$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: 4PVNJKMqa7Xb+d2/BWFyMtrvyabuUKR5C9bjrQ5OAGw= Subject key identifier: 06:83:08:E3:5F:02:91:66:08:CC:24:9E:C0:67:4B:30:C7:73:3C:47 Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 3AAC3CA9AF7ACF5FE30A028C3E1A11DC7AE41298 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 23:38:12 +0000 Manifest this update: Wed 16 Sep 2026 23:33:12 +0000 Manifest next update: Fri 18 Sep 2026 02:17:12 +0000 Files and hashes: 1: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 2: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: wSGkiNTfVuOWi0TwGKtfNxAoqYplM3ohjqlWF6g4E2g=) 3: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) 4: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 5: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ac:3c:a9:af:7a:cf:5f:e3:0a:02:8c:3e:1a:11:dc:7a:e4:12:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Sep 16 23:33:12 2026 GMT Not After : Sep 18 02:17:12 2026 GMT Subject: CN=068308E35F02916608CC249EC0674B30C7733C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:71:11:b3:99:66:25:ef:5f:f0:be:03:9d:1b: a8:d0:c7:5a:31:ed:7f:7a:91:da:85:46:b3:ed:b5: 64:4d:33:03:9e:26:83:f2:05:73:1d:38:57:a0:3b: 0f:9e:28:1d:03:d0:8b:b7:1c:4c:d6:67:b5:e9:69: ec:8b:48:76:b1:93:0e:0e:ba:25:d2:09:82:9f:85: cf:d5:d9:f1:33:3f:e6:8c:e6:44:81:d6:a7:ce:28: ed:c7:dd:21:59:91:d9:24:92:37:1c:0e:bc:85:90: cd:8f:bd:1d:c5:57:f8:d8:86:cf:54:69:c6:2c:05: 31:5e:7c:83:9d:76:a1:f6:1c:bf:8d:98:7f:6a:63: 60:41:59:f2:8e:69:1c:08:44:35:ac:c2:12:32:5d: fa:b9:43:ea:81:10:ae:40:2d:11:d1:fc:b4:c5:fa: b3:15:f0:bd:d6:02:bc:f2:ef:c1:31:12:24:54:d5: 3b:26:ba:a4:e7:c3:1b:7c:41:bf:fd:ae:3c:b8:4d: a5:52:b3:2c:25:25:30:0f:2b:fa:8c:7c:ef:35:80: d1:bd:0d:53:cf:4b:03:32:81:b7:01:f5:bd:78:10: 2f:0b:be:84:c6:c9:1d:0a:a2:27:8b:29:77:37:0e: 9b:d0:31:7d:a1:5a:c3:fa:64:39:4c:66:54:e7:1b: b2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:83:08:E3:5F:02:91:66:08:CC:24:9E:C0:67:4B:30:C7:73:3C:47 X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:09:e3:2b:95:6a:b5:ec:10:63:e2:ac:9f:8b:4b:e0:d4:c9: 88:45:97:1c:a1:84:0e:35:ad:6f:f7:4a:df:6a:38:aa:e2:0a: e7:2a:0c:e3:17:12:33:8f:dd:f4:a9:27:a9:ef:7c:e8:d7:7f: cc:cc:59:9a:25:83:c0:60:1a:1c:44:d0:68:a5:0f:27:ed:a7: e8:1f:7c:c3:69:d6:0c:ba:c6:e4:a0:77:f0:5d:a9:b9:fb:5a: db:7f:86:ce:b1:f0:2c:bb:12:4d:98:80:94:08:1f:20:1d:90: 61:26:cb:53:83:a9:15:f2:28:2f:f6:5e:be:a2:4b:72:38:a0: 0e:48:93:47:52:df:64:92:8e:96:4b:d3:de:1b:e4:4b:87:e5: 40:d2:b9:58:49:47:bd:69:7e:b3:86:9c:88:9a:fe:fd:61:a9: 69:f0:ba:8e:32:ef:1e:75:e4:a5:53:db:cc:91:b7:6a:95:ad: aa:df:1f:e6:0a:4b:0d:fd:0c:36:80:33:d9:7d:47:12:bf:30: dd:a9:50:90:3f:5d:be:25:01:dd:5d:c8:c0:12:ab:00:00:05: 59:a5:dd:5d:54:e7:fb:60:17:5c:7e:e2:11:06:3b:c7:9a:08: 08:4e:44:d5:3f:64:d3:fc:1c:55:44:66:35:c9:a1:97:dc:8d: 79:47:33:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqw8qa96z1/jCgKMPhoR3HrkEpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjA5MTYyMzMzMTJaFw0yNjA5MTgwMjE3MTJaMDMxMTAvBgNV BAMTKDA2ODMwOEUzNUYwMjkxNjYwOENDMjQ5RUMwNjc0QjMwQzc3MzNDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccRGzmWYl71/wvgOdG6jQx1ox 7X96kdqFRrPttWRNMwOeJoPyBXMdOFegOw+eKB0D0Iu3HEzWZ7XpaeyLSHaxkw4O uiXSCYKfhc/V2fEzP+aM5kSB1qfOKO3H3SFZkdkkkjccDryFkM2PvR3FV/jYhs9U acYsBTFefIOddqH2HL+NmH9qY2BBWfKOaRwIRDWswhIyXfq5Q+qBEK5ALRHR/LTF +rMV8L3WArzy78ExEiRU1TsmuqTnwxt8Qb/9rjy4TaVSsywlJTAPK/qMfO81gNG9 DVPPSwMygbcB9b14EC8LvoTGyR0KoieLKXc3DpvQMX2hWsP6ZDlMZlTnG7JNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBoMI418CkWYIzCSewGdLMMdzPEcwHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAJ4yuVarXsEGPirJ+LS+DUyYhFlxyhhA41 rW/3St9qOKriCucqDOMXEjOP3fSpJ6nvfOjXf8zMWZolg8BgGhxE0GilDyftp+gf fMNp1gy6xuSgd/Bdqbn7Wtt/hs6x8Cy7Ek2YgJQIHyAdkGEmy1ODqRXyKC/2Xr6i S3I4oA5Ik0dS32SSjpZL094b5EuH5UDSuVhJR71pfrOGnIia/v1hqWnwuo4y7x51 5KVT28yRt2qVrarfH+YKSw39DDaAM9l9RxK/MN2pUJA/Xb4lAd1dyMASqwAABVml 3V1U5/tgF1x+4hEGO8eaCAhORNU/ZNP8HFVEZjXJoZfcjXlHM0w= -----END CERTIFICATE-----Generated at Thu Sep 17 10:19:20 2026 by rpki-client