$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: lEG2j1JzaMfZZ5YFE3vsWpcFdg6qQ65D2LD46qEEBA8= Subject key identifier: CC:95:24:71:8B:C4:DA:B8:7C:5F:D5:CF:AB:23:4E:AB:35:8C:69:79 Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 40B088CD4D0BD18C1B4AD5A40E4AA82DF16B64FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 056A Signing time: Wed 15 Apr 2026 21:41:13 +0000 Manifest this update: Wed 15 Apr 2026 21:36:13 +0000 Manifest next update: Sun 19 Apr 2026 01:52:13 +0000 Files and hashes: 1: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) 2: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: sf6HZbb1/La9LseEuhLc5TNZc08fZeluiXyZfQFqwog=) 3: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b0:88:cd:4d:0b:d1:8c:1b:4a:d5:a4:0e:4a:a8:2d:f1:6b:64:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Apr 15 21:36:13 2026 GMT Not After : Apr 19 01:52:13 2026 GMT Subject: CN=CC9524718BC4DAB87C5FD5CFAB234EAB358C6979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:43:03:cb:a4:98:d0:9c:3a:c2:cc:58:6a: 77:95:62:48:0a:c9:69:72:e9:a1:d8:da:09:c9:2b: aa:2b:92:b0:22:cb:c9:47:21:ac:eb:13:71:67:15: 93:95:f6:71:cd:99:a4:17:ac:a4:f0:99:a0:4d:ae: ad:93:ca:1c:37:ff:5b:0e:6e:27:df:b6:69:32:81: fd:b1:a0:7c:ac:6d:a1:b1:04:a9:43:f4:a5:20:6e: 59:c7:0e:86:61:a1:97:f2:3c:49:69:9a:ca:16:e0: 48:56:f1:1c:ec:da:6c:77:1e:bc:68:0a:7b:a2:86: f6:44:7b:c7:0a:a7:63:e3:68:cb:e4:e0:3a:48:f6: 3a:cd:b4:cc:25:53:8e:ac:9d:31:f6:c5:52:7a:2a: e9:c2:90:b4:ac:bd:f0:1d:0e:36:46:0e:03:41:5e: 99:1a:7b:e0:59:6f:e8:9e:6c:5c:db:35:03:23:0a: ca:15:e7:86:11:16:c1:66:16:b3:3a:38:cd:0b:bd: 7d:41:c0:dc:0c:aa:90:86:71:80:7a:6a:22:75:d5: 19:1a:d0:23:b6:33:03:5a:e6:ee:8d:76:2e:0a:aa: db:ed:7e:96:9c:58:72:31:4a:4b:fb:80:45:8b:60: 6d:a1:d9:33:df:cc:0e:c3:93:a5:64:38:f5:ee:ec: 6d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:95:24:71:8B:C4:DA:B8:7C:5F:D5:CF:AB:23:4E:AB:35:8C:69:79 X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4a:bc:fd:6c:9d:68:47:f3:a5:2a:61:79:7d:1e:0c:38:1c: c5:db:66:ff:fd:31:f9:8f:88:43:2f:7b:0c:cd:4e:1c:4a:cc: 74:e0:9f:bb:ea:a1:f5:43:f1:a2:c9:56:ac:ec:73:aa:d5:02: c8:7b:75:8e:b1:41:7c:db:77:5a:87:fe:30:7c:8c:f6:46:53: f2:7a:2d:ba:8f:29:b6:84:17:b9:10:ec:bf:ba:82:98:31:8e: 9f:3d:a7:f1:c0:8e:05:6b:0b:86:82:3e:00:c8:28:d6:ce:ef: 2c:ab:fa:22:d1:b6:a3:e7:ee:cd:be:8c:f3:72:7f:9e:ad:63: 90:38:0a:40:99:2f:10:ce:f9:f7:54:2a:88:f6:8c:7f:e8:0b: 35:71:1e:c2:33:da:7b:8e:8a:5a:ba:3c:75:5b:78:9a:13:49: 1e:58:75:e7:75:ee:09:cd:e4:a9:af:43:a7:e9:0f:18:fd:2f: ac:9b:11:0f:f3:d3:b3:9a:7b:b3:44:8d:9c:24:b9:c2:5b:a5: 78:8f:b7:19:96:ed:c7:05:e8:5e:92:94:a7:88:80:e9:56:af: ab:8a:6b:d3:20:ad:34:de:26:eb:cd:80:48:d6:ae:12:0c:a0: 2a:85:8f:d7:84:3d:6d:5c:59:9e:b7:a5:10:8e:2c:2c:f7:e8: 16:78:7c:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLCIzU0L0YwbStWkDkqoLfFrZP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNjA0MTUyMTM2MTNaFw0yNjA0MTkwMTUyMTNaMDMxMTAvBgNV BAMTKENDOTUyNDcxOEJDNERBQjg3QzVGRDVDRkFCMjM0RUFCMzU4QzY5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqkMDy6SY0Jw6wsxYaneVYkgK yWly6aHY2gnJK6orkrAiy8lHIazrE3FnFZOV9nHNmaQXrKTwmaBNrq2Tyhw3/1sO bifftmkygf2xoHysbaGxBKlD9KUgblnHDoZhoZfyPElpmsoW4EhW8Rzs2mx3Hrxo CnuihvZEe8cKp2PjaMvk4DpI9jrNtMwlU46snTH2xVJ6KunCkLSsvfAdDjZGDgNB Xpkae+BZb+iebFzbNQMjCsoV54YRFsFmFrM6OM0LvX1BwNwMqpCGcYB6aiJ11Rka 0CO2MwNa5u6Ndi4KqtvtfpacWHIxSkv7gEWLYG2h2TPfzA7Dk6VkOPXu7G0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJUkcYvE2rh8X9XPqyNOqzWMaXkwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNKvP1snWhH86UqYXl9Hgw4HMXbZv/9MfmP iEMvewzNThxKzHTgn7vqofVD8aLJVqzsc6rVAsh7dY6xQXzbd1qH/jB8jPZGU/J6 LbqPKbaEF7kQ7L+6gpgxjp89p/HAjgVrC4aCPgDIKNbO7yyr+iLRtqPn7s2+jPNy f56tY5A4CkCZLxDO+fdUKoj2jH/oCzVxHsIz2nuOilq6PHVbeJoTSR5Yded17gnN 5KmvQ6fpDxj9L6ybEQ/z07Oae7NEjZwkucJbpXiPtxmW7ccF6F6SlKeIgOlWr6uK a9MgrTTeJuvNgEjWrhIMoCqFj9eEPW1cWZ63pRCOLCz36BZ4fPk= -----END CERTIFICATE-----Generated at Fri Apr 17 20:43:30 2026 by rpki-client