$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft (raw, json) Hash identifier: mz0XVGNWBbo8cljpKsZR5PhwhLFW8XvHoxFMdA1YtLo= Subject key identifier: 40:38:80:4E:55:DF:F4:D1:C8:2C:8A:C6:BE:B9:EA:98:B2:95:58:08 Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 3D99D955301CD94446D2B9657E595FE271B1424B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:18:19 +0000 Manifest this update: Thu 23 Jul 2026 23:13:19 +0000 Manifest next update: Fri 24 Jul 2026 23:27:19 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: ldSnrrmteNryHWcf9UUZou80Ix7aIJzaiTf7mkq3mc4=) 2: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: L2W5rnLzb0ayOTJLCbvv5xJbFsJZYaXlC2C/bL2KNmw=) 4: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl (hash: hRAm9haNb439AhFYXNypFnHUnrT3T/If6Jtb0B5iCr4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:99:d9:55:30:1c:d9:44:46:d2:b9:65:7e:59:5f:e2:71:b1:42:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: Jul 23 23:13:19 2026 GMT Not After : Jul 24 23:27:19 2026 GMT Subject: CN=4038804E55DFF4D1C82C8AC6BEB9EA98B2955808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:40:4b:7f:3b:02:f7:02:44:ac:57:76:e9: ad:81:ec:25:fe:f3:f8:37:f1:bf:d9:9c:44:4b:aa: 15:65:c1:bb:5b:18:f9:a9:ac:78:81:53:ae:64:79: 7b:9c:e3:e9:c2:73:c0:1d:b8:fd:cf:f7:ad:90:79: c4:07:81:7b:ef:ef:c7:e4:d3:18:db:60:db:ab:94: 22:6c:02:f3:e9:03:3f:2e:2e:90:1a:4c:f1:d3:d5: aa:95:6e:5a:6b:73:6c:58:3f:a0:7d:8e:5b:97:b8: 31:3b:98:3e:05:e5:16:c5:d7:06:9a:92:86:ec:2c: 2d:9e:7c:0f:a0:3a:84:49:81:29:c1:dd:fe:32:43: ef:9d:40:00:ab:aa:9f:d9:69:7c:9b:1d:58:2b:a9: 10:a5:c5:c6:15:75:bf:24:cd:f6:fa:2b:f7:78:8f: 00:ed:b7:00:5a:fc:01:c5:7c:bb:8f:5a:e8:73:3b: 03:c1:a8:d3:70:02:c7:5c:fe:db:0a:d0:1e:42:c6: b2:b7:20:42:71:f2:74:27:6b:83:ed:33:87:84:20: a2:9c:95:a7:36:70:04:5a:b1:4c:73:8e:1c:b3:c1: 1d:4e:2a:b4:4f:0d:29:73:cb:ae:e7:6a:61:2c:73: b9:93:a9:e1:62:0e:55:64:9d:fb:20:f8:f8:15:4a: 73:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:38:80:4E:55:DF:F4:D1:C8:2C:8A:C6:BE:B9:EA:98:B2:95:58:08 X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ac:97:df:c1:f9:c9:95:96:76:03:bd:bb:86:7d:cc:42:60: 62:90:5b:8c:9e:5c:03:fb:a4:14:2c:93:c0:79:83:01:98:5d: ec:45:8d:50:a5:99:c2:1b:c0:ad:a0:ae:71:76:1a:9e:04:41: fe:81:a0:4f:3b:6a:f1:ae:12:9d:0e:ef:cb:65:66:b7:8f:7a: b7:50:47:66:9c:e2:c8:1a:3a:f6:90:ce:54:63:53:01:7f:26: ca:9a:e8:38:2e:28:76:d9:fb:d9:01:fd:d3:c1:6a:cf:14:f9: fa:78:2a:af:32:48:b1:3d:37:ba:04:5b:f7:41:c0:f4:72:d1: 1d:c2:17:54:a2:1a:f5:20:05:83:f0:61:75:af:2b:95:cc:a6: 65:76:74:f9:4c:46:aa:d3:9f:58:c3:3f:39:4c:dd:46:14:f6: 3c:22:8a:b3:a5:1b:4d:9a:d8:a4:f0:ae:62:fb:de:0a:dd:ac: 45:8b:c2:0c:69:79:9e:c4:16:4f:d3:0a:2a:99:06:bb:93:5b: fe:e2:27:1b:62:02:63:38:51:0c:df:16:6d:85:b6:a6:db:e9: 19:0a:33:b0:eb:b2:c0:1e:0c:e8:39:98:c9:24:9d:48:e4:dd: 59:d4:c7:f7:69:07:9b:aa:ba:3a:e6:0b:34:0b:77:5b:9d:6d: 92:60:f1:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZnZVTAc2URG0rllfllf4nGxQkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjA3MjMyMzEzMTlaFw0yNjA3MjQyMzI3MTlaMDMxMTAvBgNV BAMTKDQwMzg4MDRFNTVERkY0RDFDODJDOEFDNkJFQjlFQTk4QjI5NTU4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmUBLfzsC9wJErFd26a2B7CX+ 8/g38b/ZnERLqhVlwbtbGPmprHiBU65keXuc4+nCc8AduP3P962QecQHgXvv78fk 0xjbYNurlCJsAvPpAz8uLpAaTPHT1aqVblprc2xYP6B9jluXuDE7mD4F5RbF1waa kobsLC2efA+gOoRJgSnB3f4yQ++dQACrqp/ZaXybHVgrqRClxcYVdb8kzfb6K/d4 jwDttwBa/AHFfLuPWuhzOwPBqNNwAsdc/tsK0B5CxrK3IEJx8nQna4PtM4eEIKKc lac2cARasUxzjhyzwR1OKrRPDSlzy67namEsc7mTqeFiDlVknfsg+PgVSnOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQDiATlXf9NHILIrGvrnqmLKVWAgwHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5 QTZGM0ZDMTdDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2sl9/B+cmVlnYDvbuGfcxCYGKQW4yeXAP7 pBQsk8B5gwGYXexFjVClmcIbwK2grnF2Gp4EQf6BoE87avGuEp0O78tlZrePerdQ R2ac4sgaOvaQzlRjUwF/Jsqa6DguKHbZ+9kB/dPBas8U+fp4Kq8ySLE9N7oEW/dB wPRy0R3CF1SiGvUgBYPwYXWvK5XMpmV2dPlMRqrTn1jDPzlM3UYU9jwiirOlG02a 2KTwrmL73grdrEWLwgxpeZ7EFk/TCiqZBruTW/7iJxtiAmM4UQzfFm2Ftqbb6RkK M7DrssAeDOg5mMkknUjk3VnUx/dpB5uqujrmCzQLd1udbZJg8cs= -----END CERTIFICATE-----Generated at Fri Jul 24 02:44:58 2026 by rpki-client