$ rpki-client -vvf rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft File: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft (raw, json) Hash identifier: TrSqy6pPP0hU7X/lp5CxiM9VDHp1cdGwQomBt9gN6Is= Subject key identifier: DA:28:A0:09:99:BB:08:CD:8F:3F:E1:2B:FA:B8:0D:C3:31:35:A5:8B Authority key identifier: 89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF Certificate issuer: /CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Certificate serial: 543DF6CEDE56BA25AA0796F57EBF539D9E1578A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 18:31:28 +0000 Manifest this update: Tue 16 Jun 2026 18:26:28 +0000 Manifest next update: Wed 17 Jun 2026 22:18:28 +0000 Files and hashes: 1: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl (hash: +YZZBiTC4TWWeb5RxiLeJ9f/JA/M6syGE47UxGfYRLw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3d:f6:ce:de:56:ba:25:aa:07:96:f5:7e:bf:53:9d:9e:15:78:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Validity Not Before: Jun 16 18:26:28 2026 GMT Not After : Jun 17 22:18:28 2026 GMT Subject: CN=DA28A00999BB08CD8F3FE12BFAB80DC33135A58B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:b0:dc:8a:d8:8c:88:83:b2:e7:49:17:18: 45:91:86:62:91:f2:b8:9f:04:ef:83:ab:00:25:1a: 41:9b:65:86:f9:6c:dd:2b:70:f6:dd:46:00:f4:04: 94:49:f0:9e:07:c8:3a:83:fb:35:06:91:de:4d:33: c2:68:fc:41:70:61:f7:7a:7d:ba:6c:e0:0f:33:e1: e1:f4:34:de:99:9b:e5:96:bf:19:c8:89:0c:9b:35: d2:99:f5:ec:5e:2e:8c:d4:9e:9d:ab:98:49:4d:d6: 40:50:64:f8:82:c2:3d:2a:86:b9:7d:4e:83:90:91: 39:7b:b1:32:51:96:4d:b8:cb:a0:79:49:80:6a:83: ce:47:a6:67:3b:0c:ac:0e:3a:01:31:6f:61:33:f8: 66:8b:41:e8:46:3b:8f:4f:3c:6e:fe:b2:b1:37:6a: 37:d8:59:4d:ce:9c:2a:9e:19:3a:05:7c:3b:28:6e: 6b:06:2d:6f:f7:d6:2a:cf:8f:f1:dd:66:8a:cf:65: 9a:c6:f2:da:36:b5:df:79:ac:81:ac:f6:57:eb:dc: 4b:7e:6a:77:2c:3f:3c:05:08:28:d6:a3:d3:6c:29: ca:27:2b:6b:cd:5b:cb:55:cc:53:30:41:a2:25:0b: fa:ca:be:c1:fd:43:41:40:e3:ee:09:43:17:c7:0b: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:28:A0:09:99:BB:08:CD:8F:3F:E1:2B:FA:B8:0D:C3:31:35:A5:8B X509v3 Authority Key Identifier: keyid:89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:eb:d5:e9:1f:e0:bb:ce:52:dd:23:6b:78:19:81:c5:d3:e5: dd:30:10:09:eb:92:17:e1:ef:e3:57:b1:cd:f1:3c:65:8c:26: 1e:4a:4d:57:64:dc:90:e2:fa:a4:63:06:5b:39:1e:d7:db:a4: ff:b7:52:6a:97:a7:b3:30:5d:0d:b4:2e:5a:db:72:fe:36:68: d1:08:57:29:f0:6c:2e:cf:35:e5:be:9a:dc:1a:36:54:aa:7c: 8b:b4:5d:21:50:4b:3c:0b:93:84:6f:df:80:d5:de:9a:33:b5: 87:aa:fc:ae:ee:79:5e:56:68:34:59:99:20:58:5c:78:33:f4: 84:57:3c:fb:cd:6c:33:8c:dd:b4:cb:86:52:6f:b2:40:ce:fe: 47:cb:92:82:84:57:80:0c:b4:e6:ff:40:32:e4:99:59:e4:83: 6b:68:46:06:3a:1b:a3:b2:7e:1b:05:ed:21:78:b2:8a:d5:36: e6:1d:d8:e1:24:99:71:ef:dc:5f:60:52:19:38:0a:89:ca:4d: 01:d8:b5:f5:af:c4:fd:28:b9:76:e9:63:94:8a:e0:ce:81:2b: 70:8e:fe:24:e2:58:14:c8:2e:c6:cd:94:27:bd:7a:e6:fa:44: 2d:fb:15:fc:0e:2f:fb:f4:e4:f1:0d:5f:ba:92:9c:3d:e5:1d: 22:3c:5c:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVD32zt5WuiWqB5b1fr9TnZ4VeKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5 MDQ2RTRDRjAeFw0yNjA2MTYxODI2MjhaFw0yNjA2MTcyMjE4MjhaMDMxMTAvBgNV BAMTKERBMjhBMDA5OTlCQjA4Q0Q4RjNGRTEyQkZBQjgwREMzMzEzNUE1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDq7DcitiMiIOy50kXGEWRhmKR 8rifBO+DqwAlGkGbZYb5bN0rcPbdRgD0BJRJ8J4HyDqD+zUGkd5NM8Jo/EFwYfd6 fbps4A8z4eH0NN6Zm+WWvxnIiQybNdKZ9exeLozUnp2rmElN1kBQZPiCwj0qhrl9 ToOQkTl7sTJRlk24y6B5SYBqg85Hpmc7DKwOOgExb2Ez+GaLQehGO49PPG7+srE3 ajfYWU3OnCqeGToFfDsobmsGLW/31irPj/HdZorPZZrG8to2td95rIGs9lfr3Et+ ancsPzwFCCjWo9NsKconK2vNW8tVzFMwQaIlC/rKvsH9Q0FA4+4JQxfHC96PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2iigCZm7CM2PP+Er+rgNwzE1pYswHwYDVR0j BBgwFoAUiXqgTUl94NCY5MX05AEk6ZBG5M8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ2MjU2MjEtZjAwZi00ODMzLWJiYWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0 OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5MDQ2RTRDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdBQTA0RDQ5N0RFMEQwOThFNEM1RjRFNDAxMjRFOTkwNDZF NENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0 RTk5MDQ2RTRDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXr1ekf4LvOUt0ja3gZgcXT5d0wEAnrkhfh 7+NXsc3xPGWMJh5KTVdk3JDi+qRjBls5HtfbpP+3UmqXp7MwXQ20Llrbcv42aNEI VynwbC7PNeW+mtwaNlSqfIu0XSFQSzwLk4Rv34DV3poztYeq/K7ueV5WaDRZmSBY XHgz9IRXPPvNbDOM3bTLhlJvskDO/kfLkoKEV4AMtOb/QDLkmVnkg2toRgY6G6Oy fhsF7SF4sorVNuYd2OEkmXHv3F9gUhk4ConKTQHYtfWvxP0ouXbpY5SK4M6BK3CO /iTiWBTILsbNlCe9eub6RC37FfwOL/v05PENX7qSnD3lHSI8XME= -----END CERTIFICATE-----Generated at Wed Jun 17 12:45:41 2026 by rpki-client