$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft (raw, json) Hash identifier: xSYnRe7Jz1Y3jM6U1qr4PWtX01tZoAa30v9Ac4Q8NoQ= Subject key identifier: 88:60:A9:AA:06:C6:31:A9:C8:E0:D1:0F:5C:F4:20:A6:2B:39:56:CC Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 0AEFB551A312A3B8E1229F3731B532579B56E392 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 22:22:17 +0000 Manifest this update: Sat 14 Nov 2026 22:17:17 +0000 Manifest next update: Mon 16 Nov 2026 00:18:17 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: L2W5rnLzb0ayOTJLCbvv5xJbFsJZYaXlC2C/bL2KNmw=) 2: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: ldSnrrmteNryHWcf9UUZou80Ix7aIJzaiTf7mkq3mc4=) 4: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl (hash: nrgTiwxDrPlmI3I3DSkpMXxwR+habo6YwTD4aEfWs+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ef:b5:51:a3:12:a3:b8:e1:22:9f:37:31:b5:32:57:9b:56:e3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: Nov 14 22:17:17 2026 GMT Not After : Nov 16 00:18:17 2026 GMT Subject: CN=8860A9AA06C631A9C8E0D10F5CF420A62B3956CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:4a:a9:31:97:05:dd:11:c3:a5:ad:c1:b8: a5:42:d5:28:5d:6a:0a:bd:9a:f0:76:54:32:82:3e: b3:21:da:98:f8:58:f6:c6:f3:b1:0c:0d:af:c5:a8: bc:d2:7f:24:91:ea:e5:11:0e:b2:23:6d:87:7f:15: 15:d6:de:de:43:9a:56:3b:10:5c:14:4c:e4:c5:e7: 6e:f8:0a:15:8e:a8:22:c6:84:74:d1:ba:6e:06:3c: c8:0e:3c:90:e0:14:0a:88:b2:03:3a:bc:70:30:aa: bf:0b:ff:b7:44:61:7f:df:d3:77:91:b1:0b:3b:90: 7a:ad:b7:42:12:88:44:b8:6c:62:17:d6:9a:f0:af: ed:32:06:41:eb:b1:24:79:71:4a:a9:a9:a8:a8:d7: 1d:be:d1:43:b1:94:df:15:2f:4e:d3:f4:3c:49:34: ac:b9:61:b6:38:ac:d8:81:af:79:f8:4d:81:cb:2b: b4:f9:e0:b8:c2:d0:9d:69:62:23:d5:9b:1c:8c:fa: 93:36:7b:be:53:6c:dc:6c:68:61:8a:ee:c6:08:34: 0a:3d:06:d2:ff:7f:64:9e:d8:b6:08:f5:c4:43:32: 06:d0:b1:41:31:77:37:b3:e0:76:6b:9b:e2:85:ae: 6e:b7:16:62:96:82:55:f1:29:71:e2:23:1a:0b:da: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:60:A9:AA:06:C6:31:A9:C8:E0:D1:0F:5C:F4:20:A6:2B:39:56:CC X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a8:68:7b:d9:70:61:73:c0:94:d7:e5:ef:35:ff:c5:b5:c8: 0a:cc:87:04:ec:50:52:53:10:77:93:b1:cc:ec:07:6c:78:0b: 51:3a:05:2b:db:5a:92:a2:26:7a:c6:1b:17:4f:8f:b1:4a:44: 2c:c9:62:cc:04:6f:f8:ae:c4:d0:46:44:e7:56:12:ec:fc:f3: 85:14:d9:6c:b3:a0:7c:a0:f5:9a:23:01:fe:fe:0c:4d:b6:27: 19:e5:6e:51:0b:40:18:37:5a:5c:9c:7e:f0:5b:df:75:01:1d: 0d:50:55:c3:53:4d:13:88:7e:0e:6b:c4:2d:f5:c1:63:87:c4: 22:d1:7b:75:50:76:eb:29:f9:55:7c:cd:00:41:1a:83:31:98: 95:18:82:4f:62:dc:b1:4a:66:fb:cc:78:51:9c:f6:5a:3b:8d: 43:bb:49:48:87:ba:8c:ca:1d:8c:9d:be:3d:c6:8b:32:86:f0: bb:9c:40:c5:30:3b:a2:12:3c:cc:ed:8a:95:ca:4e:de:d9:1e: 5f:a0:6b:6c:57:6d:c7:54:ee:34:0f:eb:ef:24:0a:88:1e:c2: 30:2f:98:fd:1a:c6:d5:b6:41:e5:7b:33:79:f0:5d:d2:f9:e5: 72:32:0d:28:29:78:fb:c8:be:c4:57:cc:71:43:3e:9c:00:89: c6:15:cd:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCu+1UaMSo7jhIp83MbUyV5tW45IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjExMTQyMjE3MTdaFw0yNjExMTYwMDE4MTdaMDMxMTAvBgNV BAMTKDg4NjBBOUFBMDZDNjMxQTlDOEUwRDEwRjVDRjQyMEE2MkIzOTU2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ5UqpMZcF3RHDpa3BuKVC1Shd agq9mvB2VDKCPrMh2pj4WPbG87EMDa/FqLzSfySR6uURDrIjbYd/FRXW3t5DmlY7 EFwUTOTF5274ChWOqCLGhHTRum4GPMgOPJDgFAqIsgM6vHAwqr8L/7dEYX/f03eR sQs7kHqtt0ISiES4bGIX1prwr+0yBkHrsSR5cUqpqaio1x2+0UOxlN8VL07T9DxJ NKy5YbY4rNiBr3n4TYHLK7T54LjC0J1pYiPVmxyM+pM2e75TbNxsaGGK7sYINAo9 BtL/f2Se2LYI9cRDMgbQsUExdzez4HZrm+KFrm63FmKWglXxKXHiIxoL2hnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiGCpqgbGManI4NEPXPQgpis5VswwHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5 QTZGM0ZDMTdDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWoaHvZcGFzwJTX5e81/8W1yArMhwTsUFJT EHeTsczsB2x4C1E6BSvbWpKiJnrGGxdPj7FKRCzJYswEb/iuxNBGROdWEuz884UU 2WyzoHyg9ZojAf7+DE22JxnlblELQBg3WlycfvBb33UBHQ1QVcNTTROIfg5rxC31 wWOHxCLRe3VQdusp+VV8zQBBGoMxmJUYgk9i3LFKZvvMeFGc9lo7jUO7SUiHuozK HYydvj3GizKG8LucQMUwO6ISPMztipXKTt7ZHl+ga2xXbcdU7jQP6+8kCogewjAv mP0axtW2QeV7M3nwXdL55XIyDSgpePvIvsRXzHFDPpwAicYVzYg= -----END CERTIFICATE-----Generated at Sun Nov 15 09:52:40 2026 by rpki-client