$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft File: 897D06B789644C150E8DD42A6444FA986BC2AC88.mft (raw, json) Hash identifier: QOeelRRL9tY3P7yK0x4+CzPxp5GwS2+LHkw/fi2OhMU= Subject key identifier: EA:71:B1:75:90:63:11:15:21:D7:D6:8A:43:86:91:DA:8A:F0:45:56 Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Certificate serial: 6E33DC570DC14FD1CEF7BECD020C99535D158640 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 19:19:30 +0000 Manifest this update: Thu 24 Sep 2026 19:14:30 +0000 Manifest next update: Fri 25 Sep 2026 21:14:30 +0000 Files and hashes: 1: AS38511.roa (hash: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=) 2: AS56242.roa (hash: PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=) 3: AS137342.roa (hash: 3a1GFE6f7rqH+5UhR19t6dUD2RouZAG66CTRDxkyxsE=) 4: AS137379.roa (hash: uOKVwnbjEKvQQu3GpqQitsImdD31T7I1wvjuQaj60E4=) 5: AS59281.roa (hash: 4dojGotTg4XtSOrmn0m37E03swYPUund5r2u/43L0Tk=) 6: 897D06B789644C150E8DD42A6444FA986BC2AC88.crl (hash: p7Lakl2zlZWxCUuKgEyhx4ks865jo+RIF51Iv7v8cTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:33:dc:57:0d:c1:4f:d1:ce:f7:be:cd:02:0c:99:53:5d:15:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Validity Not Before: Sep 24 19:14:30 2026 GMT Not After : Sep 25 21:14:30 2026 GMT Subject: CN=EA71B1759063111521D7D68A438691DA8AF04556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:3b:95:88:79:3f:b4:fd:25:97:7f:bc:df: 32:c0:d2:5f:75:26:bd:18:3c:9d:b2:c0:0d:17:5f: e0:5c:b0:40:85:75:74:92:67:ed:4d:5e:92:eb:04: 12:81:5a:b2:80:52:51:17:14:a3:df:23:11:24:22: d4:0a:64:26:28:09:52:3b:ce:16:ec:d7:7d:84:1f: 14:f8:24:13:a3:e7:9d:ce:52:70:ee:4a:3c:2d:eb: 24:ed:ad:d7:dc:ff:02:82:9a:a7:04:2f:7f:1c:a6: 20:5d:4c:d9:e3:b3:65:1f:c8:64:9f:a5:30:6f:c1: e2:0b:ac:cc:e9:ad:ab:1c:47:2c:cd:5d:d1:b2:f7: 88:a5:17:26:b8:42:a2:d7:64:33:27:0f:62:61:29: 9f:94:e4:73:06:f0:a1:9c:89:0e:a1:40:59:6f:2f: a0:fe:84:5f:f9:22:1f:d5:cf:da:57:b2:da:1f:05: 1e:5f:1a:23:e0:33:b5:6d:8f:4d:44:aa:2f:4f:ff: 36:f0:5b:31:8f:6f:fb:78:88:dc:fa:91:1e:53:09: f4:40:68:a1:c4:cc:c0:3c:dd:6b:ec:87:47:f2:2f: e6:e1:3f:75:b1:d8:c4:61:a9:80:2f:8c:a4:93:9b: aa:7d:f6:db:83:2f:6e:29:5e:a6:b2:ed:88:df:77: 0a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:71:B1:75:90:63:11:15:21:D7:D6:8A:43:86:91:DA:8A:F0:45:56 X509v3 Authority Key Identifier: keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:79:7a:12:57:aa:af:62:90:4c:fb:2a:59:fc:72:40:ff:b8: 