$ rpki-client -vvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft File: 897D06B789644C150E8DD42A6444FA986BC2AC88.mft (raw, json) Hash identifier: QT6YAITIiEhnm3uSe8uqQSE/0EUZ9VZqKqNftTYv1bU= Subject key identifier: 0F:D0:00:C3:7D:58:1F:BF:F7:27:04:BE:70:21:F7:D0:FB:BB:63:15 Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Certificate serial: 798EBAF6626D7F2D5BFFB51D948AAD31FB713780 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:37:53 +0000 Manifest this update: Tue 12 May 2026 12:32:53 +0000 Manifest next update: Wed 13 May 2026 13:34:53 +0000 Files and hashes: 1: AS137342.roa (hash: 3a1GFE6f7rqH+5UhR19t6dUD2RouZAG66CTRDxkyxsE=) 2: AS59281.roa (hash: 4dojGotTg4XtSOrmn0m37E03swYPUund5r2u/43L0Tk=) 3: AS56242.roa (hash: PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=) 4: 897D06B789644C150E8DD42A6444FA986BC2AC88.crl (hash: zOOC+x9/Ukxg02YbV3OO1lzM6TbDXREXtH4ew1kkPvY=) 5: AS38511.roa (hash: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=) 6: AS137379.roa (hash: uOKVwnbjEKvQQu3GpqQitsImdD31T7I1wvjuQaj60E4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8e:ba:f6:62:6d:7f:2d:5b:ff:b5:1d:94:8a:ad:31:fb:71:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Validity Not Before: May 12 12:32:53 2026 GMT Not After : May 13 13:34:53 2026 GMT Subject: CN=0FD000C37D581FBFF72704BE7021F7D0FBBB6315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:35:62:b5:2b:95:59:a4:8b:d1:ad:a9:02: 8d:c5:7a:65:8b:82:96:c6:46:f4:68:81:89:25:cb: ee:a7:05:fc:35:78:38:28:39:c7:a3:9c:4d:25:f6: 82:4e:9d:12:1c:e7:b4:6c:96:d6:0e:04:51:12:93: 9c:b5:37:43:e4:16:68:c0:dc:11:64:e4:05:a1:17: 84:48:b2:c9:de:7e:3a:a3:b5:19:69:93:7c:fa:42: d9:17:15:5c:bf:81:eb:e5:d7:90:7f:65:ca:c5:91: 7c:29:7b:13:60:2a:67:74:c6:cb:29:75:19:95:b8: bc:ff:ca:7b:a4:8f:3b:22:e0:3b:00:6a:27:85:e2: 19:1b:79:63:95:11:0e:9a:95:cc:ca:f9:1c:cd:fc: ed:fb:ca:b2:24:6f:ef:4b:23:e4:31:9d:95:b3:e3: 3d:a8:6d:b3:32:fa:db:2d:9e:91:e2:0a:3c:60:b7: c9:1b:b3:83:f0:4e:21:33:05:01:4d:3f:f3:7c:2a: d7:59:3c:7e:b2:a5:22:83:f9:1f:9e:bb:88:49:2f: 34:55:f8:9d:1d:f5:e3:07:4f:c0:12:33:34:ee:5c: 5d:e3:5b:52:26:23:8a:94:08:6a:4b:92:16:de:ad: e5:1a:7d:54:dc:61:06:60:6f:75:77:7d:4f:9f:6f: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D0:00:C3:7D:58:1F:BF:F7:27:04:BE:70:21:F7:D0:FB:BB:63:15 X509v3 Authority Key Identifier: keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ad:b1:07:e4:6f:c2:c0:1a:df:07:71:97:c9:1d:d9:9d:24: