$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft (raw, json) Hash identifier: wcSlewabGuEXRg3VBrKEs2D9P1xtfu9d/DVsvivyb7M= Subject key identifier: 5D:58:58:F7:65:5A:3B:0F:6A:20:ED:E7:7D:F2:16:3E:BD:2F:CF:7F Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 4BDE30471C9AA8D8C2A13953AF569C2748A79880 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 20:18:06 +0000 Manifest this update: Mon 02 Nov 2026 20:13:06 +0000 Manifest next update: Tue 03 Nov 2026 22:20:06 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: L2W5rnLzb0ayOTJLCbvv5xJbFsJZYaXlC2C/bL2KNmw=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: ldSnrrmteNryHWcf9UUZou80Ix7aIJzaiTf7mkq3mc4=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw=) 4: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl (hash: zXvDaT4hCFuysllM47edk8K8F2w98MKc/c7FSoo1iWQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:de:30:47:1c:9a:a8:d8:c2:a1:39:53:af:56:9c:27:48:a7:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: Nov 2 20:13:06 2026 GMT Not After : Nov 3 22:20:06 2026 GMT Subject: CN=5D5858F7655A3B0F6A20EDE77DF2163EBD2FCF7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:bd:94:d5:fe:02:6a:a2:11:1b:9f:8f:94: e6:a9:13:6a:d6:76:88:82:76:73:c4:63:8f:1b:3b: 64:3b:36:fb:77:b2:49:cb:49:c9:23:96:79:aa:e3: 5e:a2:86:a6:33:38:44:d7:d5:ff:a6:de:8e:a3:dc: 47:fd:d5:43:9f:a2:53:03:65:53:c6:e2:67:35:1b: 1e:45:08:60:41:3e:02:cd:12:d7:00:43:94:20:e0: e2:0e:36:48:76:1f:b2:34:50:c1:4a:a1:a8:ca:9f: 20:35:ad:ce:dc:ca:cd:f5:ae:54:78:4b:a2:28:93: 42:fe:f8:9b:83:d5:ec:e1:2e:6e:10:56:b8:0e:bd: ea:3b:2a:93:ce:9d:f5:85:00:3f:51:f2:3a:f8:fb: c4:80:4d:b2:ae:2e:c1:7d:de:ae:25:fa:55:7e:2d: c7:92:5e:ea:18:84:d8:3d:7b:be:1b:4b:31:bb:2b: 5b:d3:15:5d:8b:09:c3:1f:2b:03:4f:92:b9:0e:67: a6:fe:10:2a:41:19:6c:3c:43:35:cf:01:95:30:97: c7:44:ba:70:c5:08:f0:02:21:ab:29:2c:b3:d6:bd: cd:96:6a:e9:81:17:96:5c:45:f2:38:ae:04:09:19: a8:18:67:68:7c:3e:45:62:de:c3:e6:77:ee:0c:41: ce:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:58:58:F7:65:5A:3B:0F:6A:20:ED:E7:7D:F2:16:3E:BD:2F:CF:7F X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:50:94:4f:eb:74:ca:2f:9f:dc:58:bd:43:11:0d:30:f4:91: 6a:69:d3:a0:37:b6:b5:2d:a6:f7:d0:54:45:52:66:ae:bf:3c: 84:0a:e7:6b:b4:5e:7a:b1:e8:3f:fc:87:fa:fb:65:ef:ba:ea: 62:a9:f3:32:2e:26:1f:9d:8f:ac:fa:e5:99:19:f3:a0:c1:27: b4:92:0b:23:0b:3d:d6:d1:be:f9:d8:39:4e:54:ba:3e:10:55: 36:96:3a:d3:d0:f4:4f:a0:ae:a6:d7:67:95:6e:c4:4b:44:a5: 08:56:55:c6:7c:ae:6e:86:61:21:af:c1:6d:89:b0:73:4b:bb: 37:b6:ac:90:bd:cc:a8:d6:66:57:d3:97:76:1b:fa:1b:62:1e: 0e:2a:d0:06:dd:b8:72:f3:1c:ea:b1:62:67:08:a3:ca:f8:21: 3b:e2:40:d8:46:bf:24:94:04:90:24:c0:38:9d:f8:6f:25:3a: fc:85:10:5d:0a:62:0d:3b:48:09:08:ea:d8:d0:68:f4:f7:5a: cf:90:28:ed:c8:ef:34:a8:ed:bd:4f:2c:8d:c1:a6:c6:16:2e: 6c:2c:34:ad:7d:e7:15:87:4e:3f:be:f7:48:28:e0:82:8b:4a: 01:1f:6c:be:cf:00:1a:09:6e:e5:60:31:6d:63:f0:c1:7d:0f: 0b:23:4a:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS94wRxyaqNjCoTlTr1acJ0inmIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjExMDIyMDEzMDZaFw0yNjExMDMyMjIwMDZaMDMxMTAvBgNV BAMTKDVENTg1OEY3NjU1QTNCMEY2QTIwRURFNzdERjIxNjNFQkQyRkNGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpL2U1f4CaqIRG5+PlOapE2rW doiCdnPEY48bO2Q7Nvt3sknLSckjlnmq416ihqYzOETX1f+m3o6j3Ef91UOfolMD ZVPG4mc1Gx5FCGBBPgLNEtcAQ5Qg4OIONkh2H7I0UMFKoajKnyA1rc7cys31rlR4 S6Iok0L++JuD1ezhLm4QVrgOveo7KpPOnfWFAD9R8jr4+8SATbKuLsF93q4l+lV+ LceSXuoYhNg9e74bSzG7K1vTFV2LCcMfKwNPkrkOZ6b+ECpBGWw8QzXPAZUwl8dE unDFCPACIaspLLPWvc2WaumBF5ZcRfI4rgQJGagYZ2h8PkVi3sPmd+4MQc4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXVhY92VaOw9qIO3nffIWPr0vz38wHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5 QTZGM0ZDMTdDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZQlE/rdMovn9xYvUMRDTD0kWpp06A3trUt pvfQVEVSZq6/PIQK52u0Xnqx6D/8h/r7Ze+66mKp8zIuJh+dj6z65ZkZ86DBJ7SS CyMLPdbRvvnYOU5Uuj4QVTaWOtPQ9E+grqbXZ5VuxEtEpQhWVcZ8rm6GYSGvwW2J sHNLuze2rJC9zKjWZlfTl3Yb+htiHg4q0AbduHLzHOqxYmcIo8r4ITviQNhGvySU BJAkwDid+G8lOvyFEF0KYg07SAkI6tjQaPT3Ws+QKO3I7zSo7b1PLI3BpsYWLmws NK195xWHTj++90go4IKLSgEfbL7PABoJbuVgMW1j8MF9DwsjStI= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:21 2026 by rpki-client