$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: lIy1SxI+68uoVTcpVOm8ex6O79DrJJ0rchVAUbb+eKs= Subject key identifier: 3B:8E:DB:D6:E8:5C:28:58:15:50:B0:ED:34:37:1E:8B:93:B4:D3:49 Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 253ACF97FF5861CFFCBBAE7C5D83E32A9823517D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 04:37:37 +0000 Manifest this update: Thu 18 Jun 2026 04:32:37 +0000 Manifest next update: Fri 19 Jun 2026 08:03:37 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: V7l4ldebwR5JTYchSCCI5iynviILNriU4PytpEVNw9Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3a:cf:97:ff:58:61:cf:fc:bb:ae:7c:5d:83:e3:2a:98:23:51:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Jun 18 04:32:37 2026 GMT Not After : Jun 19 08:03:37 2026 GMT Subject: CN=3B8EDBD6E85C28581550B0ED34371E8B93B4D349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8a:17:ae:fa:ce:00:e6:c2:b9:91:fb:6e:c7: f4:1d:e4:fc:53:3e:f8:df:3f:87:0a:41:89:f5:c8: 47:40:24:53:10:ed:03:24:f2:b4:31:4e:5c:3a:76: bf:ff:40:1a:4a:22:74:c4:18:c0:6f:0a:c4:fa:e0: cc:8c:6a:1c:35:79:46:02:80:a4:7f:d2:a8:8a:4a: 66:ed:02:5b:99:2e:7b:99:ba:27:e8:3a:f1:55:15: ae:22:4c:e2:1b:8b:ee:ba:91:0c:e9:76:3b:2f:b2: 29:9d:69:26:93:21:52:57:f0:22:f1:a6:33:b7:03: 09:d2:32:5b:22:b9:ce:02:f0:c2:17:cc:98:8d:8b: 79:cb:6a:63:f2:b3:31:49:0c:b7:84:ec:84:9a:9f: 14:fe:cf:7c:ec:8b:1d:86:43:30:1e:13:43:c7:40: e3:00:b9:94:44:6c:ca:d6:33:99:84:81:9c:8e:03: b4:89:fd:b8:df:7f:47:81:c7:9f:4f:04:0c:ee:2c: ed:5e:02:35:36:d4:13:e3:85:c5:70:8c:82:d1:de: cf:34:27:8d:1d:b9:56:43:36:72:18:10:06:c2:72: 67:ef:25:9b:b7:d7:9a:80:00:29:c4:ef:aa:da:1e: e7:d5:db:f5:3e:ab:65:ad:76:79:85:96:a5:f8:87: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8E:DB:D6:E8:5C:28:58:15:50:B0:ED:34:37:1E:8B:93:B4:D3:49 X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bb:06:c9:81:53:e3:79:45:47:cc:75:79:62:ac:76:d8:8f: 31:c0:9f:f7:9d:d2:d5:d3:8e:f6:7c:f9:67:93:79:4e:47:91: ce:0e:72:93:bb:7b:9f:15:e1:cd:1b:21:79:fc:2b:6f:94:5c: d5:5f:a7:09:1d:fa:cd:1d:64:51:c5:52:6a:89:bd:76:39:8c: 01:04:df:9a:24:d2:e1:54:f9:29:73:09:c6:16:1a:bb:79:d6: bb:d4:88:fa:7c:c2:9b:f2:e5:76:ca:83:08:54:25:91:ab:68: 07:1e:2c:f3:ba:0c:5d:85:69:b5:70:35:28:b3:07:c1:34:39: dc:64:0f:1e:bf:e6:f2:04:d4:9d:8a:f9:4c:dc:88:aa:fd:ad: 28:a0:1a:52:f3:c8:75:cf:6c:56:cb:df:5c:09:c2:5c:f1:05: 0a:29:a5:76:12:35:a9:5f:89:26:47:12:c5:91:36:dc:19:76: d3:de:9f:84:c6:d0:1c:bf:ca:7a:d7:76:7c:47:c7:9b:3f:de: 3f:aa:1d:d8:d1:da:b8:9a:88:e5:2f:0e:b5:bb:57:5e:d7:01: 5c:33:7e:26:ee:ea:d7:29:ce:a9:39:d0:13:f2:04:29:17:e6: b4:e2:c3:5d:88:b0:8d:ad:e8:8e:95:5f:01:bf:d3:5f:d5:4a: 58:7c:0d:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJTrPl/9YYc/8u658XYPjKpgjUX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjA2MTgwNDMyMzdaFw0yNjA2MTkwODAzMzdaMDMxMTAvBgNV BAMTKDNCOEVEQkQ2RTg1QzI4NTgxNTUwQjBFRDM0MzcxRThCOTNCNEQzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgiheu+s4A5sK5kftux/Qd5PxT PvjfP4cKQYn1yEdAJFMQ7QMk8rQxTlw6dr//QBpKInTEGMBvCsT64MyMahw1eUYC gKR/0qiKSmbtAluZLnuZuifoOvFVFa4iTOIbi+66kQzpdjsvsimdaSaTIVJX8CLx pjO3AwnSMlsiuc4C8MIXzJiNi3nLamPyszFJDLeE7ISanxT+z3zsix2GQzAeE0PH QOMAuZREbMrWM5mEgZyOA7SJ/bjff0eBx59PBAzuLO1eAjU21BPjhcVwjILR3s80 J40duVZDNnIYEAbCcmfvJZu315qAACnE76raHufV2/U+q2WtdnmFlqX4h1gbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO47b1uhcKFgVULDtNDcei5O000kwHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHy7BsmBU+N5RUfMdXlirHbYjzHAn/ed0tXT jvZ8+WeTeU5Hkc4OcpO7e58V4c0bIXn8K2+UXNVfpwkd+s0dZFHFUmqJvXY5jAEE 35ok0uFU+SlzCcYWGrt51rvUiPp8wpvy5XbKgwhUJZGraAceLPO6DF2FabVwNSiz B8E0OdxkDx6/5vIE1J2K+UzciKr9rSigGlLzyHXPbFbL31wJwlzxBQoppXYSNalf iSZHEsWRNtwZdtPen4TG0By/ynrXdnxHx5s/3j+qHdjR2riaiOUvDrW7V17XAVwz fibu6tcpzqk50BPyBCkX5rTiw12IsI2t6I6VXwG/01/VSlh8DVQ= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:10 2026 by rpki-client