$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: GOPA7PANn4Xv7UV6/bHFhjOsuIOwz/s1qY1fkTdLvPo= Subject key identifier: 4A:73:05:EF:04:4A:B0:A3:24:44:EB:5D:86:6E:3D:40:F1:46:14:2C Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 535604C382799E55323B7E57DA7133D160CB07EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 17:05:55 +0000 Manifest this update: Sat 14 Nov 2026 17:00:55 +0000 Manifest next update: Sun 15 Nov 2026 19:54:55 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: egD3zQ83gY3ZWwRurwkckNwbj1x/IxRueQYcbyszd6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:56:04:c3:82:79:9e:55:32:3b:7e:57:da:71:33:d1:60:cb:07:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: Nov 14 17:00:55 2026 GMT Not After : Nov 15 19:54:55 2026 GMT Subject: CN=4A7305EF044AB0A32444EB5D866E3D40F146142C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:2b:66:0e:e0:19:f4:c0:f9:57:a4:9f:be: c3:69:14:a6:a0:45:76:b4:bf:54:cf:56:21:2d:ee: 05:5e:ac:3e:6f:bd:8c:33:3f:42:3d:5f:2c:ff:15: 88:58:c5:40:a2:45:8f:e3:06:f2:67:de:a2:f5:b7: 7a:ac:1c:5f:68:d1:03:e0:00:74:34:78:c8:44:7e: 3e:72:b7:e5:2e:e2:ce:e4:48:95:9f:cb:d5:90:f4: 8d:4a:5b:cf:c3:50:67:70:2d:13:af:31:3d:fd:4f: 8d:2f:13:bc:77:ae:0b:f1:2d:64:25:70:18:66:4f: a6:e9:48:8e:6f:75:f7:63:e5:c2:53:8c:b6:38:ac: c1:42:07:aa:9e:d6:66:1d:b1:cb:2b:b9:d3:2c:a7: 5b:8b:da:cc:98:4a:21:16:7d:d2:73:89:cf:0c:a4: fe:c4:3b:2f:b0:d1:aa:cc:72:0b:94:c7:5d:0d:ee: 2c:8d:c4:8b:94:d7:0b:a1:db:43:6c:26:cb:ce:c3: db:93:66:bb:82:22:30:ed:1f:95:3e:b7:cb:d8:25: 16:70:f4:eb:e8:34:1b:cc:85:b7:de:6f:f0:8d:09: 6f:f2:09:28:5c:0c:7a:1b:3f:c2:a7:09:79:04:7b: ac:16:a9:33:2b:bb:34:21:38:40:cc:eb:ed:15:ee: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:73:05:EF:04:4A:B0:A3:24:44:EB:5D:86:6E:3D:40:F1:46:14:2C X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ba:ac:b1:e7:6d:05:d7:04:9c:80:86:17:6c:c5:76:d6:ac: 39:80:80:12:9c:af:e3:44:af:47:d0:1f:07:7b:6b:57:7f:24: 55:a3:e6:6f:71:37:81:52:6d:98:84:14:0a:40:8a:59:7f:2d: 57:c5:c8:8b:bb:3c:dc:59:d5:e0:fd:b6:be:33:e5:c3:e8:cd: bb:a3:96:87:d2:9c:b8:c3:24:bc:cd:00:f2:49:78:81:f9:13: 15:5a:87:98:ff:79:e3:0f:c9:2b:88:c6:58:77:62:b0:c2:bb: ec:07:f7:6b:bf:a4:fa:bf:25:2e:91:29:8b:fd:09:d1:8c:4b: f8:a5:51:4b:5b:52:c7:ed:9f:15:1e:9e:18:c4:19:80:f8:53: ce:31:f9:83:23:18:01:04:cf:fd:d2:0a:73:ed:4b:ab:bf:a7: 2b:13:46:e0:36:eb:0b:8b:18:9b:e4:48:f6:ed:69:0b:71:06: 85:61:37:51:6c:8f:4d:78:91:cc:3f:c1:ef:06:81:9a:5d:44: 09:c4:ba:db:46:a9:57:c1:2f:b7:2f:1c:a7:2b:05:f9:78:49: ec:9e:fd:9e:0b:57:7c:60:2d:d9:af:6b:b4:6e:81:df:39:5f: 58:61:ac:73:05:40:82:fa:ec:77:f4:39:38:df:0d:78:09:d9: 47:98:43:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1YEw4J5nlUyO35X2nEz0WDLB+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjExMTQxNzAwNTVaFw0yNjExMTUxOTU0NTVaMDMxMTAvBgNV BAMTKDRBNzMwNUVGMDQ0QUIwQTMyNDQ0RUI1RDg2NkUzRDQwRjE0NjE0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5StmDuAZ9MD5V6SfvsNpFKag RXa0v1TPViEt7gVerD5vvYwzP0I9Xyz/FYhYxUCiRY/jBvJn3qL1t3qsHF9o0QPg AHQ0eMhEfj5yt+Uu4s7kSJWfy9WQ9I1KW8/DUGdwLROvMT39T40vE7x3rgvxLWQl cBhmT6bpSI5vdfdj5cJTjLY4rMFCB6qe1mYdscsrudMsp1uL2syYSiEWfdJzic8M pP7EOy+w0arMcguUx10N7iyNxIuU1wuh20NsJsvOw9uTZruCIjDtH5U+t8vYJRZw 9OvoNBvMhbfeb/CNCW/yCShcDHobP8KnCXkEe6wWqTMruzQhOEDM6+0V7jhdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSnMF7wRKsKMkROtdhm49QPFGFCwwHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa6rLHnbQXXBJyAhhdsxXbWrDmAgBKcr+NE r0fQHwd7a1d/JFWj5m9xN4FSbZiEFApAill/LVfFyIu7PNxZ1eD9tr4z5cPozbuj lofSnLjDJLzNAPJJeIH5ExVah5j/eeMPySuIxlh3YrDCu+wH92u/pPq/JS6RKYv9 CdGMS/ilUUtbUsftnxUenhjEGYD4U84x+YMjGAEEz/3SCnPtS6u/pysTRuA26wuL GJvkSPbtaQtxBoVhN1Fsj014kcw/we8GgZpdRAnEuttGqVfBL7cvHKcrBfl4Seye /Z4LV3xgLdmva7Rugd85X1hhrHMFQIL67Hf0OTjfDXgJ2UeYQy8= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:18 2026 by rpki-client