$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: CBzuwQTq/j0rlQ398Hhlx2yfgGxll60wL1cS6uKjkhM= Subject key identifier: CA:DB:07:BE:A9:15:32:80:8D:41:B1:03:75:8A:EA:48:F6:F3:6B:94 Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 5079AA296B9A8E52A6DA9E17C4D6B92F7E3325C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 01DA Signing time: Sun 01 Mar 2026 08:11:37 +0000 Manifest this update: Sun 01 Mar 2026 08:06:37 +0000 Manifest next update: Wed 04 Mar 2026 15:38:37 +0000 Files and hashes: 1: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: rH6v5NksQAZ7i1x7vYF4pP0Dlbp5vcZTM15lBp2e+jM=) 2: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: ZAZLAwFNurePOhoBTtf1L10XSG16NJgrrWun+l2UpwQ=) 3: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: T/urQJ+82QgaKD9FjVWVBWC5pqw/fxNdqK4bVUSVM74=) 4: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: sNTsns3ST7lmT3Lzq1+VabwjCefZeBfZWQ1CC+0VBzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:79:aa:29:6b:9a:8e:52:a6:da:9e:17:c4:d6:b9:2f:7e:33:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Mar 1 08:06:37 2026 GMT Not After : Mar 4 15:38:37 2026 GMT Subject: CN=CADB07BEA91532808D41B103758AEA48F6F36B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:22:c5:1e:f4:db:ed:33:7a:0b:c0:66:e0: 5b:c4:53:5f:24:72:5f:0e:47:5c:06:5d:09:a7:a7: 91:e8:ac:62:8a:91:1a:c8:2a:e5:04:35:c6:43:1b: 17:22:bf:e4:13:4d:49:b9:45:ab:72:c4:4d:98:9a: 08:44:75:e5:6b:9b:c1:1a:ae:d8:18:4d:87:29:df: 2f:89:64:9d:8d:77:af:32:19:50:af:33:8a:61:65: b9:72:d8:5f:8f:eb:3e:77:d2:3e:95:ee:a7:29:de: 57:ec:dd:a4:13:d4:16:ff:8c:15:7c:f1:c3:9a:a5: 56:95:ac:e8:3e:b7:01:26:23:ca:87:c9:71:ca:be: 62:1b:ed:57:68:1f:db:43:cf:73:9b:31:de:1c:7b: b3:d6:26:64:c6:57:ac:d4:af:1e:e0:58:be:4a:28: 87:f0:6c:cf:b8:71:12:11:b8:73:b4:f2:92:9f:ac: f5:5c:19:a3:a7:c6:93:ac:05:42:40:d9:0f:04:f7: dd:5f:a5:e9:80:94:6c:5c:48:d6:50:aa:bf:35:78: 1f:ca:9d:b7:24:6a:44:7a:ad:ff:96:e5:c5:d1:d9: 8a:3c:75:95:12:4f:0c:b3:63:6c:82:c0:fa:de:83: bf:98:97:7b:a4:13:46:6a:8f:50:e9:c0:33:6e:bb: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DB:07:BE:A9:15:32:80:8D:41:B1:03:75:8A:EA:48:F6:F3:6B:94 X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9f:91:7d:57:1c:04:cd:4e:45:6a:59:d6:8c:8f:f0:24:09: 2f:7f:9c:9f:49:4a:3a:85:9e:a9:26:22:93:6b:49:47:f3:2c: 03:dc:08:25:0d:90:b2:73:42:fa:d3:3c:6a:2a:06:6d:6e:f2: 02:32:7b:ae:5c:db:0b:09:33:99:a5:a4:ab:54:0d:b9:9e:1f: 85:0f:05:94:2c:17:f7:75:13:c1:53:4a:35:11:fb:88:51:df: 9f:6e:b7:42:79:d9:05:e8:d7:ad:1e:cf:30:d9:70:58:6a:cb: 2d:75:82:03:aa:96:f7:59:dd:8d:09:a4:fc:0f:30:d7:c2:6f: 27:5d:a4:aa:d3:a5:99:28:72:61:ab:89:bd:6f:df:c8:54:15: a7:bb:c4:f0:7c:e9:13:1b:fd:30:2f:1e:7f:e1:23:21:f6:5e: 5f:b8:b4:ec:7b:3a:a7:9b:a2:86:1f:14:10:83:b1:14:76:4a: 97:66:e3:38:e9:52:ac:25:ba:c8:f4:35:99:8b:9a:ba:08:82: a4:45:46:82:05:c5:95:59:7a:b5:d5:79:fc:2a:1e:55:80:0c: 60:8a:bf:c2:91:a3:1f:9b:59:75:74:93:57:0c:35:4e:e0:2f: 63:74:64:48:ba:5c:e0:5e:76:07:a6:f9:f6:49:1b:79:74:b6: 28:86:86:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUHmqKWuajlKm2p4XxNa5L34zJcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNjAzMDEwODA2MzdaFw0yNjAzMDQxNTM4MzdaMDMxMTAvBgNV BAMTKENBREIwN0JFQTkxNTMyODA4RDQxQjEwMzc1OEFFQTQ4RjZGMzZCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSCLFHvTb7TN6C8Bm4FvEU18k cl8OR1wGXQmnp5HorGKKkRrIKuUENcZDGxciv+QTTUm5RatyxE2YmghEdeVrm8Ea rtgYTYcp3y+JZJ2Nd68yGVCvM4phZbly2F+P6z530j6V7qcp3lfs3aQT1Bb/jBV8 8cOapVaVrOg+twEmI8qHyXHKvmIb7VdoH9tDz3ObMd4ce7PWJmTGV6zUrx7gWL5K KIfwbM+4cRIRuHO08pKfrPVcGaOnxpOsBUJA2Q8E991fpemAlGxcSNZQqr81eB/K nbckakR6rf+W5cXR2Yo8dZUSTwyzY2yCwPreg7+Yl3ukE0Zqj1DpwDNuu3RBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUytsHvqkVMoCNQbEDdYrqSPbza5QwHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGfkX1XHATNTkVqWdaMj/AkCS9/nJ9JSjqF nqkmIpNrSUfzLAPcCCUNkLJzQvrTPGoqBm1u8gIye65c2wsJM5mlpKtUDbmeH4UP BZQsF/d1E8FTSjUR+4hR359ut0J52QXo160ezzDZcFhqyy11ggOqlvdZ3Y0JpPwP MNfCbyddpKrTpZkocmGrib1v38hUFae7xPB86RMb/TAvHn/hIyH2Xl+4tOx7Oqeb ooYfFBCDsRR2Spdm4zjpUqwlusj0NZmLmroIgqRFRoIFxZVZerXVefwqHlWADGCK v8KRox+bWXV0k1cMNU7gL2N0ZEi6XOBedgem+fZJG3l0tiiGhoo= -----END CERTIFICATE-----Generated at Mon Mar 2 23:24:52 2026 by rpki-client