$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft File: 897D06B789644C150E8DD42A6444FA986BC2AC88.mft (raw, json) Hash identifier: DPZwcIqM8Jvfv4N4C1+/KEvsVovaUXcPgx3TmkMzYUk= Subject key identifier: AA:A8:CB:1B:AD:E4:69:CC:CA:86:9C:BE:3F:BD:18:FC:6E:6C:77:E9 Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Certificate serial: 69B8ACA073F0F0745E6258187AE9B77B686817EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:00:21 +0000 Manifest this update: Sun 20 Sep 2026 22:55:21 +0000 Manifest next update: Tue 22 Sep 2026 02:19:21 +0000 Files and hashes: 1: AS59281.roa (hash: 4dojGotTg4XtSOrmn0m37E03swYPUund5r2u/43L0Tk=) 2: AS137342.roa (hash: 3a1GFE6f7rqH+5UhR19t6dUD2RouZAG66CTRDxkyxsE=) 3: AS38511.roa (hash: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=) 4: AS137379.roa (hash: uOKVwnbjEKvQQu3GpqQitsImdD31T7I1wvjuQaj60E4=) 5: AS56242.roa (hash: PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=) 6: 897D06B789644C150E8DD42A6444FA986BC2AC88.crl (hash: 5BA9/n8ZQMWYMLYaDJ0YJzBW9ZBV7MuK89lO8THidRk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b8:ac:a0:73:f0:f0:74:5e:62:58:18:7a:e9:b7:7b:68:68:17:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Validity Not Before: Sep 20 22:55:21 2026 GMT Not After : Sep 22 02:19:21 2026 GMT Subject: CN=AAA8CB1BADE469CCCA869CBE3FBD18FC6E6C77E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:9e:cb:97:1a:7b:49:51:2f:f2:a6:55:71: 8c:f3:82:41:ec:2a:bd:64:7f:73:65:03:dd:71:04: d7:60:6b:e5:b2:0e:98:9e:36:f9:ed:ea:a9:c8:0c: 40:93:04:be:cc:25:b4:d4:ed:44:b7:89:6e:04:92: 48:f4:be:5c:73:47:83:c8:cb:9a:09:a9:af:1e:42: 2e:2c:9e:47:20:78:08:39:1b:9d:2d:b6:4f:b1:1e: d9:d7:17:cc:cd:f2:97:88:99:ce:64:81:e4:09:0e: ff:aa:06:a8:06:cc:67:53:3e:c4:e5:62:a1:b4:39: 0f:29:6f:30:21:a5:fd:cb:9e:e7:ee:aa:6a:38:59: 58:e6:6f:ec:5f:bf:90:d3:94:ee:bf:89:cc:dd:a7: fb:16:cd:16:b7:ef:d2:c4:47:d7:bf:e7:c8:92:22: 51:aa:fc:f7:89:eb:27:4b:92:bd:96:32:b5:82:03: 24:0b:88:5d:a8:6c:03:37:4f:16:f4:f2:3e:ff:81: 1d:8f:cd:40:43:c5:a7:fe:62:51:75:de:17:77:4a: 76:64:b6:89:59:1b:c8:51:24:04:04:54:20:ee:fd: 96:df:40:5b:28:fa:88:d5:5d:93:5d:e2:25:0c:62: de:75:36:92:e2:b0:34:64:ec:e6:3c:a7:5a:68:56: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A8:CB:1B:AD:E4:69:CC:CA:86:9C:BE:3F:BD:18:FC:6E:6C:77:E9 X509v3 Authority Key Identifier: keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ef:f2:f3:d7:f7:76:ad:b2:b1:6e:df:2c:72:ff:b0:05:8d: