$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft File: 894922C88540134FD0720922490A7B1A86BB095D.mft (raw, json) Hash identifier: 2ad/R4+h3O69EpDzn1pADDtkKSHY5yIGy7UD05sKIJs= Subject key identifier: 24:25:67:3B:5F:33:78:AC:A1:BD:80:A0:B0:C3:EB:91:5F:6E:49:1B Authority key identifier: 89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D Certificate issuer: /CN=894922C88540134FD0720922490A7B1A86BB095D Certificate serial: 46186D66DE6D82919A0FAAFE4F29BCC4A5677BAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:39:29 +0000 Manifest this update: Wed 16 Sep 2026 20:34:29 +0000 Manifest next update: Fri 18 Sep 2026 00:09:29 +0000 Files and hashes: 1: 894922C88540134FD0720922490A7B1A86BB095D.crl (hash: YNicY6kJ86jUzO01c/sYLVL1G2RvIPXsKSaNAkVflgQ=) 2: 3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (hash: 8OzcRZA1lD3AdbPpL4Nzj+FjTPuwBtmQz/Ml05mIlM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:18:6d:66:de:6d:82:91:9a:0f:aa:fe:4f:29:bc:c4:a5:67:7b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894922C88540134FD0720922490A7B1A86BB095D Validity Not Before: Sep 16 20:34:29 2026 GMT Not After : Sep 18 00:09:29 2026 GMT Subject: CN=2425673B5F3378ACA1BD80A0B0C3EB915F6E491B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:a1:57:cd:1f:35:39:bd:52:4b:de:2a:09: 6c:87:4d:31:23:34:ef:f4:0f:04:4e:40:5d:6a:d2: 7c:6b:b3:3b:1b:08:ac:22:11:9d:ba:51:c3:6d:a5: f2:54:99:50:49:e9:88:51:11:23:cc:b5:30:57:10: 11:cd:63:52:79:4b:14:ab:e0:c5:74:69:81:3d:aa: 53:4e:f8:f9:28:2b:86:c9:e3:72:44:2b:11:a7:1a: 2b:82:d4:01:1e:2f:2e:c6:d0:c3:3a:fd:06:8f:97: b7:1c:0a:82:0d:25:0e:c0:6e:4d:16:55:b9:d5:a6: 8d:96:e2:60:ff:df:8d:55:19:2d:e8:a1:e2:0b:02: e7:3f:68:e6:9e:23:0f:ee:12:3d:9f:5b:02:bc:ef: 1e:5c:aa:b7:b1:fc:ce:80:af:bb:84:33:77:92:61: 16:dd:79:c9:2e:f1:a5:84:df:6a:85:ba:c8:39:31: c4:ff:da:ff:f1:16:57:89:65:e5:75:8b:f8:77:9f: e3:87:c6:00:78:4e:c0:d4:3f:15:d1:34:59:45:4a: 58:28:71:a2:01:31:d6:84:b1:56:cb:03:48:1c:55: df:32:5e:4e:50:fb:95:5e:3a:56:b3:b6:40:a7:b6: 2b:05:23:66:6b:4e:54:f0:88:22:62:6c:f7:12:87: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:25:67:3B:5F:33:78:AC:A1:BD:80:A0:B0:C3:EB:91:5F:6E:49:1B X509v3 Authority Key Identifier: keyid:89:49:22:C8:85:40:13:4F:D0:72:09:22:49:0A:7B:1A:86:BB:09:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/894922C88540134FD0720922490A7B1A86BB095D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/894922C88540134FD0720922490A7B1A86BB095D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:07:49:10:bf:ab:6f:bf:af:b6:74:62:fe:52:3b:4c:ed:50: 