$ rpki-client -vvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft File: 897D06B789644C150E8DD42A6444FA986BC2AC88.mft (raw, json) Hash identifier: 7eR6NnwnVvz8fLR7lodPIKoYdbSMijEFsekvZ95NWnQ= Subject key identifier: 9A:C9:12:DC:D1:2B:1C:62:EB:A8:8D:5E:06:A6:C8:30:7E:B7:0A:E3 Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Certificate serial: 786F3A4E07C5E5B270C2C45602295111591A0C07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:09:28 +0000 Manifest this update: Tue 02 Jun 2026 16:04:28 +0000 Manifest next update: Wed 03 Jun 2026 19:56:28 +0000 Files and hashes: 1: AS56242.roa (hash: PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=) 2: 897D06B789644C150E8DD42A6444FA986BC2AC88.crl (hash: nH7rljdbvrlLJdYqzkk+NX2KP/4Oi4WuaJXYAU3wo38=) 3: AS59281.roa (hash: 4dojGotTg4XtSOrmn0m37E03swYPUund5r2u/43L0Tk=) 4: AS38511.roa (hash: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=) 5: AS137379.roa (hash: uOKVwnbjEKvQQu3GpqQitsImdD31T7I1wvjuQaj60E4=) 6: AS137342.roa (hash: 3a1GFE6f7rqH+5UhR19t6dUD2RouZAG66CTRDxkyxsE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6f:3a:4e:07:c5:e5:b2:70:c2:c4:56:02:29:51:11:59:1a:0c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Validity Not Before: Jun 2 16:04:28 2026 GMT Not After : Jun 3 19:56:28 2026 GMT Subject: CN=9AC912DCD12B1C62EBA88D5E06A6C8307EB70AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:70:5e:0a:8a:e2:ae:21:c1:1b:71:e4:65:83: b8:5c:63:6d:18:18:48:02:95:eb:86:a0:92:eb:67: 0e:5c:a6:77:b5:d3:c2:37:b8:fb:d3:b7:7d:6b:d3: 8d:7d:36:97:01:d1:1d:ec:56:7c:46:db:f3:07:5e: b4:93:83:11:62:7c:33:6f:4a:79:05:05:01:d5:89: b1:e0:c9:4f:cd:e2:c5:03:f1:ba:a1:70:28:14:9e: e3:56:44:f4:8f:0a:f9:18:78:4f:af:b3:7e:fc:e1: b8:1b:6b:c8:18:41:70:a9:24:13:88:dc:73:16:bb: 8a:91:bc:25:d1:be:55:94:f3:58:29:d5:b9:ab:b6: 75:d2:c2:58:e9:60:78:80:3c:aa:61:cd:b8:c6:8d: 0d:a6:95:41:53:1e:fa:51:89:a5:f6:52:d6:5d:31: 3c:85:49:8f:54:ae:d3:4b:55:6a:06:d6:d2:41:3a: dc:0d:1f:61:8a:47:0f:6e:72:88:37:dc:ed:d7:05: e8:c7:9f:da:a3:e0:78:a1:42:2c:3a:8f:f2:94:c6: d7:47:77:f5:51:e3:45:96:cb:f7:f4:75:ee:5b:4d: b4:f0:ac:d0:c5:c3:80:72:f1:a0:8e:eb:6b:29:8e: b4:73:43:f1:4b:79:cb:27:f5:11:80:26:65:a8:ea: 09:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C9:12:DC:D1:2B:1C:62:EB:A8:8D:5E:06:A6:C8:30:7E:B7:0A:E3 X509v3 Authority Key Identifier: keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c6:11:68:02:ff:04:6a:ed:9f:6d:4a:73:20:1d:3e:dc:df: