$ rpki-client -vvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: B7UAfFa0J6Ul3MIYvWdPg2OI8MVGOWoBGUWa2tsW77U= Subject key identifier: 15:44:81:A5:04:15:5A:5C:FA:01:EA:73:81:28:36:CC:0F:FA:7E:BE Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 24033BD40BE56DAB648F1927513B1B7D9B0A4955 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:12:53 +0000 Manifest this update: Wed 17 Jun 2026 04:07:53 +0000 Manifest next update: Thu 18 Jun 2026 06:35:53 +0000 Files and hashes: 1: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) 2: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 3: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: SKJ5oCwNG9XyIhInKcM4ovo0a0I8if61P+k3oSep8Zc=) 4: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 5: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:03:3b:d4:0b:e5:6d:ab:64:8f:19:27:51:3b:1b:7d:9b:0a:49:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Jun 17 04:07:53 2026 GMT Not After : Jun 18 06:35:53 2026 GMT Subject: CN=154481A504155A5CFA01EA73812836CC0FFA7EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:3e:d2:b6:f4:61:7a:47:3a:58:87:fd:7d: 79:c0:a1:ad:e5:d2:ef:bb:79:e0:6f:7b:0b:04:44: 02:21:b1:48:d5:cd:42:47:b8:7e:00:51:ad:4c:40: 39:94:3a:20:19:63:ea:5a:b0:35:e3:b5:f6:32:9b: 9a:3c:20:87:c2:ef:c5:6d:4f:b5:bb:a2:72:c1:71: 94:1b:5c:38:2f:ae:c5:09:17:e5:3f:8c:5a:e1:c3: 4d:a6:c0:a6:6b:ef:97:2d:f4:0c:97:b2:d5:ca:74: da:10:b1:94:94:ab:86:10:26:aa:5f:dd:33:41:a5: 32:dc:22:de:58:6d:f9:46:83:09:1a:fa:b2:c6:ed: 07:03:0b:d3:dd:d0:c7:cd:08:a2:ad:ea:77:3a:e6: ee:2b:db:f2:01:ad:a6:b3:b1:9f:3a:a8:9b:ea:b6: 29:8f:90:e1:c8:10:e0:55:f9:7a:06:87:20:a0:98: 9c:b9:96:8d:fb:55:9c:3e:e0:0a:08:69:22:cd:90: 6f:25:e9:6a:ca:e7:97:68:49:73:79:11:4d:02:e9: 65:0e:8a:fa:9c:8b:39:38:d4:9a:62:ca:d5:f9:e4: 5e:0e:48:93:28:5f:cd:48:bd:fa:34:7a:2b:41:e5: d2:e6:60:33:e7:3a:1d:a7:76:30:c0:bf:85:a9:2a: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:44:81:A5:04:15:5A:5C:FA:01:EA:73:81:28:36:CC:0F:FA:7E:BE X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:80:6f:ca:9f:c4:bc:42:0f:8b:08:3b:ad:c5:48:cb:da:f2: af:38:e5:a4:04:87:16:d5:ea:64:08:20:df:e3:fd:b5:55:19: d9:af:ae:16:27:a9:53:e1:d2:6f:b6:ee:a8:8f:b8:eb:3b:c5: a8:63:74:ff:e3:c1:c4:84:e6:fb:f9:c2:55:7d:27:5b:22:b6: 13:72:92:d3:9f:ba:81:5a:18:2f:83:f7:99:70:95:e7:f2:83: 87:64:57:fe:bd:fc:a4:02:99:5f:39:70:eb:0a:24:e8:5b:fb: e8:c0:f6:9d:73:a5:80:5f:35:c6:32:5b:41:3f:b2:c4:92:d2: 9e:42:5e:cb:13:6e:a4:25:6b:b1:43:31:be:6b:46:df:3b:a2: 5e:37:c5:10:05:fa:5b:1a:04:0b:ee:0d:66:e2:86:4a:39:8d: 7c:06:3a:cf:fd:11:26:05:0d:d1:3f:c7:9b:c1:e7:3a:84:0c: 4a:cf:e6:f5:5c:b4:d9:79:fc:de:85:cb:70:34:54:18:35:ca: ed:c9:38:de:8b:db:b5:69:0c:bf:4b:9c:3d:9f:fe:c4:05:5c: 5b:d6:60:91:bc:90:67:ed:81:b4:0e:28:52:5a:76:a3:f9:36: 5d:c3:aa:5e:da:7f:91:5e:6f:cd:ff:82:fb:ec:dc:35:ad:38: 66:33:6b:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJAM71AvlbatkjxknUTsbfZsKSVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjA2MTcwNDA3NTNaFw0yNjA2MTgwNjM1NTNaMDMxMTAvBgNV BAMTKDE1NDQ4MUE1MDQxNTVBNUNGQTAxRUE3MzgxMjgzNkNDMEZGQTdFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRjz7StvRhekc6WIf9fXnAoa3l 0u+7eeBvewsERAIhsUjVzUJHuH4AUa1MQDmUOiAZY+pasDXjtfYym5o8IIfC78Vt T7W7onLBcZQbXDgvrsUJF+U/jFrhw02mwKZr75ct9AyXstXKdNoQsZSUq4YQJqpf 3TNBpTLcIt5YbflGgwka+rLG7QcDC9Pd0MfNCKKt6nc65u4r2/IBraazsZ86qJvq timPkOHIEOBV+XoGhyCgmJy5lo37VZw+4AoIaSLNkG8l6WrK55doSXN5EU0C6WUO ivqcizk41JpiytX55F4OSJMoX81Ivfo0eitB5dLmYDPnOh2ndjDAv4WpKsqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUSBpQQVWlz6AepzgSg2zA/6fr4wHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2Ab8qfxLxCD4sIO63FSMva8q845aQEhxbV 6mQIIN/j/bVVGdmvrhYnqVPh0m+27qiPuOs7xahjdP/jwcSE5vv5wlV9J1sithNy ktOfuoFaGC+D95lwlefyg4dkV/69/KQCmV85cOsKJOhb++jA9p1zpYBfNcYyW0E/ ssSS0p5CXssTbqQla7FDMb5rRt87ol43xRAF+lsaBAvuDWbihko5jXwGOs/9ESYF DdE/x5vB5zqEDErP5vVctNl5/N6Fy3A0VBg1yu3JON6L27VpDL9LnD2f/sQFXFvW YJG8kGftgbQOKFJadqP5Nl3Dql7af5Feb83/gvvs3DWtOGYza/8= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:15 2026 by rpki-client