$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: E+z/mHL0ehiqIBbPyixJDJ1vijA2Ibiv3j75kZMlX7M= Subject key identifier: 5B:D6:2C:6D:18:3E:9E:C2:02:DB:7E:7A:54:93:EA:18:3F:56:01:03 Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 4F6CB903AA2FFDC3B206FB02FB8103F0E95F7D15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: BF Signing time: Mon 21 Sep 2026 11:20:30 +0000 Manifest this update: Mon 21 Sep 2026 11:15:30 +0000 Manifest next update: Tue 22 Sep 2026 11:54:30 +0000 Files and hashes: 1: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) 2: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 3: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: zhRD80QwklZYJlLEDEc89V5o5mhtTLFCR1LBdMNQm/w=) 4: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 5: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:6c:b9:03:aa:2f:fd:c3:b2:06:fb:02:fb:81:03:f0:e9:5f:7d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Sep 21 11:15:30 2026 GMT Not After : Sep 22 11:54:30 2026 GMT Subject: CN=5BD62C6D183E9EC202DB7E7A5493EA183F560103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:23:1c:55:27:72:47:b3:65:22:0a:44:ed: 96:21:67:b5:21:fe:e3:57:8f:23:c9:2a:0d:f2:b1: 95:2c:6e:67:35:7f:30:4a:c8:c5:9d:d9:9c:bf:1b: d6:0a:b0:31:33:c9:92:8e:13:3d:ad:2e:4e:79:51: fc:ad:05:9a:db:51:b9:fb:31:28:54:95:0b:8f:dc: db:e4:1b:6e:d3:1e:b3:ac:ba:eb:20:d2:14:cf:06: d5:e9:64:19:59:f7:6a:7e:4a:c8:b8:41:2a:77:11: e6:4f:1c:5a:41:1f:87:03:d3:e9:f8:02:48:7a:df: 22:f1:7c:1a:c0:33:5e:27:12:d7:41:2b:4f:3d:f4: 5b:1f:7d:f4:89:6b:6e:fa:68:0e:8a:29:61:4c:6a: 30:88:fc:da:25:c2:86:2c:8c:d3:06:fa:c5:f9:62: ec:3b:7d:07:97:fe:cb:c1:cb:b5:d6:20:b3:52:2b: b6:f2:a7:ea:f0:33:bd:7d:14:05:d7:01:67:6b:8f: 97:44:81:34:8e:36:e6:5a:16:df:59:18:e5:1e:ab: 3e:e4:70:d2:9c:85:9c:38:1f:6d:29:7b:2d:cb:ed: 1a:d5:d9:69:49:84:e5:b3:cd:cb:bf:e9:69:90:e7: e0:f8:d5:0e:dc:83:26:28:ab:23:3d:a2:1f:cd:c3: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D6:2C:6D:18:3E:9E:C2:02:DB:7E:7A:54:93:EA:18:3F:56:01:03 X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b5:2b:b2:f7:50:1f:03:e5:68:f0:da:58:66:34:39:44:1b: 2f:de:fe:29:34:d0:8c:70:01:cd:53:76:f5:21:f9:62:57:e7: 3b:7e:2e:81:7f:0f:be:5f:83:26:ea:bf:f5:0b:2b:3f:ee:db: 48:dc:d2:a1:c9:de:cf:dc:95:01:49:04:5e:ff:7c:43:30:25: 06:e7:61:2d:87:05:db:9c:bd:c1:94:50:0c:e9:44:cb:bd:41: c9:9a:ca:ab:83:6a:2c:ca:3f:df:8a:14:1d:61:c0:34:12:f5: a7:78:8f:34:60:a1:48:30:78:aa:29:3e:d7:0b:9c:07:9e:13: 33:94:fd:68:af:a7:a0:09:06:17:40:5d:85:37:40:9b:73:da: 29:1d:cf:5f:6b:f2:45:57:c0:7a:48:a0:c5:e6:f2:ad:5d:33: 11:51:18:51:d1:0a:36:c4:54:ea:d7:40:7f:6b:d4:9e:c3:f9: b1:c8:88:82:f5:12:46:db:1e:0c:82:54:ce:fc:38:c7:18:ff: 3b:44:c0:8b:aa:67:d9:64:bb:c3:e6:b2:c7:6b:99:25:c5:65: e3:11:3f:05:0d:11:33:3e:35:4c:b6:22:50:2e:80:7c:98:3e: f2:e3:de:d2:1f:98:aa:10:01:cc:00:65:1e:d1:e5:6d:e1:9f: db:31:8e:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT2y5A6ov/cOyBvsC+4ED8OlffRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjA5MjExMTE1MzBaFw0yNjA5MjIxMTU0MzBaMDMxMTAvBgNV BAMTKDVCRDYyQzZEMTgzRTlFQzIwMkRCN0U3QTU0OTNFQTE4M0Y1NjAxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvyMcVSdyR7NlIgpE7ZYhZ7Uh /uNXjyPJKg3ysZUsbmc1fzBKyMWd2Zy/G9YKsDEzyZKOEz2tLk55UfytBZrbUbn7 MShUlQuP3NvkG27THrOsuusg0hTPBtXpZBlZ92p+Ssi4QSp3EeZPHFpBH4cD0+n4 Akh63yLxfBrAM14nEtdBK0899FsfffSJa276aA6KKWFMajCI/NolwoYsjNMG+sX5 Yuw7fQeX/svBy7XWILNSK7byp+rwM719FAXXAWdrj5dEgTSONuZaFt9ZGOUeqz7k cNKchZw4H20pey3L7RrV2WlJhOWzzcu/6WmQ5+D41Q7cgyYoqyM9oh/NwzuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9YsbRg+nsIC2356VJPqGD9WAQMwHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKO1K7L3UB8D5Wjw2lhmNDlEGy/e/ik00Ixw Ac1TdvUh+WJX5zt+LoF/D75fgybqv/ULKz/u20jc0qHJ3s/clQFJBF7/fEMwJQbn YS2HBducvcGUUAzpRMu9QcmayquDaizKP9+KFB1hwDQS9ad4jzRgoUgweKopPtcL nAeeEzOU/Wivp6AJBhdAXYU3QJtz2ikdz19r8kVXwHpIoMXm8q1dMxFRGFHRCjbE VOrXQH9r1J7D+bHIiIL1EkbbHgyCVM78OMcY/ztEwIuqZ9lku8PmssdrmSXFZeMR PwUNETM+NUy2IlAugHyYPvLj3tIfmKoQAcwAZR7R5W3hn9sxjnY= -----END CERTIFICATE-----Generated at Tue Sep 22 01:23:32 2026 by rpki-client