$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: a+IsAn7oFNysJmpABYWRh2vs2b2c8tuT/NMiliyMAcg= Subject key identifier: F5:C8:8A:2C:87:DA:E6:F6:E9:0D:87:7D:6E:55:D8:8A:0B:17:4B:22 Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 616D6FFAE8C488C45E2AF38D58BF35E6E2C814A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 03:56:18 +0000 Manifest this update: Tue 22 Sep 2026 03:51:18 +0000 Manifest next update: Wed 23 Sep 2026 04:40:18 +0000 Files and hashes: 1: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: gyIV4FXG6o/UkatOYxQlgNlQHyr/vfMqMuwfUnf3x0g=) 2: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) 3: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 4: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) 5: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6d:6f:fa:e8:c4:88:c4:5e:2a:f3:8d:58:bf:35:e6:e2:c8:14:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Sep 22 03:51:18 2026 GMT Not After : Sep 23 04:40:18 2026 GMT Subject: CN=F5C88A2C87DAE6F6E90D877D6E55D88A0B174B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:27:73:94:61:bb:59:18:5a:3d:1d:15:e2: 71:3d:42:61:fa:66:fa:e1:2f:42:1e:1f:c9:44:ce: d8:7e:ee:04:11:65:48:08:46:b1:33:78:27:5d:20: b3:4b:57:d5:d3:08:14:6c:ab:09:51:ad:9f:fe:b6: 8b:f8:b2:fb:07:2f:58:8a:0f:24:1c:04:b4:e1:c1: 51:f9:1c:c8:e6:9f:5f:25:68:88:6f:b2:ed:fb:ac: 83:7c:a6:19:80:bc:c5:6d:8f:8c:60:23:80:df:a1: af:b2:44:5a:a8:5c:76:e2:ab:72:77:18:50:2b:47: e6:92:91:50:ca:c3:ec:8d:f7:27:6e:1a:52:b2:b0: 52:1e:9b:83:12:44:59:ff:a4:34:90:4e:8e:ec:93: c1:e7:48:86:e2:5b:97:ee:cf:0d:f0:86:73:b5:e3: c8:90:d4:9a:53:46:ce:66:1f:2b:85:49:6a:39:f3: fd:6c:75:ed:5c:3b:00:e0:76:32:06:b8:f9:77:17: e7:81:07:84:87:78:a8:52:29:ea:d7:7e:15:ea:cb: 59:5d:35:c9:5a:d3:d6:44:73:60:d9:0e:08:9f:67: 64:70:3e:cd:e8:ea:17:a8:b5:58:ae:71:68:d2:b7: d8:ec:30:e5:d1:b4:b1:e0:8b:39:23:48:b3:f9:73: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C8:8A:2C:87:DA:E6:F6:E9:0D:87:7D:6E:55:D8:8A:0B:17:4B:22 X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1a:2b:f1:84:db:6e:ef:24:c1:91:e7:98:dc:e7:4f:c3:68: e1:ab:04:da:25:1c:14:d6:d2:89:37:77:ce:c9:ea:8a:03:30: 85:5a:70:6b:58:78:c1:b9:ec:56:ce:0f:08:70:98:39:11:4b: 65:a9:49:1f:3b:46:7a:c0:d8:f6:e9:06:ea:df:1a:2d:40:3e: 66:1c:dd:59:b4:17:64:4e:f0:38:7b:0c:fc:bc:7a:e1:25:d0: 07:33:ec:16:9c:2c:3d:89:36:57:59:38:1b:f2:aa:ab:b8:67: 35:b0:0b:15:dd:b7:b3:99:e7:14:55:96:01:35:df:fa:ad:1c: 20:3b:fc:dc:9b:4e:b5:b7:c0:13:ce:3e:df:70:1c:5a:77:a9: 89:9f:04:a6:bf:e6:2b:42:ac:f9:fc:60:57:2d:bb:99:d3:f2: f2:8d:49:c5:f5:ec:36:7a:18:e0:bc:d5:a2:5a:5c:f8:16:94: 03:eb:67:8b:20:49:ef:34:7d:f1:7c:b1:40:8f:d2:b2:2c:71: 79:70:02:ff:3d:78:be:d6:94:15:c1:db:33:8e:f8:a3:3a:7f: a8:e0:c4:55:2f:78:17:b3:55:2b:82:ff:f2:9e:0a:3a:db:b3: 1f:bd:cf:7c:77:04:d6:bf:74:5f:92:8e:ab:36:2f:63:02:68: e7:00:72:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYW1v+ujEiMReKvONWL815uLIFKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjA5MjIwMzUxMThaFw0yNjA5MjMwNDQwMThaMDMxMTAvBgNV BAMTKEY1Qzg4QTJDODdEQUU2RjZFOTBEODc3RDZFNTVEODhBMEIxNzRCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMydzlGG7WRhaPR0V4nE9QmH6 ZvrhL0IeH8lEzth+7gQRZUgIRrEzeCddILNLV9XTCBRsqwlRrZ/+tov4svsHL1iK DyQcBLThwVH5HMjmn18laIhvsu37rIN8phmAvMVtj4xgI4Dfoa+yRFqoXHbiq3J3 GFArR+aSkVDKw+yN9yduGlKysFIem4MSRFn/pDSQTo7sk8HnSIbiW5fuzw3whnO1 48iQ1JpTRs5mHyuFSWo58/1sde1cOwDgdjIGuPl3F+eBB4SHeKhSKerXfhXqy1ld Ncla09ZEc2DZDgifZ2RwPs3o6heotViucWjSt9jsMOXRtLHgizkjSLP5c/0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ciKLIfa5vbpDYd9blXYigsXSyIwHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0aK/GE227vJMGR55jc50/DaOGrBNolHBTW 0ok3d87J6ooDMIVacGtYeMG57FbODwhwmDkRS2WpSR87RnrA2PbpBurfGi1APmYc 3Vm0F2RO8Dh7DPy8euEl0Acz7BacLD2JNldZOBvyqqu4ZzWwCxXdt7OZ5xRVlgE1 3/qtHCA7/NybTrW3wBPOPt9wHFp3qYmfBKa/5itCrPn8YFctu5nT8vKNScX17DZ6 GOC81aJaXPgWlAPrZ4sgSe80ffF8sUCP0rIscXlwAv89eL7WlBXB2zOO+KM6f6jg xFUveBezVSuC//KeCjrbsx+9z3x3BNa/dF+Sjqs2L2MCaOcAcjQ= -----END CERTIFICATE-----Generated at Tue Sep 22 10:58:14 2026 by rpki-client