$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: yPGsfD9JrBLCAzTamihXBJIix1AE1zEGw38WgcU+6IA= Subject key identifier: 4D:7E:B8:3E:1D:2D:EE:FB:62:10:07:8A:3E:DF:39:93:4A:65:55:4B Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 58C5A474312899E24231A45B90847C1392259ED8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:56:39 +0000 Manifest this update: Fri 24 Jul 2026 05:51:39 +0000 Manifest next update: Sat 25 Jul 2026 09:02:39 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: K2xQVVI4T8OajOyQyEev9NXRjTEU+e0aNe7Y7/BAtHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 09:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c5:a4:74:31:28:99:e2:42:31:a4:5b:90:84:7c:13:92:25:9e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: Jul 24 05:51:39 2026 GMT Not After : Jul 25 09:02:39 2026 GMT Subject: CN=4D7EB83E1D2DEEFB6210078A3EDF39934A65554B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f3:c7:d4:88:c7:47:b9:62:cc:0e:1a:ce:60: 24:b4:c2:36:c4:47:3e:c1:99:ff:73:40:95:8b:a0: 15:19:e9:36:78:48:86:4b:e5:d6:27:69:91:16:cd: 59:ba:76:60:35:10:d3:45:f6:8a:6c:58:a3:9b:57: ad:7b:32:c2:44:8e:bf:e3:aa:61:4b:7b:1a:c1:3b: f2:2f:6c:5d:2e:ff:48:a7:d0:31:ef:a7:55:05:38: 8a:8c:67:51:87:f8:4f:b4:d5:14:83:c3:0f:ec:49: 38:86:58:65:e6:77:86:59:9c:3f:be:aa:46:d1:db: df:4d:66:20:17:2d:06:64:17:37:0a:ff:91:e9:39: f8:91:0c:92:7e:a1:7c:49:9e:bc:80:8e:22:cb:e3: f9:0b:e9:99:85:f2:d3:dc:6f:02:6d:c8:23:91:b3: 06:7c:cc:18:d4:7f:1a:dc:06:0f:09:83:76:ca:4a: 79:d9:34:6c:d9:52:dc:6a:56:93:f7:39:29:c5:8a: 50:43:d0:71:02:bb:a1:72:43:79:7c:c6:a3:d7:bf: 04:5c:07:89:3a:3e:7a:86:e1:12:96:46:2a:bc:85: 05:95:46:b2:3e:17:79:30:96:f2:73:87:41:cd:e2: c3:2b:b0:d1:96:34:92:e5:eb:49:2e:e3:39:97:85: a6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7E:B8:3E:1D:2D:EE:FB:62:10:07:8A:3E:DF:39:93:4A:65:55:4B X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2e:24:ad:14:42:95:6a:e8:52:3d:fc:a5:b3:4b:28:10:ea: c9:83:09:e9:26:01:1e:c1:57:0d:06:93:7b:22:30:cb:46:9b: 35:91:0a:de:77:1f:a6:49:3f:cd:9c:8a:2e:75:ea:a7:38:dc: 22:61:b8:d7:57:22:b1:56:e3:84:6c:0b:f8:fe:a5:0e:f1:de: 07:69:8c:cc:58:fd:eb:9f:8f:1d:f5:5a:80:f2:c7:b9:dd:02: cf:a7:ab:eb:8b:af:c7:d7:23:e9:b4:79:f6:bd:cb:b3:c3:a9: 72:a6:37:42:5a:17:4b:74:11:cd:92:22:88:a5:a9:90:ac:83: 5f:aa:5d:92:b8:0d:f6:bb:89:17:b2:a0:b5:59:7a:b9:3f:a1: 34:bb:15:15:56:1f:85:1b:49:46:9c:f4:39:ba:6e:d2:05:46: a0:cd:10:98:71:cb:c0:2c:de:84:8d:6b:c9:9a:43:5d:14:e7: c2:97:8a:da:6c:7d:cc:ed:dc:12:2e:12:dc:90:a6:ab:86:46: 29:0e:37:1b:8f:c7:17:b7:db:3d:0c:b8:c1:b8:8a:7a:b9:fd: cf:a8:6f:89:05:4f:4e:90:c6:93:de:9c:1f:a2:02:50:86:c1: 46:76:a5:06:df:c8:b3:32:b2:f9:40:b6:b7:fd:04:c5:03:22: 75:e7:41:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWMWkdDEomeJCMaRbkIR8E5IlntgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjA3MjQwNTUxMzlaFw0yNjA3MjUwOTAyMzlaMDMxMTAvBgNV BAMTKDREN0VCODNFMUQyREVFRkI2MjEwMDc4QTNFREYzOTkzNEE2NTU1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD588fUiMdHuWLMDhrOYCS0wjbE Rz7Bmf9zQJWLoBUZ6TZ4SIZL5dYnaZEWzVm6dmA1ENNF9opsWKObV617MsJEjr/j qmFLexrBO/IvbF0u/0in0DHvp1UFOIqMZ1GH+E+01RSDww/sSTiGWGXmd4ZZnD++ qkbR299NZiAXLQZkFzcK/5HpOfiRDJJ+oXxJnryAjiLL4/kL6ZmF8tPcbwJtyCOR swZ8zBjUfxrcBg8Jg3bKSnnZNGzZUtxqVpP3OSnFilBD0HECu6FyQ3l8xqPXvwRc B4k6PnqG4RKWRiq8hQWVRrI+F3kwlvJzh0HN4sMrsNGWNJLl60ku4zmXhaYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTX64Ph0t7vtiEAeKPt85k0plVUswHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABouJK0UQpVq6FI9/KWzSygQ6smDCekmAR7B Vw0Gk3siMMtGmzWRCt53H6ZJP82cii516qc43CJhuNdXIrFW44RsC/j+pQ7x3gdp jMxY/eufjx31WoDyx7ndAs+nq+uLr8fXI+m0efa9y7PDqXKmN0JaF0t0Ec2SIoil qZCsg1+qXZK4Dfa7iReyoLVZerk/oTS7FRVWH4UbSUac9Dm6btIFRqDNEJhxy8As 3oSNa8maQ10U58KXitpsfczt3BIuEtyQpquGRikONxuPxxe32z0MuMG4inq5/c+o b4kFT06QxpPenB+iAlCGwUZ2pQbfyLMysvlAtrf9BMUDInXnQWk= -----END CERTIFICATE-----Generated at Fri Jul 24 14:35:05 2026 by rpki-client