$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: VRiXW81pySejoZAp+68JneLlJQJ6ZiDWrtHaBvfb7b4= Subject key identifier: 72:71:74:E0:93:3C:40:9F:94:99:2A:4A:13:B2:BB:8B:0B:8F:80:3F Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 7B04F0425D903B642794CCB048C847152D00F1B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 23:05:31 +0000 Manifest this update: Wed 17 Jun 2026 23:00:31 +0000 Manifest next update: Fri 19 Jun 2026 00:36:31 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: YkvETIZuA33pI0Z1g1w/kNwgbwTm1FKO7/aSA1FtGyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 00:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:04:f0:42:5d:90:3b:64:27:94:cc:b0:48:c8:47:15:2d:00:f1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: Jun 17 23:00:31 2026 GMT Not After : Jun 19 00:36:31 2026 GMT Subject: CN=727174E0933C409F94992A4A13B2BB8B0B8F803F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:73:f9:7d:56:d0:9c:dd:f6:10:93:cc:cf:64: 74:0e:b9:5f:4f:f0:5f:5d:69:63:71:a3:21:38:5b: b0:b4:94:0a:3f:55:80:d7:d9:fa:05:58:e6:be:bc: ea:8b:2d:40:5b:8d:51:58:06:15:b4:16:38:63:4a: b4:44:b0:49:77:15:9a:46:e0:26:e0:b7:c0:22:2f: e1:a4:c3:7d:75:26:db:de:cc:45:8e:48:95:12:96: 06:36:ef:12:e8:f4:68:74:f7:4f:7b:9a:20:8a:b3: 41:17:1d:64:bb:43:b2:10:fc:1a:86:f4:2f:29:19: 5a:88:39:23:d9:0b:66:95:71:24:33:74:1c:5e:9e: b0:a1:6b:1e:4a:89:eb:11:6c:bb:b4:2e:2f:1a:e7: 6b:e9:dc:a0:70:bc:a6:41:ef:74:47:d6:db:15:61: f0:df:f6:a2:a9:f6:cb:09:21:af:4a:6d:d9:7b:65: dc:de:a9:96:fb:b3:ac:5d:6f:06:35:d7:33:97:cd: 19:18:2c:c8:51:95:f4:f6:d3:d6:7c:3e:a5:bb:bb: e1:33:8a:9a:77:a8:e3:50:6d:98:4d:0f:5c:2e:f9: b9:46:73:67:0f:7b:47:32:67:46:92:c9:8d:8e:63: f0:1f:c1:65:c3:81:64:f9:f9:41:1f:73:a4:34:b2: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:71:74:E0:93:3C:40:9F:94:99:2A:4A:13:B2:BB:8B:0B:8F:80:3F X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:26:5b:20:2e:05:b8:67:ef:22:cb:08:5b:9e:4d:86:bc:c5: 02:ce:6e:60:17:a3:e1:59:b1:32:b7:e4:ae:28:cc:8f:d9:1b: b0:f7:68:08:f2:92:b3:36:08:e1:da:01:bb:2b:da:a8:89:0f: 28:16:d4:d1:43:97:7c:ec:1f:38:66:e2:5c:91:56:01:50:c4: 43:10:2e:9d:03:5c:e8:0d:21:33:cd:17:d7:33:f2:0b:0c:5e: 19:57:d3:6f:72:db:b3:01:ac:99:89:0d:2d:aa:b1:bc:99:cf: c3:39:5f:e0:47:79:e0:1f:dc:35:c4:7b:5e:d4:af:44:f6:a7: 0d:24:82:88:51:21:e0:a2:15:c8:4c:d1:f1:70:ae:60:d3:30: c5:cc:50:1b:ff:ba:e9:f5:02:35:5a:2f:f5:16:4d:69:d8:d4: 7b:3d:37:9c:57:6c:9f:e9:df:8c:a1:c1:43:92:30:c8:1f:bf: 08:2e:a9:39:e3:5b:6a:99:25:56:1c:f3:f8:61:ca:9c:ae:e3: 3e:c8:ac:a0:ea:23:0e:ec:2c:52:b7:02:84:d9:03:a9:24:5f: fb:91:41:ad:19:da:56:e1:ab:9c:55:e9:92:80:1c:85:2d:76: d2:63:56:66:91:a8:d2:f0:87:55:09:6c:0e:5a:a8:3e:d1:27: 30:81:cd:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewTwQl2QO2QnlMywSMhHFS0A8bUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjA2MTcyMzAwMzFaFw0yNjA2MTkwMDM2MzFaMDMxMTAvBgNV BAMTKDcyNzE3NEUwOTMzQzQwOUY5NDk5MkE0QTEzQjJCQjhCMEI4RjgwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdc/l9VtCc3fYQk8zPZHQOuV9P 8F9daWNxoyE4W7C0lAo/VYDX2foFWOa+vOqLLUBbjVFYBhW0FjhjSrREsEl3FZpG 4Cbgt8AiL+Gkw311JtvezEWOSJUSlgY27xLo9Gh09097miCKs0EXHWS7Q7IQ/BqG 9C8pGVqIOSPZC2aVcSQzdBxenrChax5KiesRbLu0Li8a52vp3KBwvKZB73RH1tsV YfDf9qKp9ssJIa9Kbdl7ZdzeqZb7s6xdbwY11zOXzRkYLMhRlfT209Z8PqW7u+Ez ipp3qONQbZhND1wu+blGc2cPe0cyZ0aSyY2OY/AfwWXDgWT5+UEfc6Q0sh4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcnF04JM8QJ+UmSpKE7K7iwuPgD8wHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8mWyAuBbhn7yLLCFueTYa8xQLObmAXo+FZ sTK35K4ozI/ZG7D3aAjykrM2COHaAbsr2qiJDygW1NFDl3zsHzhm4lyRVgFQxEMQ Lp0DXOgNITPNF9cz8gsMXhlX029y27MBrJmJDS2qsbyZz8M5X+BHeeAf3DXEe17U r0T2pw0kgohRIeCiFchM0fFwrmDTMMXMUBv/uun1AjVaL/UWTWnY1Hs9N5xXbJ/p 34yhwUOSMMgfvwguqTnjW2qZJVYc8/hhypyu4z7IrKDqIw7sLFK3AoTZA6kkX/uR Qa0Z2lbhq5xV6ZKAHIUtdtJjVmaRqNLwh1UJbA5aqD7RJzCBze4= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:08 2026 by rpki-client