$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft File: 897D06B789644C150E8DD42A6444FA986BC2AC88.mft (raw, json) Hash identifier: aZXhC4UeSR5EMRju0HZwffvseMDGAyWt96VYjS1uA8Y= Subject key identifier: 73:84:12:F5:93:F4:A4:8D:5D:BF:D9:74:46:D1:90:2A:70:A6:D9:96 Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Certificate serial: 4CF4C52DABA44B96A479154AE242AC8FFF649D76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft Manifest number: BF Signing time: Tue 22 Sep 2026 11:20:34 +0000 Manifest this update: Tue 22 Sep 2026 11:15:34 +0000 Manifest next update: Wed 23 Sep 2026 15:08:34 +0000 Files and hashes: 1: AS137379.roa (hash: uOKVwnbjEKvQQu3GpqQitsImdD31T7I1wvjuQaj60E4=) 2: AS137342.roa (hash: 3a1GFE6f7rqH+5UhR19t6dUD2RouZAG66CTRDxkyxsE=) 3: AS56242.roa (hash: PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=) 4: AS59281.roa (hash: 4dojGotTg4XtSOrmn0m37E03swYPUund5r2u/43L0Tk=) 5: 897D06B789644C150E8DD42A6444FA986BC2AC88.crl (hash: ZKAga+zPaO+hctwm7O+1Dh9jyZdduPX6422O9hrcWK8=) 6: AS38511.roa (hash: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f4:c5:2d:ab:a4:4b:96:a4:79:15:4a:e2:42:ac:8f:ff:64:9d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Validity Not Before: Sep 22 11:15:34 2026 GMT Not After : Sep 23 15:08:34 2026 GMT Subject: CN=738412F593F4A48D5DBFD97446D1902A70A6D996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:07:e3:66:23:f3:fd:5f:05:b2:8c:4d:de: 19:36:1c:84:66:0a:d9:4a:a2:21:1f:88:7e:d8:8b: 8e:61:82:0e:af:7d:be:4e:a8:9f:67:d3:52:ac:54: c4:22:c1:c2:89:71:d3:51:42:87:3c:cf:14:d1:3b: fd:2c:61:e9:e4:2a:04:2c:7f:6a:6a:c0:9b:26:8a: 54:f7:51:67:be:04:70:77:8e:e3:dd:bd:5e:f2:0f: 2e:34:ac:e6:a2:c7:0b:08:96:cf:19:5a:bc:c5:02: 59:06:5d:2d:4d:ef:e7:cd:2e:15:e7:e2:5d:3a:d4: f5:46:0d:7a:7f:89:92:9c:6a:94:9b:14:13:2e:31: fe:e2:fc:02:82:5d:85:5b:ab:5e:9b:35:5e:88:23: 5d:51:1a:e6:1b:16:f4:ac:36:61:92:64:d3:90:f9: a4:8c:cb:91:df:dc:00:d4:f7:74:ed:45:7e:1f:f4: b9:db:62:d6:f9:c8:8a:11:cb:13:18:a1:2f:8d:1e: 11:d3:1d:7d:75:78:7e:2e:c2:30:4b:56:6f:fc:52: c9:65:e3:35:f7:cc:f8:a8:96:84:ca:0c:24:b7:43: 3a:73:52:06:af:8a:48:36:72:9f:df:6e:fb:33:0a: cd:71:c9:7d:c0:f3:48:70:49:20:5b:32:0c:98:6c: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:84:12:F5:93:F4:A4:8D:5D:BF:D9:74:46:D1:90:2A:70:A6:D9:96 X509v3 Authority Key Identifier: keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e2:69:4f:50:9d:ae:87:8c:ed:cd:9e:16:b3:7f:c0:b1:58: 