$ rpki-client -vvf repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft File: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft (raw, json) Hash identifier: OeQONyRDU/yYrjpR/mtuH+BhM2SKB1ck/DY6WSDiz5E= Subject key identifier: 10:9B:98:A8:53:5B:38:0E:30:90:A8:41:2E:A7:D8:6D:58:04:02:8C Authority key identifier: 89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E Certificate issuer: /CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Certificate serial: 3F4C6D6600C03FF585A22E67F453DCE38E5BF10D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft Manifest number: 0164 Signing time: Fri 17 Apr 2026 03:10:00 +0000 Manifest this update: Fri 17 Apr 2026 03:05:00 +0000 Manifest next update: Mon 20 Apr 2026 08:10:00 +0000 Files and hashes: 1: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl (hash: RouEQA4/4woMb+G9K5xaedX/6yQm15A7bPQqGPJuSPE=) 2: 3135372e31302e3135382e302f32342d3234203d3e20313532333535.roa (hash: aAScp8IjqsY2CuVPSrU8aKaQppxc8AjfgFBueh9FUNg=) 3: 3135372e31302e3135392e302f32342d3234203d3e20313532333535.roa (hash: s2utPuT9/Rrfn+3q49rkE18sSG/2dm9VSsVmVu4LpF4=) 4: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (hash: SUamCO6hFRRECd6YOsV3frJr4xTHA6yMIWiVBv2Urhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4c:6d:66:00:c0:3f:f5:85:a2:2e:67:f4:53:dc:e3:8e:5b:f1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Validity Not Before: Apr 17 03:05:00 2026 GMT Not After : Apr 20 08:10:00 2026 GMT Subject: CN=109B98A8535B380E3090A8412EA7D86D5804028C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:58:00:41:01:7c:e3:95:f4:79:69:fc:bf: c1:f4:b7:62:71:cb:5b:57:ec:0c:fb:70:dd:89:9a: fa:d8:32:db:81:ba:a7:96:b5:36:83:40:67:a1:47: cb:03:a3:35:f8:23:47:ba:f3:80:99:57:59:66:3a: 39:58:85:51:0e:e1:e8:c9:ad:42:a4:6a:a8:15:db: 8c:28:af:c2:7c:f8:0b:43:9a:06:16:23:7f:86:4e: ac:d7:c3:6f:ec:f6:1a:40:5e:88:a4:f1:38:5c:87: 50:8c:ac:d3:80:b1:f3:85:4a:03:c5:c0:13:41:f9: 63:de:cd:54:2a:a8:e6:aa:d8:54:fe:54:36:4a:c6: 82:b5:73:a2:de:85:ce:45:05:86:9c:43:c7:37:16: 76:20:40:7e:e5:3a:3d:6f:df:a4:cb:c1:1f:db:01: d3:4d:b5:e5:fd:c7:8e:e1:43:b3:4d:34:cb:03:36: ce:dd:3e:e9:87:ed:b1:1e:f2:5c:1b:e2:c2:ea:21: b5:61:de:9e:a6:56:af:20:da:9a:45:c1:0a:d2:05: 28:62:31:d5:93:33:0b:dd:19:1c:97:2a:3e:fe:4f: 51:1d:7a:77:13:b4:cc:93:8f:6b:6e:86:4c:82:31: 3b:8f:ab:9c:af:af:c4:58:b6:15:c5:1d:2c:93:c1: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9B:98:A8:53:5B:38:0E:30:90:A8:41:2E:A7:D8:6D:58:04:02:8C X509v3 Authority Key Identifier: