$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft File: 897D06B789644C150E8DD42A6444FA986BC2AC88.mft (raw, json) Hash identifier: IfzH/S6Rfl9XuBXBgOajAFeWzOU2zcIgp9Pq1rMS8cw= Subject key identifier: 44:CB:B2:C8:95:18:B2:50:A3:26:9C:3F:DA:B2:09:33:FA:D6:0B:82 Authority key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Certificate issuer: /CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Certificate serial: 581283D2C43F117EDFC0582EAB7AD3FC1462DC34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 14:27:11 +0000 Manifest this update: Sat 24 Oct 2026 14:22:11 +0000 Manifest next update: Sun 25 Oct 2026 17:01:11 +0000 Files and hashes: 1: 897D06B789644C150E8DD42A6444FA986BC2AC88.crl (hash: Qd6c938Db7xBZrj8udmyX3yEq0EUw+wfgoJoq0UwKmw=) 2: AS59281.roa (hash: 4dojGotTg4XtSOrmn0m37E03swYPUund5r2u/43L0Tk=) 3: AS137379.roa (hash: uOKVwnbjEKvQQu3GpqQitsImdD31T7I1wvjuQaj60E4=) 4: AS56242.roa (hash: PH73/Mwd0ezI5Lh6gWvx2syTenpLgj0vaA5Ja+Af/LU=) 5: AS38511.roa (hash: MQULASbpzPhK61AYOrMtA1VlNSGR/Dmdf/Dbp4ysCgw=) 6: AS137342.roa (hash: 3a1GFE6f7rqH+5UhR19t6dUD2RouZAG66CTRDxkyxsE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:12:83:d2:c4:3f:11:7e:df:c0:58:2e:ab:7a:d3:fc:14:62:dc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Validity Not Before: Oct 24 14:22:11 2026 GMT Not After : Oct 25 17:01:11 2026 GMT Subject: CN=44CBB2C89518B250A3269C3FDAB20933FAD60B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:b3:0d:46:e7:c1:65:5c:da:4c:77:b5:dd: 67:ba:c2:aa:87:c7:d9:3e:b2:6d:9f:b7:4d:04:47: 80:c7:f6:58:bd:4a:d9:e8:4d:a9:2e:0f:bb:a0:d9: 31:7f:db:2c:cd:f1:51:02:53:5b:2d:ec:59:4b:1f: 61:a0:ae:9d:79:bb:d4:f4:fb:f5:62:dc:f2:bb:a0: b3:29:fa:8f:b0:f8:04:d9:ac:6d:d8:25:75:cb:32: 89:d6:44:4c:ad:4d:3f:7f:3e:1e:4e:21:3e:bd:4e: 74:76:ad:e1:e4:c8:54:53:47:72:e3:bd:25:2e:b9: 7b:06:2d:c7:ce:5c:e5:2a:31:81:69:86:98:4c:40: 02:38:60:78:5d:53:88:5c:24:1a:3b:1d:2b:33:dd: 7f:4a:31:64:15:51:0d:a9:52:c4:a4:75:33:6b:f7: a9:ba:a8:ea:a2:7d:86:f1:58:c5:45:62:85:59:ad: 1d:90:9d:c2:16:14:63:21:19:81:0a:04:45:73:bd: f6:61:5d:40:81:15:6c:d9:88:3e:fe:8f:bb:9a:7d: 0c:d2:f6:ab:21:48:6e:bf:b9:df:de:71:d8:2a:6d: 11:48:e9:f3:90:55:7e:bd:44:be:1b:18:e8:b6:ab: 46:ce:3f:5e:dc:cd:15:a5:4c:42:a5:2f:a1:ef:ac: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CB:B2:C8:95:18:B2:50:A3:26:9C:3F:DA:B2:09:33:FA:D6:0B:82 X509v3 Authority Key Identifier: keyid:89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e3:c9:70:e0:8a:7f:0a:20:e2:e6:af:bd:ad:f5:fa:06:b2: 