$ rpki-client -vvf rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft File: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft (raw, json) Hash identifier: Rbh5TTXZEUfTCcV/dGsD5uDaaiM3c98LZ9Fklv2m36s= Subject key identifier: B2:2C:46:23:14:F0:C3:CD:42:B1:E0:C8:70:2E:29:A5:2E:18:93:79 Authority key identifier: 18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 Certificate issuer: /CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Certificate serial: 0F24AA2737C5C24323D00103523434A4B971C50E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 11:01:05 +0000 Manifest this update: Sun 02 Aug 2026 10:56:05 +0000 Manifest next update: Mon 03 Aug 2026 14:08:05 +0000 Files and hashes: 1: 189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl (hash: 06pSzc9+ihKI2YnRclWdis2lNTvY7Ey+9Kuu6DaEiJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 14:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:24:aa:27:37:c5:c2:43:23:d0:01:03:52:34:34:a4:b9:71:c5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189FD5148F82DE236EB660F45DCF85AE245A4EB6 Validity Not Before: Aug 2 10:56:05 2026 GMT Not After : Aug 3 14:08:05 2026 GMT Subject: CN=B22C462314F0C3CD42B1E0C8702E29A52E189379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:fb:94:58:e9:8e:56:f9:4e:32:65:07:6b: 39:ba:1f:1d:c6:a6:34:74:90:b6:26:59:c0:cb:7a: 04:c3:9d:39:6c:38:fa:0b:3e:e4:72:cf:0c:96:a8: 2c:e4:97:f1:7d:9d:2e:3f:1a:4c:dd:e9:21:b3:e6: 9e:65:0c:95:9b:a2:58:8e:bb:94:33:47:4e:0f:30: 9b:db:a7:fd:25:3d:ac:c7:57:60:3b:09:fb:bd:c8: 9b:fe:06:03:18:1e:36:13:56:40:bb:01:50:02:4f: 89:a8:46:a3:3b:e0:68:56:9c:b5:7d:e6:27:67:fa: 52:c0:03:32:97:84:ed:39:c0:be:77:89:2c:a7:ac: 4c:c5:a4:4b:50:89:13:4d:5d:8c:69:1d:81:3a:fc: 19:f5:5a:bc:ee:09:9e:f6:b7:b7:94:dd:ea:f5:79: 02:05:51:f0:3c:69:ac:d9:b0:02:e1:5a:7f:e9:3b: 18:55:d5:2c:51:86:8e:30:53:42:3a:1f:60:9b:97: e3:e3:ec:4d:af:2c:f5:ca:e9:e4:59:87:ac:84:53: 4e:8f:7e:da:e8:f8:e8:95:77:3a:fd:06:d4:c1:f9: a6:35:f7:8b:90:4d:38:e8:ad:68:60:b0:fa:a3:79: d9:89:a8:c6:d4:87:ca:54:a5:35:01:ad:7c:a7:ac: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2C:46:23:14:F0:C3:CD:42:B1:E0:C8:70:2E:29:A5:2E:18:93:79 X509v3 Authority Key Identifier: keyid:18:9F:D5:14:8F:82:DE:23:6E:B6:60:F4:5D:CF:85:AE:24:5A:4E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/189FD5148F82DE236EB660F45DCF85AE245A4EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6e:06:61:ca:d7:5a:c5:26:d6:39:b6:47:f4:89:c1:33:8e: fc:78:ff:38:fb:d2:22:00:41:35:20:7e:4a:3b:91:aa:a7:f8: 0a:93:95:24:4c:2b:a4:2a:dc:b8:47:cd:06:9f:9a:8d:d2:a1: 7c:a7:53:ce:76:12:b2:48:78:43:e6:e9:6e:b7:e8:80:89:d5: 3a:91:c4:4f:8a:e3:b7:ac:43:c1:10:24:25:0e:41:5f:b7:cd: 04:29:08:89:19:25:01:39:e1:ca:86:b4:f5:23:a8:14:96:c6: c1:9c:77:6c:c8:5f:86:c2:f2:8d:8a:77:b2:75:c6:a2:f7:d6: a0:34:0a:99:2e:f4:a3:1f:9e:ad:e1:56:b5:7d:66:de:36:23: b5:22:51:8a:9e:ab:30:18:e8:16:20:f0:22:f3:69:a2:14:73: 57:41:85:36:61:ce:46:e6:ca:09:39:cb:5c:00:92:d6:6d:2f: 32:6d:6e:35:08:d0:43:15:50:73:a2:12:7c:10:c9:f6:1a:84: 4d:08:8f:ad:d3:4a:48:5f:d3:c9:8d:46:60:78:3e:6d:8a:44: aa:68:0e:a5:d7:d0:ad:75:cb:aa:80:9d:ff:2a:4c:ee:2c:f5: 8e:2b:c5:3c:ed:fa:2d:3b:4a:f7:7a:80:d4:d8:2b:b8:e2:1b: 0e:55:d6:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDySqJzfFwkMj0AEDUjQ0pLlxxQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1QUUy NDVBNEVCNjAeFw0yNjA4MDIxMDU2MDVaFw0yNjA4MDMxNDA4MDVaMDMxMTAvBgNV BAMTKEIyMkM0NjIzMTRGMEMzQ0Q0MkIxRTBDODcwMkUyOUE1MkUxODkzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPPuUWOmOVvlOMmUHazm6Hx3G pjR0kLYmWcDLegTDnTlsOPoLPuRyzwyWqCzkl/F9nS4/Gkzd6SGz5p5lDJWboliO u5QzR04PMJvbp/0lPazHV2A7Cfu9yJv+BgMYHjYTVkC7AVACT4moRqM74GhWnLV9 5idn+lLAAzKXhO05wL53iSynrEzFpEtQiRNNXYxpHYE6/Bn1WrzuCZ72t7eU3er1 eQIFUfA8aazZsALhWn/pOxhV1SxRho4wU0I6H2Cbl+Pj7E2vLPXK6eRZh6yEU06P ftro+OiVdzr9BtTB+aY194uQTTjorWhgsPqjedmJqMbUh8pUpTUBrXynrAhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsixGIxTww81CseDIcC4ppS4Yk3kwHwYDVR0j BBgwFoAUGJ/VFI+C3iNutmD0Xc+FriRaTrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWRlOGNjYjktMGE2My00OWE5LWFhOGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4 RjgyREUyMzZFQjY2MEY0NURDRjg1QUUyNDVBNEVCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xODlGRDUxNDhGODJERTIzNkVCNjYwRjQ1RENGODVBRTI0NUE0 RUI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvMTg5RkQ1MTQ4RjgyREUyMzZFQjY2MEY0NURDRjg1 QUUyNDVBNEVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApuBmHK11rFJtY5tkf0icEzjvx4/zj70iIA QTUgfko7kaqn+AqTlSRMK6Qq3LhHzQafmo3SoXynU852ErJIeEPm6W636ICJ1TqR xE+K47esQ8EQJCUOQV+3zQQpCIkZJQE54cqGtPUjqBSWxsGcd2zIX4bC8o2Kd7J1 xqL31qA0Cpku9KMfnq3hVrV9Zt42I7UiUYqeqzAY6BYg8CLzaaIUc1dBhTZhzkbm ygk5y1wAktZtLzJtbjUI0EMVUHOiEnwQyfYahE0Ij63TSkhf08mNRmB4Pm2KRKpo DqXX0K11y6qAnf8qTO4s9Y4rxTzt+i07Svd6gNTYK7jiGw5V1kc= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:47 2026 by rpki-client