$ rpki-client -vvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft File: 897D06B789644C150E8DD42A6444FA986BC2AC88.mft (raw, json) Hash identifier: lz3QsumtHBkyPcdF7TXTvi3Utk9mL4T8A6xJi0i8KIU= Subject key identifier: 12:E1:BC:FF:46:9D:A1:2E:A1:0D:9E:C9:C5:41:CF:0E:CA:E3:CE:FE Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Certificate serial: 75EB8955F3FF2AF46EE0048B9AD2AB322B0B24AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:08:26 +0000 Manifest this update: Thu 23 Jul 2026 15:03:26 +0000 Manifest next update: Fri 24 Jul 2026 15:30:26 +0000 Files and hashes: 1: AS38511.roa (hash: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=) 2: 897D06B789644C150E8DD42A6444FA986BC2AC88.crl (hash: UBJrOoFMupQFThHMD9AFVjiTJJ/Ko6QVnPpvccNzDsU=) 3: AS56242.roa (hash: PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=) 4: AS137342.roa (hash: 3a1GFE6f7rqH+5UhR19t6dUD2RouZAG66CTRDxkyxsE=) 5: AS59281.roa (hash: 4dojGotTg4XtSOrmn0m37E03swYPUund5r2u/43L0Tk=) 6: AS137379.roa (hash: uOKVwnbjEKvQQu3GpqQitsImdD31T7I1wvjuQaj60E4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:eb:89:55:f3:ff:2a:f4:6e:e0:04:8b:9a:d2:ab:32:2b:0b:24:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Validity Not Before: Jul 23 15:03:26 2026 GMT Not After : Jul 24 15:30:26 2026 GMT Subject: CN=12E1BCFF469DA12EA10D9EC9C541CF0ECAE3CEFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:c4:99:a0:c8:31:b0:4e:57:8c:e4:36:6a: d8:35:c8:79:af:a2:dc:61:45:e5:d3:a8:eb:ea:f8: 42:ce:8c:09:07:3f:18:31:59:0d:ae:f6:61:2f:10: 5c:4f:ae:35:2a:4d:23:c0:d9:f2:f7:98:f8:10:12: f5:98:49:b1:21:14:c9:80:5f:6d:d5:d4:b0:7e:f1: 5c:40:07:b1:43:86:ce:7c:91:8f:9c:c8:15:7f:21: 39:92:85:0e:af:41:e2:dc:6d:5f:01:b6:75:a6:8f: 1d:e3:c5:95:4e:40:09:f3:59:27:5f:61:78:f6:6f: 87:1c:35:aa:23:5f:b5:b0:85:6c:84:03:db:3f:e4: 32:9f:3d:ba:d9:8a:54:4f:ad:d6:09:7a:05:71:2d: 74:51:b5:46:fa:b3:1e:82:4c:73:77:57:59:23:8e: a0:d7:25:24:27:a9:d0:d8:c9:53:1e:34:81:16:c5: 3a:7a:ef:34:a4:89:f2:54:24:70:dd:7b:3c:7f:97: 6f:31:cd:25:b2:6b:3d:f7:36:54:6e:53:26:03:66: 45:fa:cd:af:7a:05:a1:eb:14:0d:fb:32:42:8a:92: 86:97:3c:f5:84:a1:33:51:8a:37:fe:b7:87:c1:b1: 9f:b8:4a:54:1f:fc:3d:e2:c4:53:02:81:99:bc:b3: 22:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E1:BC:FF:46:9D:A1:2E:A1:0D:9E:C9:C5:41:CF:0E:CA:E3:CE:FE X509v3 Authority Key Identifier: keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e5:9f:17:e7:b6:c1:99:45:40:d2:29:09:1e:f0:bc:34:bd: 