$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft File: 98906779AB8F30762B65B3E6AD7F48326A08605E.mft (raw, json) Hash identifier: 1s0D6sO/TGuwlf0YYjb+WER/hCpRAKUfd8xzI66m87o= Subject key identifier: E2:DF:3E:45:C5:1B:82:1F:DD:A2:32:5C:D1:F4:7C:78:AE:AB:94:C9 Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E Certificate issuer: /CN=98906779AB8F30762B65B3E6AD7F48326A08605E Certificate serial: 140337ACBA7DBA90D0593AF11AC0DDF2943FEA66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft Manifest number: 01DE Signing time: Thu 16 Apr 2026 23:12:57 +0000 Manifest this update: Thu 16 Apr 2026 23:07:57 +0000 Manifest next update: Mon 20 Apr 2026 05:23:57 +0000 Files and hashes: 1: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: sxrk5CDSoBL56Ttog6hwyxfrtBwflddJUqnqqBhlagE=) 2: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 7aAnLwLyoxNgqlWxFpWfDVj1GSIKBYbbGGdGC77eU1M=) 3: 98906779AB8F30762B65B3E6AD7F48326A08605E.crl (hash: hhZzJhrouqHhngRkuYUMe1R4zjYr2fTMRCZh50mYKG0=) 4: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: GTSIKbFo5NJqRXJRvAQHCqPxj9pi/3T3xFnH2S49HTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:03:37:ac:ba:7d:ba:90:d0:59:3a:f1:1a:c0:dd:f2:94:3f:ea:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E Validity Not Before: Apr 16 23:07:57 2026 GMT Not After : Apr 20 05:23:57 2026 GMT Subject: CN=E2DF3E45C51B821FDDA2325CD1F47C78AEAB94C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:bb:84:cd:82:9f:94:09:11:5b:cb:81:86: 44:d7:4f:d9:d0:fb:84:21:71:f9:96:c8:fe:3f:e8: ee:0c:67:8b:d1:82:11:bd:26:0f:30:44:25:1e:f8: 1a:2b:b8:7d:15:64:c8:fa:51:4b:b8:e7:c2:de:f5: c3:77:a0:68:5a:69:50:de:f5:7f:7a:3d:81:18:f5: 3c:a9:be:2a:50:e3:d1:bf:99:93:c9:ef:28:8d:69: eb:13:a1:cf:2b:04:7f:e6:c8:67:0c:1d:56:44:b2: 3c:4f:72:b6:6e:52:5f:01:83:f8:a6:5a:f3:b0:cb: 04:eb:36:d7:43:65:cc:e9:9b:96:18:ee:71:eb:5c: 7c:e3:40:3f:8d:a9:93:0a:ec:10:b0:0e:9d:36:64: c7:43:1f:b7:e6:f6:93:fa:bf:6c:9c:d1:2b:fe:5c: 49:2c:5f:15:eb:73:9b:6c:22:e5:07:ba:48:47:42: 68:f0:37:87:d5:9b:9f:09:c7:cc:c3:56:16:62:9e: 43:e0:1b:2b:bd:0b:11:2d:ad:57:47:31:73:e5:a8: 68:57:6d:7d:6b:82:b3:2d:d6:57:4d:01:3f:b8:0d: b3:fb:2a:35:76:f6:ff:ad:ed:a0:b8:5a:ff:fb:c7: ee:4b:fe:e7:72:65:93:a1:e9:9b:0d:d5:a1:56:f2: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DF:3E:45:C5:1B:82:1F:DD:A2:32:5C:D1:F4:7C:78:AE:AB:94:C9 X509v3 Authority Key Identifier: keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cd:d6:75:5f:ec:26:d8:3d:cd:66:d0:33:69:5d:af:aa:e0: 52:9b:7b:29:ff:18:b4:2c:d5:ca:be:d1:63:1b:6a:69:e4:38: 24:4a:e0:13:aa:12:fb:71:48:16:11:56:0c:9b:99:f1:b8:79: c9:8c:c9:4b:f6:a6:83:ca:79:6a:3d:45:fd:7c:8d:0f:81:e2: 5d:e1:9e:84:4b:0a:cb:f7:d2:4e:f5:79:43:cb:68:16:7c:15: 4f:6f:4d:3a:70:2d:63:4e:d3:5f:14:72:3c:61:d5:0e:7e:c8: 07:34:57:a6:27:38:49:84:28:5a:82:5c:a0:08:1b:3d:1d:12: f0:8f:ea:17:83:7b:8f:08:80:20:58:f6:b7:5d:6c:e3:5a:ef: 2e:47:ac:ad:14:90:32:e9:f7:04:99:8f:54:25:e5:77:ff:e0: bb:08:dc:d8:78:79:3b:69:f3:7c:06:fc:06:28:66:41:89:5e: c0:22:56:b8:a3:e5:37:81:12:0f:1c:bc:04:8b:d9:68:71:93: 3e:64:7b:1f:c7:9e:d3:fa:68:7d:37:8c:a4:8d:dc:0e:c8:af: dc:29:dc:6d:6a:b8:12:87:66:5a:75:0a:dd:49:18:01:1e:88: fd:89:81:be:56:4d:84:df:53:6d:f8:fb:0e:db:d3:d4:06:0e: 87:df:0d:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAM3rLp9upDQWTrxGsDd8pQ/6mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2 QTA4NjA1RTAeFw0yNjA0MTYyMzA3NTdaFw0yNjA0MjAwNTIzNTdaMDMxMTAvBgNV BAMTKEUyREYzRTQ1QzUxQjgyMUZEREEyMzI1Q0QxRjQ3Qzc4QUVBQjk0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30ruEzYKflAkRW8uBhkTXT9nQ +4QhcfmWyP4/6O4MZ4vRghG9Jg8wRCUe+BoruH0VZMj6UUu458Le9cN3oGhaaVDe 9X96PYEY9TypvipQ49G/mZPJ7yiNaesToc8rBH/myGcMHVZEsjxPcrZuUl8Bg/im WvOwywTrNtdDZczpm5YY7nHrXHzjQD+NqZMK7BCwDp02ZMdDH7fm9pP6v2yc0Sv+ XEksXxXrc5tsIuUHukhHQmjwN4fVm58Jx8zDVhZinkPgGyu9CxEtrVdHMXPlqGhX bX1rgrMt1ldNAT+4DbP7KjV29v+t7aC4Wv/7x+5L/udyZZOh6ZsN1aFW8krTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4t8+RcUbgh/dojJc0fR8eK6rlMkwHwYDVR0j BBgwFoAUmJBneauPMHYrZbPmrX9IMmoIYF4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE0MDA4OS02MDQxLTQ1ZWQtOGU0NC1hOTk3YzhhY2Y0ODAvMC85ODkwNjc3OUFC OEYzMDc2MkI2NUIzRTZBRDdGNDgzMjZBMDg2MDVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2QTA4 NjA1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4 MzI2QTA4NjA1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbN1nVf7CbYPc1m0DNpXa+q4FKbeyn/GLQs 1cq+0WMbamnkOCRK4BOqEvtxSBYRVgybmfG4ecmMyUv2poPKeWo9Rf18jQ+B4l3h noRLCsv30k71eUPLaBZ8FU9vTTpwLWNO018Ucjxh1Q5+yAc0V6YnOEmEKFqCXKAI Gz0dEvCP6heDe48IgCBY9rddbONa7y5HrK0UkDLp9wSZj1Ql5Xf/4LsI3Nh4eTtp 83wG/AYoZkGJXsAiVrij5TeBEg8cvASL2Whxkz5kex/HntP6aH03jKSN3A7Ir9wp 3G1quBKHZlp1Ct1JGAEeiP2Jgb5WTYTfU234+w7b09QGDoffDRQ= -----END CERTIFICATE-----Generated at Fri Apr 17 19:59:16 2026 by rpki-client