$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: yzLiOTHzLlZ7m8hq10v6y98zuS+PQG6FuPRMkjt0R5g= Subject key identifier: EA:ED:93:D5:6B:5A:A8:C5:3D:E7:53:B6:03:9A:58:4D:37:FC:DE:CA Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 43D667FA57C07D75F01BB09932164AEE3F6A8D0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 056D Signing time: Sat 25 Apr 2026 12:11:01 +0000 Manifest this update: Sat 25 Apr 2026 12:06:01 +0000 Manifest next update: Tue 28 Apr 2026 23:30:01 +0000 Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: Pf0ONhthfsPXInuvTqJNg8gHQzNEqbW2IadA0wGv3Pw=) 2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) 3: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: 5wmNuyOqF6TbHJFWM8mt3dx9qipUOY5ZN4p3pUZscdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 23:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d6:67:fa:57:c0:7d:75:f0:1b:b0:99:32:16:4a:ee:3f:6a:8d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Apr 25 12:06:01 2026 GMT Not After : Apr 28 23:30:01 2026 GMT Subject: CN=EAED93D56B5AA8C53DE753B6039A584D37FCDECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:e3:fb:a9:a3:10:16:49:32:3c:a5:ae:b1: 7e:75:cf:a8:88:04:3c:9b:b3:6b:bf:a7:be:3c:06: ff:61:68:10:37:7f:e0:1a:fc:09:9b:ec:bb:60:c2: 99:06:c6:c6:3d:cf:2e:a5:d6:d0:7b:ee:38:2d:08: 4e:05:be:c9:88:d8:a6:f5:4d:e1:d4:9f:dc:f7:e0: d5:2e:31:f0:38:22:5e:ed:b7:af:c0:59:e9:f6:b2: fa:fe:23:d0:7a:15:12:bd:f5:e6:eb:52:08:ca:5b: 6e:71:33:9b:6f:4e:e1:25:c6:c4:56:7b:f9:9b:f6: f5:c7:6e:46:be:f1:41:7e:dd:f8:61:2a:f0:2f:50: 95:10:53:71:77:95:d1:44:0b:71:90:c9:8e:98:c5: 1f:20:f5:f8:e7:ea:fa:e3:38:49:68:6e:76:30:8b: 0c:27:34:d2:fe:a8:98:f5:61:6a:49:55:59:66:9b: 96:32:29:a1:c8:ec:59:d7:1e:ce:1c:01:46:a1:96: 83:ee:b9:23:00:ce:e4:48:12:6f:f8:93:ef:b9:43: 11:8b:0c:ee:b4:eb:a3:1f:9b:d2:4b:85:ef:32:18: 92:74:53:46:6e:50:49:da:f5:ce:92:a7:1d:5e:3d: f2:51:af:75:55:ed:1c:03:ad:2c:80:1a:cb:cd:20: 31:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:ED:93:D5:6B:5A:A8:C5:3D:E7:53:B6:03:9A:58:4D:37:FC:DE:CA X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4c:4a:cc:16:f3:cb:f9:61:ee:19:46:f4:26:67:f6:ed:55: a8:42:9c:10:04:36:f3:0b:17:2d:4b:83:f5:5c:5c:95:08:06: 32:d9:61:ce:e8:89:90:30:b4:65:79:bf:96:e3:e7:ca:69:57: 71:07:77:c5:c2:78:6e:fc:2a:6c:94:d2:25:d4:bb:65:57:09: f1:63:17:18:16:4d:3d:75:6b:e1:d6:1a:16:1c:71:f8:6e:71: aa:9f:d4:86:4d:23:b4:ce:d2:ca:b4:66:1f:4e:6f:fe:41:c9: f1:a6:7a:0e:77:e5:5a:c1:8b:a6:63:3c:3f:49:a1:35:98:1d: c9:00:a1:b2:a5:7d:24:04:b6:e5:eb:e4:12:a5:84:ac:b3:35: 0c:cb:ba:0a:9c:32:3b:96:dd:6b:27:8a:5c:66:36:79:4b:13: d7:c4:a7:64:d1:dd:f0:04:25:63:0e:28:7c:ce:e1:36:82:c3: f7:7c:d3:56:67:71:33:6c:52:ea:46:2e:bb:22:68:62:81:e9: 1f:2f:6f:e0:a4:32:2a:ec:80:ce:95:7a:13:5c:90:7a:08:a8: 59:47:07:2f:89:27:30:37:fe:ce:c5:b9:0e:10:db:4e:68:c0: a1:a7:d9:c6:fc:cf:1e:13:97:f3:2a:bd:f1:5e:9e:c7:16:fe: eb:f5:09:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9Zn+lfAfXXwG7CZMhZK7j9qjQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNjA0MjUxMjA2MDFaFw0yNjA0MjgyMzMwMDFaMDMxMTAvBgNV BAMTKEVBRUQ5M0Q1NkI1QUE4QzUzREU3NTNCNjAzOUE1ODREMzdGQ0RFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1eP7qaMQFkkyPKWusX51z6iI BDybs2u/p748Bv9haBA3f+Aa/Amb7LtgwpkGxsY9zy6l1tB77jgtCE4FvsmI2Kb1 TeHUn9z34NUuMfA4Il7tt6/AWen2svr+I9B6FRK99ebrUgjKW25xM5tvTuElxsRW e/mb9vXHbka+8UF+3fhhKvAvUJUQU3F3ldFEC3GQyY6YxR8g9fjn6vrjOElobnYw iwwnNNL+qJj1YWpJVVlmm5YyKaHI7FnXHs4cAUahloPuuSMAzuRIEm/4k++5QxGL DO6066Mfm9JLhe8yGJJ0U0ZuUEna9c6Spx1ePfJRr3VV7RwDrSyAGsvNIDHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6u2T1WtaqMU951O2A5pYTTf83sowHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxMSswW88v5Ye4ZRvQmZ/btVahCnBAENvML Fy1Lg/VcXJUIBjLZYc7oiZAwtGV5v5bj58ppV3EHd8XCeG78KmyU0iXUu2VXCfFj FxgWTT11a+HWGhYccfhucaqf1IZNI7TO0sq0Zh9Ob/5ByfGmeg535VrBi6ZjPD9J oTWYHckAobKlfSQEtuXr5BKlhKyzNQzLugqcMjuW3WsnilxmNnlLE9fEp2TR3fAE JWMOKHzO4TaCw/d801ZncTNsUupGLrsiaGKB6R8vb+CkMirsgM6VehNckHoIqFlH By+JJzA3/s7FuQ4Q205owKGn2cb8zx4Tl/MqvfFenscW/uv1CeY= -----END CERTIFICATE-----Generated at Mon Apr 27 19:48:55 2026 by rpki-client