$ rpki-client -vvf rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft File: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft (raw, json) Hash identifier: eprlbH0u8aP49C/y7KUdWDlarWnu0eMz/Bj8uPFHiVM= Subject key identifier: E2:5F:D0:22:D8:9E:80:F5:12:DB:58:9E:0C:01:E6:A0:C2:BA:0E:A2 Authority key identifier: 89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF Certificate issuer: /CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Certificate serial: 07570C3D8FD9FA72B159A0D89F44A47669DA4D56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 00:24:36 +0000 Manifest this update: Fri 24 Jul 2026 00:19:36 +0000 Manifest next update: Sat 25 Jul 2026 02:23:36 +0000 Files and hashes: 1: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl (hash: pA6396WFTMlK6sQyI3+1bI/yEK3fWDrBGm6lnSl3NUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:57:0c:3d:8f:d9:fa:72:b1:59:a0:d8:9f:44:a4:76:69:da:4d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Validity Not Before: Jul 24 00:19:36 2026 GMT Not After : Jul 25 02:23:36 2026 GMT Subject: CN=E25FD022D89E80F512DB589E0C01E6A0C2BA0EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:df:64:98:90:4f:88:d0:35:99:ba:84:59:58: 96:6e:4f:be:f4:87:f6:29:8a:f0:59:6d:dd:11:4a: 7e:b1:c6:f7:29:d5:95:03:fd:85:09:75:60:4b:37: 48:ab:c8:3d:36:e6:41:99:f8:59:aa:40:83:20:3b: 7c:e6:27:43:df:46:09:c1:67:5f:b6:1d:81:a7:d5: 09:0f:4a:a4:f6:ef:b0:8f:39:b9:c4:8d:60:46:e1: 49:d6:9b:18:06:53:1c:60:b9:68:d1:e3:17:14:2b: c7:ef:00:3b:0f:c6:76:0b:ba:d6:7b:a3:1a:46:13: 3c:25:e0:c9:bd:f7:8c:83:e3:fa:6d:7d:a8:32:45: 09:bf:5f:e5:a8:19:ce:b8:2f:32:a5:9a:8d:4a:87: 03:69:14:3d:00:e3:55:0a:ff:91:8f:7a:92:c7:14: 78:ab:c0:22:5d:c3:ed:6a:31:ae:73:55:2f:00:be: 7c:73:cc:e0:80:6b:61:29:6b:ec:26:d7:36:ab:ba: 7e:b7:37:fe:04:34:1c:43:94:12:a3:4e:18:c2:df: 1d:c0:8e:6b:51:e6:0e:c7:42:b3:45:de:e0:66:48: 7a:57:1f:31:40:02:bd:18:3f:ca:75:28:23:ef:2e: 2c:01:cc:50:8e:01:f5:02:5b:c1:6a:f8:ca:54:af: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5F:D0:22:D8:9E:80:F5:12:DB:58:9E:0C:01:E6:A0:C2:BA:0E:A2 X509v3 Authority Key Identifier: keyid:89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f1:bd:fe:89:11:b5:84:49:01:ac:e9:cb:12:72:c6:7b:37: a9:57:e7:3c:6d:1c:47:84:89:3a:52:23:33:75:f1:49:cf:09: 0a:a9:46:e7:50:54:0c:a2:39:df:45:e7:01:16:8a:07:49:16: 50:6a:bd:cc:5d:a3:b8:99:75:d9:0a:01:68:04:c8:dc:8c:a4: 0d:10:a2:18:39:c6:ee:02:20:15:ad:18:44:4d:f9:dd:e3:8b: 4a:86:b9:c2:3b:2e:b3:b7:30:39:56:22:0b:0a:42:a7:83:a5: d4:74:d9:cd:78:9c:f7:10:25:ba:dc:ce:43:f5:23:ba:52:e2: 08:8f:26:69:f8:6f:a1:d5:0c:34:fc:f8:75:a8:2f:a2:b5:50: 42:66:26:9f:8b:f2:a4:f6:cc:1b:d0:a7:c0:cf:c9:5f:2a:e9: 43:f7:e7:65:4f:47:f7:d4:67:28:a7:50:74:8e:fc:d6:e2:1c: e6:5a:1e:ae:46:d2:8a:57:a2:f6:30:1e:da:49:5e:fe:23:dc: 8b:5d:31:f9:67:17:c4:8c:b4:38:24:69:8f:bd:cc:60:fd:94: 5b:7f:21:c5:77:28:cb:62:87:c0:95:05:ce:95:e3:11:80:da: 87:c6:9a:63:74:96:78:1b:e2:77:a3:54:ce:79:85:18:c5:65: 67:d6:ed:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB1cMPY/Z+nKxWaDYn0SkdmnaTVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5 MDQ2RTRDRjAeFw0yNjA3MjQwMDE5MzZaFw0yNjA3MjUwMjIzMzZaMDMxMTAvBgNV BAMTKEUyNUZEMDIyRDg5RTgwRjUxMkRCNTg5RTBDMDFFNkEwQzJCQTBFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb32SYkE+I0DWZuoRZWJZuT770 h/YpivBZbd0RSn6xxvcp1ZUD/YUJdWBLN0iryD025kGZ+FmqQIMgO3zmJ0PfRgnB Z1+2HYGn1QkPSqT277CPObnEjWBG4UnWmxgGUxxguWjR4xcUK8fvADsPxnYLutZ7 oxpGEzwl4Mm994yD4/ptfagyRQm/X+WoGc64LzKlmo1KhwNpFD0A41UK/5GPepLH FHirwCJdw+1qMa5zVS8AvnxzzOCAa2Epa+wm1zarun63N/4ENBxDlBKjThjC3x3A jmtR5g7HQrNF3uBmSHpXHzFAAr0YP8p1KCPvLiwBzFCOAfUCW8Fq+MpUrxUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4l/QItiegPUS21ieDAHmoMK6DqIwHwYDVR0j BBgwFoAUiXqgTUl94NCY5MX05AEk6ZBG5M8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ2MjU2MjEtZjAwZi00ODMzLWJiYWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0 OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5MDQ2RTRDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdBQTA0RDQ5N0RFMEQwOThFNEM1RjRFNDAxMjRFOTkwNDZF NENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0 RTk5MDQ2RTRDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDxvf6JEbWESQGs6csScsZ7N6lX5zxtHEeE iTpSIzN18UnPCQqpRudQVAyiOd9F5wEWigdJFlBqvcxdo7iZddkKAWgEyNyMpA0Q ohg5xu4CIBWtGERN+d3ji0qGucI7LrO3MDlWIgsKQqeDpdR02c14nPcQJbrczkP1 I7pS4giPJmn4b6HVDDT8+HWoL6K1UEJmJp+L8qT2zBvQp8DPyV8q6UP352VPR/fU ZyinUHSO/NbiHOZaHq5G0opXovYwHtpJXv4j3ItdMflnF8SMtDgkaY+9zGD9lFt/ IcV3KMtih8CVBc6V4xGA2ofGmmN0lngb4nejVM55hRjFZWfW7fc= -----END CERTIFICATE-----Generated at Fri Jul 24 14:48:25 2026 by rpki-client