$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: hKu39dSFf9i1ZgIH+VNIjnegLXQ9wt2pAecVYAXAl4I= Subject key identifier: E9:7F:12:E6:D5:B7:60:68:49:9A:6B:1C:4D:5C:29:F6:A2:75:8A:08 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 3D9B98B826682FE19448C2D25BE2726C3A52DEF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 0535 Signing time: Wed 25 Mar 2026 13:12:08 +0000 Manifest this update: Wed 25 Mar 2026 13:07:08 +0000 Manifest next update: Sat 28 Mar 2026 18:42:08 +0000 Files and hashes: 1: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=) 2: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=) 3: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=) 4: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: LCi1weYpsHjqbHjmDdoyI35l96+t96YsB4f16htlxbU=) 5: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=) 6: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=) 7: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: Pu1FZPaJpcOf3TykQ599QpqlmqXAb1+Rhvi4xtGpCJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9b:98:b8:26:68:2f:e1:94:48:c2:d2:5b:e2:72:6c:3a:52:de:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Mar 25 13:07:08 2026 GMT Not After : Mar 28 18:42:08 2026 GMT Subject: CN=E97F12E6D5B76068499A6B1C4D5C29F6A2758A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:82:09:e4:c4:12:e6:d3:b0:c2:82:9a:b3: 38:8f:fb:3b:e8:e5:6f:18:cd:d7:9f:34:27:a8:eb: a9:5a:af:e1:75:f0:ea:5c:a4:64:db:ed:9d:81:d5: c1:b7:af:1a:c2:8e:21:77:24:80:8a:e5:54:93:7b: a3:be:3c:80:88:24:dc:aa:f5:cc:f5:d1:cc:16:f6: 74:d4:c6:15:51:5b:94:a4:53:01:39:2d:0c:0f:57: 5b:68:44:d9:87:66:21:61:8c:5c:46:f4:ec:f3:a8: ce:91:22:6d:94:42:fa:cf:c4:ea:df:11:fa:9a:a1: 9f:f3:c0:e3:27:77:2a:ec:43:65:eb:5f:90:6f:19: a3:54:85:f0:bd:93:66:a4:bd:2d:5e:0b:f9:4e:ad: 20:ed:b2:f3:9d:57:e5:15:76:75:bb:f8:db:24:0f: d1:5c:f3:69:cd:e8:5f:73:50:c9:98:78:be:59:62: 8d:1a:de:df:f8:a2:33:ca:77:c6:13:af:ed:da:81: f4:fa:b6:28:06:88:35:e9:f3:63:f5:3f:48:d2:0c: 0e:ae:04:ef:27:b3:c1:71:58:a4:15:55:e1:74:4b: 0e:a1:3b:e9:9d:88:45:42:60:53:9e:46:e7:54:8b: 5b:18:01:d2:22:4c:d3:c8:ff:93:3a:fb:14:e4:6b: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:12:E6:D5:B7:60:68:49:9A:6B:1C:4D:5C:29:F6:A2:75:8A:08 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:46:3d:1e:66:c4:49:65:99:36:cc:4d:e0:e1:61:88:2f:a7: ab:eb:d2:f5:52:5b:04:05:c7:e3:b0:a0:a5:e5:34:ba:8b:73: 0e:74:d4:94:64:3f:ef:59:ad:30:32:97:91:e3:00:6b:1d:9a: cc:46:b3:5c:2c:16:9e:3c:45:e3:a7:24:c3:fd:65:7f:4d:9b: c8:b2:11:d7:d1:4e:e6:fc:a6:94:e4:fd:31:ac:ea:d5:5c:d5: 50:52:f6:b3:41:fc:3c:8b:94:9d:59:9c:6c:b0:74:92:78:5b: 3d:c1:37:92:50:3d:d8:0b:77:b0:d4:71:2b:ce:8c:2e:85:e1: c7:0b:bb:f2:f4:0d:c5:fc:4c:e9:ae:24:09:96:93:e1:59:51: 30:51:ab:76:de:7e:e2:d5:8c:94:bc:89:e5:a2:b3:8b:b7:ce: 34:ed:8f:e9:95:dc:b6:6b:9a:74:79:37:73:c9:3f:c4:38:a5: 0c:ba:50:ff:00:a2:c8:52:11:1d:dd:66:f0:79:18:39:93:5e: dc:02:96:02:47:64:65:f9:b5:0b:f4:b3:00:a9:17:e8:eb:d5: cf:42:e1:c8:58:f7:e8:39:38:3c:32:cf:e7:5e:3f:5a:ed:02: 2c:c5:95:db:92:8e:28:8f:7a:ad:81:de:95:3f:7b:4a:22:1b: 36:60:50:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZuYuCZoL+GUSMLSW+JybDpS3vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNjAzMjUxMzA3MDhaFw0yNjAzMjgxODQyMDhaMDMxMTAvBgNV BAMTKEU5N0YxMkU2RDVCNzYwNjg0OTlBNkIxQzRENUMyOUY2QTI3NThBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWIIJ5MQS5tOwwoKasziP+zvo 5W8YzdefNCeo66lar+F18OpcpGTb7Z2B1cG3rxrCjiF3JICK5VSTe6O+PICIJNyq 9cz10cwW9nTUxhVRW5SkUwE5LQwPV1toRNmHZiFhjFxG9OzzqM6RIm2UQvrPxOrf EfqaoZ/zwOMndyrsQ2XrX5BvGaNUhfC9k2akvS1eC/lOrSDtsvOdV+UVdnW7+Nsk D9Fc82nN6F9zUMmYeL5ZYo0a3t/4ojPKd8YTr+3agfT6tigGiDXp82P1P0jSDA6u BO8ns8FxWKQVVeF0Sw6hO+mdiEVCYFOeRudUi1sYAdIiTNPI/5M6+xTka1zLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6X8S5tW3YGhJmmscTVwp9qJ1iggwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9GPR5mxEllmTbMTeDhYYgvp6vr0vVSWwQF x+OwoKXlNLqLcw501JRkP+9ZrTAyl5HjAGsdmsxGs1wsFp48ReOnJMP9ZX9Nm8iy EdfRTub8ppTk/TGs6tVc1VBS9rNB/DyLlJ1ZnGywdJJ4Wz3BN5JQPdgLd7DUcSvO jC6F4ccLu/L0DcX8TOmuJAmWk+FZUTBRq3befuLVjJS8ieWis4u3zjTtj+mV3LZr mnR5N3PJP8Q4pQy6UP8AoshSER3dZvB5GDmTXtwClgJHZGX5tQv0swCpF+jr1c9C 4chY9+g5ODwyz+deP1rtAizFlduSjiiPeq2B3pU/e0oiGzZgUGw= -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:56 2026 by rpki-client