77:b9:ab:4f:5c:e0:b1:fd:df:80:0b:8f:c9:8c:65:8e:af:26: 0a:3e:84:db:14:f1:bc:be:c6:e1:c2:39:a0:92:71:07:20:ae: 9e:60:c0:b1:59:48:e6:1a:9a:4c:2c:dc:02:ec:85:b9:2d:cb: f2:c9:29:b9:b1:a7:0e:18:37:3f:33:f0:ab:b5:da:5d:93:1d: 97:10:ed:4e:60:c7:b5:fd:44:e6:92:4f:50:30:6d:39:bd:fa: 49:9c:ce:e5:8d:60:04:fd:89:b0:d5:b8:2f:b0:a8:1b:53:3b: ef:1a:df:87:c0:f0:11:63:95:79:20:bb:4f:e2:68:dd:c3:c0: 0e:05:ba:b5:3e:d7:79:10:4b:63:3d:7a:a2:c2:1d:47:c1:9b: a3:99:c8:27:06:52:1c:63:04:a0:22:da:70:11:9e:a1:a6:3d: 94:72:17:db:49:19:16:fa:fc:24:9a:dd:6a:c5:58:1d:ea:7f: f3:e6:6a:2f:83:b0:de:eb:76:97:d7:1d:b9:2c:f8:f0:30:8c: 70:52:9e:da:93:ca:99:c1:ac:e8:18:ae:58:51:fd:37:41:9a: ef:eb:01:e0:f8:c7:fa:89:1c:4f:ab:7a:dd:81:1d:1b:fd:63: b3:d4:ce:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjPcVw3BT9HO977NAgyZU10VhkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2 QkMyQUM4ODAeFw0yNjA5MjQxOTE0MzBaFw0yNjA5MjUyMTE0MzBaMDMxMTAvBgNV BAMTKEVBNzFCMTc1OTA2MzExMTUyMUQ3RDY4QTQzODY5MURBOEFGMDQ1NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKjuViHk/tP0ll3+83zLA0l91 Jr0YPJ2ywA0XX+BcsECFdXSSZ+1NXpLrBBKBWrKAUlEXFKPfIxEkItQKZCYoCVI7 zhbs132EHxT4JBOj553OUnDuSjwt6yTtrdfc/wKCmqcEL38cpiBdTNnjs2UfyGSf pTBvweILrMzprascRyzNXdGy94ilFya4QqLXZDMnD2JhKZ+U5HMG8KGciQ6hQFlv L6D+hF/5Ih/Vz9pXstofBR5fGiPgM7Vtj01Eqi9P/zbwWzGPb/t4iNz6kR5TCfRA aKHEzMA83Wvsh0fyL+bhP3Wx2MRhqYAvjKSTm6p99tuDL24pXqay7YjfdwoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6nGxdZBjERUh19aKQ4aR2orwRVYwHwYDVR0j BBgwFoAUiX0Gt4lkTBUOjdQqZET6mGvCrIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhmMjkxNWQtMThjOS00ZTAzLWJiZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4 OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2QkMyQUM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdEMDZCNzg5NjQ0QzE1MEU4REQ0MkE2NDQ0RkE5ODZCQzJB Qzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZB OTg2QkMyQUM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd5ehJXqq9ikEz7Kln8ckD/uHe5q09c4LH9 34ALj8mMZY6vJgo+hNsU8by+xuHCOaCScQcgrp5gwLFZSOYamkws3ALshbkty/LJ Kbmxpw4YNz8z8Ku12l2THZcQ7U5gx7X9ROaST1AwbTm9+kmczuWNYAT9ibDVuC+w qBtTO+8a34fA8BFjlXkgu0/iaN3DwA4FurU+13kQS2M9eqLCHUfBm6OZyCcGUhxj BKAi2nARnqGmPZRyF9tJGRb6/CSa3WrFWB3qf/Pmai+DsN7rdpfXHbks+PAwjHBS ntqTypnBrOgYrlhR/TdBmu/rAeD4x/qJHE+ret2BHRv9Y7PUzrw= -----END CERTIFICATE-----Generated at Fri Sep 25 06:31:48 2026 by rpki-client