$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: XEQEWAC3imCoXh/0RnLNHIOzcr+Weku+0VxJYv4uT+k= Subject key identifier: 95:E5:53:E3:6D:AB:D1:2A:01:95:7B:54:4C:56:98:2F:FE:1F:D5:CA Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 6B97C61E24333188A3455667F51B4CDDEB2AE64C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 13:10:36 +0000 Manifest this update: Sat 13 Jun 2026 13:05:36 +0000 Manifest next update: Sun 14 Jun 2026 16:03:36 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: Z9smCnTxIuVw90En01CLR90gKWf7hKvcMZ2tWuduEyg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:97:c6:1e:24:33:31:88:a3:45:56:67:f5:1b:4c:dd:eb:2a:e6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: Jun 13 13:05:36 2026 GMT Not After : Jun 14 16:03:36 2026 GMT Subject: CN=95E553E36DABD12A01957B544C56982FFE1FD5CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:c3:d4:13:44:71:15:1d:b5:c7:79:5b:46: e9:2e:30:5a:f6:c8:46:dd:f8:7b:e5:93:7e:e5:51: b3:d7:98:97:f5:d6:7d:30:09:b2:55:3c:d2:8e:bf: ce:5b:19:5e:fe:69:ca:49:4c:6c:23:80:4f:25:4b: a0:e7:63:a6:f3:40:a0:82:4d:a3:4d:53:81:5f:71: dc:58:69:bd:f0:3b:9d:0f:33:2e:db:b5:78:fc:67: 8a:46:0b:db:01:86:c7:82:16:49:6d:25:7b:d4:d3: eb:5c:c8:79:13:06:14:98:f0:60:88:a3:78:92:53: 55:0c:28:85:7e:b9:70:8f:5a:57:d9:a7:62:17:22: 1c:1f:a1:36:7b:81:f6:80:0c:c2:c2:4f:48:30:25: d3:86:3b:c6:04:db:cb:4c:cd:c3:0d:82:be:05:07: 49:6a:8b:c0:10:4b:15:9e:73:ef:82:42:cf:6f:69: ca:b1:80:85:38:7a:01:5d:6c:1c:0d:b8:ac:a5:9b: 70:93:f8:7a:5f:60:e8:57:93:37:98:63:0b:9c:fd: ae:e6:5d:b4:95:55:77:e3:d3:3b:40:14:79:64:fd: b4:2e:83:be:9e:60:36:e3:65:bc:a0:9f:7b:35:80: b8:c5:8c:d3:5f:7d:de:95:08:75:46:6a:f5:7b:e3: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E5:53:E3:6D:AB:D1:2A:01:95:7B:54:4C:56:98:2F:FE:1F:D5:CA X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:61:60:8c:fb:bd:39:8c:1e:5a:41:ec:42:6a:56:cd:b6:ce: 19:32:d5:ef:cb:ac:bc:28:74:0f:6e:3b:b2:4b:a2:40:3a:c8: d3:34:71:89:17:74:8d:14:10:86:0a:64:d1:b6:55:96:1d:0e: 76:35:a1:92:c0:cb:d5:cf:91:fe:20:31:b3:69:19:10:8d:2e: 24:56:1f:a3:da:26:67:35:e6:1c:ce:da:06:b8:94:5f:22:27: f2:49:20:d1:d9:18:f4:cf:61:bb:01:b1:a2:37:58:8d:f6:00: fe:ef:88:0b:65:cc:55:47:c8:a7:30:81:7d:f2:df:55:60:cf: 3d:fc:13:29:17:40:f4:e8:ab:66:8e:3f:50:08:91:0e:66:54: 1c:af:e6:13:ba:8c:c4:cd:20:72:a8:f6:2e:46:96:cf:b6:94: 61:6e:cd:e5:f7:e9:43:33:f8:87:f4:f3:3e:fb:ba:4c:da:ff: fd:55:8f:ba:76:9e:6b:05:1b:8b:0d:93:b0:fe:69:71:8a:77: 43:56:20:af:83:5b:c0:d0:d8:0c:6d:d5:0f:02:88:4e:d8:ad: 93:d2:b1:51:76:20:9e:88:d4:29:79:d0:aa:ff:d6:bb:f5:19: 08:08:13:81:f7:48:1a:8b:1d:08:49:d8:62:bc:9d:45:2d:1f: 22:58:8c:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5fGHiQzMYijRVZn9RtM3esq5kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjA2MTMxMzA1MzZaFw0yNjA2MTQxNjAzMzZaMDMxMTAvBgNV BAMTKDk1RTU1M0UzNkRBQkQxMkEwMTk1N0I1NDRDNTY5ODJGRkUxRkQ1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcsPUE0RxFR21x3lbRukuMFr2 yEbd+Hvlk37lUbPXmJf11n0wCbJVPNKOv85bGV7+acpJTGwjgE8lS6DnY6bzQKCC TaNNU4FfcdxYab3wO50PMy7btXj8Z4pGC9sBhseCFkltJXvU0+tcyHkTBhSY8GCI o3iSU1UMKIV+uXCPWlfZp2IXIhwfoTZ7gfaADMLCT0gwJdOGO8YE28tMzcMNgr4F B0lqi8AQSxWec++CQs9vacqxgIU4egFdbBwNuKylm3CT+HpfYOhXkzeYYwuc/a7m XbSVVXfj0ztAFHlk/bQug76eYDbjZbygn3s1gLjFjNNffd6VCHVGavV748ktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUleVT422r0SoBlXtUTFaYL/4f1cowHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVhYIz7vTmMHlpB7EJqVs22zhky1e/LrLwo dA9uO7JLokA6yNM0cYkXdI0UEIYKZNG2VZYdDnY1oZLAy9XPkf4gMbNpGRCNLiRW H6PaJmc15hzO2ga4lF8iJ/JJINHZGPTPYbsBsaI3WI32AP7viAtlzFVHyKcwgX3y 31Vgzz38EykXQPToq2aOP1AIkQ5mVByv5hO6jMTNIHKo9i5Gls+2lGFuzeX36UMz +If08z77ukza//1Vj7p2nmsFG4sNk7D+aXGKd0NWIK+DW8DQ2Axt1Q8CiE7YrZPS sVF2IJ6I1Cl50Kr/1rv1GQgIE4H3SBqLHQhJ2GK8nUUtHyJYjBU= -----END CERTIFICATE-----Generated at Sat Jun 13 16:09:45 2026 by rpki-client