$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: SiqzP/iaPK33DS1GMnsKvDuSe0L41Tm1+XmH2ECJfSU= Subject key identifier: D9:93:83:C6:E0:E1:A5:13:C0:E2:37:C7:FC:26:04:D9:A2:7D:C4:9A Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 7F53B0B3F8FEBD999A277762B4DB3DD98AD7826B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 01E1 Signing time: Tue 17 Mar 2026 12:21:38 +0000 Manifest this update: Tue 17 Mar 2026 12:16:38 +0000 Manifest next update: Fri 20 Mar 2026 17:29:38 +0000 Files and hashes: 1: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: +EphKtwYihMDpTDIbq4/2/5qoN6L3byVHU5VdiKY5rc=) 2: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: sNTsns3ST7lmT3Lzq1+VabwjCefZeBfZWQ1CC+0VBzY=) 3: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: T/urQJ+82QgaKD9FjVWVBWC5pqw/fxNdqK4bVUSVM74=) 4: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: rH6v5NksQAZ7i1x7vYF4pP0Dlbp5vcZTM15lBp2e+jM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 17:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:53:b0:b3:f8:fe:bd:99:9a:27:77:62:b4:db:3d:d9:8a:d7:82:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Mar 17 12:16:38 2026 GMT Not After : Mar 20 17:29:38 2026 GMT Subject: CN=D99383C6E0E1A513C0E237C7FC2604D9A27DC49A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:d1:e8:3f:1d:0a:80:ac:97:bf:9f:79:71: 0e:d9:4c:7c:56:f9:21:11:cd:5f:04:06:37:33:55: 2d:b5:18:2a:48:6e:60:2d:3d:6d:8c:89:c8:4a:41: 9a:a9:fd:6d:46:a2:46:d7:87:23:2d:d6:ea:6b:9f: 34:cf:e0:4d:b8:a7:1f:7b:1d:fc:71:b6:83:c9:66: 37:09:43:15:c9:de:7a:db:9b:ae:c2:3a:04:45:0e: 1a:1c:aa:cd:5f:ba:f3:86:8d:13:42:07:70:11:b2: a7:9b:18:5e:64:cd:54:e1:d6:71:80:b1:36:24:dc: 51:5f:1a:72:64:52:68:db:d2:af:a3:f0:1a:94:69: 2d:af:ef:bb:95:03:7e:61:c5:12:09:56:77:ea:de: 9c:46:22:f2:b1:11:48:4d:7a:28:63:30:f2:c9:6a: 59:95:40:eb:cf:e1:25:bb:72:cb:da:f6:fc:65:a8: c4:1d:3e:60:8f:ff:9b:20:3e:01:7b:ba:fa:2b:59: ce:cc:10:fb:a7:27:7e:58:2e:1e:f2:61:0a:5a:55: 1d:5e:9d:b2:10:4a:58:e6:2b:f7:a9:65:c4:3c:3e: 8e:05:31:34:e2:b3:a1:56:01:8e:33:e2:82:a8:2f: a6:c3:70:63:08:e2:8c:8c:05:fb:63:0a:cf:f1:f2: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:83:C6:E0:E1:A5:13:C0:E2:37:C7:FC:26:04:D9:A2:7D:C4:9A X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:27:9d:5f:01:e5:c6:a0:7d:bd:58:02:61:13:50:92:b5:05: 7e:77:14:14:19:8d:6d:f3:14:f1:82:ae:fd:de:fa:e4:28:81: 75:b6:b4:c0:7d:17:c2:8d:e4:61:75:d7:de:f4:cc:fd:65:47: 44:4c:bc:d7:9f:d5:14:07:ce:58:f9:6e:c5:30:95:b5:10:28: 5c:3c:34:9f:3c:65:1e:26:11:77:64:6f:59:e4:18:8a:40:25: 0e:20:8c:ce:c7:d3:46:4e:29:81:34:3f:d7:a0:00:d1:db:a6: 99:2d:26:3e:c7:0d:53:2a:56:ef:de:78:c0:c7:b6:6f:e6:13: 89:94:4c:fc:d8:59:cc:5a:12:62:b6:fb:f4:1f:f1:9b:77:59: 7a:32:90:ad:86:3b:bd:c2:4d:c9:25:eb:9a:1b:ae:ea:9a:44: a9:a5:cc:2e:2e:0e:be:54:39:ef:79:93:64:cb:7a:9d:2a:39: 8b:a5:01:29:0b:17:2a:a5:58:cc:03:08:18:dd:14:8c:d9:e0: 31:a3:58:30:60:ef:e8:e8:fb:95:f9:e1:3a:54:fb:2c:71:5d: a0:67:d9:96:a3:09:76:d0:3d:a3:50:3d:b2:45:40:5e:df:14: 2c:62:56:61:19:b4:a9:d9:9c:d8:66:af:22:21:f7:63:25:29: a4:6f:95:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf1Ows/j+vZmaJ3ditNs92YrXgmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNjAzMTcxMjE2MzhaFw0yNjAzMjAxNzI5MzhaMDMxMTAvBgNV BAMTKEQ5OTM4M0M2RTBFMUE1MTNDMEUyMzdDN0ZDMjYwNEQ5QTI3REM0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvNHoPx0KgKyXv595cQ7ZTHxW +SERzV8EBjczVS21GCpIbmAtPW2MichKQZqp/W1GokbXhyMt1uprnzTP4E24px97 HfxxtoPJZjcJQxXJ3nrbm67COgRFDhocqs1fuvOGjRNCB3ARsqebGF5kzVTh1nGA sTYk3FFfGnJkUmjb0q+j8BqUaS2v77uVA35hxRIJVnfq3pxGIvKxEUhNeihjMPLJ almVQOvP4SW7csva9vxlqMQdPmCP/5sgPgF7uvorWc7MEPunJ35YLh7yYQpaVR1e nbIQSljmK/epZcQ8Po4FMTTis6FWAY4z4oKoL6bDcGMI4oyMBftjCs/x8ssnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZODxuDhpRPA4jfH/CYE2aJ9xJowHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEnnV8B5cagfb1YAmETUJK1BX53FBQZjW3z FPGCrv3e+uQogXW2tMB9F8KN5GF11970zP1lR0RMvNef1RQHzlj5bsUwlbUQKFw8 NJ88ZR4mEXdkb1nkGIpAJQ4gjM7H00ZOKYE0P9egANHbppktJj7HDVMqVu/eeMDH tm/mE4mUTPzYWcxaEmK2+/Qf8Zt3WXoykK2GO73CTckl65obruqaRKmlzC4uDr5U Oe95k2TLep0qOYulASkLFyqlWMwDCBjdFIzZ4DGjWDBg7+jo+5X54TpU+yxxXaBn 2ZajCXbQPaNQPbJFQF7fFCxiVmEZtKnZnNhmryIh92MlKaRvlcI= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:27 2026 by rpki-client