$ rpki-client -vvf rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft File: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft (raw, json) Hash identifier: FeS4+EmUh+0Bn9hTVyPzVqeDm4CqJm78mV239gFABTw= Subject key identifier: 0D:7C:00:DD:FB:6B:C3:4E:C8:8C:3B:C5:41:68:29:DA:2C:A9:E3:A6 Authority key identifier: 89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF Certificate issuer: /CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Certificate serial: 338E22F773CC49F335DA372DB7E016E8F77B63AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft Manifest number: 0E Signing time: Tue 12 May 2026 20:32:27 +0000 Manifest this update: Tue 12 May 2026 20:27:27 +0000 Manifest next update: Wed 13 May 2026 21:11:27 +0000 Files and hashes: 1: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl (hash: zfc359yiBOZ1NnrYJEUYoFqkIEFeFz9KRN405gC3NHk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8e:22:f7:73:cc:49:f3:35:da:37:2d:b7:e0:16:e8:f7:7b:63:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Validity Not Before: May 12 20:27:27 2026 GMT Not After : May 13 21:11:27 2026 GMT Subject: CN=0D7C00DDFB6BC34EC88C3BC5416829DA2CA9E3A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cb:f8:b9:d6:67:03:ad:97:e7:f0:91:70:b5: f3:c8:d1:8d:50:cc:91:ce:ce:78:fc:e4:1b:1f:3a: f9:f3:67:c5:72:ee:0c:0c:fc:c5:36:17:fe:a2:d5: 16:b9:1f:a1:e7:d5:17:ac:5f:32:9e:5c:2b:37:da: 4c:4b:1e:ca:bf:df:95:8a:b0:89:5c:29:90:9f:37: 62:3e:3a:ff:fe:d3:25:11:bc:f3:c8:2a:07:44:27: 87:0f:d0:42:ee:d2:77:63:de:c2:42:37:ae:26:e6: f0:c2:82:e7:06:35:49:79:b1:5d:47:9e:f0:ce:c5: f8:74:b6:d6:d3:92:eb:e4:b3:58:40:46:a0:3c:a3: b7:fc:41:3f:62:a1:49:2d:78:6d:7e:6c:39:1b:9d: 66:b8:c7:5d:5c:45:86:2c:0a:c2:cf:93:f9:83:32: 5d:e2:03:80:c3:fc:f9:54:7e:aa:06:67:8b:44:8e: fb:d6:c1:27:1b:e1:cc:c8:8c:c2:f8:96:ce:6f:d2: 28:07:51:27:90:62:76:66:60:d9:f9:cc:d7:cc:be: 4e:da:35:af:f5:3b:18:0f:33:54:af:ed:e6:7f:88: 91:1a:7a:b1:44:49:38:ac:09:56:7b:cb:cc:68:e4: 72:d8:f2:65:a2:2f:3f:41:d8:aa:64:19:21:70:75: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:00:DD:FB:6B:C3:4E:C8:8C:3B:C5:41:68:29:DA:2C:A9:E3:A6 X509v3 Authority Key Identifier: keyid:89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:bb:de:96:d9:a5:d7:64:18:bb:73:f1:5d:25:58:33:41:0e: 22:bd:90:b7:ee:ef:ab:f8:61:60:72:69:df:02:5f:cc:61:1d: 0b:f1:a5:50:b2:83:e8:41:e3:b8:d9:a2:e1:fe:fa:ea:f4:9a: 56:58:c8:32:a9:6c:28:63:c6:91:9f:11:a0:3d:47:77:73:08: b3:e8:d2:7f:3d:e3:9d:7a:7b:ae:80:6b:98:85:be:47:4d:bc: 6f:54:b9:87:fa:cd:2c:32:14:99:86:cb:cd:23:fd:66:64:b2: 1d:c8:28:89:b4:cf:86:0c:a9:e4:c3:7a:fd:29:85:b4:d8:35: 21:34:f9:09:80:9f:90:b8:ca:bb:94:6c:1d:5c:52:be:87:07: 3c:a6:95:90:4c:df:60:5b:6a:71:2f:c6:a5:12:48:1e:81:2d: 5f:4a:25:4b:30:8d:6c:ea:ce:47:38:d0:ec:3c:5d:c4:53:a2: 78:9f:2c:fe:f5:28:a1:c9:9e:2a:d6:7e:76:aa:95:54:ef:77: f0:c8:65:44:70:68:52:2a:e5:f8:df:b5:48:95:d0:63:24:8b: 1c:e0:34:73:d5:bb:10:2a:9a:44:69:e9:ad:ea:cd:65:07:c3: fc:30:dc:10:df:5e:1b:0c:ff:19:59:c0:61:89:49:d8:dd:77: f9:7c:b2:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM44i93PMSfM12jctt+AW6Pd7Y60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5 MDQ2RTRDRjAeFw0yNjA1MTIyMDI3MjdaFw0yNjA1MTMyMTExMjdaMDMxMTAvBgNV BAMTKDBEN0MwMERERkI2QkMzNEVDODhDM0JDNTQxNjgyOURBMkNBOUUzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsy/i51mcDrZfn8JFwtfPI0Y1Q zJHOznj85BsfOvnzZ8Vy7gwM/MU2F/6i1Ra5H6Hn1ResXzKeXCs32kxLHsq/35WK sIlcKZCfN2I+Ov/+0yURvPPIKgdEJ4cP0ELu0ndj3sJCN64m5vDCgucGNUl5sV1H nvDOxfh0ttbTkuvks1hARqA8o7f8QT9ioUkteG1+bDkbnWa4x11cRYYsCsLPk/mD Ml3iA4DD/PlUfqoGZ4tEjvvWwScb4czIjML4ls5v0igHUSeQYnZmYNn5zNfMvk7a Na/1OxgPM1Sv7eZ/iJEaerFESTisCVZ7y8xo5HLY8mWiLz9B2KpkGSFwdd1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDXwA3ftrw07IjDvFQWgp2iyp46YwHwYDVR0j BBgwFoAUiXqgTUl94NCY5MX05AEk6ZBG5M8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ2MjU2MjEtZjAwZi00ODMzLWJiYWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0 OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5MDQ2RTRDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdBQTA0RDQ5N0RFMEQwOThFNEM1RjRFNDAxMjRFOTkwNDZF NENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0 RTk5MDQ2RTRDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS73pbZpddkGLtz8V0lWDNBDiK9kLfu76v4 YWByad8CX8xhHQvxpVCyg+hB47jZouH++ur0mlZYyDKpbChjxpGfEaA9R3dzCLPo 0n894516e66Aa5iFvkdNvG9UuYf6zSwyFJmGy80j/WZksh3IKIm0z4YMqeTDev0p hbTYNSE0+QmAn5C4yruUbB1cUr6HBzymlZBM32BbanEvxqUSSB6BLV9KJUswjWzq zkc40Ow8XcRTonifLP71KKHJnirWfnaqlVTvd/DIZURwaFIq5fjftUiV0GMkixzg NHPVuxAqmkRp6a3qzWUHw/ww3BDfXhsM/xlZwGGJSdjdd/l8sq0= -----END CERTIFICATE-----Generated at Wed May 13 14:36:55 2026 by rpki-client