$ rpki-client -vvf repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft File: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft (raw, json) Hash identifier: cmiohACl0xqAxlB+UctbBxO5LcELZgI5jcpeCNrXqf4= Subject key identifier: DE:44:84:15:F0:87:23:EF:5C:1B:94:02:DA:B7:FF:9E:A5:B4:7B:67 Authority key identifier: 89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E Certificate issuer: /CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Certificate serial: 4F994DD467EF1DA16C7B98091727EDCCABC828DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft Manifest number: 014F Signing time: Sat 28 Feb 2026 15:10:00 +0000 Manifest this update: Sat 28 Feb 2026 15:05:00 +0000 Manifest next update: Tue 03 Mar 2026 21:20:00 +0000 Files and hashes: 1: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (hash: SUamCO6hFRRECd6YOsV3frJr4xTHA6yMIWiVBv2Urhg=) 2: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl (hash: pR18RZFd9qBnYcwsJTx2cR2gykJnz6PzPk+ZxJHjtWo=) 3: 3135372e31302e3135382e302f32342d3234203d3e20313532333535.roa (hash: aAScp8IjqsY2CuVPSrU8aKaQppxc8AjfgFBueh9FUNg=) 4: 3135372e31302e3135392e302f32342d3234203d3e20313532333535.roa (hash: s2utPuT9/Rrfn+3q49rkE18sSG/2dm9VSsVmVu4LpF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:99:4d:d4:67:ef:1d:a1:6c:7b:98:09:17:27:ed:cc:ab:c8:28:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Validity Not Before: Feb 28 15:05:00 2026 GMT Not After : Mar 3 21:20:00 2026 GMT Subject: CN=DE448415F08723EF5C1B9402DAB7FF9EA5B47B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:90:21:06:35:23:a0:94:ac:3a:21:58:cc:4e: 5b:19:e0:bc:d9:be:f8:15:c6:04:ea:d1:2a:04:93: 4d:e2:2b:41:0d:c8:58:2e:67:ed:86:05:c2:4f:f8: a0:9f:eb:ad:d0:f5:d5:cd:03:b6:df:b9:76:71:bd: 21:85:bb:b0:ea:b4:dc:6c:64:5e:de:9f:cb:c5:86: cc:ef:39:f5:f0:6d:4a:cc:cb:d5:0d:82:05:c2:dc: b0:47:96:8c:db:16:f5:ca:e5:f8:3c:cf:17:f0:39: 9e:0d:a4:63:45:e4:05:d5:d3:e9:8e:e5:c9:bc:e5: 7c:4e:ae:e9:9d:7c:22:4c:69:3a:67:6f:1b:97:ca: 92:63:f0:d9:b6:58:8a:80:58:ca:c7:7e:98:f0:4f: 5c:bf:4b:7a:a5:c1:29:08:dd:b5:66:1a:05:07:7f: c5:b2:90:f2:32:b4:00:35:c6:75:f5:5c:bf:2d:5e: cd:59:c7:57:f9:0b:d4:05:06:06:05:74:18:4f:dd: 86:7b:c1:b9:fc:1f:e3:23:ef:4a:1a:4d:bc:20:04: b3:41:f5:20:f4:c1:39:e1:a5:e9:05:9f:79:5b:8c: 10:a0:8c:f4:27:44:d9:48:80:7a:1c:db:b8:30:59: 15:70:de:c9:53:d5:6f:6c:48:3b:fc:20:95:9e:a7: 70:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:44:84:15:F0:87:23:EF:5C:1B:94:02:DA:B7:FF:9E:A5:B4:7B:67 X509v3 Authority Key Identifier: