$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json) Hash identifier: exF9JH6GlJcZy8WCDf4+2AUeWILyRfDE5+ooE2yh6Kg= Subject key identifier: 68:81:9B:74:42:D6:11:E3:A3:DA:D9:F2:E1:D4:58:F6:CE:9B:C2:E0 Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Certificate serial: 609D72FE4234BA10FE78A21A9F0F02D4BDCF5A48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft Manifest number: 0156 Signing time: Tue 24 Mar 2026 15:51:12 +0000 Manifest this update: Tue 24 Mar 2026 15:46:12 +0000 Manifest next update: Fri 27 Mar 2026 22:36:12 +0000 Files and hashes: 1: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: zvmZH9cK6qppnFGsMQPcCDmerkEUtkkcfI6WRpiCAJw=) 2: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: WRQr/4s6i86uzriKB9RHRYKn5SQtBKQDw9UpfGvIHbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9d:72:fe:42:34:ba:10:fe:78:a2:1a:9f:0f:02:d4:bd:cf:5a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Validity Not Before: Mar 24 15:46:12 2026 GMT Not After : Mar 27 22:36:12 2026 GMT Subject: CN=68819B7442D611E3A3DAD9F2E1D458F6CE9BC2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:91:d7:d0:0a:ed:4b:d0:bd:f0:79:94:81: dd:c6:b5:68:74:91:8b:a2:27:63:f8:f7:a0:d2:f1: c5:fb:bf:e0:18:a6:a6:f5:a5:07:6a:a5:9d:24:33: 16:f1:c1:d0:84:be:36:cb:55:ee:7c:20:e6:ed:8e: 93:aa:df:38:29:6c:59:20:fe:1b:32:57:73:be:e2: 35:c5:1b:41:f7:d7:ca:e5:5b:8e:80:2d:91:8f:00: 75:01:b2:93:99:f2:9c:23:24:36:a7:54:73:55:93: cc:a5:e5:ba:67:95:db:36:1f:0f:af:47:24:7c:14: 27:c7:66:a9:e7:ee:8c:f7:da:82:09:47:fe:a8:6a: 4c:36:af:4c:36:d3:3b:fe:b1:69:2a:32:0a:4f:63: a3:36:77:0b:97:bc:5a:6a:20:74:c0:5b:23:2d:e5: 28:0b:2b:bc:59:dc:b8:5f:11:a3:52:bc:96:98:c9: d7:6c:a8:1a:6e:b9:37:f5:b8:cf:15:4b:3f:f4:14: 03:55:53:d7:ba:4b:77:5f:48:28:3e:96:97:c9:ad: bb:92:7f:18:cd:12:7d:16:1e:6d:f9:50:13:47:d9: ae:e2:3d:d3:2f:d4:41:34:5a:71:76:2b:38:e2:25: 7e:cb:37:57:2c:2e:05:04:00:03:ac:b4:b8:bd:e2: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:81:9B:74:42:D6:11:E3:A3:DA:D9:F2:E1:D4:58:F6:CE:9B:C2:E0 X509v3 Authority Key Identifier: keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:4e:9a:79:83:6c:98:74:1d:7e:2a:f3:ba:cf:0a:63:20:78: b4:88:8f:dc:dc:6b:43:09:9e:20:c6:70:11:e3:c5:65:71:a7: 1a:a9:34:a2:fe:58:8b:32:78:c4:d1:62:9b:72:67:b4:48:ff: 80:9b:2a:35:c7:14:ca:2b:53:6c:8d:b2:9c:1a:5f:27:66:f1: c7:4b:a1:0c:41:9a:74:78:5e:24:1b:30:a0:3d:64:00:48:9e: 9d:2c:48:fc:72:da:bc:eb:46:02:7f:09:dc:b9:fa:c4:29:04: d2:cb:e3:d8:a5:18:a8:18:31:91:bc:03:36:83:05:90:ba:5b: 67:9b:af:33:2c:6f:3e:19:1a:7a:1f:f2:5d:5e:0e:72:be:6e: e7:f3:e5:ce:bd:0c:dc:ec:a7:5f:ce:40:b3:5b:b5:10:04:20: 3a:57:4d:db:a5:2b:47:89:bb:50:32:c5:72:35:e1:05:7e:7e: 99:dd:e9:13:07:16:03:af:7c:95:9f:98:17:8c:9e:d5:59:c4: 1d:49:72:4f:eb:b1:29:fe:8f:14:40:eb:ba:7a:65:00:d3:eb: 16:67:57:8e:06:ef:3b:eb:a0:c4:c6:f3:aa:10:ea:04:61:17: 81:88:87:6c:d7:51:3d:35:89:10:92:ac:79:26:3d:bc:92:1c: 8a:f7:6a:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJ1y/kI0uhD+eKIanw8C1L3PWkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMz MzFCODY2OTAeFw0yNjAzMjQxNTQ2MTJaFw0yNjAzMjcyMjM2MTJaMDMxMTAvBgNV BAMTKDY4ODE5Qjc0NDJENjExRTNBM0RBRDlGMkUxRDQ1OEY2Q0U5QkMyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/5HX0ArtS9C98HmUgd3GtWh0 kYuiJ2P496DS8cX7v+AYpqb1pQdqpZ0kMxbxwdCEvjbLVe58IObtjpOq3zgpbFkg /hsyV3O+4jXFG0H318rlW46ALZGPAHUBspOZ8pwjJDanVHNVk8yl5bpnlds2Hw+v RyR8FCfHZqnn7oz32oIJR/6oakw2r0w20zv+sWkqMgpPY6M2dwuXvFpqIHTAWyMt 5SgLK7xZ3LhfEaNSvJaYyddsqBpuuTf1uM8VSz/0FANVU9e6S3dfSCg+lpfJrbuS fxjNEn0WHm35UBNH2a7iPdMv1EE0WnF2KzjiJX7LN1csLgUEAAOstLi94hd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaIGbdELWEeOj2tny4dRY9s6bwuAwHwYDVR0j BBgwFoAUyJr9sBW0UWNC5HAiROi4rDMbhmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMS9DODlBRkRCMDE1 QjQ1MTYzNDJFNDcwMjI0NEU4QjhBQzMzMUI4NjY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMzMzFC ODY2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzEvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4 QUMzMzFCODY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMROmnmDbJh0HX4q87rPCmMgeLSIj9zca0MJ niDGcBHjxWVxpxqpNKL+WIsyeMTRYptyZ7RI/4CbKjXHFMorU2yNspwaXydm8cdL oQxBmnR4XiQbMKA9ZABInp0sSPxy2rzrRgJ/Cdy5+sQpBNLL49ilGKgYMZG8AzaD BZC6W2ebrzMsbz4ZGnof8l1eDnK+bufz5c69DNzsp1/OQLNbtRAEIDpXTdulK0eJ u1AyxXI14QV+fpnd6RMHFgOvfJWfmBeMntVZxB1Jck/rsSn+jxRA67p6ZQDT6xZn V44G7zvroMTG86oQ6gRhF4GIh2zXUT01iRCSrHkmPbySHIr3arM= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:11 2026 by rpki-client