$ rpki-client -vvf rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft File: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft (raw, json) Hash identifier: GWERL9Lq+9CeLAukJ8L3o1Kg6vHikK4FkOt4yK8l8pY= Subject key identifier: 58:99:32:60:B4:E5:AF:E1:92:51:C7:A2:D2:D0:10:15:FE:E0:73:78 Authority key identifier: 89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF Certificate issuer: /CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Certificate serial: 3517C33841C79C461369817C118150404F0921D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 19:54:56 +0000 Manifest this update: Fri 19 Jun 2026 19:49:56 +0000 Manifest next update: Sat 20 Jun 2026 20:40:56 +0000 Files and hashes: 1: 897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl (hash: WuEwUqpnic5c/VhlCx8aGHbPAyq3n9x+UFUAhGIoZiI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:17:c3:38:41:c7:9c:46:13:69:81:7c:11:81:50:40:4f:09:21:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897AA04D497DE0D098E4C5F4E40124E99046E4CF Validity Not Before: Jun 19 19:49:56 2026 GMT Not After : Jun 20 20:40:56 2026 GMT Subject: CN=58993260B4E5AFE19251C7A2D2D01015FEE07378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:61:b8:b2:57:62:49:f6:15:1a:e9:71:c0: a5:1a:a4:ec:25:3b:1f:54:1c:64:3b:31:78:6d:e8: 53:ef:00:ea:40:f9:74:3b:60:3f:61:95:55:64:07: 0b:31:f9:66:78:7e:2a:ad:fe:1f:be:ba:d0:87:8f: 11:47:ca:cc:5a:1e:22:0f:b5:9e:b9:e5:49:43:5a: 91:92:58:14:e9:3e:fe:5f:d4:06:5d:b3:14:f1:7d: 1b:87:a9:58:f9:51:59:32:dd:9a:46:2d:17:4b:94: 71:07:ce:fd:f5:72:1a:1a:42:74:c4:1b:99:53:05: d2:45:54:67:af:d2:97:3b:c8:c3:85:11:47:a3:b3: d5:6f:0f:41:97:4d:53:ad:30:c5:55:34:02:32:2d: c7:91:53:43:13:c9:d1:a5:9f:e9:3f:3f:66:e6:99: ab:a7:65:1c:bd:44:2e:45:f8:91:d7:20:d7:18:b2: 79:7f:ff:f1:38:f8:c9:f9:82:1c:17:60:ed:e8:df: 01:a3:0d:1e:eb:4e:2b:be:56:a0:3c:1c:bb:3e:47: e1:6f:de:8e:47:b3:77:44:74:ed:0f:fc:0e:e2:cf: 93:2d:3c:5a:9c:1e:30:2a:f0:46:bb:31:5a:05:bc: c8:1f:ab:f6:c6:d8:2c:f1:1d:18:b8:89:12:ca:42: 6c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:99:32:60:B4:E5:AF:E1:92:51:C7:A2:D2:D0:10:15:FE:E0:73:78 X509v3 Authority Key Identifier: keyid:89:7A:A0:4D:49:7D:E0:D0:98:E4:C5:F4:E4:01:24:E9:90:46:E4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897AA04D497DE0D098E4C5F4E40124E99046E4CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/897AA04D497DE0D098E4C5F4E40124E99046E4CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5e:e3:5e:63:18:4e:cd:be:47:47:5f:17:42:76:63:0d:d6: ec:6e:09:31:46:f3:fc:bf:29:38:07:38:c8:e1:99:a0:c1:00: b6:18:28:7d:c6:d7:95:eb:04:d7:8e:55:f9:a5:35:77:86:4a: f4:9f:8d:6b:44:f3:74:9f:8f:32:2f:82:2d:05:65:40:6b:3e: d9:c8:5b:5d:4b:c8:e9:23:7b:24:02:a4:f5:2a:0a:c2:c1:c6: e2:79:8a:b1:65:00:7f:87:0e:57:c6:7b:ff:20:35:9e:e8:15: e8:23:79:53:a1:57:f6:3c:71:3e:00:df:15:4a:d0:ed:a3:9c: 0f:52:9e:d2:ec:57:ba:04:fd:de:93:81:34:42:52:c0:3a:3f: 2a:74:38:3d:0a:49:f9:5b:46:5a:ed:59:33:0c:91:75:8c:79: 8e:3d:85:c5:97:e0:4d:0b:62:24:bd:45:c6:19:2f:c3:48:73: 36:72:d7:27:f0:e4:a2:ec:ff:c7:3e:fb:f3:c8:8e:78:ff:e1: 97:c9:7e:39:6b:cf:ae:b8:aa:7e:13:75:ac:02:92:0b:1a:dd: b9:93:6e:a1:e4:a5:d6:02:b9:30:5e:d7:b7:44:2c:68:86:fd: 29:f0:47:5f:a3:55:22:18:05:84:f4:eb:1e:d5:18:61:ee:0a: 67:e1:55:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRfDOEHHnEYTaYF8EYFQQE8JIdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5 MDQ2RTRDRjAeFw0yNjA2MTkxOTQ5NTZaFw0yNjA2MjAyMDQwNTZaMDMxMTAvBgNV BAMTKDU4OTkzMjYwQjRFNUFGRTE5MjUxQzdBMkQyRDAxMDE1RkVFMDczNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXWG4sldiSfYVGulxwKUapOwl Ox9UHGQ7MXht6FPvAOpA+XQ7YD9hlVVkBwsx+WZ4fiqt/h++utCHjxFHysxaHiIP tZ655UlDWpGSWBTpPv5f1AZdsxTxfRuHqVj5UVky3ZpGLRdLlHEHzv31choaQnTE G5lTBdJFVGev0pc7yMOFEUejs9VvD0GXTVOtMMVVNAIyLceRU0MTydGln+k/P2bm maunZRy9RC5F+JHXINcYsnl///E4+Mn5ghwXYO3o3wGjDR7rTiu+VqA8HLs+R+Fv 3o5Hs3dEdO0P/A7iz5MtPFqcHjAq8Ea7MVoFvMgfq/bG2CzxHRi4iRLKQmzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWJkyYLTlr+GSUcei0tAQFf7gc3gwHwYDVR0j BBgwFoAUiXqgTUl94NCY5MX05AEk6ZBG5M8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ2MjU2MjEtZjAwZi00ODMzLWJiYWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0 OTdERTBEMDk4RTRDNUY0RTQwMTI0RTk5MDQ2RTRDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdBQTA0RDQ5N0RFMEQwOThFNEM1RjRFNDAxMjRFOTkwNDZF NENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvODk3QUEwNEQ0OTdERTBEMDk4RTRDNUY0RTQwMTI0 RTk5MDQ2RTRDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChe415jGE7NvkdHXxdCdmMN1uxuCTFG8/y/ KTgHOMjhmaDBALYYKH3G15XrBNeOVfmlNXeGSvSfjWtE83SfjzIvgi0FZUBrPtnI W11LyOkjeyQCpPUqCsLBxuJ5irFlAH+HDlfGe/8gNZ7oFegjeVOhV/Y8cT4A3xVK 0O2jnA9SntLsV7oE/d6TgTRCUsA6Pyp0OD0KSflbRlrtWTMMkXWMeY49hcWX4E0L YiS9RcYZL8NIczZy1yfw5KLs/8c++/PIjnj/4ZfJfjlrz664qn4TdawCkgsa3bmT bqHkpdYCuTBe17dELGiG/SnwR1+jVSIYBYT06x7VGGHuCmfhVfk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:01:30 2026 by rpki-client