$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft (raw, json) Hash identifier: 9qf1qdTbvZerhAOAA0KeF9OXjqu+3FFyw/p8Aj65lAs= Subject key identifier: AD:4B:22:FA:E4:B4:BD:E8:62:49:BA:81:8C:57:69:D3:8F:45:42:B6 Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 2F7AAFC97C1E292BDE4CC5709055A71E06369C51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:31:03 +0000 Manifest this update: Mon 21 Sep 2026 07:26:03 +0000 Manifest next update: Tue 22 Sep 2026 08:56:03 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: L2W5rnLzb0ayOTJLCbvv5xJbFsJZYaXlC2C/bL2KNmw=) 2: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl (hash: HwTKiFvwsgFySfZdyHadIY7Wg8Y9sBmkt4erCF4jnxg=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw=) 4: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: ldSnrrmteNryHWcf9UUZou80Ix7aIJzaiTf7mkq3mc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7a:af:c9:7c:1e:29:2b:de:4c:c5:70:90:55:a7:1e:06:36:9c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: Sep 21 07:26:03 2026 GMT Not After : Sep 22 08:56:03 2026 GMT Subject: CN=AD4B22FAE4B4BDE86249BA818C5769D38F4542B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:0c:20:32:85:1e:4f:34:89:8d:45:1e:99: f7:f2:e7:27:6f:99:a2:6e:78:f5:8b:14:ce:17:78: 4a:3f:16:07:0a:15:00:f1:14:33:b9:94:0f:d2:79: 53:8b:e7:fe:ba:30:51:65:fe:f3:ff:4b:d8:fd:11: ee:cc:92:8c:6d:15:6d:85:53:ed:13:75:23:5d:52: 16:f9:b6:95:8a:ec:3d:b8:75:a3:5e:c2:fd:fc:7c: 49:af:a7:5e:92:2f:77:a8:07:f3:25:5d:d7:e7:97: 37:e4:09:b6:ed:9d:45:4d:f9:ac:93:56:ec:d5:f5: 16:14:64:3c:32:e9:bb:84:6b:7c:f5:cc:30:00:65: f3:f7:4f:4f:8f:1e:19:bc:0b:ad:db:af:4e:5c:24: 03:cb:04:ce:b1:be:ac:29:fe:57:96:31:c3:13:69: 64:9d:49:14:fd:fc:e1:9f:47:32:f8:9c:44:4c:87: ae:7f:d8:8b:71:24:62:fd:8d:22:0c:d2:d0:a8:a6: 76:f7:ad:b0:e8:55:cd:d7:3b:6a:23:5d:0a:6e:eb: 1b:97:12:ba:03:a7:dd:f9:a7:1e:c1:9c:79:94:18: d4:1a:f2:95:77:f6:a5:c4:19:5c:5c:fc:00:93:ef: 22:12:c6:8f:63:5b:75:ad:d5:a8:cd:50:29:81:a4: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4B:22:FA:E4:B4:BD:E8:62:49:BA:81:8C:57:69:D3:8F:45:42:B6 X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8a:5d:a7:ce:7f:88:85:fc:02:0f:ed:3d:f9:72:96:e1:23: 64:eb:63:37:ff:08:3c:27:9d:95:77:34:44:4f:16:92:29:40: af:60:ce:c6:fa:84:06:19:31:42:b1:d9:01:b4:4e:e9:af:0b: ca:d9:9e:01:13:39:b8:e4:5c:8b:67:5f:78:63:2a:50:43:33: 8a:87:b0:75:86:6e:d6:19:d3:8c:96:84:81:3e:4b:69:2b:51: c0:be:ab:ea:2a:60:ef:18:eb:3c:d2:bb:20:c0:58:2f:3b:13: 36:8d:e7:56:52:cc:37:ab:da:ed:53:21:d5:76:1f:56:40:16: 6f:cb:a6:8e:e0:76:36:68:dd:04:12:b2:3b:9c:48:38:82:6e: 19:17:ce:1c:e4:82:e4:60:83:1e:81:e4:b5:64:3f:18:8a:4a: 54:7e:2b:de:14:ad:e9:97:40:10:7d:03:6f:b3:7e:ab:21:85: f3:c4:33:4d:e1:be:57:7c:3e:8d:cb:2e:02:e3:f2:87:e0:cd: 55:ba:a2:17:7a:d3:4e:7b:3c:3c:9e:03:2f:74:d2:e0:5a:0e: 8a:65:6d:01:20:6c:82:60:19:a7:d5:b2:a8:dd:60:79:49:be: 76:83:20:31:00:c6:c8:a3:04:fb:d8:6c:c3:4c:8b:e9:54:b4: a5:62:c2:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3qvyXweKSveTMVwkFWnHgY2nFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjA5MjEwNzI2MDNaFw0yNjA5MjIwODU2MDNaMDMxMTAvBgNV BAMTKEFENEIyMkZBRTRCNEJERTg2MjQ5QkE4MThDNTc2OUQzOEY0NTQyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lwwgMoUeTzSJjUUemffy5ydv maJuePWLFM4XeEo/FgcKFQDxFDO5lA/SeVOL5/66MFFl/vP/S9j9Ee7MkoxtFW2F U+0TdSNdUhb5tpWK7D24daNewv38fEmvp16SL3eoB/MlXdfnlzfkCbbtnUVN+ayT VuzV9RYUZDwy6buEa3z1zDAAZfP3T0+PHhm8C63br05cJAPLBM6xvqwp/leWMcMT aWSdSRT9/OGfRzL4nERMh65/2ItxJGL9jSIM0tCopnb3rbDoVc3XO2ojXQpu6xuX EroDp935px7BnHmUGNQa8pV39qXEGVxc/ACT7yISxo9jW3Wt1ajNUCmBpF3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrUsi+uS0vehiSbqBjFdp049FQrYwHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5 QTZGM0ZDMTdDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyKXafOf4iF/AIP7T35cpbhI2TrYzf/CDwn nZV3NERPFpIpQK9gzsb6hAYZMUKx2QG0TumvC8rZngETObjkXItnX3hjKlBDM4qH sHWGbtYZ04yWhIE+S2krUcC+q+oqYO8Y6zzSuyDAWC87EzaN51ZSzDer2u1TIdV2 H1ZAFm/Lpo7gdjZo3QQSsjucSDiCbhkXzhzkguRggx6B5LVkPxiKSlR+K94UremX QBB9A2+zfqshhfPEM03hvld8Po3LLgLj8ofgzVW6ohd60057PDyeAy900uBaDopl bQEgbIJgGafVsqjdYHlJvnaDIDEAxsijBPvYbMNMi+lUtKViwoE= -----END CERTIFICATE-----Generated at Mon Sep 21 16:22:52 2026 by rpki-client