$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: GRd+IvchE8+9hejomjDrbmVDlh9OGjlTsSHnUOwrlu0= Subject key identifier: EB:03:C9:CB:45:2B:C0:BD:8B:E0:5C:E3:A4:E5:CB:42:B4:26:3F:2E Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 4E7E30C99062E4F8A13F79D45BA0CC139E3242D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 15:47:44 +0000 Manifest this update: Mon 02 Nov 2026 15:42:44 +0000 Manifest next update: Tue 03 Nov 2026 19:45:44 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: b99hOJfO4TAf4zPMvtdMoSqyGiirL0xAH2a980JC/Ic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7e:30:c9:90:62:e4:f8:a1:3f:79:d4:5b:a0:cc:13:9e:32:42:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: Nov 2 15:42:44 2026 GMT Not After : Nov 3 19:45:44 2026 GMT Subject: CN=EB03C9CB452BC0BD8BE05CE3A4E5CB42B4263F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:29:d6:77:e0:05:00:ec:e0:12:69:22:7f: 44:35:fa:52:70:02:72:47:ef:ca:ea:ec:bd:f8:41: 6f:16:26:51:99:e1:23:59:52:66:94:21:a0:d2:5b: a0:35:80:8e:77:0a:ac:c8:6b:11:f0:c9:ab:93:9a: 90:f7:63:50:05:af:0e:98:bd:c0:97:6e:8f:9b:3f: 61:f1:2b:96:b6:3d:bc:af:e3:78:79:58:a5:83:28: ad:06:6f:91:ef:de:10:fa:1d:7d:e6:21:59:79:11: b9:62:45:37:67:d7:4d:ee:ff:1f:7b:63:92:c3:82: 1b:75:1f:2b:0e:c5:2a:cf:e2:c2:55:41:82:a2:d6: 98:00:a6:f1:df:22:da:cc:36:9a:9a:57:24:16:d0: 32:7a:ee:0c:06:da:80:86:2c:3a:ec:dc:3b:5a:d5: 09:b8:51:81:b7:df:37:85:33:b3:0e:0d:ae:01:8c: 5f:11:c2:ae:c6:76:9b:21:30:9c:b1:d0:54:3b:8a: 13:7d:d8:02:f2:be:44:a8:03:47:90:b0:6e:22:f9: 59:a7:f8:d3:24:ce:03:f1:7c:20:48:20:fd:72:7c: f3:f8:5c:04:a3:f1:72:4f:86:f8:c7:80:10:83:ac: 14:10:a6:c7:d5:1e:7a:90:81:2c:ac:92:e4:9b:2c: 8e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:03:C9:CB:45:2B:C0:BD:8B:E0:5C:E3:A4:E5:CB:42:B4:26:3F:2E X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:94:d0:55:1c:76:75:1a:e6:68:ef:7c:32:df:c0:10:b8:0e: ae:87:42:c7:e3:dc:77:1e:2c:a8:e9:73:cc:e6:2c:55:19:16: 18:81:f2:91:96:4e:1c:76:2f:c4:56:42:c1:0f:99:3e:b7:8a: 4a:f9:ac:5c:3b:58:74:c7:c0:6e:50:aa:09:ca:69:ee:29:66: 1e:04:dc:b3:d1:22:1e:10:da:3b:7e:47:f9:72:6c:1e:66:28: 49:02:8c:1c:9b:43:b1:12:73:36:7a:a9:55:f9:0a:76:f6:29: 76:72:77:e4:ed:cc:40:a7:80:75:c4:89:c2:f3:32:e7:ad:5b: 1e:46:15:3c:aa:ce:4c:16:38:e7:20:9a:bf:24:10:4b:f8:e3: e4:99:7e:94:c5:a3:af:68:72:79:90:fd:d2:4b:13:a7:67:01: b2:01:5f:86:f3:9f:0d:18:36:e6:76:52:86:c6:bd:2e:be:e3: ec:15:7f:3f:18:7b:b1:b5:5a:d9:41:7d:70:fc:1f:40:66:e5: 69:77:f9:4b:18:1e:cc:7d:c3:21:5b:f0:0f:74:10:69:28:f6: 7d:ae:1c:9f:1e:95:cb:6a:03:43:f2:32:8f:cf:d1:ec:13:b2: 16:b4:cc:f8:bc:fd:95:da:34:2a:82:67:61:e8:d1:62:66:ae: 5b:93:a1:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTn4wyZBi5PihP3nUW6DME54yQtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjExMDIxNTQyNDRaFw0yNjExMDMxOTQ1NDRaMDMxMTAvBgNV BAMTKEVCMDNDOUNCNDUyQkMwQkQ4QkUwNUNFM0E0RTVDQjQyQjQyNjNGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvCnWd+AFAOzgEmkif0Q1+lJw AnJH78rq7L34QW8WJlGZ4SNZUmaUIaDSW6A1gI53CqzIaxHwyauTmpD3Y1AFrw6Y vcCXbo+bP2HxK5a2Pbyv43h5WKWDKK0Gb5Hv3hD6HX3mIVl5EbliRTdn103u/x97 Y5LDght1HysOxSrP4sJVQYKi1pgApvHfItrMNpqaVyQW0DJ67gwG2oCGLDrs3Dta 1Qm4UYG33zeFM7MODa4BjF8Rwq7GdpshMJyx0FQ7ihN92ALyvkSoA0eQsG4i+Vmn +NMkzgPxfCBIIP1yfPP4XASj8XJPhvjHgBCDrBQQpsfVHnqQgSyskuSbLI6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wPJy0UrwL2L4FzjpOXLQrQmPy4wHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeU0FUcdnUa5mjvfDLfwBC4Dq6HQsfj3Hce LKjpc8zmLFUZFhiB8pGWThx2L8RWQsEPmT63ikr5rFw7WHTHwG5QqgnKae4pZh4E 3LPRIh4Q2jt+R/lybB5mKEkCjBybQ7ESczZ6qVX5Cnb2KXZyd+TtzECngHXEicLz MuetWx5GFTyqzkwWOOcgmr8kEEv44+SZfpTFo69ocnmQ/dJLE6dnAbIBX4bznw0Y NuZ2UobGvS6+4+wVfz8Ye7G1WtlBfXD8H0Bm5Wl3+UsYHsx9wyFb8A90EGko9n2u HJ8elctqA0PyMo/P0ewTsha0zPi8/ZXaNCqCZ2Ho0WJmrluToc8= -----END CERTIFICATE-----Generated at Mon Nov 2 20:13:52 2026 by rpki-client