keyid:89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6c:37:6c:24:96:48:cb:3f:82:2b:11:ef:4c:b6:da:30:84: 82:20:df:d4:f8:2a:ff:b0:d9:a9:0b:d0:7f:85:b2:be:d1:7c: aa:63:9e:e1:07:90:bd:af:0b:31:4b:54:ad:25:b6:90:73:92: 43:e3:39:85:67:60:4e:07:6f:3a:8d:61:79:c0:e2:31:35:c6: ba:26:c3:db:ee:89:43:ed:02:30:db:ac:8e:b7:86:aa:34:b4: 38:f9:66:28:40:7d:7f:27:cf:c0:51:6e:9c:49:49:88:b1:67: c4:49:c4:a7:f9:cb:6d:98:a6:a8:63:50:d4:a3:e3:ea:c4:b7: 59:51:70:d6:ab:44:d2:34:40:40:03:1f:6e:84:a3:1e:7a:3c: c5:0d:32:d8:61:eb:08:74:9f:c8:9d:59:d3:29:f4:3d:de:2d: a6:4b:e7:63:d2:b0:10:ef:e6:f4:81:83:18:88:10:2d:37:16: 32:7a:ba:34:1b:42:3f:e9:07:75:c7:82:cf:eb:46:ce:81:63: 2f:9d:2b:54:39:56:86:97:35:28:f2:21:4d:bb:ae:83:92:dd: 99:68:e6:9d:46:40:db:33:1e:4d:7b:d0:37:73:2d:36:8b:00: 49:11:00:5f:4f:9a:ed:f4:0e:b3:15:07:2c:d1:ae:1d:c7:ef: f4:dc:9f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0xtZgDAP/WFoi5n9FPc445b8Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0 M0VGNTQ0RTAeFw0yNjA0MTcwMzA1MDBaFw0yNjA0MjAwODEwMDBaMDMxMTAvBgNV BAMTKDEwOUI5OEE4NTM1QjM4MEUzMDkwQTg0MTJFQTdEODZENTgwNDAyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pFgAQQF845X0eWn8v8H0t2Jx y1tX7Az7cN2JmvrYMtuBuqeWtTaDQGehR8sDozX4I0e684CZV1lmOjlYhVEO4ejJ rUKkaqgV24wor8J8+AtDmgYWI3+GTqzXw2/s9hpAXoik8Thch1CMrNOAsfOFSgPF wBNB+WPezVQqqOaq2FT+VDZKxoK1c6Lehc5FBYacQ8c3FnYgQH7lOj1v36TLwR/b AdNNteX9x47hQ7NNNMsDNs7dPumH7bEe8lwb4sLqIbVh3p6mVq8g2ppFwQrSBShi MdWTMwvdGRyXKj7+T1EdencTtMyTj2tuhkyCMTuPq5yvr8RYthXFHSyTwcqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEJuYqFNbOA4wkKhBLqfYbVgEAowwHwYDVR0j BBgwFoAUidzZ6etULSAro2y0TOda10PvVE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDI1OGU1Yy0wNDU2LTQ2YTMtOTYzMi03MDljNzY3MTA0YmIvMC84OURDRDlFOUVC NTQyRDIwMkJBMzZDQjQ0Q0U3NUFENzQzRUY1NDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0M0VG NTQ0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQyNThlNWMtMDQ1Ni00NmEzLTk2 MzItNzA5Yzc2NzEwNGJiLzAvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVB RDc0M0VGNTQ0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFsN2wklkjLP4IrEe9MttowhIIg39T4Kv+w 2akL0H+Fsr7RfKpjnuEHkL2vCzFLVK0ltpBzkkPjOYVnYE4HbzqNYXnA4jE1xrom w9vuiUPtAjDbrI63hqo0tDj5ZihAfX8nz8BRbpxJSYixZ8RJxKf5y22YpqhjUNSj 4+rEt1lRcNarRNI0QEADH26Eox56PMUNMthh6wh0n8idWdMp9D3eLaZL52PSsBDv 5vSBgxiIEC03FjJ6ujQbQj/pB3XHgs/rRs6BYy+dK1Q5VoaXNSjyIU27roOS3Zlo 5p1GQNszHk170DdzLTaLAEkRAF9Pmu30DrMVByzRrh3H7/Tcn2M= -----END CERTIFICATE-----Generated at Fri Apr 17 16:53:50 2026 by rpki-client