keyid:89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:b1:dd:c3:9e:09:0b:7e:23:0f:3f:ba:70:6a:42:e3:55:1c: f3:ad:58:51:77:06:fb:b0:a5:ae:dc:1d:ff:69:9a:4c:2b:1d: 71:3e:7e:de:02:f8:b3:3c:08:76:f0:a8:12:69:f3:6a:79:8d: 32:5f:c8:59:62:91:1e:4d:78:d5:87:c6:b5:4a:78:5f:58:b8: a6:59:82:f0:9b:5f:e2:29:5d:a2:f2:f9:db:16:9f:41:75:da: ed:52:8a:a8:a0:37:a1:8c:06:d6:94:cc:b2:22:fa:1d:01:27: c9:88:5a:f9:6b:78:fa:04:27:0d:32:c2:77:d0:25:9f:05:ab: 6f:4e:f2:e8:e7:e5:8e:32:10:b5:b3:18:b3:0c:2e:d7:4d:83: 6c:aa:98:c5:03:0a:a3:0f:a8:2a:53:70:87:e8:b4:72:04:13: 6f:10:c3:27:ba:8a:df:9a:70:fa:d1:85:e7:43:1e:fa:64:7c: 56:8a:fc:6f:2a:cc:59:a6:46:d1:dc:89:79:3a:f1:3a:95:0f: 3c:52:ed:dd:4c:86:ae:bc:5d:47:5e:cf:a6:0f:39:61:21:8c: 53:98:fc:f4:8a:f0:38:b2:57:b4:60:f9:41:3e:57:9f:d2:85: 3b:b4:61:ea:95:d0:fe:af:5f:e5:04:96:aa:18:be:35:1b:ee: df:cf:28:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5lN1GfvHaFse5gJFyftzKvIKN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0 M0VGNTQ0RTAeFw0yNjAyMjgxNTA1MDBaFw0yNjAzMDMyMTIwMDBaMDMxMTAvBgNV BAMTKERFNDQ4NDE1RjA4NzIzRUY1QzFCOTQwMkRBQjdGRjlFQTVCNDdCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlkCEGNSOglKw6IVjMTlsZ4LzZ vvgVxgTq0SoEk03iK0ENyFguZ+2GBcJP+KCf663Q9dXNA7bfuXZxvSGFu7DqtNxs ZF7en8vFhszvOfXwbUrMy9UNggXC3LBHlozbFvXK5fg8zxfwOZ4NpGNF5AXV0+mO 5cm85XxOrumdfCJMaTpnbxuXypJj8Nm2WIqAWMrHfpjwT1y/S3qlwSkI3bVmGgUH f8WykPIytAA1xnX1XL8tXs1Zx1f5C9QFBgYFdBhP3YZ7wbn8H+Mj70oaTbwgBLNB 9SD0wTnhpekFn3lbjBCgjPQnRNlIgHoc27gwWRVw3slT1W9sSDv8IJWep3ARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3kSEFfCHI+9cG5QC2rf/nqW0e2cwHwYDVR0j BBgwFoAUidzZ6etULSAro2y0TOda10PvVE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDI1OGU1Yy0wNDU2LTQ2YTMtOTYzMi03MDljNzY3MTA0YmIvMC84OURDRDlFOUVC NTQyRDIwMkJBMzZDQjQ0Q0U3NUFENzQzRUY1NDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0M0VG NTQ0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQyNThlNWMtMDQ1Ni00NmEzLTk2 MzItNzA5Yzc2NzEwNGJiLzAvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVB RDc0M0VGNTQ0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWx3cOeCQt+Iw8/unBqQuNVHPOtWFF3Bvuw pa7cHf9pmkwrHXE+ft4C+LM8CHbwqBJp82p5jTJfyFlikR5NeNWHxrVKeF9YuKZZ gvCbX+IpXaLy+dsWn0F12u1SiqigN6GMBtaUzLIi+h0BJ8mIWvlrePoEJw0ywnfQ JZ8Fq29O8ujn5Y4yELWzGLMMLtdNg2yqmMUDCqMPqCpTcIfotHIEE28Qwye6it+a cPrRhedDHvpkfFaK/G8qzFmmRtHciXk68TqVDzxS7d1Mhq68XUdez6YPOWEhjFOY /PSK8DiyV7Rg+UE+V5/ShTu0YeqV0P6vX+UElqoYvjUb7t/PKFQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:22:17 2026 by rpki-client