$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: n9URRPIhXPgfxJWl0xNarYuQlDRW1aBRNZDOO6X1BNc= Subject key identifier: C3:24:F4:B1:54:C3:03:24:08:10:E1:AC:73:BB:E3:05:C4:2A:3D:CD Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 5963680A26E864E8C3CB4063CDFD49BF682C9C4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 01EE Signing time: Wed 15 Apr 2026 09:41:39 +0000 Manifest this update: Wed 15 Apr 2026 09:36:39 +0000 Manifest next update: Sat 18 Apr 2026 19:20:39 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: T/urQJ+82QgaKD9FjVWVBWC5pqw/fxNdqK4bVUSVM74=) 2: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: Ga/5NJE54i1KEjXaoQs5prnzr9qVPpKXukQsJc/f5dc=) 3: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: sNTsns3ST7lmT3Lzq1+VabwjCefZeBfZWQ1CC+0VBzY=) 4: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: rH6v5NksQAZ7i1x7vYF4pP0Dlbp5vcZTM15lBp2e+jM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:63:68:0a:26:e8:64:e8:c3:cb:40:63:cd:fd:49:bf:68:2c:9c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Apr 15 09:36:39 2026 GMT Not After : Apr 18 19:20:39 2026 GMT Subject: CN=C324F4B154C303240810E1AC73BBE305C42A3DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:4c:8e:e8:1f:19:5e:e0:28:d2:3c:01:c4: 8c:b9:c9:67:c3:a1:65:ec:76:a2:ce:45:d6:9f:80: 89:a0:93:89:e4:dd:93:1c:ab:a2:24:07:52:81:e9: 3d:76:b2:a8:90:42:d3:7c:21:89:7e:3a:9d:9c:54: 74:a4:1f:5c:3f:45:ba:2e:e5:e9:55:ff:72:4b:51: 64:c1:37:06:48:2c:94:2c:58:95:f7:49:47:96:fc: 17:56:be:08:db:56:cb:61:5d:6f:4e:dc:9f:61:c1: bd:6d:c8:c2:5f:18:44:61:8e:e9:93:2c:26:41:34: 01:6c:b3:30:99:a9:24:5a:90:7f:82:c8:51:12:4e: 4e:59:4a:f3:e1:63:91:98:36:cc:31:d6:17:45:21: f1:1e:9a:15:d7:dc:b1:a2:1f:7e:c2:08:27:61:a2: 34:9d:20:e2:5c:84:66:f2:eb:65:74:a5:1c:9c:44: 60:4b:d7:60:33:5b:4e:91:b5:df:32:8e:89:c1:e0: d2:bc:85:a1:4b:42:8d:12:ec:75:eb:3e:dd:af:14: 21:36:5e:8c:03:69:0a:60:00:86:c2:5f:d1:a8:b0: 18:36:e0:c7:92:2f:a4:67:a5:d4:63:25:39:39:bf: ea:9b:c9:64:2b:93:a2:b4:31:3e:6c:4e:58:e9:9f: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:24:F4:B1:54:C3:03:24:08:10:E1:AC:73:BB:E3:05:C4:2A:3D:CD X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:03:46:7a:0f:59:27:af:1b:05:60:bc:0e:ad:15:56:07:f6: f3:09:12:f0:9f:72:01:02:93:de:af:83:a6:5a:10:ac:71:8a: b4:68:ec:a4:10:f7:cc:63:35:ff:7b:46:a2:91:da:24:a2:4c: 55:6d:af:20:f3:ca:d2:61:e7:8b:a3:37:29:0c:d4:38:af:47: 49:72:fe:2a:eb:10:b0:a0:33:dd:c8:a5:6f:f3:5c:4b:4b:28: 8d:9e:69:d2:5c:85:e3:73:97:d3:be:08:ca:00:7a:5e:ee:5e: f7:43:54:2c:bc:48:dd:80:25:74:a9:bf:b1:5e:97:c7:a1:13: ac:aa:f5:fb:a3:aa:ea:21:2a:b6:bf:34:ca:b0:df:94:29:a1: ab:9b:5a:dc:93:ed:59:97:dc:5a:7e:43:71:a8:24:f8:bf:11: b2:c3:84:ac:38:39:ce:dc:83:95:91:58:a1:03:68:33:ad:94: 05:3e:6d:70:8c:4b:ad:33:5b:fa:b3:57:6e:03:f8:cf:91:f8: 05:9a:7b:96:0e:b5:e7:11:c1:61:32:75:8a:2a:87:80:00:f8: 03:26:b7:80:48:36:34:a5:f2:c5:45:89:41:c9:b9:60:4c:93: ea:7a:a4:d3:64:7b:90:47:1f:8d:b3:57:dc:16:d0:6a:41:45: d0:9d:19:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWNoCiboZOjDy0Bjzf1Jv2gsnEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNjA0MTUwOTM2MzlaFw0yNjA0MTgxOTIwMzlaMDMxMTAvBgNV BAMTKEMzMjRGNEIxNTRDMzAzMjQwODEwRTFBQzczQkJFMzA1QzQyQTNEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfGkyO6B8ZXuAo0jwBxIy5yWfD oWXsdqLORdafgImgk4nk3ZMcq6IkB1KB6T12sqiQQtN8IYl+Op2cVHSkH1w/Rbou 5elV/3JLUWTBNwZILJQsWJX3SUeW/BdWvgjbVsthXW9O3J9hwb1tyMJfGERhjumT LCZBNAFsszCZqSRakH+CyFESTk5ZSvPhY5GYNswx1hdFIfEemhXX3LGiH37CCCdh ojSdIOJchGby62V0pRycRGBL12AzW06Rtd8yjonB4NK8haFLQo0S7HXrPt2vFCE2 XowDaQpgAIbCX9GosBg24MeSL6RnpdRjJTk5v+qbyWQrk6K0MT5sTljpn1n3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwyT0sVTDAyQIEOGsc7vjBcQqPc0wHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4DRnoPWSevGwVgvA6tFVYH9vMJEvCfcgEC k96vg6ZaEKxxirRo7KQQ98xjNf97RqKR2iSiTFVtryDzytJh54ujNykM1DivR0ly /irrELCgM93IpW/zXEtLKI2eadJcheNzl9O+CMoAel7uXvdDVCy8SN2AJXSpv7Fe l8ehE6yq9fujquohKra/NMqw35QpoaubWtyT7VmX3Fp+Q3GoJPi/EbLDhKw4Oc7c g5WRWKEDaDOtlAU+bXCMS60zW/qzV24D+M+R+AWae5YOtecRwWEydYoqh4AA+AMm t4BINjSl8sVFiUHJuWBMk+p6pNNke5BHH42zV9wW0GpBRdCdGTg= -----END CERTIFICATE-----Generated at Fri Apr 17 20:35:27 2026 by rpki-client