16:d7:86:04:75:03:9b:67:ab:d1:e6:b7:ed:9e:ff:d8:16:7b: 60:bb:4f:6f:f1:8a:51:c1:38:54:d2:91:ee:9f:60:ee:9c:f2: f3:91:9d:5b:be:d4:14:c6:c2:f0:f9:e5:c9:b7:0b:b7:c2:1a: f5:0e:a5:27:23:77:ea:fb:08:46:db:e8:22:94:89:6d:7e:5c: 2a:44:e6:91:09:d9:28:bb:54:f6:3c:5d:68:25:e5:11:18:ef: cb:fd:17:7d:d9:41:e8:80:df:bb:ad:f3:04:9d:49:c2:b8:4f: 24:c8:df:53:32:c2:56:0e:10:33:14:da:e3:02:c9:d2:52:fc: 0b:fa:50:c5:d6:40:41:0e:a5:83:10:e6:ae:d3:4a:b5:5e:d8: 29:e2:7d:ba:bb:34:f3:0d:02:e2:ef:75:1d:63:be:3d:47:a7: 83:fa:8a:9b:15:cf:90:b9:b3:a5:df:2d:1b:e3:61:b3:45:be: 6d:44:a8:8d:e9:4d:8f:48:80:a8:fe:9e:8e:ce:a1:a6:fc:1c: ec:9f:c5:c1:a0:85:29:67:2f:c0:b9:b1:92:f1:13:ba:d2:54: 11:8a:27:33:9a:1d:1b:f8:78:1c:77:ca:95:34:6f:6c:d0:a1: 29:32:26:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPTFLaukS5akeRVK4kKsj/9knXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2 QkMyQUM4ODAeFw0yNjA5MjIxMTE1MzRaFw0yNjA5MjMxNTA4MzRaMDMxMTAvBgNV BAMTKDczODQxMkY1OTNGNEE0OEQ1REJGRDk3NDQ2RDE5MDJBNzBBNkQ5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLwfjZiPz/V8FsoxN3hk2HIRm CtlKoiEfiH7Yi45hgg6vfb5OqJ9n01KsVMQiwcKJcdNRQoc8zxTRO/0sYenkKgQs f2pqwJsmilT3UWe+BHB3juPdvV7yDy40rOaixwsIls8ZWrzFAlkGXS1N7+fNLhXn 4l061PVGDXp/iZKcapSbFBMuMf7i/AKCXYVbq16bNV6II11RGuYbFvSsNmGSZNOQ +aSMy5Hf3ADU93TtRX4f9LnbYtb5yIoRyxMYoS+NHhHTHX11eH4uwjBLVm/8Usll 4zX3zPioloTKDCS3QzpzUgavikg2cp/fbvszCs1xyX3A80hwSSBbMgyYbEDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc4QS9ZP0pI1dv9l0RtGQKnCm2ZYwHwYDVR0j BBgwFoAUiX0Gt4lkTBUOjdQqZET6mGvCrIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhmMjkxNWQtMThjOS00ZTAzLWJiZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4 OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2QkMyQUM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdEMDZCNzg5NjQ0QzE1MEU4REQ0MkE2NDQ0RkE5ODZCQzJB Qzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZB OTg2QkMyQUM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfiaU9Qna6HjO3Nnhazf8CxWBbXhgR1A5tn q9Hmt+2e/9gWe2C7T2/xilHBOFTSke6fYO6c8vORnVu+1BTGwvD55cm3C7fCGvUO pScjd+r7CEbb6CKUiW1+XCpE5pEJ2Si7VPY8XWgl5REY78v9F33ZQeiA37ut8wSd ScK4TyTI31MywlYOEDMU2uMCydJS/Av6UMXWQEEOpYMQ5q7TSrVe2Cnifbq7NPMN AuLvdR1jvj1Hp4P6ipsVz5C5s6XfLRvjYbNFvm1EqI3pTY9IgKj+no7Ooab8HOyf xcGghSlnL8C5sZLxE7rSVBGKJzOaHRv4eBx3ypU0b2zQoSkyJtA= -----END CERTIFICATE-----Generated at Tue Sep 22 20:59:38 2026 by rpki-client