$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: vIIaE5XiGygVhxaEyGO5w+Utx5oesBckJEWmJhE6V1U= Subject key identifier: 4A:01:5D:9B:02:83:B7:37:46:B8:AA:49:C4:F7:85:B9:04:8A:E1:9E Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 34FEBACE7CCE6BEE7FC519D1281EEA3D75EB119D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 0238 Signing time: Wed 25 Mar 2026 00:50:42 +0000 Manifest this update: Wed 25 Mar 2026 00:45:42 +0000 Manifest next update: Sat 28 Mar 2026 09:59:42 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) 2: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: hV95IpK6WXp6IMuTWZ3w9eULq2M1yJD0xmiuc8Zl/Co=) 3: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fe:ba:ce:7c:ce:6b:ee:7f:c5:19:d1:28:1e:ea:3d:75:eb:11:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Mar 25 00:45:42 2026 GMT Not After : Mar 28 09:59:42 2026 GMT Subject: CN=4A015D9B0283B73746B8AA49C4F785B9048AE19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:30:0a:9f:86:75:f9:e1:4b:c7:eb:74:81: c3:55:aa:a1:43:f7:86:c9:f2:9e:a2:29:78:cc:db: e5:0e:d1:39:e1:9f:c3:0b:ee:41:3b:59:1d:dd:cd: c1:ac:28:15:38:d8:85:20:20:03:45:fa:1d:04:0e: 98:a0:36:4b:24:19:26:f9:56:db:43:2f:5e:90:74: a3:d1:40:b5:a4:93:80:09:5f:ec:94:b1:c2:cf:82: c2:a9:45:2c:fd:5a:d5:11:45:67:56:c0:56:07:5e: e8:c2:fb:fd:ee:20:9a:63:9b:6d:f6:3c:f9:f8:fc: bc:db:30:14:2c:cb:65:52:65:e3:18:93:95:45:76: 5c:9d:19:cf:8b:8d:6d:67:a6:82:0e:b8:f2:34:64: 82:e7:dc:2d:45:26:85:0a:07:78:a5:d3:4f:65:a1: d2:3b:40:2a:ee:13:a0:98:a5:5a:88:b9:c1:57:cc: d1:c1:de:7f:42:e8:9c:13:e6:f9:90:ae:2b:e3:a8: cb:e3:88:f8:21:9d:9e:42:e0:04:89:b7:b0:aa:a4: d9:44:2f:7a:e9:2a:42:2e:c0:93:1d:9c:87:bc:f9: 50:61:ae:6c:5e:5d:c5:06:2b:b4:23:59:99:56:4d: 5a:7f:01:3b:64:bd:8e:7c:36:bc:f8:03:3f:de:63: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:01:5D:9B:02:83:B7:37:46:B8:AA:49:C4:F7:85:B9:04:8A:E1:9E X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e7:d2:9a:e0:7f:ba:46:ee:91:e0:d5:25:78:f8:aa:d5:92: fb:e8:83:77:4d:2a:d6:f4:c8:2d:a1:97:94:80:77:19:e1:e3: 82:af:80:b9:74:76:7b:3b:a0:64:de:22:eb:b4:69:0f:3f:e3: 8a:39:9b:4b:c1:f3:c1:69:d2:c4:13:3d:a8:ab:35:73:15:0b: 46:6f:6b:3c:95:2b:34:97:6d:ec:39:82:a5:cf:07:d3:db:88: a3:be:86:21:f8:96:23:9e:53:0a:eb:5b:fa:ca:fa:f0:6a:a6: c4:7d:03:38:b9:11:67:e9:e5:da:6a:f1:3f:73:da:47:3d:d8: f9:75:96:5e:3a:48:5d:d3:5e:50:fb:ef:39:01:67:6d:bb:58: e0:c3:b3:5c:bb:12:03:69:07:65:4d:ac:56:0f:27:8c:fd:1a: 64:ee:6f:1e:1e:d5:9c:01:ed:ec:fb:38:d1:ce:de:b0:38:31: f6:7e:68:9a:d6:05:1c:11:b2:44:f4:14:5f:b6:9d:06:94:60: e2:a2:8c:b5:d2:88:7a:b2:ca:14:7b:1f:5d:25:0b:5f:47:60: 97:32:20:3d:22:db:7e:ad:6d:33:98:6b:a3:3a:56:f8:c0:19: e8:5f:a8:58:4f:c8:0e:b6:dd:27:46:72:90:8d:77:ec:34:48: 5e:7b:3c:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNP66znzOa+5/xRnRKB7qPXXrEZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNjAzMjUwMDQ1NDJaFw0yNjAzMjgwOTU5NDJaMDMxMTAvBgNV BAMTKDRBMDE1RDlCMDI4M0I3Mzc0NkI4QUE0OUM0Rjc4NUI5MDQ4QUUxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNIDAKn4Z1+eFLx+t0gcNVqqFD 94bJ8p6iKXjM2+UO0Tnhn8ML7kE7WR3dzcGsKBU42IUgIANF+h0EDpigNkskGSb5 VttDL16QdKPRQLWkk4AJX+yUscLPgsKpRSz9WtURRWdWwFYHXujC+/3uIJpjm232 PPn4/LzbMBQsy2VSZeMYk5VFdlydGc+LjW1npoIOuPI0ZILn3C1FJoUKB3il009l odI7QCruE6CYpVqIucFXzNHB3n9C6JwT5vmQrivjqMvjiPghnZ5C4ASJt7CqpNlE L3rpKkIuwJMdnIe8+VBhrmxeXcUGK7QjWZlWTVp/ATtkvY58Nrz4Az/eY5QzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSgFdmwKDtzdGuKpJxPeFuQSK4Z4wHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPn0prgf7pG7pHg1SV4+KrVkvvog3dNKtb0 yC2hl5SAdxnh44KvgLl0dns7oGTeIuu0aQ8/44o5m0vB88Fp0sQTPairNXMVC0Zv azyVKzSXbew5gqXPB9PbiKO+hiH4liOeUwrrW/rK+vBqpsR9Azi5EWfp5dpq8T9z 2kc92Pl1ll46SF3TXlD77zkBZ227WODDs1y7EgNpB2VNrFYPJ4z9GmTubx4e1ZwB 7ez7ONHO3rA4MfZ+aJrWBRwRskT0FF+2nQaUYOKijLXSiHqyyhR7H10lC19HYJcy ID0i236tbTOYa6M6VvjAGehfqFhPyA623SdGcpCNd+w0SF57PHI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:43 2026 by rpki-client