$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: Ag8q53Nfj0PkDIRRB83z9erjdjJUowb8JBVIfjFJE3c= Subject key identifier: C1:62:D3:C8:70:ED:C4:CA:07:55:1D:50:B6:02:43:FB:9B:7C:17:81 Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 400BF85F82EECFE4BB223AF34772DCD8326F23F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 02F9 Signing time: Sat 18 Apr 2026 01:52:25 +0000 Manifest this update: Sat 18 Apr 2026 01:47:25 +0000 Manifest next update: Tue 21 Apr 2026 04:31:25 +0000 Files and hashes: 1: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: 8LjqOiz81QyvmDpLcteO4ZOvXG/2vN8IYnjZQt7O3XQ=) 2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: siPS5QoYum/BXEiNROt4IMRxgn1AB6K77rmnuo2DlKI=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0b:f8:5f:82:ee:cf:e4:bb:22:3a:f3:47:72:dc:d8:32:6f:23:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Apr 18 01:47:25 2026 GMT Not After : Apr 21 04:31:25 2026 GMT Subject: CN=C162D3C870EDC4CA07551D50B60243FB9B7C1781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:64:6f:cc:3a:af:43:85:60:6c:d0:4e:e2: f3:5a:c5:e8:c8:db:69:ff:26:2c:2f:5c:15:f4:14: a1:e5:e8:ea:37:4e:85:82:36:d3:b8:1e:8e:b4:31: 16:3d:01:bb:68:3f:68:3d:9f:90:cb:2f:c4:a0:b4: 3b:9d:cc:b6:9b:a9:24:73:2f:b2:ef:50:47:8e:b9: d3:2e:44:80:7d:06:cb:c1:cd:59:24:94:78:bb:72: aa:ba:f8:de:8f:34:5d:ce:ae:15:48:6a:f4:d6:47: c9:46:16:39:50:cc:de:f0:39:83:a0:f6:70:b4:c9: cb:97:2f:6c:33:21:5a:fa:44:d0:54:19:56:95:83: cb:28:61:14:54:34:79:3b:b6:d0:4b:f5:3b:56:10: d2:9b:7f:72:9e:bf:65:9f:20:82:cf:0a:34:4c:ea: 69:cb:ef:28:c0:78:fa:8b:47:78:df:94:ff:0d:28: 25:c0:70:7e:c2:5d:c1:7a:81:70:47:b8:03:e1:7c: ed:9a:7c:ad:b1:fc:10:66:97:95:b6:03:04:96:4f: 4a:d2:b7:9f:be:8a:96:17:ac:e9:fa:63:c6:00:b3: 58:30:61:85:31:2e:9c:a0:65:59:8e:3e:e6:a3:01: 64:67:19:d8:10:a6:7e:78:97:65:10:ec:f3:60:0f: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:62:D3:C8:70:ED:C4:CA:07:55:1D:50:B6:02:43:FB:9B:7C:17:81 X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:7b:b7:6d:a4:a7:75:e0:c8:14:83:ac:bf:68:75:9b:66:3f: c3:c2:72:d0:16:8b:c2:7d:41:4a:c7:21:73:27:f8:e8:35:e9: 53:13:88:83:ad:8e:02:10:43:02:00:82:78:96:00:a1:1c:35: b4:80:f2:be:e7:8b:2e:fb:b3:a2:9e:e9:47:cc:3f:f6:1b:02: c0:41:2b:24:5f:dd:11:88:4b:e1:83:8a:78:15:2f:2d:33:06: a8:45:5e:a7:47:3c:37:36:60:78:28:a1:f2:d1:77:1b:0c:df: d7:6d:e9:44:28:41:e4:9f:37:07:b8:3d:b8:4c:a4:7c:54:bb: 76:c9:5e:4e:d7:02:6a:46:a6:0e:ff:00:d2:40:ba:76:2a:bf: 1e:4b:56:3c:53:87:d6:7a:ab:a2:e5:cf:a4:1f:2f:21:b5:c3: bc:dc:14:2d:65:f2:42:b3:32:93:1a:e4:a0:5d:c9:2a:ad:a5: c3:83:3e:27:6b:01:17:6e:02:ad:66:db:68:f7:6f:e7:e1:6e: cb:7d:e2:15:d2:01:e7:da:0a:72:3d:5c:7a:0f:10:c2:29:2f: b9:6a:68:bc:d2:96:12:19:e2:20:d1:86:b8:19:a6:eb:08:b7: 9b:33:31:0b:db:4b:bf:c2:93:92:9b:0d:8c:90:c9:3a:70:17: 3c:27:8c:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAv4X4Luz+S7IjrzR3Lc2DJvI/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNjA0MTgwMTQ3MjVaFw0yNjA0MjEwNDMxMjVaMDMxMTAvBgNV BAMTKEMxNjJEM0M4NzBFREM0Q0EwNzU1MUQ1MEI2MDI0M0ZCOUI3QzE3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcimRvzDqvQ4VgbNBO4vNaxejI 22n/JiwvXBX0FKHl6Oo3ToWCNtO4Ho60MRY9AbtoP2g9n5DLL8SgtDudzLabqSRz L7LvUEeOudMuRIB9BsvBzVkklHi7cqq6+N6PNF3OrhVIavTWR8lGFjlQzN7wOYOg 9nC0ycuXL2wzIVr6RNBUGVaVg8soYRRUNHk7ttBL9TtWENKbf3Kev2WfIILPCjRM 6mnL7yjAePqLR3jflP8NKCXAcH7CXcF6gXBHuAPhfO2afK2x/BBml5W2AwSWT0rS t5++ipYXrOn6Y8YAs1gwYYUxLpygZVmOPuajAWRnGdgQpn54l2UQ7PNgD47fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwWLTyHDtxMoHVR1QtgJD+5t8F4EwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACV7t22kp3XgyBSDrL9odZtmP8PCctAWi8J9 QUrHIXMn+Og16VMTiIOtjgIQQwIAgniWAKEcNbSA8r7niy77s6Ke6UfMP/YbAsBB KyRf3RGIS+GDingVLy0zBqhFXqdHPDc2YHgoofLRdxsM39dt6UQoQeSfNwe4PbhM pHxUu3bJXk7XAmpGpg7/ANJAunYqvx5LVjxTh9Z6q6Llz6QfLyG1w7zcFC1l8kKz MpMa5KBdySqtpcODPidrARduAq1m22j3b+fhbst94hXSAefaCnI9XHoPEMIpL7lq aLzSlhIZ4iDRhrgZpusIt5szMQvbS7/Ck5KbDYyQyTpwFzwnjJY= -----END CERTIFICATE-----Generated at Sun Apr 19 14:07:33 2026 by rpki-client