fe:bb:55:19:bd:ce:04:c3:65:8d:ff:b2:07:89:57:c4:1f:a3: 76:84:78:f5:d5:66:b3:54:7d:f6:7b:07:b9:b0:49:ad:94:d1: 59:78:77:f0:e8:4e:17:6b:e5:d0:11:56:86:c6:8a:68:eb:f8: e7:25:83:c6:3b:8a:50:51:fc:44:8a:97:a3:fa:41:52:f0:eb: 60:20:6d:6a:f9:77:9d:02:ae:06:90:98:94:c8:5c:e1:5c:3f: 79:63:4f:2a:d2:12:41:c5:f8:05:c1:4a:19:34:5b:47:2c:35: 5d:18:6c:2a:aa:1a:fa:07:ad:7c:d8:ae:64:e7:95:0c:52:43: 4d:bb:f0:29:0a:3a:4e:c4:af:2c:be:d0:8b:fa:3b:6a:de:02: 38:4c:f4:6d:a2:6c:20:68:42:74:5d:0f:23:ff:94:9e:4d:08: be:64:87:cc:d7:d6:b5:d1:f1:19:bd:d5:2a:de:2d:d3:d9:83: 0d:ae:ca:70:70:2b:f0:5a:f9:90:75:74:4f:a1:08:3a:a0:f1: 17:e1:60:51:ac:35:c3:0f:6c:f4:56:69:0d:b7:1d:cb:d9:2a: d1:13:f8:22:76:ef:f0:a5:57:ed:d7:52:fe:1f:57:4f:37:b1: c6:3d:1d:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabisoHPw8HReYlgYeum3e2hoF+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2 QkMyQUM4ODAeFw0yNjA5MjAyMjU1MjFaFw0yNjA5MjIwMjE5MjFaMDMxMTAvBgNV BAMTKEFBQThDQjFCQURFNDY5Q0NDQTg2OUNCRTNGQkQxOEZDNkU2Qzc3RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVcp7Llxp7SVEv8qZVcYzzgkHs Kr1kf3NlA91xBNdga+WyDpieNvnt6qnIDECTBL7MJbTU7US3iW4Ekkj0vlxzR4PI y5oJqa8eQi4snkcgeAg5G50ttk+xHtnXF8zN8peImc5kgeQJDv+qBqgGzGdTPsTl YqG0OQ8pbzAhpf3Lnufuqmo4WVjmb+xfv5DTlO6/iczdp/sWzRa379LER9e/58iS IlGq/PeJ6ydLkr2WMrWCAyQLiF2obAM3Txb08j7/gR2PzUBDxaf+YlF13hd3SnZk tolZG8hRJAQEVCDu/ZbfQFso+ojVXZNd4iUMYt51NpLisDRk7OY8p1poVkfBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqqjLG63kaczKhpy+P70Y/G5sd+kwHwYDVR0j BBgwFoAUiX0Gt4lkTBUOjdQqZET6mGvCrIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhmMjkxNWQtMThjOS00ZTAzLWJiZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4 OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2QkMyQUM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdEMDZCNzg5NjQ0QzE1MEU4REQ0MkE2NDQ0RkE5ODZCQzJB Qzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZB OTg2QkMyQUM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/v8vPX93atsrFu3yxy/7AFjf67VRm9zgTD ZY3/sgeJV8Qfo3aEePXVZrNUffZ7B7mwSa2U0Vl4d/DoThdr5dARVobGimjr+Ocl g8Y7ilBR/ESKl6P6QVLw62AgbWr5d50CrgaQmJTIXOFcP3ljTyrSEkHF+AXBShk0 W0csNV0YbCqqGvoHrXzYrmTnlQxSQ0278CkKOk7Eryy+0Iv6O2reAjhM9G2ibCBo QnRdDyP/lJ5NCL5kh8zX1rXR8Rm91SreLdPZgw2uynBwK/Ba+ZB1dE+hCDqg8Rfh YFGsNcMPbPRWaQ23HcvZKtET+CJ27/ClV+3XUv4fV083scY9HaQ= -----END CERTIFICATE-----Generated at Mon Sep 21 14:48:45 2026 by rpki-client