$ rpki-client -vvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft File: 897D06B789644C150E8DD42A6444FA986BC2AC88.mft (raw, json) Hash identifier: 3SKpeIs/Q8VVY+NNTZ5DPKrtcxuCXZcRgtV5rXnZkCY= Subject key identifier: BD:C2:51:0C:B7:35:1E:68:78:C1:9F:83:8E:57:47:8D:9D:64:BB:98 Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Certificate serial: 4A9430DD2F80DCE4739BA84F830421441710E2C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 21:43:41 +0000 Manifest this update: Sun 19 Jul 2026 21:38:41 +0000 Manifest next update: Mon 20 Jul 2026 22:09:41 +0000 Files and hashes: 1: 897D06B789644C150E8DD42A6444FA986BC2AC88.crl (hash: mWU0wClHWcMdqH02uy2E0xlqLamJGpj5aQbTjDsXM0Q=) 2: AS38511.roa (hash: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=) 3: AS59281.roa (hash: 4dojGotTg4XtSOrmn0m37E03swYPUund5r2u/43L0Tk=) 4: AS56242.roa (hash: PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=) 5: AS137342.roa (hash: 3a1GFE6f7rqH+5UhR19t6dUD2RouZAG66CTRDxkyxsE=) 6: AS137379.roa (hash: uOKVwnbjEKvQQu3GpqQitsImdD31T7I1wvjuQaj60E4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:94:30:dd:2f:80:dc:e4:73:9b:a8:4f:83:04:21:44:17:10:e2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Validity Not Before: Jul 19 21:38:41 2026 GMT Not After : Jul 20 22:09:41 2026 GMT Subject: CN=BDC2510CB7351E6878C19F838E57478D9D64BB98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dd:44:83:55:d2:49:ea:88:5c:d7:c1:c7:df: f0:4a:9b:f4:2e:a3:1c:c6:d6:3a:56:77:4d:f5:a3: 74:70:6a:9f:35:5e:72:cb:06:45:13:fb:72:03:2b: 96:a9:7a:f5:ce:1a:c0:f7:ee:f2:df:17:5b:df:67: 3f:b4:94:79:90:44:a1:4f:08:c5:7d:6a:90:3d:8b: 18:f2:a0:e5:59:ae:26:96:e5:67:c3:f0:df:63:29: 4f:02:91:38:f9:88:f5:c6:54:86:2a:2a:18:6f:44: aa:fd:fb:24:f4:a9:80:c4:a9:6c:8a:b6:2c:70:fd: d1:22:f2:21:29:69:42:4c:c7:97:6d:37:0d:ac:c3: df:ad:a2:cc:59:0f:ab:94:be:e8:d7:0f:c5:e1:d0: a6:e3:4d:d7:46:f7:00:af:40:d1:79:5d:c0:1f:27: 3b:71:17:b9:83:83:45:21:5f:cd:cf:dd:fb:e9:23: 6b:05:8a:f1:5e:7e:00:45:bf:22:f5:b7:c3:e5:e0: 19:69:5a:a4:d9:54:b2:34:12:ea:b7:c3:15:ac:8e: 93:e3:88:69:e7:93:57:31:61:97:71:a9:c9:a9:ac: bf:cb:fd:b6:59:ba:19:df:83:d0:fb:08:39:b7:a1: fb:6d:60:5a:eb:20:07:9b:1b:83:72:81:54:fc:15: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C2:51:0C:B7:35:1E:68:78:C1:9F:83:8E:57:47:8D:9D:64:BB:98 X509v3 Authority Key Identifier: keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:56:e2:d5:fe:dc:19:84:54:07:8b:7d:7d:62:5e:11:8e:4b: