$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: xt/nCESXkpf+Xr4vFC3PwquwygMM2PLz6p+c+9FvWEk= Subject key identifier: 01:89:BD:CC:74:D0:05:26:81:CE:B1:C0:75:5F:7D:0F:4D:42:32:01 Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 4EE9A2EF2B9B9D6D9E6070333F573FBA4BE23B98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: 0122 Signing time: Tue 24 Mar 2026 22:32:37 +0000 Manifest this update: Tue 24 Mar 2026 22:27:37 +0000 Manifest next update: Fri 27 Mar 2026 22:40:37 +0000 Files and hashes: 1: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=) 2: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: rb+kRbb5Sh9NgTPJ8OUwjy18NLxtTXphpjrcptfh6o8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e9:a2:ef:2b:9b:9d:6d:9e:60:70:33:3f:57:3f:ba:4b:e2:3b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: Mar 24 22:27:37 2026 GMT Not After : Mar 27 22:40:37 2026 GMT Subject: CN=0189BDCC74D0052681CEB1C0755F7D0F4D423201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:9c:1d:4c:e2:3f:ab:48:78:07:44:81:c5: 07:8c:9e:40:15:2d:b2:0c:50:5e:e7:e9:dc:f4:e1: ae:fd:e4:c4:8d:38:d3:b1:3d:e8:19:de:22:8f:21: f8:79:b2:96:89:23:34:d4:24:8d:cc:d0:6f:39:1c: e8:8c:64:ef:08:41:65:d6:64:b5:9b:29:6f:99:2f: ef:a3:26:62:e1:e6:0a:86:99:c5:a3:6d:61:2d:98: ac:c4:68:be:bc:49:9e:a5:8b:5a:77:48:12:c9:b4: 59:e3:71:c1:ba:9d:99:d1:77:c1:a0:28:b5:81:e4: e6:d0:1a:51:61:1d:fb:1c:44:62:f2:08:18:9d:2e: 97:71:48:30:d4:d2:4e:ee:d9:83:38:6a:39:ec:06: 40:3b:d8:89:20:50:3a:08:43:69:2a:e0:9b:17:cc: f1:26:42:23:14:17:42:f8:cf:05:1a:d4:5f:8b:28: 33:0c:55:ed:1d:61:3f:b8:14:ec:00:68:50:2c:35: 06:fc:c3:ef:aa:c3:d7:52:01:97:56:da:9c:73:e4: b4:87:77:17:02:51:da:cb:00:bb:98:ec:76:48:3c: dd:48:06:d1:4e:b3:a1:4e:b5:57:c3:a7:d3:a5:53: f9:91:8e:3a:ba:77:b3:7d:ed:b1:f1:53:69:a5:ed: 7b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:89:BD:CC:74:D0:05:26:81:CE:B1:C0:75:5F:7D:0F:4D:42:32:01 X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:13:d9:8e:c9:9b:24:75:6a:36:bc:7a:db:35:3c:36:37:62: 68:18:4e:04:65:9c:b8:4d:46:9d:49:da:2a:c4:a6:80:41:4c: 40:af:1b:12:9a:47:8f:86:6e:0b:b5:5d:35:df:bf:46:f5:de: 22:1c:3b:bd:59:f3:ec:d9:9e:bc:dc:ff:18:66:40:6a:47:78: 44:51:91:0c:14:f8:5c:dc:19:5f:3c:de:17:c0:93:8e:34:81: 0a:e5:0e:9d:84:be:a2:cf:42:49:a2:80:93:0c:ef:55:1a:d3: 19:00:08:77:bd:c7:12:97:37:c4:e5:d7:ed:3f:89:8a:75:f6: ee:9f:d9:7b:ad:3d:49:3f:b2:11:c4:98:87:e0:56:a8:c9:de: 37:bf:5f:f5:f9:83:42:fc:47:7a:6e:3f:00:58:08:15:8b:d5: 0d:b4:d2:25:91:26:fe:db:f8:44:6d:73:e0:84:f4:21:f2:19: 29:69:c8:68:70:dd:10:52:2f:13:76:da:54:33:27:02:08:3c: 9a:d1:76:51:aa:33:8b:35:66:5d:93:18:f2:87:fe:ed:6e:30: 84:88:7c:b4:13:82:c1:b6:31:f8:40:ca:3e:64:79:82:ff:46: ba:96:17:7a:ad:c3:de:7f:53:91:a1:fa:0f:ff:33:9b:17:76: 2f:65:69:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTumi7yubnW2eYHAzP1c/ukviO5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNjAzMjQyMjI3MzdaFw0yNjAzMjcyMjQwMzdaMDMxMTAvBgNV BAMTKDAxODlCRENDNzREMDA1MjY4MUNFQjFDMDc1NUY3RDBGNEQ0MjMyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZpwdTOI/q0h4B0SBxQeMnkAV LbIMUF7n6dz04a795MSNONOxPegZ3iKPIfh5spaJIzTUJI3M0G85HOiMZO8IQWXW ZLWbKW+ZL++jJmLh5gqGmcWjbWEtmKzEaL68SZ6li1p3SBLJtFnjccG6nZnRd8Gg KLWB5ObQGlFhHfscRGLyCBidLpdxSDDU0k7u2YM4ajnsBkA72IkgUDoIQ2kq4JsX zPEmQiMUF0L4zwUa1F+LKDMMVe0dYT+4FOwAaFAsNQb8w++qw9dSAZdW2pxz5LSH dxcCUdrLALuY7HZIPN1IBtFOs6FOtVfDp9OlU/mRjjq6d7N97bHxU2ml7XudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAYm9zHTQBSaBzrHAdV99D01CMgEwHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwT2Y7JmyR1aja8ets1PDY3YmgYTgRlnLhN Rp1J2irEpoBBTECvGxKaR4+Gbgu1XTXfv0b13iIcO71Z8+zZnrzc/xhmQGpHeERR kQwU+FzcGV883hfAk440gQrlDp2EvqLPQkmigJMM71Ua0xkACHe9xxKXN8Tl1+0/ iYp19u6f2XutPUk/shHEmIfgVqjJ3je/X/X5g0L8R3puPwBYCBWL1Q200iWRJv7b +ERtc+CE9CHyGSlpyGhw3RBSLxN22lQzJwIIPJrRdlGqM4s1Zl2TGPKH/u1uMISI fLQTgsG2MfhAyj5keYL/RrqWF3qtw95/U5Gh+g//M5sXdi9laYE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:58:33 2026 by rpki-client