$ rpki-client -vvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: Ig2knr3gy7QkEqxPGsH2usls8ZuRIvLb+q0NjZRGNGk= Subject key identifier: 2C:8B:DA:8D:28:50:37:68:91:A9:67:BF:4F:57:17:9A:E9:E9:0B:EA Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 66D51C1AAD6503E1277045D738F4FBAADFA7ED93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 22:40:06 +0000 Manifest this update: Wed 17 Jun 2026 22:35:06 +0000 Manifest next update: Fri 19 Jun 2026 02:03:06 +0000 Files and hashes: 1: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) 2: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: uc6qTIk9VdTGQAaTbsksxrGohcsuAboy41Z+JYP+cD0=) 3: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) 4: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 5: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 02:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d5:1c:1a:ad:65:03:e1:27:70:45:d7:38:f4:fb:aa:df:a7:ed:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Jun 17 22:35:06 2026 GMT Not After : Jun 19 02:03:06 2026 GMT Subject: CN=2C8BDA8D2850376891A967BF4F57179AE9E90BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:df:96:64:e7:84:07:c6:e3:d3:7a:46:20: e2:d0:9d:ca:ee:7c:18:ac:e7:4a:ac:2d:21:9b:07: 9b:c4:38:a0:50:e3:ad:18:3d:0b:1c:37:39:74:5e: b8:39:07:5d:b0:14:99:f4:a6:ee:3d:a8:3d:c9:13: 33:9c:20:a8:a1:55:e5:12:a5:38:37:f0:28:5a:6e: af:16:42:7f:29:48:b7:9d:5a:30:d8:05:1b:de:77: cf:81:72:1c:cd:fc:37:22:dd:85:e9:43:9c:df:46: 76:18:5a:38:7d:e5:90:3a:42:b1:c4:0a:87:b9:99: d1:bc:cf:f6:c1:0f:40:8d:6a:41:8c:89:f6:69:f1: c5:fd:a5:29:66:c0:3f:b5:76:e8:35:a8:88:fc:55: 53:ec:07:e4:e3:14:9f:b9:dc:2a:d2:1e:6d:ad:21: fa:67:36:8a:1a:22:af:c2:45:59:fa:1e:a0:24:fa: f0:ae:c0:5e:ca:cf:11:e2:71:47:d6:8a:67:17:af: ee:90:0b:75:ac:8e:6d:33:59:9d:4b:c6:7b:02:96: 37:27:8a:3b:f0:79:fa:75:0f:fb:c5:59:aa:d0:4a: 17:80:ec:a5:2f:c4:bc:ff:f8:35:24:c9:74:11:9a: f6:14:1c:3e:73:6e:39:36:30:f5:de:71:08:11:aa: e3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8B:DA:8D:28:50:37:68:91:A9:67:BF:4F:57:17:9A:E9:E9:0B:EA X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:20:ae:b7:ab:54:55:d4:e1:42:bd:e4:a0:9e:91:47:d3:f3: 03:20:d8:11:fe:ba:78:25:76:68:f8:27:c2:58:a1:87:37:63: 82:f4:5a:5a:fb:53:71:c9:c7:6b:51:37:23:fa:4c:99:bf:25: ba:6d:ce:11:fa:4f:03:e1:68:7d:b7:d5:69:e6:91:f5:dc:ed: 45:ec:ba:2e:0b:8f:92:68:22:5f:e1:50:80:7c:0b:0b:5b:8b: 01:0a:a8:73:23:76:63:39:6a:e2:91:e6:ca:bb:74:64:95:3c: 9c:20:1d:a6:de:3a:04:89:5b:a8:bc:6c:78:9a:a4:3c:18:36: 2e:0c:cf:14:18:87:b3:7a:88:3d:ea:c9:f6:21:70:02:f7:09: cc:3c:5f:7b:05:b3:db:4e:bc:31:19:90:95:61:b9:00:25:25: e2:dd:df:a7:fd:45:ba:bf:cb:28:20:fd:42:ff:24:94:6b:36: 9c:b9:a1:50:e5:6a:b3:7d:c4:fe:17:8f:64:05:74:28:16:31: 58:3f:37:1b:82:54:1d:1a:e8:aa:86:8a:aa:43:0e:39:ee:67: 74:4a:25:30:77:70:83:24:48:3a:f3:1e:b5:66:2d:fa:b5:d1: 4a:84:14:e6:f5:81:0c:b2:0d:d6:57:8b:70:3b:ad:5f:d9:07: c1:a6:e0:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtUcGq1lA+EncEXXOPT7qt+n7ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjA2MTcyMjM1MDZaFw0yNjA2MTkwMjAzMDZaMDMxMTAvBgNV BAMTKDJDOEJEQThEMjg1MDM3Njg5MUE5NjdCRjRGNTcxNzlBRTlFOTBCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WN+WZOeEB8bj03pGIOLQncru fBis50qsLSGbB5vEOKBQ460YPQscNzl0Xrg5B12wFJn0pu49qD3JEzOcIKihVeUS pTg38Chabq8WQn8pSLedWjDYBRved8+BchzN/Dci3YXpQ5zfRnYYWjh95ZA6QrHE Coe5mdG8z/bBD0CNakGMifZp8cX9pSlmwD+1dug1qIj8VVPsB+TjFJ+53CrSHm2t IfpnNooaIq/CRVn6HqAk+vCuwF7KzxHicUfWimcXr+6QC3Wsjm0zWZ1LxnsCljcn ijvwefp1D/vFWarQSheA7KUvxLz/+DUkyXQRmvYUHD5zbjk2MPXecQgRquPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULIvajShQN2iRqWe/T1cXmunpC+owHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwgrrerVFXU4UK95KCekUfT8wMg2BH+ungl dmj4J8JYoYc3Y4L0Wlr7U3HJx2tRNyP6TJm/JbptzhH6TwPhaH231WnmkfXc7UXs ui4Lj5JoIl/hUIB8CwtbiwEKqHMjdmM5auKR5sq7dGSVPJwgHabeOgSJW6i8bHia pDwYNi4MzxQYh7N6iD3qyfYhcAL3Ccw8X3sFs9tOvDEZkJVhuQAlJeLd36f9Rbq/ yygg/UL/JJRrNpy5oVDlarN9xP4Xj2QFdCgWMVg/NxuCVB0a6KqGiqpDDjnuZ3RK JTB3cIMkSDrzHrVmLfq10UqEFOb1gQyyDdZXi3A7rV/ZB8Gm4Lk= -----END CERTIFICATE-----Generated at Thu Jun 18 19:04:37 2026 by rpki-client