f8:82:6a:1d:9e:a9:ec:e7:e7:76:01:61:89:41:77:67:6a:87: 84:93:ae:04:59:38:f5:3c:7c:01:60:1f:d5:45:59:d6:89:4d: 58:ec:fb:0c:2a:52:65:b0:3a:4d:75:8c:9b:de:5a:fc:13:47: 11:52:4a:7d:e5:9c:dc:53:2a:b0:2f:15:eb:60:9c:87:51:da: 7d:df:98:13:81:5e:24:62:98:5a:47:ed:3b:fc:5b:98:fa:cc: 91:fb:bd:1e:68:b8:de:57:87:d7:38:3b:f4:dd:e4:42:6b:cb: d2:1e:10:31:6e:76:ef:d7:c0:4c:e3:b1:1e:91:05:97:0a:d3: 51:d5:cf:56:d0:09:98:da:7c:f7:19:cf:e5:78:d3:1f:50:5f: 0d:55:50:ba:88:cc:b6:7d:ea:23:18:10:c8:3b:8d:de:c2:11: b3:7e:10:e5:2e:8c:14:83:9f:85:c0:eb:14:ad:01:7b:cf:ed: db:e3:76:ad:b4:bd:57:c3:c8:cc:f7:fd:f9:b8:da:a4:6b:5b: 53:be:e0:e8:6c:05:06:23:81:87:ea:fa:80:0c:c5:fa:f3:5e: d2:6c:53:8d:ca:40:f2:54:fe:09:1e:0f:c9:1f:0d:87:55:a3: a4:19:34:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpQw3S+A3ORzm6hPgwQhRBcQ4sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2 QkMyQUM4ODAeFw0yNjA3MTkyMTM4NDFaFw0yNjA3MjAyMjA5NDFaMDMxMTAvBgNV BAMTKEJEQzI1MTBDQjczNTFFNjg3OEMxOUY4MzhFNTc0NzhEOUQ2NEJCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk3USDVdJJ6ohc18HH3/BKm/Qu oxzG1jpWd031o3Rwap81XnLLBkUT+3IDK5apevXOGsD37vLfF1vfZz+0lHmQRKFP CMV9apA9ixjyoOVZriaW5WfD8N9jKU8CkTj5iPXGVIYqKhhvRKr9+yT0qYDEqWyK tixw/dEi8iEpaUJMx5dtNw2sw9+tosxZD6uUvujXD8Xh0KbjTddG9wCvQNF5XcAf JztxF7mDg0UhX83P3fvpI2sFivFefgBFvyL1t8Pl4BlpWqTZVLI0Euq3wxWsjpPj iGnnk1cxYZdxqcmprL/L/bZZuhnfg9D7CDm3ofttYFrrIAebG4NygVT8FdDJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvcJRDLc1Hmh4wZ+DjldHjZ1ku5gwHwYDVR0j BBgwFoAUiX0Gt4lkTBUOjdQqZET6mGvCrIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhmMjkxNWQtMThjOS00ZTAzLWJiZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4 OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2QkMyQUM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdEMDZCNzg5NjQ0QzE1MEU4REQ0MkE2NDQ0RkE5ODZCQzJB Qzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZB OTg2QkMyQUM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhW4tX+3BmEVAeLfX1iXhGOS/iCah2eqezn 53YBYYlBd2dqh4STrgRZOPU8fAFgH9VFWdaJTVjs+wwqUmWwOk11jJveWvwTRxFS Sn3lnNxTKrAvFetgnIdR2n3fmBOBXiRimFpH7Tv8W5j6zJH7vR5ouN5Xh9c4O/Td 5EJry9IeEDFudu/XwEzjsR6RBZcK01HVz1bQCZjafPcZz+V40x9QXw1VULqIzLZ9 6iMYEMg7jd7CEbN+EOUujBSDn4XA6xStAXvP7dvjdq20vVfDyMz3/fm42qRrW1O+ 4OhsBQYjgYfq+oAMxfrzXtJsU43KQPJU/gkeD8kfDYdVo6QZNFM= -----END CERTIFICATE-----Generated at Sun Jul 19 23:48:38 2026 by rpki-client