$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: avPrDPSN4mdv6FeTNO+brD0M6LDVKHNoU/br1Wwd+bM= Subject key identifier: 8E:66:9B:C1:58:20:BA:7D:B7:68:11:0D:82:1D:95:51:3B:C2:FD:79 Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 27634F495FEFCEE8F541D9D94C2833905C0DC306 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 01EF Signing time: Fri 17 Apr 2026 19:21:40 +0000 Manifest this update: Fri 17 Apr 2026 19:16:40 +0000 Manifest next update: Tue 21 Apr 2026 06:10:40 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: sNTsns3ST7lmT3Lzq1+VabwjCefZeBfZWQ1CC+0VBzY=) 2: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: rH6v5NksQAZ7i1x7vYF4pP0Dlbp5vcZTM15lBp2e+jM=) 3: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: T/urQJ+82QgaKD9FjVWVBWC5pqw/fxNdqK4bVUSVM74=) 4: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: Xe1oV7YGzhf1AKzPVJFyiLaVGb6KDapCVgjR6KrD7Nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:63:4f:49:5f:ef:ce:e8:f5:41:d9:d9:4c:28:33:90:5c:0d:c3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Apr 17 19:16:40 2026 GMT Not After : Apr 21 06:10:40 2026 GMT Subject: CN=8E669BC15820BA7DB768110D821D95513BC2FD79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:1e:77:4a:c6:93:18:b3:2c:fb:bf:a9:88: 4f:7c:d8:d3:78:9a:25:7b:ab:c1:ea:dd:83:7c:29: 3e:46:7f:60:34:20:df:1a:c0:09:44:fe:66:f5:de: 05:2a:d3:62:e6:5a:cf:10:2f:f2:71:c0:6e:96:0d: 6e:6d:ab:ed:cb:41:62:f2:97:28:af:72:34:1b:ca: 3d:73:de:b3:b4:bc:39:50:51:c3:d7:be:5b:a5:05: c8:f3:cf:ac:79:f5:3c:1c:61:82:cb:43:6b:1f:d9: 52:9a:b8:8f:d3:c3:80:b0:37:61:4c:68:91:4c:27: b1:09:26:8e:9f:00:dd:35:dc:75:c7:b1:2a:24:e5: c4:b8:61:f6:be:75:84:a5:5d:65:32:c4:5a:90:10: 51:03:b0:a0:23:d2:30:34:4c:62:93:b7:5d:04:64: dc:33:55:d3:af:f1:c8:8e:82:61:28:89:2f:50:c5: 34:f8:d9:3c:90:44:f5:f4:b2:0c:b5:14:ba:6d:7e: ba:3a:88:ce:b9:a5:ef:b8:8d:39:cf:dc:53:8e:aa: f4:5d:50:c1:27:ec:48:d7:da:b5:4a:bd:70:0b:fd: ac:08:a5:54:43:1b:2a:0f:71:0d:33:b9:15:bf:9f: 6f:cc:88:84:c9:33:aa:cc:86:4a:32:b6:08:30:d7: b5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:66:9B:C1:58:20:BA:7D:B7:68:11:0D:82:1D:95:51:3B:C2:FD:79 X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c0:7e:8a:03:73:2e:7f:30:29:12:7d:8d:28:15:16:44:27: 9c:71:96:d6:4b:e7:c3:ef:bc:4e:fc:a4:8f:41:16:3f:ba:e3: 77:e7:32:f0:08:18:0b:3f:00:1a:fe:61:b7:72:5d:d5:57:8b: f2:ba:89:3c:94:5e:28:68:ab:03:5d:8b:09:a4:c4:64:2b:49: b6:06:a4:39:d6:c2:b2:74:9f:51:e3:31:34:42:f8:ac:93:d6: 53:86:43:13:9e:9b:2c:d7:a5:3f:d6:ff:46:65:49:65:c8:89: 50:dc:ab:67:aa:7b:b8:28:fc:ee:8a:02:69:84:93:54:e6:ca: e8:86:18:2a:92:23:89:4b:62:eb:70:e7:26:01:e9:05:b5:7e: af:b2:ff:9b:40:ec:e4:a6:af:f0:8b:e7:1d:a7:00:a2:6c:62: af:4f:94:b9:66:b6:ed:3f:7d:8f:28:e1:b8:6f:83:8f:19:71: bc:5a:86:50:b6:35:23:00:13:c4:0e:5e:ee:f1:3a:b8:fc:c7: cb:17:f1:77:eb:4b:be:80:cc:b3:89:ec:55:f3:e9:4c:07:56: b4:e9:8e:78:04:4c:b3:36:46:08:49:4f:33:a1:11:11:9f:14: 45:ff:b7:a1:d0:b3:5d:2a:d3:23:d8:28:1f:28:53:fb:10:52: 55:ae:80:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2NPSV/vzuj1QdnZTCgzkFwNwwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNjA0MTcxOTE2NDBaFw0yNjA0MjEwNjEwNDBaMDMxMTAvBgNV BAMTKDhFNjY5QkMxNTgyMEJBN0RCNzY4MTEwRDgyMUQ5NTUxM0JDMkZENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Lh53SsaTGLMs+7+piE982NN4 miV7q8Hq3YN8KT5Gf2A0IN8awAlE/mb13gUq02LmWs8QL/JxwG6WDW5tq+3LQWLy lyivcjQbyj1z3rO0vDlQUcPXvlulBcjzz6x59TwcYYLLQ2sf2VKauI/Tw4CwN2FM aJFMJ7EJJo6fAN013HXHsSok5cS4Yfa+dYSlXWUyxFqQEFEDsKAj0jA0TGKTt10E ZNwzVdOv8ciOgmEoiS9QxTT42TyQRPX0sgy1FLptfro6iM65pe+4jTnP3FOOqvRd UMEn7EjX2rVKvXAL/awIpVRDGyoPcQ0zuRW/n2/MiITJM6rMhkoytggw17XVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjmabwVggun23aBENgh2VUTvC/XkwHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3AfooDcy5/MCkSfY0oFRZEJ5xxltZL58Pv vE78pI9BFj+643fnMvAIGAs/ABr+YbdyXdVXi/K6iTyUXihoqwNdiwmkxGQrSbYG pDnWwrJ0n1HjMTRC+KyT1lOGQxOemyzXpT/W/0ZlSWXIiVDcq2eqe7go/O6KAmmE k1TmyuiGGCqSI4lLYutw5yYB6QW1fq+y/5tA7OSmr/CL5x2nAKJsYq9PlLlmtu0/ fY8o4bhvg48ZcbxahlC2NSMAE8QOXu7xOrj8x8sX8XfrS76AzLOJ7FXz6UwHVrTp jngETLM2RghJTzOhERGfFEX/t6HQs10q0yPYKB8oU/sQUlWugHM= -----END CERTIFICATE-----Generated at Fri Apr 17 23:47:05 2026 by rpki-client