$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: nPLdc4MvheaR2v/rBV/kusBZuH391cGT+HSDaVUpvgY= Subject key identifier: 83:37:5D:1A:8C:EB:F4:0B:70:35:6B:3D:C6:A7:02:67:05:D5:5C:C1 Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 489BAFAEF235DE565597F6F2B5AF9236256BE0D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: F6 Signing time: Wed 04 Nov 2026 05:14:43 +0000 Manifest this update: Wed 04 Nov 2026 05:09:43 +0000 Manifest next update: Thu 05 Nov 2026 08:26:43 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: 3N+Bfh8gOEgADx+/VH9I4kCQ/kc0whjaJx3C+Vg8Sxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 08:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9b:af:ae:f2:35:de:56:55:97:f6:f2:b5:af:92:36:25:6b:e0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Nov 4 05:09:43 2026 GMT Not After : Nov 5 08:26:43 2026 GMT Subject: CN=83375D1A8CEBF40B70356B3DC6A7026705D55CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:9f:69:6c:3d:26:e0:3d:69:36:63:95:77: 92:c5:11:ab:e1:e6:e1:72:f9:5d:b1:69:87:02:0a: d6:47:8e:34:b2:89:ec:54:bc:d7:6f:ac:2f:9c:39: 7d:66:18:05:bb:fc:7e:a2:c3:b8:11:ce:2a:15:ef: e3:97:b3:8c:fd:46:11:d7:14:50:9a:81:28:09:2d: fb:f5:13:2c:14:d3:64:43:71:b9:80:32:11:d0:e9: 1b:d1:bc:d5:d3:fd:bb:4f:dc:d0:18:18:e6:86:83: 24:60:e0:3d:6a:52:45:27:52:47:5f:8c:e9:1c:61: 67:ed:2d:af:2b:d7:11:eb:f1:df:8f:02:bc:5c:87: 95:f2:8a:fd:5a:23:91:88:20:ff:7a:3f:14:85:26: 1a:52:8e:77:f4:76:f8:8d:47:76:fd:b0:76:de:48: 2a:db:a4:53:e2:c7:9c:90:eb:e9:48:ac:49:8a:e4: 12:b6:8e:29:d5:94:bf:a0:ed:eb:1b:c7:99:63:4c: 00:69:48:17:1a:04:e0:e8:33:ad:53:6a:12:d7:36: b7:03:4c:15:f4:72:e4:ba:62:1d:26:5a:93:55:ce: ab:8f:5c:7d:16:a2:e6:a6:cd:db:90:04:da:92:4f: 3b:15:fd:21:2a:d4:d7:bb:14:68:a8:28:9c:bc:46: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:37:5D:1A:8C:EB:F4:0B:70:35:6B:3D:C6:A7:02:67:05:D5:5C:C1 X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cb:7c:b1:40:c4:94:05:e7:1a:bc:d3:e1:f0:30:60:8b:55: 98:39:e1:f1:cf:f1:75:48:e4:03:61:8d:56:54:40:8d:3f:e5: ff:44:d3:1a:b7:ce:84:aa:de:5f:e4:21:c7:57:0d:0f:0e:ec: 23:72:fc:f0:f2:ea:4b:15:3e:12:78:01:4a:6a:0f:24:49:04: 13:f5:8c:d3:c1:e1:10:7b:ab:ae:a7:d3:e6:c2:f2:57:6e:bc: 27:f4:bf:7f:9b:c2:e6:aa:79:2b:36:26:74:d0:61:f3:f4:b2: 53:85:95:cc:8a:4e:85:b4:fa:3b:4b:21:25:78:ba:2b:c1:b6: 86:a9:0a:e1:89:cd:43:a7:6f:2a:be:48:6c:13:99:70:37:d1: 71:e3:39:fb:fd:e3:4e:f8:f8:a9:69:e1:98:e9:12:6f:fc:06: cd:87:93:71:3a:6b:e3:5d:9d:b5:1d:8d:3d:52:fd:b7:97:c8: be:9e:9f:59:66:7b:47:b4:06:a7:0d:8f:91:1d:82:13:4c:69: 5b:4e:c0:f9:ef:7c:d3:73:c0:8d:d9:83:d2:b6:b0:f4:96:dd: 78:87:ec:c7:db:1b:4c:96:5f:94:44:b7:c6:cd:84:41:4f:90: 33:ad:c7:fa:a0:35:79:92:8d:bc:bd:8e:02:e8:a1:31:c1:45: 4f:cc:81:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJuvrvI13lZVl/byta+SNiVr4NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjExMDQwNTA5NDNaFw0yNjExMDUwODI2NDNaMDMxMTAvBgNV BAMTKDgzMzc1RDFBOENFQkY0MEI3MDM1NkIzREM2QTcwMjY3MDVENTVDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3059pbD0m4D1pNmOVd5LFEavh 5uFy+V2xaYcCCtZHjjSyiexUvNdvrC+cOX1mGAW7/H6iw7gRzioV7+OXs4z9RhHX FFCagSgJLfv1EywU02RDcbmAMhHQ6RvRvNXT/btP3NAYGOaGgyRg4D1qUkUnUkdf jOkcYWftLa8r1xHr8d+PArxch5Xyiv1aI5GIIP96PxSFJhpSjnf0dviNR3b9sHbe SCrbpFPix5yQ6+lIrEmK5BK2jinVlL+g7esbx5ljTABpSBcaBODoM61TahLXNrcD TBX0cuS6Yh0mWpNVzquPXH0WouamzduQBNqSTzsV/SEq1Ne7FGioKJy8Rm1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgzddGozr9AtwNWs9xqcCZwXVXMEwHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbLfLFAxJQF5xq80+HwMGCLVZg54fHP8XVI 5ANhjVZUQI0/5f9E0xq3zoSq3l/kIcdXDQ8O7CNy/PDy6ksVPhJ4AUpqDyRJBBP1 jNPB4RB7q66n0+bC8lduvCf0v3+bwuaqeSs2JnTQYfP0slOFlcyKToW0+jtLISV4 uivBtoapCuGJzUOnbyq+SGwTmXA30XHjOfv94074+Klp4ZjpEm/8Bs2Hk3E6a+Nd nbUdjT1S/beXyL6en1lme0e0BqcNj5EdghNMaVtOwPnvfNNzwI3Zg9K2sPSW3XiH 7MfbG0yWX5REt8bNhEFPkDOtx/qgNXmSjby9jgLooTHBRU/MgQA= -----END CERTIFICATE-----Generated at Thu Nov 5 01:16:29 2026 by rpki-client