$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft (raw, json) Hash identifier: O2q+NMbnS3FKoarM9wzPmzMmBzCf83Lm6Zhl4R2LvgI= Subject key identifier: 63:81:99:97:3E:7B:9F:1D:C0:43:63:CC:20:0A:35:DC:32:98:B3:6D Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 5A3DFBAD38F96170645CCFF0E92B81471D297D3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 12:12:31 +0000 Manifest this update: Sun 02 Aug 2026 12:07:31 +0000 Manifest next update: Mon 03 Aug 2026 13:02:31 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw=) 2: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl (hash: 6njG7b2s1fEQCDoKrQM7Facxu8cjqufR/EwkMv93ays=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: ldSnrrmteNryHWcf9UUZou80Ix7aIJzaiTf7mkq3mc4=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: L2W5rnLzb0ayOTJLCbvv5xJbFsJZYaXlC2C/bL2KNmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 13:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3d:fb:ad:38:f9:61:70:64:5c:cf:f0:e9:2b:81:47:1d:29:7d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: Aug 2 12:07:31 2026 GMT Not After : Aug 3 13:02:31 2026 GMT Subject: CN=638199973E7B9F1DC04363CC200A35DC3298B36D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:2c:92:95:73:b2:5b:46:06:08:0e:a6:31: b0:ca:88:b9:37:e6:79:55:17:c1:51:a2:01:56:1f: e8:cb:0e:62:c7:5e:6f:8a:2b:d3:36:1e:a7:3e:e6: 72:fa:30:cc:d8:9f:83:61:0c:a7:3a:05:39:c8:b5: 4a:63:fc:81:1b:43:d0:94:61:7d:26:96:26:aa:4e: 2f:6f:6c:f9:88:e3:65:47:cc:f7:28:3a:4f:bb:01: 1b:90:f5:f6:08:71:4a:fb:62:b6:0b:36:45:a8:45: 4a:f5:39:c8:2f:25:f0:66:96:df:cc:cd:28:f8:38: 58:7b:d7:16:b6:b6:ef:7f:f6:01:de:36:2b:ac:e4: 9a:12:dd:83:c2:42:ea:b4:85:99:45:e9:a1:c1:1f: 91:e8:41:f4:50:77:84:1b:0e:1a:5d:ef:d8:40:ca: ce:3a:e7:79:37:5d:c3:bd:0b:0e:5b:f9:7d:b6:35: d4:3a:27:e6:22:9f:74:e6:d7:55:3b:96:ae:c7:6f: 83:03:7a:e7:e9:1c:9c:44:2f:69:45:c1:51:9c:2b: a9:b4:c7:14:40:46:de:ee:92:c9:8a:44:cd:aa:01: 19:1e:6a:67:1f:4d:99:45:10:83:67:b8:7a:8c:99: 37:2a:42:73:88:d9:ed:ed:01:ec:93:7b:c2:6c:66: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:81:99:97:3E:7B:9F:1D:C0:43:63:CC:20:0A:35:DC:32:98:B3:6D X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ac:29:b0:00:f0:1a:fe:da:c9:ff:d7:5b:ce:5f:45:d5:09: 55:04:45:a2:c6:9e:8b:89:0d:37:bb:c0:ab:b1:c6:b6:42:52: 0d:f8:ae:a2:f8:72:87:44:bf:36:73:11:c4:ef:30:ef:5b:5a: 45:09:8b:f6:25:36:7b:b8:23:63:7c:25:27:f1:8c:f8:90:e1: 43:b4:ea:46:d7:99:c5:7a:12:25:15:ac:87:1a:6b:bf:ae:c6: 64:1a:ec:e9:6e:cd:94:c5:eb:0d:f4:20:78:f2:17:a2:40:8c: b2:69:3e:e3:c8:bb:d0:bc:e3:a0:29:5e:51:c4:e7:60:d1:8d: 4d:2b:38:c9:ee:35:1e:6d:ee:6a:32:08:d5:f7:a2:92:3b:4e: 93:40:8e:ea:d7:e4:45:e6:5d:14:ed:11:2f:5e:ce:da:11:c4: 5e:e3:b7:74:93:14:28:d6:db:d0:18:36:ca:8c:a4:f0:b8:44: 2c:d3:00:0f:4d:5d:76:82:e4:82:b9:d6:36:2e:21:16:ac:3e: 07:1d:ae:d4:72:06:f4:15:27:2c:2d:11:86:c3:90:78:63:94: 6b:90:53:79:49:63:ca:ee:7d:2b:23:fa:62:63:6c:e9:a3:e0: 8c:93:41:4a:2c:16:70:89:64:df:f7:ed:2f:dc:89:7b:3c:7d: 97:27:0f:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWj37rTj5YXBkXM/w6SuBRx0pfTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjA4MDIxMjA3MzFaFw0yNjA4MDMxMzAyMzFaMDMxMTAvBgNV BAMTKDYzODE5OTk3M0U3QjlGMURDMDQzNjNDQzIwMEEzNURDMzI5OEIzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTyySlXOyW0YGCA6mMbDKiLk3 5nlVF8FRogFWH+jLDmLHXm+KK9M2Hqc+5nL6MMzYn4NhDKc6BTnItUpj/IEbQ9CU YX0mliaqTi9vbPmI42VHzPcoOk+7ARuQ9fYIcUr7YrYLNkWoRUr1OcgvJfBmlt/M zSj4OFh71xa2tu9/9gHeNius5JoS3YPCQuq0hZlF6aHBH5HoQfRQd4QbDhpd79hA ys4653k3XcO9Cw5b+X22NdQ6J+Yin3Tm11U7lq7Hb4MDeufpHJxEL2lFwVGcK6m0 xxRARt7uksmKRM2qARkeamcfTZlFEINnuHqMmTcqQnOI2e3tAeyTe8JsZiRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4GZlz57nx3AQ2PMIAo13DKYs20wHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5 QTZGM0ZDMTdDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCsKbAA8Br+2sn/11vOX0XVCVUERaLGnouJ DTe7wKuxxrZCUg34rqL4codEvzZzEcTvMO9bWkUJi/YlNnu4I2N8JSfxjPiQ4UO0 6kbXmcV6EiUVrIcaa7+uxmQa7OluzZTF6w30IHjyF6JAjLJpPuPIu9C846ApXlHE 52DRjU0rOMnuNR5t7moyCNX3opI7TpNAjurX5EXmXRTtES9eztoRxF7jt3STFCjW 29AYNsqMpPC4RCzTAA9NXXaC5IK51jYuIRasPgcdrtRyBvQVJywtEYbDkHhjlGuQ U3lJY8rufSsj+mJjbOmj4IyTQUosFnCJZN/37S/ciXs8fZcnD6c= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:56 2026 by rpki-client