$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft File: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft (raw, json) Hash identifier: veegHKt/S7iHh5D86E4OdeyRw1vkMfwwivBgsycYKIw= Subject key identifier: EA:6F:78:46:D5:AF:73:C0:F1:19:8D:62:F1:E6:EA:06:52:50:EA:69 Authority key identifier: 89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 Certificate issuer: /CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Certificate serial: 467683F927C76B4EA49BB6F4FEAB30FC2B86197F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 05:49:25 +0000 Manifest this update: Sun 02 Aug 2026 05:44:25 +0000 Manifest next update: Mon 03 Aug 2026 08:20:25 +0000 Files and hashes: 1: 89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl (hash: 1Hs6rHSm75p2oH8DFn4V5rW+PbhoANwbbX9+eka+3GA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:76:83:f9:27:c7:6b:4e:a4:9b:b6:f4:fe:ab:30:fc:2b:86:19:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89BDAB5FAC93AFADE8428FB455C1E8EABECBB302 Validity Not Before: Aug 2 05:44:25 2026 GMT Not After : Aug 3 08:20:25 2026 GMT Subject: CN=EA6F7846D5AF73C0F1198D62F1E6EA065250EA69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:2c:6d:55:1c:6c:cc:28:e9:d8:54:82:c5: 3a:d0:3a:60:51:5c:4e:3d:d6:4d:91:ee:48:d8:f4: f6:49:a0:18:2b:3d:61:55:b7:a1:1e:f8:8c:b2:bc: 30:05:69:cd:ae:61:77:f0:c0:0a:30:5e:c3:d3:48: 2c:41:48:9d:57:26:70:1c:8f:00:3c:43:30:6f:81: d5:4b:91:eb:96:63:50:c3:21:6e:84:11:4c:9b:7c: 4e:6c:c7:a6:e4:68:3b:f5:8f:55:3f:a5:6b:ed:bf: 47:95:85:4c:2e:cd:67:8a:2c:e7:3b:4b:4a:df:f0: d8:de:78:12:d7:37:61:af:20:aa:60:6a:4a:fb:c3: d4:83:89:9c:d9:cc:d9:b9:a9:c9:e3:58:91:46:15: ad:3a:16:50:e5:35:38:28:ef:ed:9a:51:b8:63:1b: ab:0c:88:87:1a:4d:5b:1c:cd:b3:1b:27:7e:30:b0: 90:82:8f:ef:5e:64:71:62:9a:31:7e:24:23:5f:a8: 8f:eb:96:17:7a:31:16:01:b5:db:5e:3f:4e:e4:3b: 01:02:dd:a4:4b:93:31:b4:f5:1c:04:90:50:f7:48: 23:75:a9:47:98:3f:ce:11:48:d0:76:0d:67:cc:5c: e0:b1:bd:d8:4f:3b:9f:f1:17:e6:91:67:f7:9d:21: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6F:78:46:D5:AF:73:C0:F1:19:8D:62:F1:E6:EA:06:52:50:EA:69 X509v3 Authority Key Identifier: keyid:89:BD:AB:5F:AC:93:AF:AD:E8:42:8F:B4:55:C1:E8:EA:BE:CB:B3:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/89BDAB5FAC93AFADE8428FB455C1E8EABECBB302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:41:8a:92:05:a4:27:8a:50:c7:b5:30:ab:45:ba:c1:6e:15: f6:18:c0:67:09:9c:7f:08:8a:82:f3:47:61:20:d4:c6:01:ed: c7:27:7a:84:16:83:2b:c4:d6:00:1a:d9:c4:c6:ca:aa:67:92: 1e:42:84:75:cc:17:09:d4:5e:dd:a6:81:3d:b3:c7:f0:54:c2: 5e:cb:da:bc:6c:4d:f6:83:3d:fe:c0:57:d2:e1:05:c7:59:49: e3:28:95:97:ed:bd:23:7d:5a:4e:ad:ba:99:57:27:54:dc:ad: e7:05:db:fb:53:d6:60:82:db:70:9a:57:14:30:f8:4b:b3:38: 36:48:de:6b:77:be:65:f7:ab:3f:04:2c:18:65:2e:6c:2c:60: a3:15:75:bb:ad:80:ae:1b:6a:15:96:30:0e:b3:21:e7:d3:ab: 72:5c:6d:98:08:7e:df:c8:56:da:ca:90:e5:94:7d:ce:44:0b: 41:37:90:4d:28:0b:7c:26:33:25:c7:eb:6c:c6:15:71:a8:b5: d0:56:57:95:0f:c3:94:04:23:17:25:b1:9b:f4:67:59:5a:a2: 52:d1:98:63:83:09:13:f7:a8:a2:6c:a0:8a:6d:e7:2b:0c:a7: 12:0f:d5:5c:6a:53:e2:c8:2d:f8:89:57:f2:43:15:f7:00:ae: d9:5d:a5:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnaD+SfHa06km7b0/qsw/CuGGX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4RUFC RUNCQjMwMjAeFw0yNjA4MDIwNTQ0MjVaFw0yNjA4MDMwODIwMjVaMDMxMTAvBgNV BAMTKEVBNkY3ODQ2RDVBRjczQzBGMTE5OEQ2MkYxRTZFQTA2NTI1MEVBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4USxtVRxszCjp2FSCxTrQOmBR XE491k2R7kjY9PZJoBgrPWFVt6Ee+IyyvDAFac2uYXfwwAowXsPTSCxBSJ1XJnAc jwA8QzBvgdVLkeuWY1DDIW6EEUybfE5sx6bkaDv1j1U/pWvtv0eVhUwuzWeKLOc7 S0rf8NjeeBLXN2GvIKpgakr7w9SDiZzZzNm5qcnjWJFGFa06FlDlNTgo7+2aUbhj G6sMiIcaTVsczbMbJ34wsJCCj+9eZHFimjF+JCNfqI/rlhd6MRYBtdteP07kOwEC 3aRLkzG09RwEkFD3SCN1qUeYP84RSNB2DWfMXOCxvdhPO5/xF+aRZ/edIbZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6m94RtWvc8DxGY1i8ebqBlJQ6mkwHwYDVR0j BBgwFoAUib2rX6yTr63oQo+0VcHo6r7LswIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkZTNhNDItNjI3Mi00YjZjLWFkODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZB QzkzQUZBREU4NDI4RkI0NTVDMUU4RUFCRUNCQjMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OUJEQUI1RkFDOTNBRkFERTg0MjhGQjQ1NUMxRThFQUJFQ0JC MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkZTNhNDItNjI3Mi00YjZjLWFk ODEtY2NjZmJlOTQ4OGMwLzAvODlCREFCNUZBQzkzQUZBREU4NDI4RkI0NTVDMUU4 RUFCRUNCQjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVBipIFpCeKUMe1MKtFusFuFfYYwGcJnH8I ioLzR2Eg1MYB7ccneoQWgyvE1gAa2cTGyqpnkh5ChHXMFwnUXt2mgT2zx/BUwl7L 2rxsTfaDPf7AV9LhBcdZSeMolZftvSN9Wk6tuplXJ1TcrecF2/tT1mCC23CaVxQw +EuzODZI3mt3vmX3qz8ELBhlLmwsYKMVdbutgK4bahWWMA6zIefTq3JcbZgIft/I VtrKkOWUfc5EC0E3kE0oC3wmMyXH62zGFXGotdBWV5UPw5QEIxclsZv0Z1laolLR mGODCRP3qKJsoIpt5ysMpxIP1VxqU+LILfiJV/JDFfcArtldpec= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:45 2026 by rpki-client