$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft File: 897D06B789644C150E8DD42A6444FA986BC2AC88.mft (raw, json) Hash identifier: VMNfWQ2jEDgBnwBJTBZiX1N0pbfhQpFPxwWxdAC9Uy0= Subject key identifier: 60:5F:69:26:8C:9F:12:7A:B0:62:23:E5:15:B7:E8:2A:46:0B:67:7C Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Certificate serial: 6A923BE59B17CE81556028C470B9519EC2ADA0B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 03:06:42 +0000 Manifest this update: Thu 03 Sep 2026 03:01:42 +0000 Manifest next update: Fri 04 Sep 2026 04:44:42 +0000 Files and hashes: 1: AS137379.roa (hash: uOKVwnbjEKvQQu3GpqQitsImdD31T7I1wvjuQaj60E4=) 2: 897D06B789644C150E8DD42A6444FA986BC2AC88.crl (hash: GaH939d34/YkuBCiQxmjKN7DfXyNTAUus9QovbAdd9o=) 3: AS137342.roa (hash: 3a1GFE6f7rqH+5UhR19t6dUD2RouZAG66CTRDxkyxsE=) 4: AS56242.roa (hash: PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=) 5: AS59281.roa (hash: 4dojGotTg4XtSOrmn0m37E03swYPUund5r2u/43L0Tk=) 6: AS38511.roa (hash: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:92:3b:e5:9b:17:ce:81:55:60:28:c4:70:b9:51:9e:c2:ad:a0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Validity Not Before: Sep 3 03:01:42 2026 GMT Not After : Sep 4 04:44:42 2026 GMT Subject: CN=605F69268C9F127AB06223E515B7E82A460B677C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:32:72:10:8c:a3:3e:9b:bc:fc:ea:18:a0: 2a:35:e2:56:d5:1a:6c:5b:91:ff:c7:6a:5d:de:f7: d1:bf:c6:8b:dc:f3:32:90:37:23:17:65:f8:58:9a: f2:ad:da:9a:9e:73:d5:96:60:c1:fb:32:b1:75:b9: d4:5d:94:13:35:1f:c4:89:1c:2f:ab:5d:3d:36:83: df:bc:ac:ad:b4:e1:3d:cc:ac:cf:47:a8:5f:9d:6f: 7d:10:20:6c:7b:c6:14:ca:cc:25:a9:fc:f5:0a:a3: 81:45:6e:ba:67:8b:de:fd:04:15:74:47:5c:86:64: 13:25:bf:6d:b7:cd:9c:79:ef:bb:7a:a1:a8:36:7f: 5b:8d:36:96:32:e4:66:e7:9b:b5:18:5b:96:0c:61: ff:cc:4c:32:d2:79:be:9e:ab:1f:47:6c:5a:ed:e3: db:48:5b:79:fb:b1:02:8a:b9:9f:75:1f:05:86:84: fc:f6:32:ec:34:ff:d8:ac:86:bb:63:90:bd:5f:88: 02:db:38:a0:c7:4c:bf:25:de:ea:71:75:2f:1d:59: ce:4c:98:61:70:71:00:6c:43:fb:9f:a2:d6:75:7e: 64:69:3f:07:d9:68:c9:1c:22:c9:38:a0:a9:ad:c8: 41:ef:11:45:5a:be:1e:fa:9a:03:03:46:79:73:46: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5F:69:26:8C:9F:12:7A:B0:62:23:E5:15:B7:E8:2A:46:0B:67:7C X509v3 Authority Key Identifier: keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2a:98:dd:99:96:d5:a9:6d:2c:bb:56:33:8a:ab:17:42:6a: 