$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: 7/5J+MKII3gUyvMgx8xqyvnXrJMiVsfl5B5TlGXOF7s= Subject key identifier: D8:E0:3B:88:CD:DF:56:DD:9E:F3:63:8F:E4:EA:66:11:7F:A9:FE:B4 Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 65A899922FC0E3DE86A94C249D64CF99065BA266 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 03:41:38 +0000 Manifest this update: Tue 28 Jul 2026 03:36:38 +0000 Manifest next update: Wed 29 Jul 2026 05:27:38 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: 4ggsZ9olP07UouPPhoZA/CmPJ9xK279wncsC33ag7Eo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 05:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a8:99:92:2f:c0:e3:de:86:a9:4c:24:9d:64:cf:99:06:5b:a2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: Jul 28 03:36:38 2026 GMT Not After : Jul 29 05:27:38 2026 GMT Subject: CN=D8E03B88CDDF56DD9EF3638FE4EA66117FA9FEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:29:4c:8f:a6:13:86:bd:0a:62:dc:47:df: 48:b9:a6:81:3e:67:6a:41:bb:c5:68:c2:b8:c0:38: 1f:94:69:e4:52:d6:41:29:0f:e8:81:32:c0:c1:6e: 82:f6:3f:9e:84:20:cc:14:ba:04:5b:4a:a7:61:4e: 81:45:8a:7c:fe:11:59:4c:83:9d:9b:31:28:84:da: 56:a7:11:52:ed:02:7f:8d:d8:f2:ec:20:18:71:d0: 22:38:ee:cb:47:19:35:c1:de:1f:d7:d9:aa:17:2e: 49:5a:c2:c5:b0:87:29:c7:b2:a3:fe:b4:7e:3e:58: fb:29:0e:c3:e8:a0:2a:c8:0b:e6:7e:b5:20:4c:99: 95:20:cb:ab:bc:af:9b:37:d2:6e:9f:18:5b:d3:94: 56:ac:1d:05:6d:92:48:10:ef:2b:34:c5:82:d3:9b: 29:fe:34:9d:b5:6f:bd:8c:33:ea:71:46:56:10:57: 5f:49:d3:7f:4d:a8:7e:0f:9f:f3:5e:8b:3e:44:5b: b0:39:da:44:20:36:04:c9:c0:70:7d:06:10:df:11: 50:46:c1:f5:f4:ac:eb:49:7d:9e:98:33:91:02:20: 8c:01:88:ca:77:90:dc:c5:65:aa:75:3d:b9:fd:6c: 6f:84:4e:e9:86:5d:00:3a:de:97:f1:4b:d5:bc:67: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E0:3B:88:CD:DF:56:DD:9E:F3:63:8F:E4:EA:66:11:7F:A9:FE:B4 X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d9:ab:c4:c4:04:9c:41:31:df:34:0f:b4:91:35:29:e6:16: e9:7a:83:27:c6:93:1f:72:a5:f4:6a:9f:1b:69:2d:16:48:40: f0:26:06:43:af:e7:2a:ee:9f:c0:e3:8e:af:c3:0c:44:26:85: 36:15:66:5e:f7:4e:85:97:06:38:02:a5:0c:15:20:f1:80:1f: d2:a2:39:98:fa:cd:9c:bc:24:a5:5f:f2:af:b0:49:8b:c0:d5: d2:6b:c5:81:72:a0:74:2e:e0:61:bc:ad:f5:f9:60:33:29:c4: af:c0:2b:7f:de:67:7b:6c:dc:00:4d:9c:6c:13:47:9a:a9:14: 5e:b2:a7:ae:3e:d5:d3:97:0b:33:69:2b:58:c2:29:c5:06:c7: 0b:9c:6f:38:43:44:cf:94:b0:8e:6c:79:23:ba:2b:6c:8e:4d: 7f:86:1d:21:10:96:73:26:c1:f8:a9:bc:2c:85:23:77:27:fc: ea:87:d5:ba:97:b3:39:61:5b:c4:e4:3e:13:c7:e7:c8:f9:2c: 70:9b:d1:d4:d7:da:2b:b2:22:46:01:4a:e5:db:03:ea:88:78: 97:bf:25:d1:2c:92:9f:f2:71:01:8b:09:9a:7d:58:33:58:da: 9e:fd:58:7f:d2:41:bc:db:4c:35:30:0b:14:0a:7b:33:3b:dc: 17:06:72:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZaiZki/A496GqUwknWTPmQZbomYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjA3MjgwMzM2MzhaFw0yNjA3MjkwNTI3MzhaMDMxMTAvBgNV BAMTKEQ4RTAzQjg4Q0RERjU2REQ5RUYzNjM4RkU0RUE2NjExN0ZBOUZFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuiSlMj6YThr0KYtxH30i5poE+ Z2pBu8VowrjAOB+UaeRS1kEpD+iBMsDBboL2P56EIMwUugRbSqdhToFFinz+EVlM g52bMSiE2lanEVLtAn+N2PLsIBhx0CI47stHGTXB3h/X2aoXLklawsWwhynHsqP+ tH4+WPspDsPooCrIC+Z+tSBMmZUgy6u8r5s30m6fGFvTlFasHQVtkkgQ7ys0xYLT myn+NJ21b72MM+pxRlYQV19J039NqH4Pn/Neiz5EW7A52kQgNgTJwHB9BhDfEVBG wfX0rOtJfZ6YM5ECIIwBiMp3kNzFZap1Pbn9bG+ETumGXQA63pfxS9W8Z3ZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2OA7iM3fVt2e82OP5OpmEX+p/rQwHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbZq8TEBJxBMd80D7SRNSnmFul6gyfGkx9y pfRqnxtpLRZIQPAmBkOv5yrun8Djjq/DDEQmhTYVZl73ToWXBjgCpQwVIPGAH9Ki OZj6zZy8JKVf8q+wSYvA1dJrxYFyoHQu4GG8rfX5YDMpxK/AK3/eZ3ts3ABNnGwT R5qpFF6yp64+1dOXCzNpK1jCKcUGxwucbzhDRM+UsI5seSO6K2yOTX+GHSEQlnMm wfipvCyFI3cn/OqH1bqXszlhW8TkPhPH58j5LHCb0dTX2iuyIkYBSuXbA+qIeJe/ JdEskp/ycQGLCZp9WDNY2p79WH/SQbzbTDUwCxQKezM73BcGch0= -----END CERTIFICATE-----Generated at Tue Jul 28 21:35:13 2026 by rpki-client