8d:cc:33:b9:44:e8:56:4e:d1:ac:67:e3:23:65:af:ba:3b:f4: 14:e5:05:df:43:f1:ac:3f:7c:bb:4b:3c:31:ad:6a:62:b8:9e: bf:3a:fd:af:c5:17:32:47:11:c3:23:9e:23:6f:83:4c:d4:8f: 76:2a:8c:45:90:4b:95:58:f1:24:51:41:cb:da:ea:ad:4d:60: 31:bc:31:57:3f:bc:83:a9:92:fe:4d:d1:0e:78:6d:15:00:49: 8f:da:0b:fc:3b:1f:d4:3e:ce:57:53:18:39:14:51:9a:4a:2b: 35:21:a8:20:ed:5e:6d:f3:6c:35:36:d0:e7:ab:98:a0:58:45: 0d:19:ac:b9:06:59:25:ab:c1:0d:c3:b9:be:c8:c7:ee:23:b1: 08:36:e3:b4:15:98:24:9d:43:74:8d:4d:13:7e:30:97:ed:ac: cf:cd:f8:fe:ae:d7:c7:8d:1b:e4:a3:d5:28:1b:f6:5c:2a:a1: e7:f7:80:02:a1:7d:4d:d8:6c:b3:f7:b2:83:4a:f2:cc:61:2a: 47:d3:1c:df:5e:22:48:6a:51:df:db:02:0e:13:94:57:62:02: ea:a3:19:57:f6:e3:15:93:54:78:fc:b7:79:53:91:30:0f:e5: 81:95:4f:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdeuJVfP/KvRu4ASLmtKrMisLJKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2 QkMyQUM4ODAeFw0yNjA3MjMxNTAzMjZaFw0yNjA3MjQxNTMwMjZaMDMxMTAvBgNV BAMTKDEyRTFCQ0ZGNDY5REExMkVBMTBEOUVDOUM1NDFDRjBFQ0FFM0NFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW68SZoMgxsE5XjOQ2atg1yHmv otxhReXTqOvq+ELOjAkHPxgxWQ2u9mEvEFxPrjUqTSPA2fL3mPgQEvWYSbEhFMmA X23V1LB+8VxAB7FDhs58kY+cyBV/ITmShQ6vQeLcbV8BtnWmjx3jxZVOQAnzWSdf YXj2b4ccNaojX7WwhWyEA9s/5DKfPbrZilRPrdYJegVxLXRRtUb6sx6CTHN3V1kj jqDXJSQnqdDYyVMeNIEWxTp67zSkifJUJHDdezx/l28xzSWyaz33NlRuUyYDZkX6 za96BaHrFA37MkKKkoaXPPWEoTNRijf+t4fBsZ+4SlQf/D3ixFMCgZm8syLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEuG8/0adoS6hDZ7JxUHPDsrjzv4wHwYDVR0j BBgwFoAUiX0Gt4lkTBUOjdQqZET6mGvCrIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhmMjkxNWQtMThjOS00ZTAzLWJiZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4 OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2QkMyQUM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdEMDZCNzg5NjQ0QzE1MEU4REQ0MkE2NDQ0RkE5ODZCQzJB Qzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZB OTg2QkMyQUM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/lnxfntsGZRUDSKQke8Lw0vY3MM7lE6FZO 0axn4yNlr7o79BTlBd9D8aw/fLtLPDGtamK4nr86/a/FFzJHEcMjniNvg0zUj3Yq jEWQS5VY8SRRQcva6q1NYDG8MVc/vIOpkv5N0Q54bRUASY/aC/w7H9Q+zldTGDkU UZpKKzUhqCDtXm3zbDU20OermKBYRQ0ZrLkGWSWrwQ3Dub7Ix+4jsQg247QVmCSd Q3SNTRN+MJftrM/N+P6u18eNG+Sj1Sgb9lwqoef3gAKhfU3YbLP3soNK8sxhKkfT HN9eIkhqUd/bAg4TlFdiAuqjGVf24xWTVHj8t3lTkTAP5YGVTwg= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:24 2026 by rpki-client