$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: 92z4Qxql+DEMuwQG/5RkqUy1ji3s8tUVJRBF4m2llRQ= Subject key identifier: ED:8E:AB:3D:14:FA:6F:A9:5D:C2:B2:68:6B:64:E8:A4:9A:AE:23:E9 Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 2377C72672A04822F9F2A343AE36CFC4EBA99A60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:05:21 +0000 Manifest this update: Mon 21 Sep 2026 07:00:21 +0000 Manifest next update: Tue 22 Sep 2026 10:40:21 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: Tw6Dz0xzqp5h/IeoB/a92sSt8/XqXVnBeWB5cxwgJmA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:77:c7:26:72:a0:48:22:f9:f2:a3:43:ae:36:cf:c4:eb:a9:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: Sep 21 07:00:21 2026 GMT Not After : Sep 22 10:40:21 2026 GMT Subject: CN=ED8EAB3D14FA6FA95DC2B2686B64E8A49AAE23E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:91:1f:61:e6:67:33:f6:9a:44:12:c1:cf: e4:71:10:ae:8c:36:72:21:c8:cd:1c:71:a2:a8:68: 26:13:0e:f1:90:65:11:2e:4b:34:19:cf:cd:fe:b2: e3:8c:2f:ec:a6:ba:9b:40:3f:19:1e:a1:17:3e:a7: 77:07:9a:8f:9e:c5:22:98:62:b7:7c:37:b0:15:ca: dc:84:5e:5b:bd:5b:71:18:45:e8:ec:77:78:01:7c: f1:79:54:aa:5d:6d:a4:bd:82:f3:26:78:c0:12:ec: 49:4b:cf:45:ef:f8:18:9e:e6:f4:83:33:75:44:5d: 0b:c7:9a:8f:d5:d1:21:df:08:e9:98:73:82:03:bb: 2b:a6:c1:4f:e4:e7:9e:4a:07:29:be:29:f3:d7:47: 88:58:45:77:3c:2a:00:2a:bd:b9:46:0e:a1:a9:5c: b8:01:d5:da:81:d8:d1:6b:a8:9a:c1:b3:bc:63:58: 9f:27:9d:46:94:b8:96:0f:eb:9a:b8:25:32:45:32: 6b:2c:67:b8:5d:39:5d:b5:4e:64:f3:00:48:88:dd: 8a:de:91:02:7e:a4:a6:34:7c:01:bb:4b:5e:d2:41: 46:83:8e:aa:fe:0b:10:69:a9:d4:71:ea:45:c4:09: ff:e7:43:f0:65:3a:74:8c:d3:2b:f6:27:17:85:2a: 35:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8E:AB:3D:14:FA:6F:A9:5D:C2:B2:68:6B:64:E8:A4:9A:AE:23:E9 X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c4:69:49:51:98:62:7e:38:68:74:40:e3:b0:13:e5:3d:57: b3:1b:6f:d4:b4:3d:81:7d:26:c3:e9:06:24:32:5d:ea:04:06: fb:95:a9:54:58:8a:1d:5f:eb:6a:ac:e0:a8:19:ff:9f:78:65: 82:f5:b5:7d:7c:d3:85:07:99:25:f9:c7:63:26:9e:b3:93:c2: 05:1d:37:6b:23:75:53:8e:09:81:48:d3:60:cb:7f:2a:69:09: 1b:ba:7e:6d:66:cb:eb:b1:c8:d7:47:87:4c:d3:4b:f3:09:4b: 63:a1:43:c9:e1:77:f7:40:25:4d:82:c5:45:f5:a7:7d:0f:b0: 4b:15:97:c9:7b:98:dd:a5:3d:ab:e6:f5:e8:fb:f3:49:09:6b: a6:8c:9f:a1:cc:4f:59:e9:66:a3:cb:8a:28:91:d8:53:d7:90: 0a:f3:96:f3:4d:03:b6:6f:60:96:d9:99:db:28:21:6a:8f:2f: ef:e0:fc:e1:7b:e7:9a:1a:7e:70:6f:d2:b0:df:78:39:f4:2f: 81:04:74:c9:2c:32:90:24:66:02:55:e9:b3:e6:8e:bf:09:fb: c3:5f:80:d0:79:f8:2f:67:45:65:c7:d5:75:f7:d2:e5:0a:01: 0a:af:b9:cd:52:c4:97:57:ce:74:b2:a8:aa:7e:94:bf:55:98: 45:89:a2:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3fHJnKgSCL58qNDrjbPxOupmmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjA5MjEwNzAwMjFaFw0yNjA5MjIxMDQwMjFaMDMxMTAvBgNV BAMTKEVEOEVBQjNEMTRGQTZGQTk1REMyQjI2ODZCNjRFOEE0OUFBRTIzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMZEfYeZnM/aaRBLBz+RxEK6M NnIhyM0ccaKoaCYTDvGQZREuSzQZz83+suOML+ymuptAPxkeoRc+p3cHmo+exSKY Yrd8N7AVytyEXlu9W3EYRejsd3gBfPF5VKpdbaS9gvMmeMAS7ElLz0Xv+Bie5vSD M3VEXQvHmo/V0SHfCOmYc4IDuyumwU/k555KBym+KfPXR4hYRXc8KgAqvblGDqGp XLgB1dqB2NFrqJrBs7xjWJ8nnUaUuJYP65q4JTJFMmssZ7hdOV21TmTzAEiI3Yre kQJ+pKY0fAG7S17SQUaDjqr+CxBpqdRx6kXECf/nQ/BlOnSM0yv2JxeFKjUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Y6rPRT6b6ldwrJoa2TopJquI+kwHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7EaUlRmGJ+OGh0QOOwE+U9V7Mbb9S0PYF9 JsPpBiQyXeoEBvuVqVRYih1f62qs4KgZ/594ZYL1tX1804UHmSX5x2MmnrOTwgUd N2sjdVOOCYFI02DLfyppCRu6fm1my+uxyNdHh0zTS/MJS2OhQ8nhd/dAJU2CxUX1 p30PsEsVl8l7mN2lPavm9ej780kJa6aMn6HMT1npZqPLiiiR2FPXkArzlvNNA7Zv YJbZmdsoIWqPL+/g/OF755oafnBv0rDfeDn0L4EEdMksMpAkZgJV6bPmjr8J+8Nf gNB5+C9nRWXH1XX30uUKAQqvuc1SxJdXznSyqKp+lL9VmEWJoqA= -----END CERTIFICATE-----Generated at Mon Sep 21 12:49:17 2026 by rpki-client