$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft File: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft (raw, json) Hash identifier: lygsQE2m+jLKcdeaRQg1oFPcIITyajTGqeyjM+ZZbb4= Subject key identifier: 8B:02:0C:0B:D6:AC:1E:50:16:B1:11:6B:11:E1:FC:58:31:B4:1A:ED Authority key identifier: 89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF Certificate issuer: /CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Certificate serial: 0D36BA5F999379B1649F1131CA38A1297BA2C023 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 14:42:13 +0000 Manifest this update: Wed 16 Sep 2026 14:37:13 +0000 Manifest next update: Thu 17 Sep 2026 16:42:13 +0000 Files and hashes: 1: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl (hash: vH6vtb/9ENDRBvvHSb82stSrHi2w2/dxtLPnyufXSpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:36:ba:5f:99:93:79:b1:64:9f:11:31:ca:38:a1:29:7b:a2:c0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Validity Not Before: Sep 16 14:37:13 2026 GMT Not After : Sep 17 16:42:13 2026 GMT Subject: CN=8B020C0BD6AC1E5016B1116B11E1FC5831B41AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:d1:78:48:10:5d:80:5b:20:59:48:61:d7: ef:19:fe:c5:e7:f0:63:a5:46:bb:17:ea:7e:7c:66: 22:55:bc:2e:9a:40:eb:d0:07:ad:47:46:32:ec:04: 4e:9a:97:e8:e9:75:6b:73:e5:08:33:58:d6:dd:08: 22:1c:ff:78:1d:cd:d6:79:57:9f:30:8c:0d:c7:4a: f4:e3:9f:4d:28:55:0c:a0:f3:3b:df:46:74:dc:8c: ab:a2:ab:23:32:3c:f8:4b:c0:51:09:2e:68:cc:fe: dc:44:a3:07:2b:a9:c6:47:0a:ca:63:30:4c:5c:36: fb:2b:e7:7e:86:c3:b0:48:b6:1e:e3:c2:c3:57:cd: ee:7e:fb:fe:01:46:2e:6b:f8:4e:6e:51:b1:af:79: e1:a4:20:6a:f1:dd:d9:85:1f:fa:0b:c1:85:1d:bd: f4:0c:d9:c5:6c:29:63:c4:77:20:ce:22:97:af:c6: 84:ef:a4:d3:b4:a7:b2:19:69:14:0d:80:c0:1b:8f: 41:f9:5c:06:33:db:ec:de:98:71:1a:d0:17:23:fb: d3:56:f9:16:1b:5b:af:94:1c:fe:39:98:34:17:e2: 77:0e:b7:cc:15:a5:9e:cc:46:d6:4e:33:3e:ce:13: 42:00:f6:45:d1:ca:92:6d:7d:dc:7b:10:b7:63:f4: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:02:0C:0B:D6:AC:1E:50:16:B1:11:6B:11:E1:FC:58:31:B4:1A:ED X509v3 Authority Key Identifier: keyid:89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ae:45:f7:64:5f:b0:4a:69:41:f0:02:5f:cc:60:64:75:55: 7c:d1:cd:82:14:ec:6f:17:0a:b7:5b:9b:32:39:ac:54:4d:82: 18:07:d0:d6:d6:24:b0:2a:c5:ef:48:ff:9c:5b:8e:d1:6e:a0: d8:fd:58:49:f6:0d:74:07:5e:cf:32:98:bf:bf:19:a7:b5:b5: 93:65:f6:04:06:8e:8f:b2:66:e9:ac:46:11:d4:c2:62:7e:ae: c3:34:9f:f9:bf:54:bc:f6:1f:11:47:b1:d0:63:71:97:ca:99: 26:df:f3:ad:be:4f:9f:f8:a4:57:b9:69:09:87:42:b4:9f:0e: 05:f9:61:1f:7e:b4:87:31:4c:c3:4f:96:67:b3:ab:09:6b:a8: d5:7e:42:c3:ce:29:56:72:7f:f8:e9:9a:54:47:93:f1:fb:19: 2d:1a:28:ac:67:57:ff:e0:2c:43:1a:ba:eb:7e:6b:7c:a8:d3: 65:f8:f5:11:73:97:10:be:4b:dd:68:d7:59:b0:3d:be:c5:e3: 24:a7:e6:20:90:d5:8a:01:5e:70:1a:9f:b0:29:e6:38:5f:08: 40:c8:5f:56:c2:c5:62:b0:eb:31:2a:cb:08:02:6e:e5:20:d9: 90:a2:a1:00:4d:14:9f:00:eb:e1:d9:f7:45:0c:de:32:84:2d: a7:17:9d:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTa6X5mTebFknxExyjihKXuiwCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5 MDQ2RTRDRjAeFw0yNjA5MTYxNDM3MTNaFw0yNjA5MTcxNjQyMTNaMDMxMTAvBgNV BAMTKDhCMDIwQzBCRDZBQzFFNTAxNkIxMTE2QjExRTFGQzU4MzFCNDFBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9utF4SBBdgFsgWUhh1+8Z/sXn 8GOlRrsX6n58ZiJVvC6aQOvQB61HRjLsBE6al+jpdWtz5QgzWNbdCCIc/3gdzdZ5 V58wjA3HSvTjn00oVQyg8zvfRnTcjKuiqyMyPPhLwFEJLmjM/txEowcrqcZHCspj MExcNvsr536Gw7BIth7jwsNXze5++/4BRi5r+E5uUbGveeGkIGrx3dmFH/oLwYUd vfQM2cVsKWPEdyDOIpevxoTvpNO0p7IZaRQNgMAbj0H5XAYz2+zemHEa0Bcj+9NW +RYbW6+UHP45mDQX4ncOt8wVpZ7MRtZOMz7OE0IA9kXRypJtfdx7ELdj9O/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiwIMC9asHlAWsRFrEeH8WDG0Gu0wHwYDVR0j BBgwFoAUiXqgTUl94NCY5MX05AEk6ZBG5M8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ2MjU2MjEtZjAwZi00ODMzLWJiYWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0 OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5MDQ2RTRDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdBQTA0RDQ5N0RFMEQwOThFNEM1RjRFNDAxMjRFOTkwNDZF NENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0 RTk5MDQ2RTRDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6uRfdkX7BKaUHwAl/MYGR1VXzRzYIU7G8X CrdbmzI5rFRNghgH0NbWJLAqxe9I/5xbjtFuoNj9WEn2DXQHXs8ymL+/Gae1tZNl 9gQGjo+yZumsRhHUwmJ+rsM0n/m/VLz2HxFHsdBjcZfKmSbf862+T5/4pFe5aQmH QrSfDgX5YR9+tIcxTMNPlmezqwlrqNV+QsPOKVZyf/jpmlRHk/H7GS0aKKxnV//g LEMauut+a3yo02X49RFzlxC+S91o11mwPb7F4ySn5iCQ1YoBXnAan7Ap5jhfCEDI X1bCxWKw6zEqywgCbuUg2ZCioQBNFJ8A6+HZ90UM3jKELacXnSo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:22:48 2026 by rpki-client