$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: Zyh3KkrhYlYh1lWsiSSMMmSpP2A7OXo1vj0C7aLqtg4= Subject key identifier: 57:05:8E:DE:82:E6:F1:AA:24:01:3D:70:B2:3C:F0:E3:58:BF:79:51 Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 153EBF8A300AFFF11C924E2C532AD94FC52C477E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: 0D Signing time: Tue 12 May 2026 05:41:10 +0000 Manifest this update: Tue 12 May 2026 05:36:10 +0000 Manifest next update: Wed 13 May 2026 08:57:10 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: zVGsZVQov4cuyEqY9xbcHTTTrs1tqFLdjcDbIgU0Q4A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3e:bf:8a:30:0a:ff:f1:1c:92:4e:2c:53:2a:d9:4f:c5:2c:47:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: May 12 05:36:10 2026 GMT Not After : May 13 08:57:10 2026 GMT Subject: CN=57058EDE82E6F1AA24013D70B23CF0E358BF7951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:ce:bc:4e:86:cb:86:1b:92:15:42:07:62: dd:95:88:d1:1d:aa:d2:96:60:5d:84:c2:1e:9f:55: b6:36:42:df:f7:18:57:c4:81:4d:91:d9:2d:40:5f: 05:29:33:67:33:c2:09:e0:ac:d5:cd:2c:de:fb:40: 13:c7:35:e6:04:34:0b:68:11:1b:58:e3:c4:fe:c6: e7:b4:9c:c4:54:1d:d9:a8:90:4e:8f:9e:2c:7c:60: 2d:0b:89:82:f4:e3:a8:23:70:2d:21:0b:b0:d5:cf: 73:5e:22:44:29:67:e9:03:83:b0:e0:b8:96:2f:38: 47:3e:59:ab:2d:a9:22:2d:11:73:b4:0b:8e:b8:fc: 0a:f9:eb:ce:fb:b6:bd:64:88:79:1a:a2:de:72:07: 3d:ba:78:0c:92:f5:20:82:72:0f:c5:1b:d0:20:b9: a1:78:40:08:9b:91:72:bb:32:51:be:d0:e7:75:da: 64:d4:42:d3:9f:4c:08:10:0b:10:88:3c:fa:b7:71: 75:2e:1c:88:30:53:e1:38:fb:a7:e5:72:b8:8a:e3: 59:13:cf:b4:4b:ed:78:7b:76:ca:8a:6a:b5:cb:2b: cc:dc:f7:97:2a:78:22:fe:33:73:40:46:0a:6f:b7: f6:8d:7d:59:71:67:15:66:2e:09:2e:69:98:13:90: 00:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:05:8E:DE:82:E6:F1:AA:24:01:3D:70:B2:3C:F0:E3:58:BF:79:51 X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:38:31:63:89:22:31:b8:8e:11:e7:6b:61:17:da:49:c7:4e: 56:eb:f4:54:27:57:1b:44:08:36:27:d3:5e:76:0e:65:a8:82: bf:88:6f:a2:e0:59:ec:8d:17:93:94:71:e2:63:d2:e7:c8:b1: 9c:3e:66:46:7f:de:99:57:22:09:13:7f:49:80:d5:a5:3e:29: 3d:51:85:14:bc:70:8b:64:3b:95:2a:8f:99:7e:cc:b8:96:02: 45:f8:bb:d7:22:04:0d:bf:99:53:cc:45:09:f0:f0:df:8a:37: 84:76:d6:2b:64:15:cb:d2:72:27:66:63:f7:9d:bd:a7:d0:80: 00:f0:0a:c4:c2:81:46:a9:28:67:81:ff:1d:6c:ad:62:ab:cf: 69:9d:ee:1c:ee:b5:68:f0:47:84:a6:16:1e:e9:37:2b:e1:e1: 15:a3:b7:d3:92:61:6c:0e:e1:b6:7c:94:8c:ec:a0:65:a0:ad: bd:2b:c7:4b:f3:06:1a:ef:2d:58:61:d0:c5:ba:ef:a0:ba:e7: cc:99:af:52:ba:70:16:db:2b:0d:36:6b:e5:a3:5a:bf:ab:4e: 9b:d6:2b:69:7d:f2:48:48:f2:2d:78:fb:3d:97:d5:c3:6a:89: 93:cb:8a:7b:f0:53:84:c6:10:7f:d5:ee:6a:b0:e3:81:46:e9: 15:52:d7:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFT6/ijAK//Eckk4sUyrZT8UsR34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjA1MTIwNTM2MTBaFw0yNjA1MTMwODU3MTBaMDMxMTAvBgNV BAMTKDU3MDU4RURFODJFNkYxQUEyNDAxM0Q3MEIyM0NGMEUzNThCRjc5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0c68TobLhhuSFUIHYt2ViNEd qtKWYF2Ewh6fVbY2Qt/3GFfEgU2R2S1AXwUpM2czwgngrNXNLN77QBPHNeYENAto ERtY48T+xue0nMRUHdmokE6Pnix8YC0LiYL046gjcC0hC7DVz3NeIkQpZ+kDg7Dg uJYvOEc+WastqSItEXO0C464/Ar56877tr1kiHkaot5yBz26eAyS9SCCcg/FG9Ag uaF4QAibkXK7MlG+0Od12mTUQtOfTAgQCxCIPPq3cXUuHIgwU+E4+6flcriK41kT z7RL7Xh7dsqKarXLK8zc95cqeCL+M3NARgpvt/aNfVlxZxVmLgkuaZgTkAAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVwWO3oLm8aokAT1wsjzw41i/eVEwHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA84MWOJIjG4jhHna2EX2knHTlbr9FQnVxtE CDYn0152DmWogr+Ib6LgWeyNF5OUceJj0ufIsZw+ZkZ/3plXIgkTf0mA1aU+KT1R hRS8cItkO5Uqj5l+zLiWAkX4u9ciBA2/mVPMRQnw8N+KN4R21itkFcvScidmY/ed vafQgADwCsTCgUapKGeB/x1srWKrz2md7hzutWjwR4SmFh7pNyvh4RWjt9OSYWwO 4bZ8lIzsoGWgrb0rx0vzBhrvLVhh0MW676C658yZr1K6cBbbKw02a+WjWr+rTpvW K2l98khI8i14+z2X1cNqiZPLinvwU4TGEH/V7mqw44FG6RVS1w8= -----END CERTIFICATE-----Generated at Tue May 12 22:47:21 2026 by rpki-client