ed:81:6e:cb:a2:55:1c:9f:0c:65:76:62:fc:52:f4:1d:c0:5e: 1b:66:17:60:78:fc:b2:d0:28:1f:5e:78:de:85:dc:09:65:e3: 80:03:9f:0a:30:5f:49:69:0b:61:26:fc:30:f2:5c:d3:2d:b8: 26:46:f6:77:89:9e:1f:32:3f:7a:40:c9:e1:8d:8f:fe:ea:4f: 3e:f8:44:71:43:da:17:2f:cf:48:4f:95:0a:36:40:34:ed:c1: 13:38:4c:8d:46:b9:24:86:af:f0:9f:e6:3b:08:a2:1b:53:67: 67:34:6a:fa:9e:54:31:59:c4:a2:73:67:8b:1f:76:25:a2:2f: ba:dc:a2:60:b9:f4:ed:a2:b9:d5:d3:8e:09:ac:1b:c9:64:a2: c9:dd:fe:d4:8c:5d:8b:2d:0c:36:7c:f7:6e:3f:41:a9:d7:47: 50:56:01:85:0f:5d:44:c5:21:54:38:8f:0a:c6:af:35:f7:d2: ac:b9:85:9c:20:eb:8b:db:28:80:d6:56:15:40:ff:55:4a:d5: f8:b2:20:2f:d4:17:f8:e4:c6:94:01:37:02:c8:9b:8d:53:53: 5d:1e:0b:d8:7c:7b:c8:22:e1:1c:8a:df:b9:12:22:52:1a:de: e7:73:0d:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeY669mJtfy1b/7UdlIqtMftxN4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2 QkMyQUM4ODAeFw0yNjA1MTIxMjMyNTNaFw0yNjA1MTMxMzM0NTNaMDMxMTAvBgNV BAMTKDBGRDAwMEMzN0Q1ODFGQkZGNzI3MDRCRTcwMjFGN0QwRkJCQjYzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMljVitSuVWaSL0a2pAo3FemWL gpbGRvRogYkly+6nBfw1eDgoOcejnE0l9oJOnRIc57RsltYOBFESk5y1N0PkFmjA 3BFk5AWhF4RIssnefjqjtRlpk3z6QtkXFVy/gevl15B/ZcrFkXwpexNgKmd0xssp dRmVuLz/ynukjzsi4DsAaieF4hkbeWOVEQ6alczK+RzN/O37yrIkb+9LI+QxnZWz 4z2obbMy+tstnpHiCjxgt8kbs4PwTiEzBQFNP/N8KtdZPH6ypSKD+R+eu4hJLzRV +J0d9eMHT8ASMzTuXF3jW1ImI4qUCGpLkhbereUafVTcYQZgb3V3fU+fb5xFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD9AAw31YH7/3JwS+cCH30Pu7YxUwHwYDVR0j BBgwFoAUiX0Gt4lkTBUOjdQqZET6mGvCrIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhmMjkxNWQtMThjOS00ZTAzLWJiZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4 OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2QkMyQUM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdEMDZCNzg5NjQ0QzE1MEU4REQ0MkE2NDQ0RkE5ODZCQzJB Qzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZB OTg2QkMyQUM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADitsQfkb8LAGt8HcZfJHdmdJO2BbsuiVRyf DGV2YvxS9B3AXhtmF2B4/LLQKB9eeN6F3All44ADnwowX0lpC2Em/DDyXNMtuCZG 9neJnh8yP3pAyeGNj/7qTz74RHFD2hcvz0hPlQo2QDTtwRM4TI1GuSSGr/Cf5jsI ohtTZ2c0avqeVDFZxKJzZ4sfdiWiL7rcomC59O2iudXTjgmsG8lkosnd/tSMXYst DDZ8924/QanXR1BWAYUPXUTFIVQ4jwrGrzX30qy5hZwg64vbKIDWVhVA/1VK1fiy IC/UF/jkxpQBNwLIm41TU10eC9h8e8gi4RyK37kSIlIa3udzDfY= -----END CERTIFICATE-----Generated at Wed May 13 02:47:20 2026 by rpki-client