$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: 8NEvWtdCFMNLupFLiAnCgK0q4jkupY+JC1r+vu7ikCk= Subject key identifier: F5:BB:50:F0:B3:DA:47:92:F3:BF:0B:81:38:81:C7:58:51:34:F1:F5 Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 2B05CE52A390A5A1DDA626E5E827694B437AC5AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 01D9 Signing time: Thu 16 Apr 2026 21:10:53 +0000 Manifest this update: Thu 16 Apr 2026 21:05:53 +0000 Manifest next update: Sun 19 Apr 2026 22:12:53 +0000 Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: aQThgKjoVxAf8QUrNI1h0L0h88SAkOAfUq9vTc5dAGo=) 2: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: smZDOekohJ9VLcFjjB49EebD36ia5xqcy8veigIp6NU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:05:ce:52:a3:90:a5:a1:dd:a6:26:e5:e8:27:69:4b:43:7a:c5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Apr 16 21:05:53 2026 GMT Not After : Apr 19 22:12:53 2026 GMT Subject: CN=F5BB50F0B3DA4792F3BF0B813881C7585134F1F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c7:8f:52:75:49:14:e1:0f:5e:59:c7:18:d9: 01:d6:fe:89:1d:3e:69:81:d5:c1:54:51:e4:30:c4: 4c:84:7b:f1:f0:c4:a6:5f:8d:6d:af:d8:5d:8c:26: 17:24:15:44:af:84:14:df:79:48:de:4a:a8:99:e1: 72:8d:2f:e4:66:4b:09:1e:8c:03:03:45:94:a1:f2: ac:71:e2:2b:47:fb:6e:af:df:8c:d4:d0:17:c9:8c: 55:2d:7a:84:b8:e5:d6:98:59:54:e0:dd:7b:b3:52: 5e:3e:3f:36:57:36:de:a5:06:74:85:b3:2c:3c:03: 44:fb:18:87:e1:87:a9:9c:5a:2d:89:34:28:b5:14: 11:8c:13:87:26:fb:0a:34:bd:3c:48:4f:9a:e9:c3: 30:31:f7:00:36:f1:06:1c:99:28:76:56:99:f4:94: a8:c9:36:ac:d6:4d:86:7a:a2:6b:a1:ee:18:2b:9b: ff:7e:4a:97:5a:bf:48:93:4d:e0:f2:23:51:37:e4: 52:01:3c:12:99:76:a1:92:3c:d6:a9:81:a3:17:40: 3c:3d:db:eb:dd:36:73:8f:f1:bb:24:5a:0c:58:d6: 48:f9:05:88:f0:b4:44:bc:e5:53:9f:de:26:3a:5e: 7f:a4:ae:59:22:50:88:51:39:69:f8:9f:1d:e8:c5: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BB:50:F0:B3:DA:47:92:F3:BF:0B:81:38:81:C7:58:51:34:F1:F5 X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:60:91:6e:b9:2a:6f:de:13:75:e6:ba:15:f2:41:89:28:ff: 69:61:2b:2e:36:98:59:08:0e:29:ae:d1:eb:9f:96:d5:7c:e8: be:84:80:96:81:6e:35:3b:3a:ee:f5:a5:a8:59:c0:64:28:5c: 20:ff:d1:bd:8a:8f:41:c4:bd:91:50:99:0f:52:bf:1d:0d:d1: e8:4e:0f:0b:59:e6:94:9a:55:7f:d8:91:ef:5c:89:ae:2e:24: ec:4f:ff:f4:e8:c2:85:f8:6e:14:d3:c2:b6:a6:b1:76:3d:a9: fe:17:8e:4d:7f:a7:9a:47:64:c1:76:3a:52:19:0c:1b:d1:7a: 20:fc:48:0e:02:a7:28:63:a6:0b:fa:a0:df:e8:55:b9:17:a4: 28:49:af:34:b9:00:cb:25:06:69:ab:8d:46:34:ea:d0:3a:46: 40:35:b9:ce:05:02:0e:e3:ad:7b:57:db:64:73:9f:b9:f2:e3: 08:9c:0b:26:b6:cb:aa:3f:54:00:61:bd:c5:e3:9a:7e:a7:71: 9d:67:0a:3c:a9:1a:85:6a:d6:b2:54:ea:29:fc:66:8d:ee:89: a4:70:21:83:ed:36:ec:0f:cb:e4:9b:e4:0b:0a:46:55:90:ff: 36:da:77:c2:fb:41:e7:66:ec:aa:da:82:86:bc:63:61:a5:10: 19:53:80:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwXOUqOQpaHdpibl6CdpS0N6xa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNjA0MTYyMTA1NTNaFw0yNjA0MTkyMjEyNTNaMDMxMTAvBgNV BAMTKEY1QkI1MEYwQjNEQTQ3OTJGM0JGMEI4MTM4ODFDNzU4NTEzNEYxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGx49SdUkU4Q9eWccY2QHW/okd PmmB1cFUUeQwxEyEe/HwxKZfjW2v2F2MJhckFUSvhBTfeUjeSqiZ4XKNL+RmSwke jAMDRZSh8qxx4itH+26v34zU0BfJjFUteoS45daYWVTg3XuzUl4+PzZXNt6lBnSF syw8A0T7GIfhh6mcWi2JNCi1FBGME4cm+wo0vTxIT5rpwzAx9wA28QYcmSh2Vpn0 lKjJNqzWTYZ6omuh7hgrm/9+Spdav0iTTeDyI1E35FIBPBKZdqGSPNapgaMXQDw9 2+vdNnOP8bskWgxY1kj5BYjwtES85VOf3iY6Xn+krlkiUIhROWn4nx3oxToLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9btQ8LPaR5LzvwuBOIHHWFE08fUwHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1gkW65Km/eE3XmuhXyQYko/2lhKy42mFkI Dimu0eufltV86L6EgJaBbjU7Ou71pahZwGQoXCD/0b2Kj0HEvZFQmQ9Svx0N0ehO DwtZ5pSaVX/Yke9cia4uJOxP//TowoX4bhTTwramsXY9qf4Xjk1/p5pHZMF2OlIZ DBvReiD8SA4Cpyhjpgv6oN/oVbkXpChJrzS5AMslBmmrjUY06tA6RkA1uc4FAg7j rXtX22Rzn7ny4wicCya2y6o/VABhvcXjmn6ncZ1nCjypGoVq1rJU6in8Zo3uiaRw IYPtNuwPy+Sb5AsKRlWQ/zbad8L7Qedm7Kragoa8Y2GlEBlTgJg= -----END CERTIFICATE-----Generated at Fri Apr 17 22:17:52 2026 by rpki-client