$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft (raw, json) Hash identifier: cCrtmHXkxebkdDW7uzF3ZJnxVvGpj8cW+NvYz37o/rI= Subject key identifier: 32:05:2E:DB:50:63:7C:BB:B8:82:80:DD:F3:DF:40:02:92:59:25:72 Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 448A3E1A6F428854A857AA5322AF9390F73E98E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:05:33 +0000 Manifest this update: Tue 12 May 2026 09:00:33 +0000 Manifest next update: Wed 13 May 2026 09:18:33 +0000 Files and hashes: 1: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl (hash: E7+9kxp9Yn0yLoH/iRTQUJnjyavzAgbAD7T8F2u+CGE=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: L2W5rnLzb0ayOTJLCbvv5xJbFsJZYaXlC2C/bL2KNmw=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: ldSnrrmteNryHWcf9UUZou80Ix7aIJzaiTf7mkq3mc4=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8a:3e:1a:6f:42:88:54:a8:57:aa:53:22:af:93:90:f7:3e:98:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: May 12 09:00:33 2026 GMT Not After : May 13 09:18:33 2026 GMT Subject: CN=32052EDB50637CBBB88280DDF3DF400292592572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:b1:24:ed:17:a5:58:33:d1:f7:7d:9a:17: dd:fe:19:b7:db:79:08:66:0b:04:5a:a9:e0:63:04: 8f:d2:bf:33:9d:03:6c:0a:a9:da:93:d3:19:d4:b0: 61:3d:51:05:1e:aa:3b:13:b9:d2:ba:9a:3d:6b:f0: 2c:b6:95:c3:ab:01:18:e5:d6:96:c6:1e:dc:1f:c8: 1f:a2:99:8d:fa:51:64:a0:61:29:60:be:ef:d4:40: e7:70:0e:79:d1:da:e8:c6:94:04:15:a2:d8:bb:34: 62:ce:ec:2f:e9:f6:c4:ed:cb:ce:60:12:b3:5f:d5: a9:69:e8:be:9f:06:62:5d:01:e2:4f:db:e7:97:cf: b8:e3:c8:25:be:d8:77:d0:4b:5b:a9:9b:19:8e:ac: ee:b8:04:6e:23:1f:ea:51:8c:97:c7:64:e0:01:8d: e6:d0:05:17:f7:2d:e4:36:a6:cc:0f:12:53:29:91: b9:92:31:7a:7d:b1:fb:a4:e1:fa:2c:f1:f5:ea:78: dd:c4:54:dd:bf:45:bb:a5:d3:9e:c8:8e:07:f2:3b: e1:67:a4:9e:f3:88:e3:49:a9:77:ed:b2:2c:e9:49: a4:9f:af:b8:34:62:22:03:5e:56:83:0c:a6:0c:48: e3:ab:36:b9:6c:a5:bd:46:50:c5:0f:90:2f:e3:6f: 0e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:05:2E:DB:50:63:7C:BB:B8:82:80:DD:F3:DF:40:02:92:59:25:72 X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8b:5f:a8:a1:66:b3:97:b6:e8:2b:f6:86:c8:0c:07:28:69: 36:09:c0:6c:59:7e:ae:b5:8e:cc:bb:f2:0e:f5:e4:81:f4:f7: 63:7f:9f:84:2b:9d:4a:7b:a0:1f:e1:71:a8:1f:26:eb:98:6b: 2a:48:c1:4d:6e:cb:06:ce:16:d8:ba:57:5b:29:1c:f9:15:c8: fc:4b:63:c6:69:e4:6b:d5:15:1d:9a:19:47:8d:94:eb:9b:21: 97:5a:9c:4e:f7:e1:4a:e8:c1:d2:c5:2e:63:ae:58:7c:ce:9b: ed:e7:05:89:3e:56:90:51:12:9f:09:fc:d5:cd:13:08:64:20: 25:6d:5c:c0:65:c1:5f:53:67:54:52:6e:81:bc:e4:8e:42:46: 54:be:a4:68:56:4b:9a:ad:21:66:f1:10:f0:d7:27:e7:73:c5: 30:ee:b0:51:1f:b0:0f:f1:05:06:12:5f:86:49:b9:19:f2:43: 87:ed:a3:01:bc:24:ac:69:3c:2a:e2:38:1f:79:5d:69:94:d3: ee:e5:91:f4:17:b9:f9:6e:67:25:eb:b8:b1:ef:f2:de:71:05: d8:05:ed:51:4b:49:ec:76:f0:fa:40:66:fd:0b:f5:c9:99:fe: 20:9d:4f:9d:c4:73:91:62:9f:a1:33:49:d1:b7:fc:02:53:48: 8d:82:61:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIo+Gm9CiFSoV6pTIq+TkPc+mOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjA1MTIwOTAwMzNaFw0yNjA1MTMwOTE4MzNaMDMxMTAvBgNV BAMTKDMyMDUyRURCNTA2MzdDQkJCODgyODBEREYzREY0MDAyOTI1OTI1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo1bEk7RelWDPR932aF93+Gbfb eQhmCwRaqeBjBI/SvzOdA2wKqdqT0xnUsGE9UQUeqjsTudK6mj1r8Cy2lcOrARjl 1pbGHtwfyB+imY36UWSgYSlgvu/UQOdwDnnR2ujGlAQVoti7NGLO7C/p9sTty85g ErNf1alp6L6fBmJdAeJP2+eXz7jjyCW+2HfQS1upmxmOrO64BG4jH+pRjJfHZOAB jebQBRf3LeQ2pswPElMpkbmSMXp9sfuk4fos8fXqeN3EVN2/Rbul057IjgfyO+Fn pJ7ziONJqXftsizpSaSfr7g0YiIDXlaDDKYMSOOrNrlspb1GUMUPkC/jbw6nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMgUu21BjfLu4goDd899AApJZJXIwHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5 QTZGM0ZDMTdDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6LX6ihZrOXtugr9obIDAcoaTYJwGxZfq61 jsy78g715IH092N/n4QrnUp7oB/hcagfJuuYaypIwU1uywbOFti6V1spHPkVyPxL Y8Zp5GvVFR2aGUeNlOubIZdanE734UrowdLFLmOuWHzOm+3nBYk+VpBREp8J/NXN EwhkICVtXMBlwV9TZ1RSboG85I5CRlS+pGhWS5qtIWbxEPDXJ+dzxTDusFEfsA/x BQYSX4ZJuRnyQ4ftowG8JKxpPCriOB95XWmU0+7lkfQXufluZyXruLHv8t5xBdgF 7VFLSex28PpAZv0L9cmZ/iCdT53Ec5Fin6EzSdG3/AJTSI2CYck= -----END CERTIFICATE-----Generated at Wed May 13 00:33:59 2026 by rpki-client