$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft File: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft (raw, json) Hash identifier: IwQVpd+bdt0yy4VXRA1Cxf6m5WLg9iKtrYxGRBv0tZw= Subject key identifier: 27:68:47:F8:79:18:6F:BE:38:CB:CA:40:B5:08:F4:5E:AB:CE:B6:0D Authority key identifier: 89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF Certificate issuer: /CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Certificate serial: 263860380AB4F7C87B143F2242D9E189D236327F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft Manifest number: DC Signing time: Tue 13 Oct 2026 22:59:07 +0000 Manifest this update: Tue 13 Oct 2026 22:54:07 +0000 Manifest next update: Thu 15 Oct 2026 02:07:07 +0000 Files and hashes: 1: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl (hash: zJ1GUKFXiS+7h7D7OasqXdCbwXErM04nf+KTI7u9srE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 02:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:38:60:38:0a:b4:f7:c8:7b:14:3f:22:42:d9:e1:89:d2:36:32:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Validity Not Before: Oct 13 22:54:07 2026 GMT Not After : Oct 15 02:07:07 2026 GMT Subject: CN=276847F879186FBE38CBCA40B508F45EABCEB60D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:95:08:a5:f2:1f:5a:07:ed:73:ad:5a:66: 69:d2:5e:2d:25:d5:84:55:11:30:92:bb:43:fe:53: 63:58:5d:86:d3:ef:a1:dc:5c:61:e2:ea:53:d0:59: 2a:06:26:41:61:16:ad:ce:ef:3b:ad:06:2b:5b:29: 2a:90:33:2c:c9:05:36:7c:4f:6f:93:5c:24:7b:75: 4c:f7:90:c4:47:a4:43:7b:ba:a4:89:b0:07:40:33: f2:b1:66:26:54:68:d5:85:bf:00:c9:da:7e:b1:48: 38:84:fa:ce:e1:b0:5b:ed:29:5b:34:10:d2:b7:f5: bd:e2:88:e7:ed:92:7f:c7:dc:7f:5d:b0:55:22:3f: 28:ef:f2:88:02:06:ff:ae:bf:55:7f:b8:16:c4:96: d4:f1:2c:6a:55:76:32:50:82:57:86:26:03:bf:4d: fb:6c:41:0d:3b:12:61:73:7d:25:89:d0:f7:a1:6e: 46:c5:f8:66:a3:ad:db:33:e6:a7:fe:b4:29:83:f7: 54:98:cd:a0:7a:85:50:25:5a:e6:7d:5e:91:8f:7d: 5e:ee:f4:42:86:e2:6b:76:51:bf:9c:d5:86:54:bb: 25:50:e8:d5:d6:ab:88:00:4a:12:60:26:cb:cf:46: 79:44:00:b7:1c:01:6c:d1:90:b9:30:bd:fe:a8:fd: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:68:47:F8:79:18:6F:BE:38:CB:CA:40:B5:08:F4:5E:AB:CE:B6:0D X509v3 Authority Key Identifier: keyid:89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:66:a5:90:dc:c4:c4:c7:dc:84:ae:c7:5f:5e:7d:4b:ee:03: 5b:3e:39:1b:4c:2c:40:64:83:d1:89:c2:14:2b:a7:69:2b:8c: 5e:94:76:be:49:15:64:9d:53:19:42:d6:0a:69:6b:a2:9e:12: 66:e8:b1:e5:83:98:56:e3:02:12:26:62:77:f8:1e:2d:bd:ed: 32:d9:52:b9:fe:f5:0c:25:1e:09:3d:17:3c:af:85:88:84:42: 25:e4:4c:89:10:9e:74:73:8b:32:d3:54:0a:77:a6:fb:9f:d5: 60:91:b8:32:a8:71:b9:8b:fe:df:f3:e2:98:39:d4:b4:bb:c6: 56:b1:5c:55:2a:61:66:2d:17:84:75:73:73:1f:ef:51:10:fb: 90:a1:dc:3a:f6:d6:99:cd:21:3f:0d:b8:8d:1c:d6:4f:85:43: b5:6d:20:21:8f:7d:1f:00:7c:70:2e:73:ba:f6:f5:86:8d:32: 0c:79:0d:04:15:a6:7e:d4:87:a0:e9:2b:51:2d:a6:53:fa:ad: 2a:f8:aa:3c:53:45:f3:90:37:fd:30:de:62:99:63:24:ca:61: 98:e7:35:47:fb:6e:d1:5c:f0:93:f7:af:6c:c2:13:03:13:bd: 9e:12:f4:11:7b:c8:1e:88:76:ab:8e:da:67:4d:18:be:5f:ff: 75:6a:55:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjhgOAq098h7FD8iQtnhidI2Mn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5 MDQ2RTRDRjAeFw0yNjEwMTMyMjU0MDdaFw0yNjEwMTUwMjA3MDdaMDMxMTAvBgNV BAMTKDI3Njg0N0Y4NzkxODZGQkUzOENCQ0E0MEI1MDhGNDVFQUJDRUI2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivJUIpfIfWgftc61aZmnSXi0l 1YRVETCSu0P+U2NYXYbT76HcXGHi6lPQWSoGJkFhFq3O7zutBitbKSqQMyzJBTZ8 T2+TXCR7dUz3kMRHpEN7uqSJsAdAM/KxZiZUaNWFvwDJ2n6xSDiE+s7hsFvtKVs0 ENK39b3iiOftkn/H3H9dsFUiPyjv8ogCBv+uv1V/uBbEltTxLGpVdjJQgleGJgO/ TftsQQ07EmFzfSWJ0PehbkbF+Gajrdsz5qf+tCmD91SYzaB6hVAlWuZ9XpGPfV7u 9EKG4mt2Ub+c1YZUuyVQ6NXWq4gAShJgJsvPRnlEALccAWzRkLkwvf6o/apnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ2hH+HkYb744y8pAtQj0XqvOtg0wHwYDVR0j BBgwFoAUiXqgTUl94NCY5MX05AEk6ZBG5M8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ2MjU2MjEtZjAwZi00ODMzLWJiYWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0 OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5MDQ2RTRDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdBQTA0RDQ5N0RFMEQwOThFNEM1RjRFNDAxMjRFOTkwNDZF NENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0 RTk5MDQ2RTRDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhmpZDcxMTH3ISux19efUvuA1s+ORtMLEBk g9GJwhQrp2krjF6Udr5JFWSdUxlC1gppa6KeEmboseWDmFbjAhImYnf4Hi297TLZ Urn+9QwlHgk9FzyvhYiEQiXkTIkQnnRzizLTVAp3pvuf1WCRuDKocbmL/t/z4pg5 1LS7xlaxXFUqYWYtF4R1c3Mf71EQ+5Ch3Dr21pnNIT8NuI0c1k+FQ7VtICGPfR8A fHAuc7r29YaNMgx5DQQVpn7Uh6DpK1EtplP6rSr4qjxTRfOQN/0w3mKZYyTKYZjn NUf7btFc8JP3r2zCEwMTvZ4S9BF7yB6IdquO2mdNGL5f/3VqVXk= -----END CERTIFICATE-----Generated at Wed Oct 14 19:31:54 2026 by rpki-client