$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft File: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft (raw, json) Hash identifier: t9VUGFJG3MV/kEw8DedIqSyfhetzyJ8lNtPtIRe46b0= Subject key identifier: C9:CB:4C:19:C5:DF:59:19:15:83:70:85:C9:D7:D1:5A:7F:73:80:BB Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 35D09D95E7D86B5790FE2C06DBE6FB7963C783ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 20:34:27 +0000 Manifest this update: Wed 16 Sep 2026 20:29:27 +0000 Manifest next update: Fri 18 Sep 2026 00:00:27 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw=) 2: 889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl (hash: ts/JBfxNWPLa3Opg54YhZPY1FtQLiUpnuf/AtSdSoi4=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: L2W5rnLzb0ayOTJLCbvv5xJbFsJZYaXlC2C/bL2KNmw=) 4: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: ldSnrrmteNryHWcf9UUZou80Ix7aIJzaiTf7mkq3mc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d0:9d:95:e7:d8:6b:57:90:fe:2c:06:db:e6:fb:79:63:c7:83:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: Sep 16 20:29:27 2026 GMT Not After : Sep 18 00:00:27 2026 GMT Subject: CN=C9CB4C19C5DF591915837085C9D7D15A7F7380BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:7a:29:07:38:3f:47:d7:18:49:35:ec:7a: 08:22:f7:c7:2f:90:b7:d4:32:77:49:b0:7e:cb:00: b6:86:73:ce:a4:ef:50:c4:65:69:3f:e5:94:35:6f: 4f:2d:7f:c4:cd:84:bd:e6:cb:38:25:b7:69:5c:44: b1:3d:c3:84:37:d2:5e:8d:0d:91:4d:5b:88:89:67: d0:86:71:fb:90:3c:88:a7:80:18:aa:2f:56:d6:d6: b8:c3:27:96:ec:fd:32:03:66:e1:b8:4c:f5:36:c5: 7a:6e:bb:9d:fc:77:5a:a5:d2:ad:56:9a:a7:4b:06: 94:2e:11:80:fc:ac:e8:75:01:5e:e6:06:e9:de:2f: 2a:60:5c:d6:41:d2:a3:e0:94:18:2d:cd:b6:12:8c: fa:46:74:61:21:ab:bd:62:c1:09:6c:65:92:a0:0d: cd:6f:61:6e:b9:8e:1f:04:a8:bf:68:a4:3d:cf:fb: 1a:90:41:fb:89:94:dd:67:af:01:31:4e:b1:d7:16: c3:3a:8f:41:6f:f0:d1:be:43:92:e5:d1:63:4f:ca: 70:4c:eb:c6:8c:ba:f3:d9:5b:ca:82:b3:23:73:11: b2:96:74:b4:a2:28:dd:37:b8:73:c3:69:59:90:26: 20:36:36:2a:2a:72:2b:18:58:9e:38:42:58:f5:b4: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CB:4C:19:C5:DF:59:19:15:83:70:85:C9:D7:D1:5A:7F:73:80:BB X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:32:a4:9f:46:52:31:68:0f:2b:56:32:99:be:2c:1f:2c:09: fc:7f:8d:f5:76:68:16:2d:76:af:73:69:bb:a3:94:7f:d9:df: 41:85:df:d6:d0:3c:92:a0:d2:95:1d:35:e9:01:cf:f5:54:6e: 6d:59:49:23:b3:4b:f3:e3:58:ce:18:80:02:c6:1b:2a:26:40: 9d:c4:eb:c6:af:07:7b:38:93:d4:57:04:45:8c:14:bd:a0:e9: bf:dc:00:82:9d:61:e7:d7:54:06:54:ae:1d:fd:45:c7:24:47: 18:a4:a7:0c:87:bc:b5:c7:90:c5:54:d6:0c:4f:41:99:cd:a6: 77:a4:4f:be:82:af:8c:ad:9e:ac:bf:0f:60:ea:19:3b:af:3b: 62:4d:53:15:1f:5a:b5:b9:80:3e:e3:21:f0:45:1d:b2:20:ca: 98:fd:70:4a:2b:2b:3c:f5:56:12:50:39:6d:52:ea:b1:dc:be: 87:9d:a6:f1:9d:a2:e7:04:ab:d2:da:ed:4c:bb:89:3c:f6:dc: 36:f0:06:6f:9b:31:c3:6a:21:a0:e0:4c:15:ea:f7:43:08:9e: 86:b5:2d:a1:3f:3f:a2:ca:eb:56:23:4f:dc:a5:e2:f7:9f:45: f1:74:5b:37:86:fc:bc:2f:ea:ba:92:c0:92:40:db:ec:dc:84: 8e:64:1a:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdCdlefYa1eQ/iwG2+b7eWPHg+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjA5MTYyMDI5MjdaFw0yNjA5MTgwMDAwMjdaMDMxMTAvBgNV BAMTKEM5Q0I0QzE5QzVERjU5MTkxNTgzNzA4NUM5RDdEMTVBN0Y3MzgwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0XopBzg/R9cYSTXseggi98cv kLfUMndJsH7LALaGc86k71DEZWk/5ZQ1b08tf8TNhL3myzglt2lcRLE9w4Q30l6N DZFNW4iJZ9CGcfuQPIingBiqL1bW1rjDJ5bs/TIDZuG4TPU2xXpuu538d1ql0q1W mqdLBpQuEYD8rOh1AV7mBuneLypgXNZB0qPglBgtzbYSjPpGdGEhq71iwQlsZZKg Dc1vYW65jh8EqL9opD3P+xqQQfuJlN1nrwExTrHXFsM6j0Fv8NG+Q5Ll0WNPynBM 68aMuvPZW8qCsyNzEbKWdLSiKN03uHPDaVmQJiA2NioqcisYWJ44Qlj1tG81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyctMGcXfWRkVg3CFydfRWn9zgLswHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5 QTZGM0ZDMTdDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwypJ9GUjFoDytWMpm+LB8sCfx/jfV2aBYt dq9zabujlH/Z30GF39bQPJKg0pUdNekBz/VUbm1ZSSOzS/PjWM4YgALGGyomQJ3E 68avB3s4k9RXBEWMFL2g6b/cAIKdYefXVAZUrh39RcckRxikpwyHvLXHkMVU1gxP QZnNpnekT76Cr4ytnqy/D2DqGTuvO2JNUxUfWrW5gD7jIfBFHbIgypj9cEorKzz1 VhJQOW1S6rHcvoedpvGdoucEq9La7Uy7iTz23DbwBm+bMcNqIaDgTBXq90MInoa1 LaE/P6LK61YjT9yl4vefRfF0WzeG/Lwv6rqSwJJA2+zchI5kGs0= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:46 2026 by rpki-client