$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: 8s81axbPxaoHOHhYI0DEx42yqjfdI+zacLusDYdzf7g= Subject key identifier: F0:17:93:30:96:2B:CE:E8:4F:41:8E:13:B5:CF:AD:24:EF:76:4E:AE Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 36C322ABF5A301CA9B70DFEA2673123EF54A7136 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 01CF Signing time: Wed 25 Mar 2026 08:30:52 +0000 Manifest this update: Wed 25 Mar 2026 08:25:52 +0000 Manifest next update: Sat 28 Mar 2026 11:20:52 +0000 Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: aQThgKjoVxAf8QUrNI1h0L0h88SAkOAfUq9vTc5dAGo=) 2: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: yBlQxYJO8rhIv2HpwWdXsXgqPvx7PURa81zECwK0sVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c3:22:ab:f5:a3:01:ca:9b:70:df:ea:26:73:12:3e:f5:4a:71:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Mar 25 08:25:52 2026 GMT Not After : Mar 28 11:20:52 2026 GMT Subject: CN=F0179330962BCEE84F418E13B5CFAD24EF764EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:13:3e:59:7b:b2:8e:de:e9:5a:82:d7:9d: ba:9c:75:20:6d:45:08:3d:95:a2:9a:df:b6:68:ef: bf:5b:21:39:62:d0:48:a3:c2:cb:56:cb:77:8b:b9: 0e:bf:35:5b:b1:2c:2b:7f:02:74:90:3d:28:6c:bc: f9:ee:a4:f5:96:1c:ea:58:a2:dd:d9:b0:60:5b:fa: 5d:d6:e0:b1:08:fb:b7:5e:9a:c5:98:1e:69:14:16: 12:b7:d7:2f:3d:0f:3f:33:63:ae:0f:5e:3c:a1:4b: 36:ca:79:3f:82:76:bd:96:a0:a1:08:d4:c8:b6:a7: 13:85:3e:47:af:08:63:9d:83:f5:75:4a:83:48:c1: fd:f2:cd:50:43:16:91:fb:3b:5f:2e:ec:b8:72:50: 57:28:bb:f0:2f:99:29:e5:45:e3:33:04:55:fc:5e: ae:fd:46:2b:3e:a8:0e:69:8c:76:23:5c:68:ed:1d: c6:54:eb:ef:3c:4c:a0:2c:50:e1:37:3e:f8:79:38: 45:75:51:5c:63:10:0c:0b:c4:df:51:89:52:a7:60: 41:2c:8b:1d:11:49:fb:cf:e0:a9:64:15:ec:a8:5f: 56:3b:5d:cd:f9:c9:c3:41:f3:cc:e3:e8:5b:da:73: 24:bd:b8:8e:ac:33:f4:b6:62:64:00:cc:f0:2a:f8: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:17:93:30:96:2B:CE:E8:4F:41:8E:13:B5:CF:AD:24:EF:76:4E:AE X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3f:a8:f4:09:dc:57:2e:8e:df:28:b8:1f:8e:2d:fd:b1:d2: 7c:12:b8:03:1d:c1:66:9c:10:ba:99:3f:b3:99:0c:7f:4c:ad: 35:96:c8:03:18:ff:22:2f:3f:9a:28:a8:80:a9:dc:3d:e4:52: d2:bc:28:b2:1c:8a:31:32:0d:6c:9d:0a:e2:14:7b:be:4d:1e: 7e:91:68:9b:39:e0:9e:a8:3b:38:c6:14:2b:d5:5a:5e:3b:ae: b1:f5:a0:01:1f:e1:00:0f:fc:40:78:77:f5:40:16:05:e3:80: ac:81:5b:e2:e7:ab:6d:ae:ed:3b:32:d8:dc:55:b3:1f:3b:66: 43:43:6b:54:47:c5:67:68:6b:37:fd:89:2e:2a:cd:f6:55:c0: dd:12:01:19:81:64:2d:29:2e:f5:9a:4f:f4:a0:5e:82:ad:85: 67:ec:c7:40:5e:06:a3:db:5c:ed:9b:91:b0:96:1b:df:92:89: a9:1f:33:a4:c5:22:86:52:66:71:32:ab:2a:d5:03:06:e8:9f: 79:09:cc:9e:eb:99:e2:80:78:3c:64:c7:07:23:31:c3:62:6a: 3c:fe:07:d4:b6:2c:f9:92:03:d7:e4:33:dd:be:cf:b2:b2:40: 44:fa:97:59:a8:25:c2:1c:4a:31:20:a3:5c:c5:26:8b:34:33: 42:c1:65:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsMiq/WjAcqbcN/qJnMSPvVKcTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNjAzMjUwODI1NTJaFw0yNjAzMjgxMTIwNTJaMDMxMTAvBgNV BAMTKEYwMTc5MzMwOTYyQkNFRTg0RjQxOEUxM0I1Q0ZBRDI0RUY3NjRFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3RM+WXuyjt7pWoLXnbqcdSBt RQg9laKa37Zo779bITli0EijwstWy3eLuQ6/NVuxLCt/AnSQPShsvPnupPWWHOpY ot3ZsGBb+l3W4LEI+7demsWYHmkUFhK31y89Dz8zY64PXjyhSzbKeT+Cdr2WoKEI 1Mi2pxOFPkevCGOdg/V1SoNIwf3yzVBDFpH7O18u7LhyUFcou/AvmSnlReMzBFX8 Xq79Ris+qA5pjHYjXGjtHcZU6+88TKAsUOE3Pvh5OEV1UVxjEAwLxN9RiVKnYEEs ix0RSfvP4KlkFeyoX1Y7Xc35ycNB88zj6FvacyS9uI6sM/S2YmQAzPAq+I9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8BeTMJYrzuhPQY4Ttc+tJO92Tq4wHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4/qPQJ3Fcujt8ouB+OLf2x0nwSuAMdwWac ELqZP7OZDH9MrTWWyAMY/yIvP5ooqICp3D3kUtK8KLIcijEyDWydCuIUe75NHn6R aJs54J6oOzjGFCvVWl47rrH1oAEf4QAP/EB4d/VAFgXjgKyBW+Lnq22u7Tsy2NxV sx87ZkNDa1RHxWdoazf9iS4qzfZVwN0SARmBZC0pLvWaT/SgXoKthWfsx0BeBqPb XO2bkbCWG9+SiakfM6TFIoZSZnEyqyrVAwbon3kJzJ7rmeKAeDxkxwcjMcNiajz+ B9S2LPmSA9fkM92+z7KyQET6l1moJcIcSjEgo1zFJos0M0LBZTI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:29:36 2026 by rpki-client