$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft (raw, json) Hash identifier: mXjD9NmYamA7KpoC83D/9ysarP1vxLwueQeNeAPAA5Q= Subject key identifier: 5B:DE:85:7A:CB:44:F0:19:25:A3:20:9A:23:F1:1E:BA:11:F9:C6:0A Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 7395CEE0EA0F7C12630C36F0BD93A1076C8028A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 10:04:23 +0000 Manifest this update: Thu 18 Jun 2026 09:59:23 +0000 Manifest next update: Fri 19 Jun 2026 10:44:23 +0000 Files and hashes: 1: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl (hash: WurjAAsDymNpqllA7LaQjnjBtvDM1+/0mdTSQhxl9Jg=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: ldSnrrmteNryHWcf9UUZou80Ix7aIJzaiTf7mkq3mc4=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: L2W5rnLzb0ayOTJLCbvv5xJbFsJZYaXlC2C/bL2KNmw=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:95:ce:e0:ea:0f:7c:12:63:0c:36:f0:bd:93:a1:07:6c:80:28:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: Jun 18 09:59:23 2026 GMT Not After : Jun 19 10:44:23 2026 GMT Subject: CN=5BDE857ACB44F01925A3209A23F11EBA11F9C60A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:63:b9:72:c7:6e:e3:c9:27:e5:d8:84:fb: 99:1f:93:dd:5c:04:8d:14:5a:a1:18:0e:26:32:cd: 23:5a:53:03:f5:7e:99:db:c6:fc:0b:76:59:f0:1c: 63:57:b1:30:62:a7:16:d4:ac:04:37:2d:1f:41:48: f2:e9:d6:86:2f:04:72:81:11:db:b8:1f:97:e1:02: 27:dd:df:55:95:47:3d:23:9f:fa:44:b0:e6:3f:f9: 5f:d4:f8:e5:e4:54:5d:74:63:c9:b4:74:85:fa:54: d4:31:28:0e:dd:7c:b5:98:74:d0:df:60:3e:05:cc: 1e:a8:fe:fe:ef:f9:78:f3:e1:fe:e6:9f:b2:1f:3d: 1f:8a:87:a4:55:2d:64:6b:48:2f:14:47:76:64:e2: d8:61:89:07:74:a0:15:cc:3d:86:73:ac:2a:f3:a1: 4e:da:ed:8b:9f:c2:72:23:09:e4:07:14:0f:69:a4: 42:40:98:6a:41:49:9e:88:bc:b6:77:89:5b:c4:3c: 6c:54:27:d3:a6:31:e2:82:1b:db:e3:9c:a2:d2:9c: 3f:5e:24:d5:e5:cc:be:0c:02:c0:0a:05:22:7a:2e: c3:fa:f1:72:66:66:b3:7c:a6:a0:f1:17:86:5b:d0: b1:e2:c3:1c:e3:98:ce:67:f3:30:cd:bf:61:d7:61: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DE:85:7A:CB:44:F0:19:25:A3:20:9A:23:F1:1E:BA:11:F9:C6:0A X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:20:ba:99:c5:21:39:f0:28:6c:18:68:ee:0d:fc:7b:c9:67: 50:a6:d1:fa:0d:fb:08:44:5e:91:73:d4:2e:f2:39:f0:4a:a5: 50:1b:9e:83:71:5f:3e:5e:93:68:f2:da:ab:62:17:9b:b0:33: 82:f2:6b:97:43:53:04:2b:25:52:2a:fc:df:6c:2c:19:73:58: bc:91:03:5c:e0:a3:89:df:9c:d6:1f:39:ca:5e:61:c6:b5:c4: 8b:de:55:c2:ce:a1:b1:56:98:e3:d4:c7:92:7c:f1:6b:df:be: 15:6e:80:bd:e2:4a:8a:82:c0:a4:14:ec:71:ec:68:3d:60:ee: bd:bd:f3:50:25:72:4e:49:22:55:fe:30:e1:ee:02:f4:0d:8a: fe:be:66:9c:85:f6:ff:fe:c0:8e:e8:e1:fe:dd:78:1b:42:6c: 3e:c2:d6:25:5d:b5:4d:bf:26:be:81:bb:2a:c6:13:50:09:0c: f1:6e:b7:3f:e6:c8:bc:67:c1:55:7a:78:18:7c:58:21:9e:ff: 28:d7:02:09:1f:e9:f0:81:c5:2e:7b:77:2b:bb:9f:16:8a:07: 39:42:c0:82:fb:b6:06:30:26:5d:8d:1c:a0:5a:ac:a9:48:4c: f0:11:80:49:3c:2c:e6:5b:9a:7a:97:25:a0:7c:d6:63:6d:12: 97:29:db:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5XO4OoPfBJjDDbwvZOhB2yAKKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjA2MTgwOTU5MjNaFw0yNjA2MTkxMDQ0MjNaMDMxMTAvBgNV BAMTKDVCREU4NTdBQ0I0NEYwMTkyNUEzMjA5QTIzRjExRUJBMTFGOUM2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmWO5csdu48kn5diE+5kfk91c BI0UWqEYDiYyzSNaUwP1fpnbxvwLdlnwHGNXsTBipxbUrAQ3LR9BSPLp1oYvBHKB Edu4H5fhAifd31WVRz0jn/pEsOY/+V/U+OXkVF10Y8m0dIX6VNQxKA7dfLWYdNDf YD4FzB6o/v7v+Xjz4f7mn7IfPR+Kh6RVLWRrSC8UR3Zk4thhiQd0oBXMPYZzrCrz oU7a7YufwnIjCeQHFA9ppEJAmGpBSZ6IvLZ3iVvEPGxUJ9OmMeKCG9vjnKLSnD9e JNXlzL4MAsAKBSJ6LsP68XJmZrN8pqDxF4Zb0LHiwxzjmM5n8zDNv2HXYR57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW96FestE8BkloyCaI/EeuhH5xgowHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5 QTZGM0ZDMTdDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYgupnFITnwKGwYaO4N/HvJZ1Cm0foN+whE XpFz1C7yOfBKpVAbnoNxXz5ek2jy2qtiF5uwM4Lya5dDUwQrJVIq/N9sLBlzWLyR A1zgo4nfnNYfOcpeYca1xIveVcLOobFWmOPUx5J88WvfvhVugL3iSoqCwKQU7HHs aD1g7r2981Alck5JIlX+MOHuAvQNiv6+ZpyF9v/+wI7o4f7deBtCbD7C1iVdtU2/ Jr6BuyrGE1AJDPFutz/myLxnwVV6eBh8WCGe/yjXAgkf6fCBxS57dyu7nxaKBzlC wIL7tgYwJl2NHKBarKlITPARgEk8LOZbmnqXJaB81mNtEpcp2+g= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:55 2026 by rpki-client