$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: mdGv4HWArESyKhhbTqhi9+n2k4jbH1g8BSKrevIWcm4= Subject key identifier: 18:34:A1:FF:A5:3E:BA:9D:57:53:6C:A2:CA:D5:45:AE:0E:A3:52:29 Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 61F976280BCE4FD5A5BA427E1763F112D4D1A3EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 19:18:02 +0000 Manifest this update: Wed 16 Sep 2026 19:13:02 +0000 Manifest next update: Thu 17 Sep 2026 23:13:02 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: gznwWHpoYo3Ee/nT8K3Dc/TPshgwfGyZ6ApslwhYIBg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f9:76:28:0b:ce:4f:d5:a5:ba:42:7e:17:63:f1:12:d4:d1:a3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Sep 16 19:13:02 2026 GMT Not After : Sep 17 23:13:02 2026 GMT Subject: CN=1834A1FFA53EBA9D57536CA2CAD545AE0EA35229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:1c:48:8e:03:57:81:3e:cf:78:df:08:7a: 41:c8:7d:cf:15:fd:db:cb:f1:2d:10:b3:5e:7d:fa: d1:49:df:84:57:bc:11:75:30:e1:f4:5f:35:78:dd: 8f:22:bb:78:dc:75:25:9c:62:53:89:6e:a9:0c:f4: 39:04:79:80:de:0b:e7:2b:9e:4a:50:28:ad:5d:c1: 60:2d:9a:21:dd:bb:d8:8f:33:53:b9:0a:03:ed:5b: d3:77:7b:11:ee:1d:37:12:22:6c:08:22:41:20:fa: 77:0c:3f:e6:38:2a:ff:86:9d:02:d0:0c:6c:26:c9: 8d:e8:02:8a:6a:e2:66:0c:1c:2d:9a:ec:a6:24:0d: 36:71:fb:76:99:02:9b:dc:e5:87:f3:1e:e3:16:ae: d9:3c:29:15:68:ba:dc:36:ab:ba:06:13:44:41:63: d0:5e:28:24:13:c4:3c:47:fb:1f:2b:82:a2:3f:93: 36:33:f7:c3:8a:e5:58:88:17:f3:f6:32:99:d3:c8: 64:9a:b5:9d:58:de:a3:de:d2:6a:06:15:f2:1d:d5: 1d:ac:e8:ba:b8:03:16:0f:9d:81:5c:40:6d:b6:d2: 96:ce:f3:29:77:44:6a:aa:a7:f1:8c:29:c3:24:cf: 75:0b:01:26:50:fa:aa:b8:6c:a8:2d:86:97:a1:b1: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:34:A1:FF:A5:3E:BA:9D:57:53:6C:A2:CA:D5:45:AE:0E:A3:52:29 X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d2:da:f1:71:0e:e0:19:43:8c:64:0a:b4:39:c0:ee:f8:de: 8b:d5:b5:ec:70:37:07:36:c2:33:6e:dc:61:33:05:62:60:d6: f5:d6:3f:73:4e:70:40:7b:b6:41:fb:f0:e4:90:8c:67:d3:5e: c4:3b:ad:e8:3e:0f:95:8b:bc:4e:91:77:9d:3f:c8:ab:c5:42: f1:bd:38:f6:73:cf:65:69:bd:b9:26:df:7e:5d:21:92:35:9d: 84:4d:5f:d6:5c:25:1e:c5:8f:6c:d4:66:bf:9a:e4:66:ea:e3: 56:e4:5e:7b:9d:42:0f:69:5a:41:03:95:3e:ee:7c:14:b8:2c: da:fb:68:8e:ba:c6:bf:cf:e7:c0:73:bf:38:d1:69:2b:e9:e7: 6c:7e:59:e6:ad:51:e5:86:63:48:f8:e7:81:e5:20:41:1d:38: 36:ba:7b:d8:61:a6:55:33:8c:5e:fb:92:0f:3a:53:6a:22:88: 39:27:40:0c:bf:54:69:ce:8a:21:5b:1a:2a:2a:d1:52:37:b1: 79:9b:9d:61:e1:32:fc:57:6d:99:da:4c:81:45:d2:e4:a4:0c: c3:9a:22:fc:0b:de:55:43:c9:1d:53:91:b1:68:23:1c:e8:3c: 6b:9d:df:08:41:d2:94:de:7a:bd:60:07:fe:5c:73:f5:09:cd: 7d:f2:21:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfl2KAvOT9WlukJ+F2PxEtTRo+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjA5MTYxOTEzMDJaFw0yNjA5MTcyMzEzMDJaMDMxMTAvBgNV BAMTKDE4MzRBMUZGQTUzRUJBOUQ1NzUzNkNBMkNBRDU0NUFFMEVBMzUyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yxxIjgNXgT7PeN8IekHIfc8V /dvL8S0Qs159+tFJ34RXvBF1MOH0XzV43Y8iu3jcdSWcYlOJbqkM9DkEeYDeC+cr nkpQKK1dwWAtmiHdu9iPM1O5CgPtW9N3exHuHTcSImwIIkEg+ncMP+Y4Kv+GnQLQ DGwmyY3oAopq4mYMHC2a7KYkDTZx+3aZApvc5YfzHuMWrtk8KRVoutw2q7oGE0RB Y9BeKCQTxDxH+x8rgqI/kzYz98OK5ViIF/P2MpnTyGSatZ1Y3qPe0moGFfId1R2s 6Lq4AxYPnYFcQG220pbO8yl3RGqqp/GMKcMkz3ULASZQ+qq4bKgthpehsR/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGDSh/6U+up1XU2yiytVFrg6jUikwHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7S2vFxDuAZQ4xkCrQ5wO743ovVtexwNwc2 wjNu3GEzBWJg1vXWP3NOcEB7tkH78OSQjGfTXsQ7reg+D5WLvE6Rd50/yKvFQvG9 OPZzz2Vpvbkm335dIZI1nYRNX9ZcJR7Fj2zUZr+a5Gbq41bkXnudQg9pWkEDlT7u fBS4LNr7aI66xr/P58BzvzjRaSvp52x+WeatUeWGY0j454HlIEEdODa6e9hhplUz jF77kg86U2oiiDknQAy/VGnOiiFbGioq0VI3sXmbnWHhMvxXbZnaTIFF0uSkDMOa IvwL3lVDyR1TkbFoIxzoPGud3whB0pTeer1gB/5cc/UJzX3yITY= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:41 2026 by rpki-client