$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft (raw, json) Hash identifier: fdAxCLK3FqkA6v75saWF/Lh0ZvznGlMuWlSrev0JUDw= Subject key identifier: E0:C7:0D:7A:0E:F4:43:6E:50:57:5C:9B:80:AD:1F:DC:2C:FD:46:23 Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 51B31F2E5C9BF1D11D17521C7829B538C4263585 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 13:37:59 +0000 Manifest this update: Wed 23 Sep 2026 13:32:59 +0000 Manifest next update: Thu 24 Sep 2026 17:26:59 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: ldSnrrmteNryHWcf9UUZou80Ix7aIJzaiTf7mkq3mc4=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: L2W5rnLzb0ayOTJLCbvv5xJbFsJZYaXlC2C/bL2KNmw=) 3: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl (hash: YgqvR0IfBb1b1hCHPUMDUZ9p+WMC3nCRMA/EE6QOAP4=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b3:1f:2e:5c:9b:f1:d1:1d:17:52:1c:78:29:b5:38:c4:26:35:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: Sep 23 13:32:59 2026 GMT Not After : Sep 24 17:26:59 2026 GMT Subject: CN=E0C70D7A0EF4436E50575C9B80AD1FDC2CFD4623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7d:dc:96:84:0b:4a:97:cb:40:b3:6d:91:64: 7a:6a:07:e9:1f:d8:ae:b4:31:f3:26:94:30:5e:e7: 90:47:a3:46:ad:44:6d:14:c2:35:ce:cf:c4:bd:fa: da:cf:b3:bd:29:ad:38:7b:a6:a5:e7:fa:6f:29:4b: 1c:dc:6f:5a:26:f9:ea:a2:52:07:ec:09:67:54:19: c7:61:5c:d1:93:8c:37:38:2f:cc:df:f5:e9:30:44: df:c7:86:50:08:cf:f8:cb:6c:e5:2c:75:e0:a5:b2: 79:39:25:81:0e:ef:9a:07:a4:95:29:6c:74:41:54: 0e:51:ba:d6:27:bc:fd:be:94:f5:d0:a7:b1:6a:a7: 20:94:8d:c3:97:0f:a9:57:53:52:f2:ac:60:ab:6a: 5a:69:59:73:c7:fb:a4:1e:9b:33:b5:30:cb:0a:be: da:08:0a:26:6e:e0:77:d2:ba:69:9f:65:9a:2c:7a: 92:c0:b0:31:71:c5:11:d0:2a:e2:a1:79:e5:25:ce: 62:0b:1c:3a:bf:fa:b3:be:7b:2e:32:89:15:47:a9: 34:39:c3:60:71:5d:2a:e6:cc:3a:e6:42:13:51:fd: 82:66:2e:4b:94:c8:f2:34:4c:1c:80:da:da:54:06: 3d:f1:8f:7d:66:69:28:67:5f:93:55:a1:16:68:f9: 89:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C7:0D:7A:0E:F4:43:6E:50:57:5C:9B:80:AD:1F:DC:2C:FD:46:23 X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8c:f5:16:5d:5c:d8:f1:16:eb:51:3a:02:b5:55:9d:45:7d: ce:11:45:a0:f4:e8:51:4e:ff:94:69:17:b4:77:af:5a:4c:7a: 0e:22:fd:7d:0f:eb:7d:8f:76:1d:a7:64:01:d7:0b:1a:f9:26: 61:e8:ca:84:b8:82:82:5c:96:c6:85:ba:f3:59:54:fe:1a:f4: 11:6f:73:17:23:cb:98:e1:9d:03:71:20:a5:35:1f:46:77:73: 85:24:be:08:30:e3:83:94:ee:e3:c9:96:b7:ab:bd:7d:d8:2d: 6a:3c:90:34:6f:43:a2:d3:ad:69:9a:47:51:fa:40:d6:6b:c1: e4:ff:75:9f:fb:76:63:8a:b7:19:6f:ea:f1:96:c4:8d:31:74: 92:72:bb:c0:ce:31:29:89:72:ac:36:37:2c:4f:87:ed:11:5c: ab:81:9f:c0:dc:79:02:d7:a0:fc:30:87:04:96:0a:41:1f:21: ef:37:2a:7f:90:59:72:5a:a6:57:55:69:6c:5d:33:6c:6b:3e: e7:8b:c0:f2:8c:7c:a7:6b:b4:a3:16:e2:6f:55:79:83:0f:60: c2:28:b4:4b:7c:b7:d1:04:dc:58:78:29:2c:73:0e:b0:92:8f: ed:91:da:90:39:e3:05:1c:40:a7:ac:9e:34:7d:2b:b0:88:22: 0d:73:70:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbMfLlyb8dEdF1IceCm1OMQmNYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjA5MjMxMzMyNTlaFw0yNjA5MjQxNzI2NTlaMDMxMTAvBgNV BAMTKEUwQzcwRDdBMEVGNDQzNkU1MDU3NUM5QjgwQUQxRkRDMkNGRDQ2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrfdyWhAtKl8tAs22RZHpqB+kf 2K60MfMmlDBe55BHo0atRG0UwjXOz8S9+trPs70prTh7pqXn+m8pSxzcb1om+eqi UgfsCWdUGcdhXNGTjDc4L8zf9ekwRN/HhlAIz/jLbOUsdeClsnk5JYEO75oHpJUp bHRBVA5RutYnvP2+lPXQp7FqpyCUjcOXD6lXU1LyrGCralppWXPH+6QemzO1MMsK vtoICiZu4HfSummfZZosepLAsDFxxRHQKuKheeUlzmILHDq/+rO+ey4yiRVHqTQ5 w2BxXSrmzDrmQhNR/YJmLkuUyPI0TByA2tpUBj3xj31maShnX5NVoRZo+YkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4McNeg70Q25QV1ybgK0f3Cz9RiMwHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5 QTZGM0ZDMTdDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqM9RZdXNjxFutROgK1VZ1Ffc4RRaD06FFO /5RpF7R3r1pMeg4i/X0P632Pdh2nZAHXCxr5JmHoyoS4goJclsaFuvNZVP4a9BFv cxcjy5jhnQNxIKU1H0Z3c4Ukvggw44OU7uPJlrervX3YLWo8kDRvQ6LTrWmaR1H6 QNZrweT/dZ/7dmOKtxlv6vGWxI0xdJJyu8DOMSmJcqw2NyxPh+0RXKuBn8DceQLX oPwwhwSWCkEfIe83Kn+QWXJapldVaWxdM2xrPueLwPKMfKdrtKMW4m9VeYMPYMIo tEt8t9EE3Fh4KSxzDrCSj+2R2pA54wUcQKesnjR9K7CIIg1zcIM= -----END CERTIFICATE-----Generated at Wed Sep 23 20:19:52 2026 by rpki-client