$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft File: 894922C88540134FD0720922490A7B1A86BB095D.mft (raw, json) Hash identifier: B+6jcmUIGryON4UvhWF/nnpLY65KuCVXHcqORLdRQsU= Subject key identifier: FD:4A:EC:03:5E:AB:39:67:C1:31:62:A8:2C:57:1E:A8:93:39:1D:10 Authority key identifier: 89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D Certificate issuer: /CN=894922C88540134FD0720922490A7B1A86BB095D Certificate serial: 60688BD03FC71962D0C0028522C7EF5D9946E11D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 11:22:00 +0000 Manifest this update: Mon 02 Nov 2026 11:17:00 +0000 Manifest next update: Tue 03 Nov 2026 12:31:00 +0000 Files and hashes: 1: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (hash: 8OzcRZA1lD3AdbPpL4Nzj+FjTPuwBtmQz/Ml05mIlM0=) 2: 894922C88540134FD0720922490A7B1A86BB095D.crl (hash: LdNNsislhp3bQFi9H0oayU2eUEcBpHqG2fujXQJzUqM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:68:8b:d0:3f:c7:19:62:d0:c0:02:85:22:c7:ef:5d:99:46:e1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894922C88540134FD0720922490A7B1A86BB095D Validity Not Before: Nov 2 11:17:00 2026 GMT Not After : Nov 3 12:31:00 2026 GMT Subject: CN=FD4AEC035EAB3967C13162A82C571EA893391D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:00:96:a5:65:cf:01:b9:39:d4:64:ee:4a:45: e3:c2:2b:79:a0:d2:ec:79:57:78:09:7b:a1:b4:63: ac:80:8f:90:98:f3:fb:0b:59:15:64:eb:0d:e3:12: 6f:42:21:f3:ca:62:7b:7c:d8:aa:ac:b4:dc:c8:e2: 95:d2:9c:d1:f1:04:24:3c:5f:f1:5a:49:4b:72:6a: a0:57:05:71:7f:53:f2:03:ad:18:e2:7f:48:1e:0a: 06:5e:c9:8e:4d:4a:7c:58:c1:0f:f5:4b:c1:a0:14: aa:33:1e:37:52:0e:ef:8a:13:d3:42:13:41:a8:62: b1:ab:45:cc:cd:c2:23:e0:2a:36:27:1e:b7:14:3e: 09:f1:6b:28:0a:60:6e:07:90:0b:34:a3:20:e6:86: 85:72:95:e0:14:22:42:de:9f:97:df:b0:25:34:33: 09:de:e0:29:3d:4f:d1:a0:6b:47:c9:6d:6d:b9:d9: 10:f1:14:6b:9f:06:48:69:20:4d:33:fe:7f:03:52: 7e:5e:19:b1:17:56:e7:bc:5c:12:df:f3:8e:20:d5: e7:cf:27:bd:22:14:c7:67:d2:05:9f:95:e0:1e:ff: 66:fa:e6:c5:f5:08:d2:b7:83:dc:75:f2:52:ea:13: 1f:93:33:60:d0:86:6e:6c:f1:b8:70:27:db:57:a8: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4A:EC:03:5E:AB:39:67:C1:31:62:A8:2C:57:1E:A8:93:39:1D:10 X509v3 Authority Key Identifier: keyid:89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:95:c6:9e:0f:94:19:3c:ca:fc:f7:1d:e4:aa:7c:dd:50:d5: 3a:14:12:ab:df:01:60:fc:29:6c:78:a5:5a:a2:4d:ee:0c:94: 1c:d5:a0:e0:98:66:b1:11:5c:70:49:79:60:93:ca:98:d4:90: 1a:52:73:62:19:43:84:9c:5d:33:96:32:34:7b:32:68:4f:70: 55:a5:7b:40:99:c8:05:98:f8:ae:e6:45:5d:b7:71:d1:e5:ba: f9:a5:b4:a3:5e:f7:8b:45:02:87:f5:d3:f5:20:4f:c0:32:27: d2:46:bc:af:ca:cd:32:81:67:20:5c:d7:34:89:34:1a:65:26: 24:0e:80:c2:76:69:de:fb:26:95:49:24:88:4f:8a:06:1c:49: 5e:1c:33:c7:90:9f:c4:f8:ca:6a:8e:a1:6b:e9:27:60:41:61: 55:67:8a:5f:0b:0f:1c:ea:14:48:55:05:fe:12:1c:13:eb:f5: a8:c2:db:18:78:36:88:82:3d:ab:14:12:fd:61:fa:85:81:f3: 4b:05:39:8a:33:ea:5d:c9:23:14:11:bf:61:ae:c4:78:cc:c7: 77:4c:53:37:6c:d1:c3:3a:56:d3:76:88:fd:f1:98:f2:97:24: e4:45:ba:66:36:e0:c3:3c:33:81:12:82:9d:21:bb:bf:50:35: 7d:c4:36:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGiL0D/HGWLQwAKFIsfvXZlG4R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4 NkJCMDk1RDAeFw0yNjExMDIxMTE3MDBaFw0yNjExMDMxMjMxMDBaMDMxMTAvBgNV BAMTKEZENEFFQzAzNUVBQjM5NjdDMTMxNjJBODJDNTcxRUE4OTMzOTFEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAJalZc8BuTnUZO5KRePCK3mg 0ux5V3gJe6G0Y6yAj5CY8/sLWRVk6w3jEm9CIfPKYnt82KqstNzI4pXSnNHxBCQ8 X/FaSUtyaqBXBXF/U/IDrRjif0geCgZeyY5NSnxYwQ/1S8GgFKozHjdSDu+KE9NC E0GoYrGrRczNwiPgKjYnHrcUPgnxaygKYG4HkAs0oyDmhoVyleAUIkLen5ffsCU0 Mwne4Ck9T9Gga0fJbW252RDxFGufBkhpIE0z/n8DUn5eGbEXVue8XBLf844g1efP J70iFMdn0gWfleAe/2b65sX1CNK3g9x18lLqEx+TM2DQhm5s8bhwJ9tXqOnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/UrsA16rOWfBMWKoLFceqJM5HRAwHwYDVR0j BBgwFoAUiUkiyIVAE0/QcgkiSQp7Goa7CV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM2ZDZhNGYtY2MzOS00ZDllLTg0MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4 NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4NkJCMDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTQ5MjJDODg1NDAxMzRGRDA3MjA5MjI0OTBBN0IxQTg2QkIw OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYtY2MzOS00ZDllLTg0 MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdC MUE4NkJCMDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiVxp4PlBk8yvz3HeSqfN1Q1ToUEqvfAWD8 KWx4pVqiTe4MlBzVoOCYZrERXHBJeWCTypjUkBpSc2IZQ4ScXTOWMjR7MmhPcFWl e0CZyAWY+K7mRV23cdHluvmltKNe94tFAof10/UgT8AyJ9JGvK/KzTKBZyBc1zSJ NBplJiQOgMJ2ad77JpVJJIhPigYcSV4cM8eQn8T4ymqOoWvpJ2BBYVVnil8LDxzq FEhVBf4SHBPr9ajC2xh4NoiCPasUEv1h+oWB80sFOYoz6l3JIxQRv2GuxHjMx3dM Uzds0cM6VtN2iP3xmPKXJORFumY24MM8M4ESgp0hu79QNX3ENlI= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:14 2026 by rpki-client