$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: G2FCqRYxwSva/9qbdK9e7g1gr4yIYtfTz/8niiL7hBk= Subject key identifier: 0B:4B:50:9C:59:A8:A9:4B:00:3A:9A:5C:32:09:F8:9C:81:0D:2B:F5 Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 291C12B12BFC6120700B4F45309A0F73A8E7833E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 06:15:26 +0000 Manifest this update: Mon 02 Nov 2026 06:10:26 +0000 Manifest next update: Tue 03 Nov 2026 09:47:26 +0000 Files and hashes: 1: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: sStgimIvFhD6EsgFStNyYBO+b7O/bkxj+kEvih441hM=) 2: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 3: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 4: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) 5: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1c:12:b1:2b:fc:61:20:70:0b:4f:45:30:9a:0f:73:a8:e7:83:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Nov 2 06:10:26 2026 GMT Not After : Nov 3 09:47:26 2026 GMT Subject: CN=0B4B509C59A8A94B003A9A5C3209F89C810D2BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:34:60:a5:b5:42:47:3a:2d:6e:f7:36:51: 2b:62:4c:8a:b5:33:b5:a8:e3:02:db:62:be:11:ad: 34:34:0d:44:48:c7:a7:be:1e:de:58:02:e4:75:44: 2b:87:48:44:e9:45:b3:a8:fd:12:7a:b8:c3:e8:86: a8:9c:33:38:1c:5f:0f:76:83:f5:ac:f7:2f:7c:dc: ef:f2:4e:08:a8:c1:15:bd:a2:53:6a:08:78:45:b4: 06:92:93:41:94:44:d1:a0:ad:d4:5b:78:9f:cf:22: 24:f1:10:97:5e:74:1d:50:0d:67:5d:33:bc:07:08: bd:78:75:d8:39:11:f0:63:9d:3e:e3:42:95:aa:96: 8e:a9:75:12:5c:6d:f5:2c:8b:a9:23:43:a5:0b:00: 64:88:de:88:95:fa:b4:bd:e6:77:45:39:67:fb:37: 21:3d:a9:c2:60:56:e2:b0:cf:ed:ac:c0:ba:7f:a4: ab:1e:76:ca:4b:1b:27:10:db:c0:52:6c:1f:ea:34: d8:6f:9c:ad:4a:21:34:68:31:13:a2:5d:d5:54:a4: 75:0a:a4:c7:97:c4:28:ef:18:93:ed:79:95:c3:22: fd:cf:87:e7:9f:e1:f7:02:61:52:4c:a0:9b:a9:31: 0f:69:e4:47:3a:ee:ba:b4:3a:b7:9e:78:f5:e6:b2: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4B:50:9C:59:A8:A9:4B:00:3A:9A:5C:32:09:F8:9C:81:0D:2B:F5 X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:57:99:ce:5a:96:7e:85:d6:82:a6:b1:15:6c:fe:ff:6f:c7: e9:26:48:2d:8f:fd:ab:3a:0a:7f:f2:6b:22:f8:4f:71:97:f2: f2:8e:57:33:34:f8:39:fc:65:cf:ea:70:40:11:db:87:1e:60: e5:60:9c:13:ed:32:fa:07:08:48:e7:99:2e:01:12:68:78:39: d8:ad:f6:af:50:48:d9:c8:e5:c9:97:8e:2f:86:30:b6:fe:e9: d4:f1:47:5c:60:54:e7:e9:85:31:e2:e9:ba:d4:7b:5d:23:d3: 1f:50:ec:5a:f4:bf:50:3c:ee:3b:9e:16:51:84:8d:de:78:3f: f9:a2:bf:08:be:e3:b7:20:f7:ff:0e:d4:a2:92:fe:0a:d8:30: f9:4d:fc:27:4b:46:60:ab:4c:38:38:a4:7d:4b:05:06:3c:c8: 44:0c:de:d7:33:35:3a:5a:61:cb:69:9e:7b:84:71:66:8f:cc: c8:87:11:7c:2f:c1:f5:d3:a2:90:a1:6e:4a:22:16:8c:94:bc: cb:1b:7d:87:b9:b2:e2:fc:96:be:84:16:64:07:c6:10:7c:3b: 89:6f:cb:e8:c1:af:66:16:f7:73:a8:6b:71:b4:5c:aa:fb:fe: 22:36:7b:a3:07:08:a2:eb:88:03:a9:1f:b4:b6:e2:f3:f3:8c: 87:72:88:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRwSsSv8YSBwC09FMJoPc6jngz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjExMDIwNjEwMjZaFw0yNjExMDMwOTQ3MjZaMDMxMTAvBgNV BAMTKDBCNEI1MDlDNTlBOEE5NEIwMDNBOUE1QzMyMDlGODlDODEwRDJCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5jRgpbVCRzotbvc2UStiTIq1 M7Wo4wLbYr4RrTQ0DURIx6e+Ht5YAuR1RCuHSETpRbOo/RJ6uMPohqicMzgcXw92 g/Ws9y983O/yTgiowRW9olNqCHhFtAaSk0GURNGgrdRbeJ/PIiTxEJdedB1QDWdd M7wHCL14ddg5EfBjnT7jQpWqlo6pdRJcbfUsi6kjQ6ULAGSI3oiV+rS95ndFOWf7 NyE9qcJgVuKwz+2swLp/pKsedspLGycQ28BSbB/qNNhvnK1KITRoMROiXdVUpHUK pMeXxCjvGJPteZXDIv3Ph+ef4fcCYVJMoJupMQ9p5Ec67rq0OreeePXmsuELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC0tQnFmoqUsAOppcMgn4nIENK/UwHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtXmc5aln6F1oKmsRVs/v9vx+kmSC2P/as6 Cn/yayL4T3GX8vKOVzM0+Dn8Zc/qcEAR24ceYOVgnBPtMvoHCEjnmS4BEmh4Odit 9q9QSNnI5cmXji+GMLb+6dTxR1xgVOfphTHi6brUe10j0x9Q7Fr0v1A87jueFlGE jd54P/mivwi+47cg9/8O1KKS/grYMPlN/CdLRmCrTDg4pH1LBQY8yEQM3tczNTpa YctpnnuEcWaPzMiHEXwvwfXTopChbkoiFoyUvMsbfYe5suL8lr6EFmQHxhB8O4lv y+jBr2YW93Ooa3G0XKr7/iI2e6MHCKLriAOpH7S24vPzjIdyiBU= -----END CERTIFICATE-----Generated at Mon Nov 2 22:32:19 2026 by rpki-client