
$ rpki-client -vvf repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
File: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft (raw, json)
Hash identifier: +XdnXC5mGSkno6DNm5HRF81aLB6WihYq1+QrxqbxrJo=
Subject key identifier: 6B:83:A1:5C:3C:36:6F:19:BB:53:A6:F0:6E:A5:80:DF:97:A0:C8:2B
Authority key identifier: 89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E
Certificate issuer: /CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E
Certificate serial: 6230147BE1F531F8C007C554B6724E06407E6A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
Manifest number: 0152
Signing time: Sat 07 Mar 2026 09:30:00 +0000
Manifest this update: Sat 07 Mar 2026 09:25:00 +0000
Manifest next update: Tue 10 Mar 2026 16:58:00 +0000
Files and hashes: 1: 3135372e31302e3135392e302f32342d3234203d3e20313532333535.roa (hash: s2utPuT9/Rrfn+3q49rkE18sSG/2dm9VSsVmVu4LpF4=)
2: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (hash: SUamCO6hFRRECd6YOsV3frJr4xTHA6yMIWiVBv2Urhg=)
3: 3135372e31302e3135382e302f32342d3234203d3e20313532333535.roa (hash: aAScp8IjqsY2CuVPSrU8aKaQppxc8AjfgFBueh9FUNg=)
4: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl (hash: OV5ctgfS2v1nlaVQ9Hz+zg46aVkPhSuiB8wQxehgFkI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl
rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:30:14:7b:e1:f5:31:f8:c0:07:c5:54:b6:72:4e:06:40:7e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E
Validity
Not Before: Mar 7 09:25:00 2026 GMT
Not After : Mar 10 16:58:00 2026 GMT
Subject: CN=6B83A15C3C366F19BB53A6F06EA580DF97A0C82B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:22:55:40:23:97:34:45:36:81:db:b4:df:ee:
91:92:2a:e4:24:de:56:61:f8:8a:ab:f7:74:74:28:
76:a8:d1:48:c5:37:19:80:2d:f2:14:c8:6a:ed:e3:
c0:64:92:99:d1:c8:6f:d4:bb:e2:94:d9:52:fc:f8:
7b:81:e9:65:9f:3e:35:81:33:78:0a:c4:6d:22:e4:
5e:04:73:e5:d0:62:76:95:84:4b:81:8a:ea:f8:df:
14:99:32:86:81:d7:1e:2c:1d:73:ee:9b:93:69:cf:
09:d1:f9:65:95:eb:1d:86:6b:93:70:e3:3a:32:07:
71:1b:bd:40:a4:7a:64:58:dd:0b:1b:21:f3:a5:f1:
38:77:12:2e:78:30:a2:2c:b6:be:b5:e1:2b:ca:20:
35:ae:ca:de:c4:f4:a6:52:d0:69:6a:83:02:85:38:
38:ec:e3:db:fe:2b:96:fe:ed:99:18:d5:eb:cd:46:
26:03:9b:ae:df:45:cb:d1:3e:a1:e0:6f:7a:31:ad:
19:3e:31:a6:a0:21:59:3f:72:26:74:c6:c0:20:ff:
70:3b:ef:6a:40:3b:70:5d:7d:76:e3:54:6e:a6:dd:
5e:cd:62:34:2f:2b:df:50:92:a6:84:58:4a:09:bb:
eb:d2:f3:0a:36:c9:92:7f:b7:31:f2:90:14:23:21:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:A1:5C:3C:36:6F:19:BB:53:A6:F0:6E:A5:80:DF:97:A0:C8:2B
X509v3 Authority Key Identifier:
keyid:89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8b:75:6f:f2:53:d6:11:d8:5e:90:e4:27:e5:0e:47:16:fb:
