$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft File: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft (raw, json) Hash identifier: KapY/JJCj/e2yGuyA3Mt7FHwqyAY60z4mf47NusceAE= Subject key identifier: A0:67:55:6A:8E:DE:76:7C:37:4C:DB:58:AF:AD:D8:A9:E8:F3:48:5A Authority key identifier: 89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF Certificate issuer: /CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Certificate serial: 638D6C1A0104DED8CCFDDDA791A3036A1DAFCFEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 02:29:45 +0000 Manifest this update: Thu 08 Oct 2026 02:24:45 +0000 Manifest next update: Fri 09 Oct 2026 03:14:45 +0000 Files and hashes: 1: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl (hash: ZGPbEHZ2xgdjZ0vYVCOJJ2K4CG5aCs5QaOv4BnaQpZE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 03:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8d:6c:1a:01:04:de:d8:cc:fd:dd:a7:91:a3:03:6a:1d:af:cf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Validity Not Before: Oct 8 02:24:45 2026 GMT Not After : Oct 9 03:14:45 2026 GMT Subject: CN=A067556A8EDE767C374CDB58AFADD8A9E8F3485A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:46:99:3e:97:13:14:8a:8d:4c:b9:ec:08: f5:f1:28:ff:fb:3f:85:7b:aa:69:63:a5:7e:fa:b2: 78:b1:cd:26:81:d1:bb:41:61:05:ed:d9:b9:52:88: 97:7e:6c:94:77:58:f8:04:88:bc:eb:ef:57:d8:ad: a9:23:b0:41:24:62:59:6d:78:ac:39:b3:b9:c8:b5: 58:10:19:91:cd:2b:a1:1a:50:92:d4:09:e3:3a:ac: 60:10:fc:9c:60:79:59:04:97:a0:54:6d:72:93:32: 5e:bf:45:a8:8c:2e:f1:d0:19:cb:af:45:4e:4e:dd: 88:d1:2d:df:96:e5:50:0a:33:95:85:80:4b:d1:e2: 42:23:ec:84:37:ac:df:9d:c7:c0:94:35:1c:b9:c3: 49:6f:95:87:35:5d:b6:3d:d1:69:81:81:53:e6:e8: da:88:6b:54:84:0d:37:90:47:dd:78:9d:0b:14:85: 8b:86:6c:1f:ed:b4:28:69:75:d6:50:f9:25:af:f3: a3:93:50:a5:71:66:0a:45:7e:49:5b:52:11:73:68: cc:fc:40:4d:7a:90:69:e8:41:3c:41:05:48:d0:a6: eb:6e:5f:73:61:5f:db:2b:90:82:2c:ac:8d:b5:2e: 23:fa:fb:82:36:ed:39:54:53:f2:1c:97:70:e4:4f: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:67:55:6A:8E:DE:76:7C:37:4C:DB:58:AF:AD:D8:A9:E8:F3:48:5A X509v3 Authority Key Identifier: keyid:89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:34:04:f4:9e:8e:4c:f4:db:5a:67:7b:bc:48:06:31:17:a6: 28:93:20:d6:e6:f0:28:2e:6a:fb:39:c6:0e:26:98:5e:56:03: c6:9b:86:d0:67:3c:d1:bd:69:79:a0:25:0d:51:0b:5a:dc:e1: 9a:cc:87:cd:32:c0:b8:ce:4c:a6:1e:28:af:f8:55:da:93:a2: 5f:07:1b:0b:05:92:f7:c0:26:cc:cb:f3:f4:05:dc:25:68:ee: 21:eb:9c:b6:91:e8:5a:df:35:96:c2:68:52:b6:4c:bd:0e:15: 84:24:4c:32:e9:b3:54:9d:d5:c7:90:7f:07:7b:5a:ec:95:ca: 79:cb:af:3f:fc:1e:4a:bf:d1:c1:53:8b:1f:35:3e:41:6a:34: 05:2a:11:8b:02:9b:25:e7:be:df:cf:3a:40:f8:a4:75:d1:37: 69:85:45:76:4e:4c:ef:44:20:b2:23:40:a0:61:98:70:26:2b: df:6b:f8:c7:bd:ba:cb:77:1f:55:64:3d:5d:1a:af:05:dc:8f: c2:8f:e2:04:d1:e2:42:cc:0e:4a:51:77:19:34:89:a6:28:f5: 51:64:61:db:02:45:40:75:62:af:8a:1d:1f:88:73:4f:73:67: e6:6e:7e:61:48:9a:66:89:53:14:09:68:8c:35:ee:bf:21:67: d9:ec:5b:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY41sGgEE3tjM/d2nkaMDah2vz+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5 MDQ2RTRDRjAeFw0yNjEwMDgwMjI0NDVaFw0yNjEwMDkwMzE0NDVaMDMxMTAvBgNV BAMTKEEwNjc1NTZBOEVERTc2N0MzNzRDREI1OEFGQUREOEE5RThGMzQ4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGkaZPpcTFIqNTLnsCPXxKP/7 P4V7qmljpX76snixzSaB0btBYQXt2blSiJd+bJR3WPgEiLzr71fYrakjsEEkYllt eKw5s7nItVgQGZHNK6EaUJLUCeM6rGAQ/JxgeVkEl6BUbXKTMl6/RaiMLvHQGcuv RU5O3YjRLd+W5VAKM5WFgEvR4kIj7IQ3rN+dx8CUNRy5w0lvlYc1XbY90WmBgVPm 6NqIa1SEDTeQR914nQsUhYuGbB/ttChpddZQ+SWv86OTUKVxZgpFfklbUhFzaMz8 QE16kGnoQTxBBUjQputuX3NhX9srkIIsrI21LiP6+4I27TlUU/Icl3DkTys1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoGdVao7ednw3TNtYr63YqejzSFowHwYDVR0j BBgwFoAUiXqgTUl94NCY5MX05AEk6ZBG5M8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ2MjU2MjEtZjAwZi00ODMzLWJiYWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0 OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5MDQ2RTRDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdBQTA0RDQ5N0RFMEQwOThFNEM1RjRFNDAxMjRFOTkwNDZF NENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0 RTk5MDQ2RTRDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH00BPSejkz021pne7xIBjEXpiiTINbm8Cgu avs5xg4mmF5WA8abhtBnPNG9aXmgJQ1RC1rc4ZrMh80ywLjOTKYeKK/4VdqTol8H GwsFkvfAJszL8/QF3CVo7iHrnLaR6FrfNZbCaFK2TL0OFYQkTDLps1Sd1ceQfwd7 WuyVynnLrz/8Hkq/0cFTix81PkFqNAUqEYsCmyXnvt/POkD4pHXRN2mFRXZOTO9E ILIjQKBhmHAmK99r+Me9ust3H1VkPV0arwXcj8KP4gTR4kLMDkpRdxk0iaYo9VFk YdsCRUB1Yq+KHR+Ic09zZ+ZufmFImmaJUxQJaIw17r8hZ9nsW8g= -----END CERTIFICATE-----Generated at Thu Oct 8 17:27:22 2026 by rpki-client