$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft File: 98906779AB8F30762B65B3E6AD7F48326A08605E.mft (raw, json) Hash identifier: 4mXJv0rDDx1SF1XFHu+kUR1Pq8jvo95yIpq+GUBMGYI= Subject key identifier: CD:F8:CE:AC:7B:C0:0D:9A:F9:4B:7B:0E:11:D1:B5:CE:EA:75:B5:78 Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E Certificate issuer: /CN=98906779AB8F30762B65B3E6AD7F48326A08605E Certificate serial: 47E3927503CA1D4C74B2E5E163DFAE8E89EAFFE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft Manifest number: 01CA Signing time: Mon 02 Mar 2026 05:02:38 +0000 Manifest this update: Mon 02 Mar 2026 04:57:38 +0000 Manifest next update: Thu 05 Mar 2026 13:21:38 +0000 Files and hashes: 1: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: sxrk5CDSoBL56Ttog6hwyxfrtBwflddJUqnqqBhlagE=) 2: 98906779AB8F30762B65B3E6AD7F48326A08605E.crl (hash: WKeVb7PAEL2/UDjkYA/gCnjy5JtFHAlGfVodpgODm48=) 3: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 7aAnLwLyoxNgqlWxFpWfDVj1GSIKBYbbGGdGC77eU1M=) 4: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: GTSIKbFo5NJqRXJRvAQHCqPxj9pi/3T3xFnH2S49HTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e3:92:75:03:ca:1d:4c:74:b2:e5:e1:63:df:ae:8e:89:ea:ff:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E Validity Not Before: Mar 2 04:57:38 2026 GMT Not After : Mar 5 13:21:38 2026 GMT Subject: CN=CDF8CEAC7BC00D9AF94B7B0E11D1B5CEEA75B578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:0b:c4:29:32:69:c9:62:b2:3c:fa:57:43: 4f:3e:e7:9a:40:c9:ae:11:43:82:e7:d0:c2:93:b3: 6f:32:93:15:da:f4:75:0a:34:79:55:09:1d:82:d1: 4e:87:37:de:fc:45:e8:dc:40:8c:c6:1e:33:c9:fe: 0b:07:b1:97:d3:5b:03:91:f1:32:8a:10:dd:37:23: 4d:5a:1b:84:48:d3:38:ec:ab:f4:a5:d3:bc:b5:43: 2b:d6:32:a7:27:53:e4:6b:4c:05:18:a2:a0:e6:f4: d5:dc:e6:6c:d0:e1:fa:a5:a2:8a:64:76:fb:a0:f5: fb:94:68:a9:93:e9:65:dd:d5:85:5b:80:55:79:78: 90:6c:39:62:cf:ef:69:4b:25:dd:32:33:84:72:06: 0c:15:57:bd:ef:5e:0f:d8:6f:6d:22:78:8e:b8:dd: fe:9c:30:ab:a9:94:c8:71:87:e6:f0:cb:98:fa:ee: d0:4b:6c:e6:2a:fa:b1:a5:7f:99:2c:76:e7:56:ae: 69:0b:d3:17:12:b0:77:bc:dd:d1:5b:8d:11:3a:d6: 40:da:ff:69:95:cb:da:57:90:b1:66:71:e7:e4:27: 4a:90:ad:32:20:6b:54:06:22:4a:53:62:3c:b4:3e: a8:46:05:c1:ad:f6:df:c8:48:21:9a:4f:6e:4d:8d: 16:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F8:CE:AC:7B:C0:0D:9A:F9:4B:7B:0E:11:D1:B5:CE:EA:75:B5:78 X509v3 Authority Key Identifier: keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:90:8b:4b:3e:92:c4:20:42:dd:97:16:84:60:80:e3:7e:7d: 43:d1:3c:29:f9:6b:c0:a4:06:04:bd:6f:37:1f:b9:3f:86:41: 46:d9:58:87:af:e2:e5:94:cf:7c:1c:a1:08:35:e1:e5:26:84: 14:65:1c:16:a6:ba:bf:2a:31:b4:7f:8a:85:94:3e:62:7b:eb: 15:b4:dc:67:87:ec:df:1c:5e:9c:f2:79:4c:5d:87:16:60:60: 90:7b:b1:7a:58:f9:f3:31:89:1f:0c:39:af:3a:6a:4f:b2:32: 71:04:e5:78:87:00:8d:e0:8a:8c:af:cb:fc:35:72:0a:66:90: 31:58:8f:eb:5e:8c:ba:55:ca:38:55:9d:5d:39:07:98:9f:01: 05:43:05:16:2c:8f:bd:df:a4:34:0f:54:fb:bf:a9:b2:40:18: 40:17:1d:24:73:ef:81:00:ca:eb:52:b6:21:6f:c3:34:d0:ec: 62:19:54:58:16:4d:e3:e2:67:3e:2b:b9:6d:bb:26:b5:88:7a: f2:29:ea:21:01:29:ea:6e:ad:18:55:fc:ce:b9:25:f9:80:af: 15:63:2f:8c:03:1e:fa:a9:8c:79:8f:bd:ce:4d:f0:eb:62:d0: 52:87:9b:3d:b9:81:03:6b:46:02:1a:f4:47:fe:e9:70:af:ad: be:d8:87:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR+OSdQPKHUx0suXhY9+ujonq/+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2 QTA4NjA1RTAeFw0yNjAzMDIwNDU3MzhaFw0yNjAzMDUxMzIxMzhaMDMxMTAvBgNV BAMTKENERjhDRUFDN0JDMDBEOUFGOTRCN0IwRTExRDFCNUNFRUE3NUI1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGwvEKTJpyWKyPPpXQ08+55pA ya4RQ4Ln0MKTs28ykxXa9HUKNHlVCR2C0U6HN978RejcQIzGHjPJ/gsHsZfTWwOR 8TKKEN03I01aG4RI0zjsq/Sl07y1QyvWMqcnU+RrTAUYoqDm9NXc5mzQ4fqloopk dvug9fuUaKmT6WXd1YVbgFV5eJBsOWLP72lLJd0yM4RyBgwVV73vXg/Yb20ieI64 3f6cMKuplMhxh+bwy5j67tBLbOYq+rGlf5ksdudWrmkL0xcSsHe83dFbjRE61kDa /2mVy9pXkLFmcefkJ0qQrTIga1QGIkpTYjy0PqhGBcGt9t/ISCGaT25NjRbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzfjOrHvADZr5S3sOEdG1zup1tXgwHwYDVR0j BBgwFoAUmJBneauPMHYrZbPmrX9IMmoIYF4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE0MDA4OS02MDQxLTQ1ZWQtOGU0NC1hOTk3YzhhY2Y0ODAvMC85ODkwNjc3OUFC OEYzMDc2MkI2NUIzRTZBRDdGNDgzMjZBMDg2MDVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4MzI2QTA4 NjA1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOTg5MDY3NzlBQjhGMzA3NjJCNjVCM0U2QUQ3RjQ4 MzI2QTA4NjA1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2Qi0s+ksQgQt2XFoRggON+fUPRPCn5a8Ck BgS9bzcfuT+GQUbZWIev4uWUz3wcoQg14eUmhBRlHBamur8qMbR/ioWUPmJ76xW0 3GeH7N8cXpzyeUxdhxZgYJB7sXpY+fMxiR8MOa86ak+yMnEE5XiHAI3gioyvy/w1 cgpmkDFYj+tejLpVyjhVnV05B5ifAQVDBRYsj73fpDQPVPu/qbJAGEAXHSRz74EA yutStiFvwzTQ7GIZVFgWTePiZz4ruW27JrWIevIp6iEBKepurRhV/M65JfmArxVj L4wDHvqpjHmPvc5N8Oti0FKHmz25gQNrRgIa9Ef+6XCvrb7Yh6k= -----END CERTIFICATE-----Generated at Mon Mar 2 10:44:10 2026 by rpki-client