95:57:d2:25:47:89:1c:17:91:c5:50:75:5f:9a:35:20:64:86:
f6:9d:d4:0b:05:43:05:67:df:be:29:54:b5:e6:ad:89:73:c4:
5d:f5:75:6b:cb:b9:b8:d7:56:fb:45:68:90:8b:0a:69:8e:c5:
dc:6e:d6:35:69:89:9c:90:8b:ea:34:d9:39:1c:57:dd:5a:89:
f1:31:b8:fb:0e:c1:b9:84:72:bd:4b:ee:9f:81:b5:f1:21:35:
19:21:49:d3:d9:82:be:fd:f2:3e:89:9e:88:22:82:46:13:e5:
3b:c2:40:ad:e1:8d:92:e6:74:95:8f:04:dd:93:46:59:72:f4:
7c:7d:5b:b1:21:4d:ef:4a:ac:49:f3:76:9e:f5:8b:ae:b5:d3:
64:04:c9:06:0d:29:95:2a:e7:f1:82:45:b6:32:5c:08:eb:c8:
81:99:03:99:35:e0:e4:3b:2a:c8:9d:b7:fb:70:9a:d6:1f:c5:
0d:f9:61:61:22:30:74:75:35:9e:22:30:14:51:f6:05:39:c7:
10:62:ba:bb:b9:e2:b4:29:be:56:ba:4d:d4:89:b6:8e:fa:b2:
a3:d3:59:71:dd:09:83:1a:16:de:b1:c5:be:02:10:4e:6e:5e:
5f:d1:28:b4
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITYjAUe+H1MfjAB8VUtnJOBkB+ajANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg4OURDRDlFOUVCNTQyRDIwMkJBMzZDQjQ0Q0U3NUFENzQz
RUY1NDRFMB4XDTI2MDMwNzA5MjUwMFoXDTI2MDMxMDE2NTgwMFowMzExMC8GA1UE
AxMoNkI4M0ExNUMzQzM2NkYxOUJCNTNBNkYwNkVBNTgwREY5N0EwQzgyQjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOIiVUAjlzRFNoHbtN/ukZIq5CTe
VmH4iqv3dHQodqjRSMU3GYAt8hTIau3jwGSSmdHIb9S74pTZUvz4e4HpZZ8+NYEz
eArEbSLkXgRz5dBidpWES4GK6vjfFJkyhoHXHiwdc+6bk2nPCdH5ZZXrHYZrk3Dj
OjIHcRu9QKR6ZFjdCxsh86XxOHcSLngwoiy2vrXhK8ogNa7K3sT0plLQaWqDAoU4
OOzj2/4rlv7tmRjV681GJgObrt9Fy9E+oeBvejGtGT4xpqAhWT9yJnTGwCD/cDvv
akA7cF19duNUbqbdXs1iNC8r31CSpoRYSgm769LzCjbJkn+3MfKQFCMhsOsCAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBRrg6FcPDZvGbtTpvBupYDfl6DIKzAfBgNVHSME
GDAWgBSJ3Nnp61QtICujbLRM51rXQ+9UTjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0
MjU4ZTVjLTA0NTYtNDZhMy05NjMyLTcwOWM3NjcxMDRiYi8wLzg5RENEOUU5RUI1
NDJEMjAyQkEzNkNCNDRDRTc1QUQ3NDNFRjU0NEUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMS84OURDRDlFOUVCNTQyRDIwMkJBMzZDQjQ0Q0U3NUFENzQzRUY1
NDRFLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov
L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8xNDI1OGU1Yy0wNDU2LTQ2YTMtOTYz
Mi03MDljNzY3MTA0YmIvMC84OURDRDlFOUVCNTQyRDIwMkJBMzZDQjQ0Q0U3NUFE
NzQzRUY1NDRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAH4t1b/JT1hHYXpDkJ+UORxb7lVfSJUeJHBeR
xVB1X5o1IGSG9p3UCwVDBWffvilUteatiXPEXfV1a8u5uNdW+0VokIsKaY7F3G7W
NWmJnJCL6jTZORxX3VqJ8TG4+w7BuYRyvUvun4G18SE1GSFJ09mCvv3yPomeiCKC
RhPlO8JAreGNkuZ0lY8E3ZNGWXL0fH1bsSFN70qsSfN2nvWLrrXTZATJBg0plSrn
8YJFtjJcCOvIgZkDmTXg5DsqyJ23+3Ca1h/FDflhYSIwdHU1niIwFFH2BTnHEGK6
u7nitCm+VrpN1Im2jvqyo9NZcd0JgxoW3rHFvgIQTm5eX9EotA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:56:57 2026 by rpki-client