$ rpki-client -vvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: OVE8MVBlXmk+2hs6NuElYeaHKOCIZRL4VwI49aJkVwQ= Subject key identifier: 69:5B:19:50:C2:9C:26:90:C8:2E:2B:A7:36:68:C2:D8:A1:E9:7E:FA Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 7CD584C2C68C09942DF5969EEFCCD95191FA3076 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 19:25:59 +0000 Manifest this update: Sun 02 Aug 2026 19:20:59 +0000 Manifest next update: Mon 03 Aug 2026 21:53:59 +0000 Files and hashes: 1: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 2: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 3: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: fv6ldL937P4L4GNcfMIDo1bryunqCLm/eH9YMVErqZA=) 4: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) 5: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d5:84:c2:c6:8c:09:94:2d:f5:96:9e:ef:cc:d9:51:91:fa:30:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Aug 2 19:20:59 2026 GMT Not After : Aug 3 21:53:59 2026 GMT Subject: CN=695B1950C29C2690C82E2BA73668C2D8A1E97EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:60:af:01:9d:a6:f2:de:cc:e2:9c:0a:90: c4:60:44:1c:76:94:30:a2:b0:a8:8c:41:c9:00:24: 1b:88:56:a8:ff:72:3c:3c:db:07:02:bc:10:83:55: 7f:25:38:35:82:c1:5f:65:cb:5d:14:86:10:67:36: bf:52:e9:38:66:68:2c:c0:ae:48:9d:15:bb:ad:0c: c8:31:23:69:4a:45:b3:39:70:de:6b:cc:4f:57:9f: 2f:fb:2d:de:90:ae:e0:88:d6:fd:2a:4f:cc:be:06: 94:ed:35:10:6c:5e:9a:f6:78:27:6e:7a:55:aa:bc: 41:0b:98:3c:1c:a2:7a:78:be:c9:ce:d1:2c:6d:76: 7f:a6:ea:f0:5d:e1:60:01:91:e8:29:3a:f1:22:3a: 62:6f:10:4e:17:cd:87:31:7f:cc:6d:64:a2:49:b3: 88:98:b9:68:04:d0:75:14:d1:5c:ae:e0:54:05:d0: f9:d1:bd:21:5b:d8:c3:ad:c9:39:94:01:29:19:e4: c6:79:9f:29:0b:bf:48:1f:c0:a0:16:27:68:c3:3c: 3b:cf:ea:55:86:0f:03:ae:51:ea:e9:33:a2:e5:56: 43:00:ee:1f:27:17:e5:4e:e4:f0:8a:0d:ab:ab:c4: 76:fe:9a:d3:55:a6:f1:6d:4c:12:4d:70:4b:d2:87: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5B:19:50:C2:9C:26:90:C8:2E:2B:A7:36:68:C2:D8:A1:E9:7E:FA X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:78:19:08:d0:d8:16:38:7d:60:ea:ec:d2:3b:e6:c6:b6:3d: d1:04:84:33:b2:12:7a:89:9e:7d:94:47:c2:9d:ab:47:7d:88: 5b:8a:cf:73:bf:b1:3d:ac:3e:dc:75:ef:43:ee:65:3e:59:a8: 0c:af:64:a4:89:10:da:94:9c:85:fd:ce:e1:bc:00:18:27:2a: 86:45:b4:37:99:21:c0:34:9d:ee:65:0a:94:eb:32:f4:90:65: 24:9c:15:c4:43:a2:5a:66:41:9d:7d:f0:e0:93:10:e7:8f:ec: cc:d0:bd:4c:6b:91:12:f9:1e:e4:32:51:da:bb:19:48:02:d0: 10:6c:87:95:52:0b:d2:6d:2b:06:e5:d7:e8:c6:d9:d6:1f:08: 20:a4:c9:72:9c:3d:35:f6:9c:3e:9f:4e:3a:dd:5b:91:b6:b1: 80:1c:dd:43:72:e7:1f:fd:45:ac:96:d6:5a:1e:10:06:f5:c9: a6:0a:38:b7:38:48:af:1a:41:5a:99:41:b1:00:b0:18:42:64: 14:4a:b4:4f:2b:7e:1c:a0:0a:f8:17:10:e1:f2:bc:9a:19:cd: 51:30:7b:74:30:58:b2:52:36:e5:b8:2f:9b:b6:99:1b:5c:ff: 65:81:d7:e6:9b:4e:ce:59:0c:67:ef:6a:74:6b:1b:7b:9f:95: d5:e3:75:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNWEwsaMCZQt9Zae78zZUZH6MHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjA4MDIxOTIwNTlaFw0yNjA4MDMyMTUzNTlaMDMxMTAvBgNV BAMTKDY5NUIxOTUwQzI5QzI2OTBDODJFMkJBNzM2NjhDMkQ4QTFFOTdFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOumCvAZ2m8t7M4pwKkMRgRBx2 lDCisKiMQckAJBuIVqj/cjw82wcCvBCDVX8lODWCwV9ly10UhhBnNr9S6ThmaCzA rkidFbutDMgxI2lKRbM5cN5rzE9Xny/7Ld6QruCI1v0qT8y+BpTtNRBsXpr2eCdu elWqvEELmDwconp4vsnO0Sxtdn+m6vBd4WABkegpOvEiOmJvEE4XzYcxf8xtZKJJ s4iYuWgE0HUU0Vyu4FQF0PnRvSFb2MOtyTmUASkZ5MZ5nykLv0gfwKAWJ2jDPDvP 6lWGDwOuUerpM6LlVkMA7h8nF+VO5PCKDaurxHb+mtNVpvFtTBJNcEvSh5sTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaVsZUMKcJpDILiunNmjC2KHpfvowHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIh4GQjQ2BY4fWDq7NI75sa2PdEEhDOyEnqJ nn2UR8Kdq0d9iFuKz3O/sT2sPtx170PuZT5ZqAyvZKSJENqUnIX9zuG8ABgnKoZF tDeZIcA0ne5lCpTrMvSQZSScFcRDolpmQZ198OCTEOeP7MzQvUxrkRL5HuQyUdq7 GUgC0BBsh5VSC9JtKwbl1+jG2dYfCCCkyXKcPTX2nD6fTjrdW5G2sYAc3UNy5x/9 RayW1loeEAb1yaYKOLc4SK8aQVqZQbEAsBhCZBRKtE8rfhygCvgXEOHyvJoZzVEw e3QwWLJSNuW4L5u2mRtc/2WB1+abTs5ZDGfvanRrG3ufldXjdW8= -----END CERTIFICATE-----Generated at Sun Aug 2 22:47:37 2026 by rpki-client