:2d:32:e2:d4:25:a3:02:e7:86:36:97:b3: 24:95:32:c5:cd:7b:8c:94:4b:16:40:a1:35:cc:39:2b:6a:92: 59:24:60:5e:e8:bb:34:fc:42:c7:33:f7:03:d4:12:0f:be:bd: 5d:55:68:2d:72:95:68:78:6d:0d:9c:36:b2:18:bc:91:8d:dd: 96:3a:ac:e0:fd:af:7c:1f:55:71:df:3c:26:ec:b5:84:a6:fe: 67:4b:3b:d4:e5:dc:52:d8:d5:e4:54:e9:73:fe:c6:db:67:cd: a4:04:0a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqXMWE9NA+FhF1yY4/EojF9i8K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4 NkJCMDk1RDAeFw0yNjA2MDIyMzQ0NDBaFw0yNjA2MDMyMzUzNDBaMDMxMTAvBgNV BAMTKDlDNEE0RUM4QjEyNzIzQjVGQjk0Q0E0RTE5OEZBODU2MDIwMDdDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCba+7NH1h4uZ49awPyATh4QQoI qLEirSjdxMRBVYMYAZG3/YZQ5Zm53UZ8VXvBPbTD6LE95W21rI/hpkonnl3THxmE UFPfzFaMIN2NyIXWgo4RqoAQlYQN+Ro+Vk5jlwjGUMzVtJTdc5fhlqOpXQg3jaib D8q3qDIjCp2Nnd6xqIfNdP1XWbwxE40OfhHvQcL7GMM+mIG7FtVHykaibmFFYLay ensAEaOnFI6XGpmSo6tVaCMMVZA9u+en4pvM3FodAPcLw/8lxppScHBcoTFzFEOB Avd1bB4gZiHtoVHn6N4opLVOac9i+Y1UbuNy5C1Uuwa0NQYX34kx+es5jfSpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnEpOyLEnI7X7lMpOGY+oVgIAfI0wHwYDVR0j BBgwFoAUiUkiyIVAE0/QcgkiSQp7Goa7CV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM2ZDZhNGYtY2MzOS00ZDllLTg0MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4 NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4NkJCMDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTQ5MjJDODg1NDAxMzRGRDA3MjA5MjI0OTBBN0IxQTg2QkIw OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYtY2MzOS00ZDllLTg0 MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdC MUE4NkJCMDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1/qBSAMWu664x8kq+uamUtJoKQHfzC69Zh dE6+IOG8vz/eQthsZo40QUEvFjfyBrPfwILq+YzLd5hxk4FAqrXFt/WJIG/37VW1 bE6KtDqBHMkgOnFtDv3Fo0eNqxApEr6qWxb2FEp4UjCodgOla3IazxAzPSCbJjcd yezi/apxNrcUnUYXbTJeYhweFSsnkjK1pgcW+i0y4tQlowLnhjaXsySVMsXNe4yU SxZAoTXMOStqklkkYF7ouzT8Qscz9wPUEg++vV1VaC1ylWh4bQ2cNrIYvJGN3ZY6 rOD9r3wfVXHfPCbstYSm/mdLO9Tl3FLY1eRU6XP+xttnzaQECo4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:59 2026 by rpki-client