76:77:b3:e4:3d:6a:bd:33:d1:b7:17:3c:f7:a7:de:51:2f:16: 99:8c:15:1a:d1:f1:c6:da:bf:ad:63:60:d5:84:93:a2:74:99: 86:8c:8b:47:69:e2:8b:96:48:b9:8c:d9:57:b2:ef:be:62:8f: be:35:18:f2:b6:3a:59:ed:b2:52:b5:20:85:8d:ce:70:3d:a5: 83:2d:ac:8d:77:44:14:0c:28:1d:bf:c4:04:91:09:3e:b4:6c: 6f:6d:fa:9d:cc:28:42:fd:b3:d1:92:78:99:d0:39:3e:e7:be: fd:14:ce:36:53:8f:d6:4d:d3:2a:c5:90:e4:e4:6d:34:ae:93: 6b:cd:55:ac:ed:73:b3:5a:7d:80:6a:f0:26:b5:f8:05:2b:51: b6:78:9f:80:1e:55:14:6a:9a:20:7c:1e:0b:12:d2:52:8d:e0: 69:e9:7a:d9:9a:08:e0:20:30:e4:89:89:f3:95:73:f8:a9:81: f5:dc:49:87:6c:fc:c7:c5:68:7e:cc:e0:87:67:56:e7:55:98: 5a:c8:25:d1:93:eb:ff:9b:86:35:3d:af:a5:75:de:b1:4d:d0: db:66:d3:66:d5:86:52:c1:98:2d:dc:96:7d:09:e4:bd:6b:2e: 63:5d:f0:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhhtZt5tgpGaD6r+Tym8xKVne6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4 NkJCMDk1RDAeFw0yNjA5MTYyMDM0MjlaFw0yNjA5MTgwMDA5MjlaMDMxMTAvBgNV BAMTKDI0MjU2NzNCNUYzMzc4QUNBMUJEODBBMEIwQzNFQjkxNUY2RTQ5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUKFXzR81Ob1SS94qCWyHTTEj NO/0DwROQF1q0nxrszsbCKwiEZ26UcNtpfJUmVBJ6YhRESPMtTBXEBHNY1J5SxSr 4MV0aYE9qlNO+PkoK4bJ43JEKxGnGiuC1AEeLy7G0MM6/QaPl7ccCoINJQ7Abk0W VbnVpo2W4mD/341VGS3ooeILAuc/aOaeIw/uEj2fWwK87x5cqrex/M6Ar7uEM3eS YRbdecku8aWE32qFusg5McT/2v/xFleJZeV1i/h3n+OHxgB4TsDUPxXRNFlFSlgo caIBMdaEsVbLA0gcVd8yXk5Q+5VeOlaztkCntisFI2ZrTlTwiCJibPcSh47BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCVnO18zeKyhvYCgsMPrkV9uSRswHwYDVR0j BBgwFoAUiUkiyIVAE0/QcgkiSQp7Goa7CV0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM2ZDZhNGYtY2MzOS00ZDllLTg0MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4 NTQwMTM0RkQwNzIwOTIyNDkwQTdCMUE4NkJCMDk1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTQ5MjJDODg1NDAxMzRGRDA3MjA5MjI0OTBBN0IxQTg2QkIw OTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM2ZDZhNGYtY2MzOS00ZDllLTg0 MWQtMDBiZDdkY2IxNzVhLzAvODk0OTIyQzg4NTQwMTM0RkQwNzIwOTIyNDkwQTdC MUE4NkJCMDk1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgHSRC/q2+/r7Z0Yv5SO0ztUHZ3s+Q9ar0z 0bcXPPen3lEvFpmMFRrR8cbav61jYNWEk6J0mYaMi0dp4ouWSLmM2Vey775ij741 GPK2OlntslK1IIWNznA9pYMtrI13RBQMKB2/xASRCT60bG9t+p3MKEL9s9GSeJnQ OT7nvv0UzjZTj9ZN0yrFkOTkbTSuk2vNVaztc7NafYBq8Ca1+AUrUbZ4n4AeVRRq miB8HgsS0lKN4GnpetmaCOAgMOSJifOVc/ipgfXcSYds/MfFaH7M4IdnVudVmFrI JdGT6/+bhjU9r6V13rFN0Ntm02bVhlLBmC3cln0J5L1rLmNd8K8= -----END CERTIFICATE-----Generated at Thu Sep 17 09:25:17 2026 by rpki-client