$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: W2DVUEFGgXdcjJOZO/N/ZOaRMbdQ/t2+ySHDnAx9oPY= Subject key identifier: 86:75:A9:4A:B9:40:D3:3F:BB:77:4F:8A:53:AC:D8:0D:F2:4C:6E:5D Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 11D289A62981122643DF58C80CB124F41FDD0DD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 022D Signing time: Sat 28 Feb 2026 12:50:42 +0000 Manifest this update: Sat 28 Feb 2026 12:45:42 +0000 Manifest next update: Tue 03 Mar 2026 22:31:42 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) 3: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: mLzDR9Cm5/L/EzyxAS7JnBhqrBdn52Pj+QcPiQrOouI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d2:89:a6:29:81:12:26:43:df:58:c8:0c:b1:24:f4:1f:dd:0d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Feb 28 12:45:42 2026 GMT Not After : Mar 3 22:31:42 2026 GMT Subject: CN=8675A94AB940D33FBB774F8A53ACD80DF24C6E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:48:3e:5e:bc:a7:3e:25:fa:de:04:31:c4: a4:77:34:08:6d:f4:be:fd:1c:58:c8:84:3f:de:31: ee:04:3d:1e:68:a2:4c:e6:52:b1:9b:9f:0d:5b:0b: a4:1e:48:0b:91:67:4e:21:b6:43:cd:14:ae:7d:a9: 5d:e7:55:87:91:af:bb:d4:bf:de:69:83:21:4c:20: a6:9e:48:84:95:3a:36:44:8d:17:af:a9:d2:1d:77: 27:06:df:c7:eb:1f:7e:b4:95:94:16:af:27:c9:00: 79:7f:18:cc:56:00:ab:49:29:38:b3:d7:0c:cc:67: d6:b6:49:aa:7c:87:5b:d3:27:18:82:e0:ea:a4:f1: 64:d9:a0:22:dd:aa:74:07:11:60:1a:ac:f6:fb:af: 2b:83:1c:1e:6a:61:cc:60:b5:5f:69:e7:07:18:71: 57:cf:ea:85:14:de:ba:eb:f6:5c:b5:6b:b8:15:b2: 7f:44:69:21:3f:0d:04:19:a5:00:b4:23:d0:5e:42: 07:70:06:c9:67:2f:63:ca:1d:9d:64:9b:c8:33:15: b0:43:e9:eb:9d:95:19:1c:fa:30:c5:b7:7d:f3:ad: 32:d4:0d:77:df:97:5c:e6:08:3b:32:03:57:51:b1: 17:ac:20:c6:94:5a:34:d6:bd:5e:99:78:c2:52:35: c7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:75:A9:4A:B9:40:D3:3F:BB:77:4F:8A:53:AC:D8:0D:F2:4C:6E:5D X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:20:2a:55:c9:08:3d:ba:fd:60:20:f2:86:fe:9e:83:f7:76: f6:27:fa:2b:ae:72:ca:3d:3f:31:2e:c9:c8:2c:b8:8b:a8:08: 82:ea:3a:e9:61:0c:e4:69:3c:48:40:82:fb:4e:01:5e:8b:c4: f7:fc:08:88:bb:fc:b0:d6:6b:bd:2f:e7:f3:b7:53:dd:01:43: 72:7a:ec:71:39:c4:75:d6:e6:26:78:7e:e4:0a:0f:97:64:8c: 14:e7:5a:87:c0:fb:b4:2a:2e:0f:e5:ed:b7:20:a9:fb:3f:dc: 9f:94:6c:9a:00:18:b3:e5:05:42:f0:c9:37:bd:60:dc:29:c8: 4d:ef:b7:ff:72:56:31:42:e9:ca:fe:31:9c:93:ea:33:f7:d1: 29:69:a5:df:7a:4f:75:a1:cd:f9:91:9b:9f:5c:44:3f:2d:e3: e9:5b:4f:32:23:d5:84:8c:7a:c4:6d:e8:c0:c0:56:ba:7a:62: 04:ff:9c:d5:2e:36:42:e2:de:6a:44:bb:23:16:3a:79:2c:36: 34:e4:a8:ca:6f:d5:3d:93:cb:f7:db:02:5f:46:41:30:8c:6c: c1:fd:d5:b8:cd:19:6d:69:03:59:44:fd:fb:ef:61:47:6d:b4: 37:d6:12:b9:07:ce:e2:c0:62:6e:ef:58:f7:e0:31:49:12:a4: 51:b4:db:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdKJpimBEiZD31jIDLEk9B/dDdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNjAyMjgxMjQ1NDJaFw0yNjAzMDMyMjMxNDJaMDMxMTAvBgNV BAMTKDg2NzVBOTRBQjk0MEQzM0ZCQjc3NEY4QTUzQUNEODBERjI0QzZFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9F0g+XrynPiX63gQxxKR3NAht 9L79HFjIhD/eMe4EPR5ookzmUrGbnw1bC6QeSAuRZ04htkPNFK59qV3nVYeRr7vU v95pgyFMIKaeSISVOjZEjRevqdIddycG38frH360lZQWryfJAHl/GMxWAKtJKTiz 1wzMZ9a2Sap8h1vTJxiC4Oqk8WTZoCLdqnQHEWAarPb7ryuDHB5qYcxgtV9p5wcY cVfP6oUU3rrr9ly1a7gVsn9EaSE/DQQZpQC0I9BeQgdwBslnL2PKHZ1km8gzFbBD 6eudlRkc+jDFt33zrTLUDXffl1zmCDsyA1dRsResIMaUWjTWvV6ZeMJSNce9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhnWpSrlA0z+7d0+KU6zYDfJMbl0wHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEgKlXJCD26/WAg8ob+noP3dvYn+iuucso9 PzEuycgsuIuoCILqOulhDORpPEhAgvtOAV6LxPf8CIi7/LDWa70v5/O3U90BQ3J6 7HE5xHXW5iZ4fuQKD5dkjBTnWofA+7QqLg/l7bcgqfs/3J+UbJoAGLPlBULwyTe9 YNwpyE3vt/9yVjFC6cr+MZyT6jP30Slppd96T3WhzfmRm59cRD8t4+lbTzIj1YSM esRt6MDAVrp6YgT/nNUuNkLi3mpEuyMWOnksNjTkqMpv1T2Ty/fbAl9GQTCMbMH9 1bjNGW1pA1lE/fvvYUdttDfWErkHzuLAYm7vWPfgMUkSpFG023A= -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:23 2026 by rpki-client