24:0c:d3:a8:20:2f:0a:d3:d4:e7:d2:5a:4a:19:6d:69:02:6c: 32:bf:56:b1:93:26:8c:43:a5:74:fa:18:b8:88:90:12:33:36: d5:67:dc:0b:29:92:93:ab:15:87:29:e4:11:99:e5:00:a3:67: a9:17:1e:14:2d:4b:11:b0:70:49:3d:a2:0a:eb:85:67:b0:2c: f5:d1:08:13:22:16:91:d2:91:ce:f0:6b:c6:f0:8d:5b:57:81: c7:13:97:3f:38:1c:89:ad:ba:12:bc:76:ac:72:d8:61:fb:4b: 61:28:68:2b:67:6a:d7:9a:dc:cb:e5:b0:c0:c7:c5:bf:4d:12: 1b:18:2d:d0:b1:6e:71:37:95:59:ac:aa:47:40:64:64:40:f9: 08:4d:78:d9:87:a0:76:98:cd:7b:d7:8e:a9:8e:d8:78:f0:ac: 3f:61:9e:a5:e4:c8:ac:ae:22:26:d1:ee:86:b0:10:ae:5d:68: e6:41:5b:d1:46:2b:f5:23:82:47:79:5c:9c:12:f5:eb:9d:28: f0:c4:4e:3f:0d:b6:fa:b0:2e:7e:25:fb:26:59:78:d6:3a:e9: 9e:5a:72:9c:a6:17:90:29:09:77:60:bb:d0:1d:b8:03:da:70: c2:1f:15:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUapI75ZsXzoFVYCjEcLlRnsKtoLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2 QkMyQUM4ODAeFw0yNjA5MDMwMzAxNDJaFw0yNjA5MDQwNDQ0NDJaMDMxMTAvBgNV BAMTKDYwNUY2OTI2OEM5RjEyN0FCMDYyMjNFNTE1QjdFODJBNDYwQjY3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCzJyEIyjPpu8/OoYoCo14lbV Gmxbkf/Hal3e99G/xovc8zKQNyMXZfhYmvKt2pqec9WWYMH7MrF1udRdlBM1H8SJ HC+rXT02g9+8rK204T3MrM9HqF+db30QIGx7xhTKzCWp/PUKo4FFbrpni979BBV0 R1yGZBMlv223zZx577t6oag2f1uNNpYy5Gbnm7UYW5YMYf/MTDLSeb6eqx9HbFrt 49tIW3n7sQKKuZ91HwWGhPz2Muw0/9ishrtjkL1fiALbOKDHTL8l3upxdS8dWc5M mGFwcQBsQ/ufotZ1fmRpPwfZaMkcIsk4oKmtyEHvEUVavh76mgMDRnlzRroBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYF9pJoyfEnqwYiPlFbfoKkYLZ3wwHwYDVR0j BBgwFoAUiX0Gt4lkTBUOjdQqZET6mGvCrIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhmMjkxNWQtMThjOS00ZTAzLWJiZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4 OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2QkMyQUM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdEMDZCNzg5NjQ0QzE1MEU4REQ0MkE2NDQ0RkE5ODZCQzJB Qzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZB OTg2QkMyQUM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQqmN2ZltWpbSy7VjOKqxdCaiQM06ggLwrT 1OfSWkoZbWkCbDK/VrGTJoxDpXT6GLiIkBIzNtVn3AspkpOrFYcp5BGZ5QCjZ6kX HhQtSxGwcEk9ogrrhWewLPXRCBMiFpHSkc7wa8bwjVtXgccTlz84HImtuhK8dqxy 2GH7S2EoaCtnatea3MvlsMDHxb9NEhsYLdCxbnE3lVmsqkdAZGRA+QhNeNmHoHaY zXvXjqmO2HjwrD9hnqXkyKyuIibR7oawEK5daOZBW9FGK/Ujgkd5XJwS9eudKPDE Tj8NtvqwLn4l+yZZeNY66Z5acpymF5ApCXdgu9AduAPacMIfFUs= -----END CERTIFICATE-----Generated at Thu Sep 3 08:00:46 2026 by rpki-client