$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: XXX97L3MDFobHggd3rhd++XcUb50og+gSx5n+mjPH/M= Subject key identifier: E5:02:D2:70:F6:85:6E:E2:89:BF:1C:12:8C:C7:DA:BA:14:06:51:37 Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 1C078C87B6331C76AD8BB741EB5512D4AC963E4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 10:33:41 +0000 Manifest this update: Thu 24 Sep 2026 10:28:41 +0000 Manifest next update: Fri 25 Sep 2026 11:08:41 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: AaYEngFZcTSugqnJzLFpOp+iypJimR+NqNfhWZTIa9E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:07:8c:87:b6:33:1c:76:ad:8b:b7:41:eb:55:12:d4:ac:96:3e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: Sep 24 10:28:41 2026 GMT Not After : Sep 25 11:08:41 2026 GMT Subject: CN=E502D270F6856EE289BF1C128CC7DABA14065137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:7a:5f:bc:8e:3a:b0:8b:93:2b:d2:a2:0a: a9:14:6e:27:04:c6:af:56:98:bf:f0:0c:ee:77:c0: 30:8d:6b:96:5c:30:f8:14:c9:28:8d:f0:5f:fe:d5: 0a:60:2e:1e:61:db:41:4f:31:1e:e5:00:d5:28:3f: a6:15:97:83:69:fd:cd:5b:5f:08:bd:87:78:1c:0b: a6:b4:83:61:7d:60:7a:30:4a:d6:dc:d8:8c:ac:27: b2:d0:a0:86:a5:f0:35:96:5e:5d:07:dd:c4:e9:f5: 6c:c7:d2:f0:fb:69:96:f8:52:2a:b7:43:a9:0f:5a: f6:db:33:32:bf:ce:5b:43:ea:09:4b:5d:e6:b6:a8: c3:61:24:be:cf:12:de:43:5d:b4:eb:f2:5d:41:ba: 39:54:06:fb:5c:87:93:ad:78:1f:06:4c:71:e9:37: db:be:32:30:c7:97:66:b9:18:3a:50:90:cd:5b:e6: 5d:d3:5a:7a:04:40:27:31:b0:ef:31:de:ca:c3:0f: 47:cf:12:7c:29:4f:78:b2:37:42:64:99:3d:b2:f3: 85:10:28:56:b6:12:a0:ee:58:83:32:d3:c0:f6:78: 6e:76:75:3f:18:fe:1d:65:ea:33:19:cd:69:4e:f9: 1d:d2:a5:f7:9a:c9:8a:ea:06:80:74:b4:54:41:d0: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:02:D2:70:F6:85:6E:E2:89:BF:1C:12:8C:C7:DA:BA:14:06:51:37 X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:db:1d:70:ef:e2:08:5a:18:0e:76:3d:63:e2:43:40:97:c5: 53:a6:07:fc:1d:6f:e6:89:ca:aa:53:25:f8:87:7e:4e:0c:4c: 22:c2:62:ea:1b:a3:8d:df:6b:a9:7c:5a:7d:6c:39:eb:72:44: 6a:ab:15:1c:13:ee:3b:56:f6:46:21:e7:b1:95:b6:ba:cd:e1: 16:65:a9:02:f4:fe:62:44:7d:e3:79:8d:16:3b:c8:ed:18:af: 0e:29:3e:74:60:80:38:1c:8e:a0:d4:19:af:69:83:42:59:34: 75:17:e7:b7:4f:1f:b1:6e:4e:fd:d1:27:e8:ae:82:fb:36:19: ee:ef:63:a5:ae:a0:cb:73:d5:09:5d:2e:c2:a4:d3:38:48:e6: fd:9a:87:b8:e8:b4:6f:ae:5d:80:82:be:ad:65:cf:24:f6:07: 6e:37:ac:33:7c:18:80:65:e5:44:60:39:77:86:d2:35:81:ff: f2:1e:a5:72:e6:ea:62:31:15:49:b1:f8:19:43:23:f1:bb:55: 94:fe:a4:96:42:47:f1:e6:32:63:cc:1f:80:02:12:8c:1b:54: 06:70:1c:6a:e8:98:f3:ce:dc:50:ee:63:92:b0:79:10:e0:3a: 77:a4:92:b9:43:e1:70:d6:c8:56:67:b5:68:9e:81:4e:e0:d8: 3c:52:f0:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHAeMh7YzHHati7dB61US1KyWPk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjA5MjQxMDI4NDFaFw0yNjA5MjUxMTA4NDFaMDMxMTAvBgNV BAMTKEU1MDJEMjcwRjY4NTZFRTI4OUJGMUMxMjhDQzdEQUJBMTQwNjUxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2XpfvI46sIuTK9KiCqkUbicE xq9WmL/wDO53wDCNa5ZcMPgUySiN8F/+1QpgLh5h20FPMR7lANUoP6YVl4Np/c1b Xwi9h3gcC6a0g2F9YHowStbc2IysJ7LQoIal8DWWXl0H3cTp9WzH0vD7aZb4Uiq3 Q6kPWvbbMzK/zltD6glLXea2qMNhJL7PEt5DXbTr8l1BujlUBvtch5OteB8GTHHp N9u+MjDHl2a5GDpQkM1b5l3TWnoEQCcxsO8x3srDD0fPEnwpT3iyN0JkmT2y84UQ KFa2EqDuWIMy08D2eG52dT8Y/h1l6jMZzWlO+R3SpfeayYrqBoB0tFRB0Kx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5QLScPaFbuKJvxwSjMfauhQGUTcwHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzbHXDv4ghaGA52PWPiQ0CXxVOmB/wdb+aJ yqpTJfiHfk4MTCLCYuobo43fa6l8Wn1sOetyRGqrFRwT7jtW9kYh57GVtrrN4RZl qQL0/mJEfeN5jRY7yO0Yrw4pPnRggDgcjqDUGa9pg0JZNHUX57dPH7FuTv3RJ+iu gvs2Ge7vY6WuoMtz1QldLsKk0zhI5v2ah7jotG+uXYCCvq1lzyT2B243rDN8GIBl 5URgOXeG0jWB//IepXLm6mIxFUmx+BlDI/G7VZT+pJZCR/HmMmPMH4ACEowbVAZw HGromPPO3FDuY5KweRDgOnekkrlD4XDWyFZntWiegU7g2DxS8EY= -----END CERTIFICATE-----Generated at Fri Sep 25 01:01:29 2026 by rpki-client