$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: P/EUiQ0wxRl4AmSHRCE2KZ/NkQl9/39G4fq453M8h9I= Subject key identifier: DD:45:EB:94:58:F0:CB:7D:85:C6:ED:BE:14:E3:17:D3:1E:36:3D:8F Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 4C7E5DA3B7BC67DB4DD7ECDAFEC0685E2F8A4A9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 0565 Signing time: Fri 17 Apr 2026 02:41:54 +0000 Manifest this update: Fri 17 Apr 2026 02:36:54 +0000 Manifest next update: Mon 20 Apr 2026 14:37:54 +0000 Files and hashes: 1: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) 2: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: fkMgb3kDzZ5/8C3q3X8zKM9Kdwyhffxb+fTN/I+YR5E=) 3: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7e:5d:a3:b7:bc:67:db:4d:d7:ec:da:fe:c0:68:5e:2f:8a:4a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Apr 17 02:36:54 2026 GMT Not After : Apr 20 14:37:54 2026 GMT Subject: CN=DD45EB9458F0CB7D85C6EDBE14E317D31E363D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:cf:15:64:81:30:e2:e7:99:91:10:00:12: 69:67:7d:2d:3b:c8:cb:0f:91:7d:5a:f7:f4:80:e8: 01:e1:a5:c0:3f:b7:71:89:87:ee:2f:c3:33:84:75: 49:32:1d:46:e0:6e:e3:d0:62:a1:49:a5:e8:20:8d: ae:e1:c9:0f:2d:fa:8a:ca:45:18:12:ff:bd:a8:1b: 26:f1:29:c3:88:7a:40:a3:9a:52:a0:a9:2e:b7:e6: d9:ed:ee:1b:12:0a:51:4d:c5:1a:63:d5:96:ba:88: 21:12:50:9f:c7:b3:61:91:a3:e3:4c:3b:19:08:7b: 0e:52:b2:73:70:64:69:03:24:da:09:1f:56:63:2d: 0f:14:bd:87:ee:bc:ef:3f:0a:35:04:a7:e7:b5:36: 8a:05:e8:2c:dc:a2:b6:f4:79:de:48:4e:71:48:98: 1d:26:cb:a2:19:d5:b5:4c:39:f8:0f:aa:e2:a1:82: ce:a3:fb:de:6a:b2:14:1a:4a:4f:20:fa:b1:41:6c: e0:da:9e:3e:ce:8a:39:ac:66:83:b4:8d:c6:e2:11: fc:b3:05:01:05:ba:b9:62:a2:3c:d7:92:29:4a:48: c0:7b:69:2f:ca:eb:5e:ac:f5:9d:d7:64:3f:a0:10: 15:47:97:fa:43:f9:a1:06:52:c3:53:b5:8a:08:56: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:45:EB:94:58:F0:CB:7D:85:C6:ED:BE:14:E3:17:D3:1E:36:3D:8F X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fc:ce:ca:0e:09:6b:d4:7b:e0:95:df:66:d0:d3:9f:85:50: 27:d9:f2:ad:f2:05:59:db:68:90:3e:5c:dc:96:8b:f8:a6:0f: 68:3f:b9:b1:f6:5c:fe:93:2e:9c:01:52:de:ba:bf:ce:c7:f4: f7:75:5c:e8:0f:42:a8:8f:e6:31:f8:4b:7a:3a:e6:30:22:f0: da:82:7a:6e:d8:e9:e6:2f:c3:7b:c9:69:1b:1e:da:48:ed:6a: 3b:3d:f0:ec:c2:4d:0c:0c:98:8b:08:44:40:8c:76:14:7e:e6: 66:73:f0:c3:f4:70:77:f9:4a:28:69:82:18:0a:c9:ec:6e:e3: dd:cc:2c:db:ce:29:39:62:db:ea:d7:44:75:ec:31:f6:50:35: 0a:9f:6a:95:c3:4a:97:9a:70:b5:db:72:36:06:2c:74:c3:48: 4d:6c:3f:e2:4c:bd:7b:af:88:d9:b8:45:10:51:38:f5:7a:65: 25:66:d4:e0:0a:ba:1d:ad:51:d4:94:02:1c:cd:e0:06:c0:98: d5:3b:cc:f3:92:94:b5:b1:74:10:24:3d:cb:c0:94:2a:90:7c: 9b:02:d2:3c:16:53:e0:02:81:4d:03:78:80:ac:0a:e8:9b:31: cc:72:44:42:d4:d1:73:a6:50:c9:60:d6:44:a0:8a:c2:7b:21: fd:0e:b2:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTH5do7e8Z9tN1+za/sBoXi+KSp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNjA0MTcwMjM2NTRaFw0yNjA0MjAxNDM3NTRaMDMxMTAvBgNV BAMTKERENDVFQjk0NThGMENCN0Q4NUM2RURCRTE0RTMxN0QzMUUzNjNEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55M8VZIEw4ueZkRAAEmlnfS07 yMsPkX1a9/SA6AHhpcA/t3GJh+4vwzOEdUkyHUbgbuPQYqFJpeggja7hyQ8t+orK RRgS/72oGybxKcOIekCjmlKgqS635tnt7hsSClFNxRpj1Za6iCESUJ/Hs2GRo+NM OxkIew5SsnNwZGkDJNoJH1ZjLQ8UvYfuvO8/CjUEp+e1NooF6Czcorb0ed5ITnFI mB0my6IZ1bVMOfgPquKhgs6j+95qshQaSk8g+rFBbODanj7OijmsZoO0jcbiEfyz BQEFurliojzXkilKSMB7aS/K616s9Z3XZD+gEBVHl/pD+aEGUsNTtYoIVhjZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3UXrlFjwy32Fxu2+FOMX0x42PY8wHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT8zsoOCWvUe+CV32bQ05+FUCfZ8q3yBVnb aJA+XNyWi/imD2g/ubH2XP6TLpwBUt66v87H9Pd1XOgPQqiP5jH4S3o65jAi8NqC em7Y6eYvw3vJaRse2kjtajs98OzCTQwMmIsIRECMdhR+5mZz8MP0cHf5SihpghgK yexu493MLNvOKTli2+rXRHXsMfZQNQqfapXDSpeacLXbcjYGLHTDSE1sP+JMvXuv iNm4RRBROPV6ZSVm1OAKuh2tUdSUAhzN4AbAmNU7zPOSlLWxdBAkPcvAlCqQfJsC 0jwWU+ACgU0DeICsCuibMcxyRELU0XOmUMlg1kSgisJ7If0OslE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:33:09 2026 by rpki-client