a9:f2:68:ae:ee:5d:ab:6c:04:ba:79:38:0c:d7:2a:ac:fd:aa: 1f:26:51:27:4a:f5:2b:b9:03:16:d4:8c:b7:7c:e8:4c:21:7a: 9a:a8:1a:14:6f:fc:6e:e2:ff:7a:6b:fe:92:47:22:a1:db:82: cc:d1:e7:22:03:7d:d0:c8:71:51:36:dc:4e:32:8a:56:00:81: 0b:0a:fa:42:d2:9d:49:a4:55:d7:72:ae:01:42:7e:46:26:74: 87:b9:c7:3d:70:57:90:0b:17:69:0b:36:69:3f:99:be:51:dc: 9c:31:ec:63:89:20:49:26:cd:95:02:ff:92:17:db:5b:6a:2b: 8d:df:f8:f6:dc:2e:ac:6f:e5:aa:a9:b0:0b:49:b3:f6:e2:90: bc:e9:d0:3a:f5:4d:67:79:c1:65:28:b5:e0:fb:64:69:d0:d4: 46:bb:cf:bb:c4:ed:5e:97:4b:1b:75:a7:27:63:ef:75:21:45: c3:87:1b:a0:e3:c8:7a:8f:94:d5:13:38:57:0e:6b:29:3d:78: 82:9a:61:71:70:ee:b8:fb:cd:79:95:94:9f:64:fd:69:ce:45: 6b:df:3f:37:ad:bd:51:81:c5:72:22:8e:01:14:67:7f:26:84: e6:83:fb:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeG86TgfF5bJwwsRWAilREVkaDAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2 QkMyQUM4ODAeFw0yNjA2MDIxNjA0MjhaFw0yNjA2MDMxOTU2MjhaMDMxMTAvBgNV BAMTKDlBQzkxMkRDRDEyQjFDNjJFQkE4OEQ1RTA2QTZDODMwN0VCNzBBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZcF4KiuKuIcEbceRlg7hcY20Y GEgCleuGoJLrZw5cpne108I3uPvTt31r0419NpcB0R3sVnxG2/MHXrSTgxFifDNv SnkFBQHVibHgyU/N4sUD8bqhcCgUnuNWRPSPCvkYeE+vs3784bgba8gYQXCpJBOI 3HMWu4qRvCXRvlWU81gp1bmrtnXSwljpYHiAPKphzbjGjQ2mlUFTHvpRiaX2UtZd MTyFSY9UrtNLVWoG1tJBOtwNH2GKRw9ucog33O3XBejHn9qj4HihQiw6j/KUxtdH d/VR40WWy/f0de5bTbTwrNDFw4By8aCO62spjrRzQ/FLecsn9RGAJmWo6gnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmskS3NErHGLrqI1eBqbIMH63CuMwHwYDVR0j BBgwFoAUiX0Gt4lkTBUOjdQqZET6mGvCrIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhmMjkxNWQtMThjOS00ZTAzLWJiZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4 OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2QkMyQUM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdEMDZCNzg5NjQ0QzE1MEU4REQ0MkE2NDQ0RkE5ODZCQzJB Qzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZB OTg2QkMyQUM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALGEWgC/wRq7Z9tSnMgHT7c36nyaK7uXats BLp5OAzXKqz9qh8mUSdK9Su5AxbUjLd86EwhepqoGhRv/G7i/3pr/pJHIqHbgszR 5yIDfdDIcVE23E4yilYAgQsK+kLSnUmkVddyrgFCfkYmdIe5xz1wV5ALF2kLNmk/ mb5R3Jwx7GOJIEkmzZUC/5IX21tqK43f+PbcLqxv5aqpsAtJs/bikLzp0Dr1TWd5 wWUoteD7ZGnQ1Ea7z7vE7V6XSxt1pydj73UhRcOHG6DjyHqPlNUTOFcOayk9eIKa YXFw7rj7zXmVlJ9k/WnORWvfPzetvVGBxXIijgEUZ38mhOaD+0A= -----END CERTIFICATE-----Generated at Wed Jun 3 03:35:30 2026 by rpki-client