5c:7e:98:9e:f6:d0:df:1c:9c:38:c8:41:dd:c3:3e:b0:68:19: 3a:32:39:1d:42:72:eb:84:d4:5e:fb:6f:c8:b2:a4:fd:5b:b0: db:14:68:04:d4:f7:30:eb:00:3c:13:21:f9:de:29:6f:62:3a: c8:c5:ba:a8:5b:9f:9d:e8:a2:e4:7f:4c:0a:fb:7a:51:95:d7: af:77:e6:f6:09:27:f7:19:9a:df:ac:66:36:b9:b1:2a:d7:7d: 47:04:95:18:54:56:88:77:10:ff:55:77:72:19:34:ea:cb:09: 28:1d:f4:7f:53:f4:b7:b7:eb:9c:99:44:5b:36:16:9c:ef:22: 5b:6f:b2:0f:f2:63:93:e8:61:08:52:99:6d:38:8c:02:c6:ab: 14:4f:bf:e5:c2:74:d3:94:48:b7:c3:3c:0d:ff:76:07:44:8c: 6a:ce:ed:bf:e9:64:af:b5:6d:3e:f6:ef:de:f6:96:f5:be:74: 93:3b:28:eb:f6:0b:7d:21:71:43:38:ab:e9:c9:a7:5f:52:6b: e2:e8:31:93:b3:d4:88:e2:0f:4e:13:3c:48:86:22:ea:a6:a3: 10:3f:82:68:d3:f9:20:ea:f0:89:23:0c:b2:0c:00:b5:eb:d2: 0a:c9:b7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBKD0sQ/EX7fwFguq3rT/BRi3DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2 QkMyQUM4ODAeFw0yNjEwMjQxNDIyMTFaFw0yNjEwMjUxNzAxMTFaMDMxMTAvBgNV BAMTKDQ0Q0JCMkM4OTUxOEIyNTBBMzI2OUMzRkRBQjIwOTMzRkFENjBCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6sLMNRufBZVzaTHe13We6wqqH x9k+sm2ft00ER4DH9li9StnoTakuD7ug2TF/2yzN8VECU1st7FlLH2Ggrp15u9T0 +/Vi3PK7oLMp+o+w+ATZrG3YJXXLMonWREytTT9/Ph5OIT69TnR2reHkyFRTR3Lj vSUuuXsGLcfOXOUqMYFphphMQAI4YHhdU4hcJBo7HSsz3X9KMWQVUQ2pUsSkdTNr 96m6qOqifYbxWMVFYoVZrR2QncIWFGMhGYEKBEVzvfZhXUCBFWzZiD7+j7uafQzS 9qshSG6/ud/ecdgqbRFI6fOQVX69RL4bGOi2q0bOP17czRWlTEKlL6HvrE+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURMuyyJUYslCjJpw/2rIJM/rWC4IwHwYDVR0j BBgwFoAUiX0Gt4lkTBUOjdQqZET6mGvCrIgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhmMjkxNWQtMThjOS00ZTAzLWJiZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4 OTY0NEMxNTBFOERENDJBNjQ0NEZBOTg2QkMyQUM4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OTdEMDZCNzg5NjQ0QzE1MEU4REQ0MkE2NDQ0RkE5ODZCQzJB Qzg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvODk3RDA2Qjc4OTY0NEMxNTBFOERENDJBNjQ0NEZB OTg2QkMyQUM4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfjyXDgin8KIOLmr72t9foGslx+mJ720N8c nDjIQd3DPrBoGToyOR1CcuuE1F77b8iypP1bsNsUaATU9zDrADwTIfneKW9iOsjF uqhbn53oouR/TAr7elGV16935vYJJ/cZmt+sZja5sSrXfUcElRhUVoh3EP9Vd3IZ NOrLCSgd9H9T9Le365yZRFs2FpzvIltvsg/yY5PoYQhSmW04jALGqxRPv+XCdNOU SLfDPA3/dgdEjGrO7b/pZK+1bT727972lvW+dJM7KOv2C30hcUM4q+nJp19Sa+Lo MZOz1IjiD04TPEiGIuqmoxA/gmjT+SDq8IkjDLIMALXr0grJt4Q= -----END CERTIFICATE-----Generated at Sun Oct 25 01:44:31 2026 by rpki-client