$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: Nf0BInDHm/QzhP8P8NOJytrPd98+P4Ki8Q+Hber+5NU= Subject key identifier: 4B:D3:BF:B4:87:05:F0:31:9C:AC:BF:C9:E1:12:75:D5:97:37:C7:AF Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 7508F6A9D09233DF798184A278D059A8CE5F7D78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 0560 Signing time: Tue 24 Mar 2026 12:21:11 +0000 Manifest this update: Tue 24 Mar 2026 12:16:11 +0000 Manifest next update: Fri 27 Mar 2026 21:32:11 +0000 Files and hashes: 1: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) 2: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) 3: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: z7A2Cmzz9ujGt0gg9g2Uhoo72XKHarRa02ID0Il0jjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:08:f6:a9:d0:92:33:df:79:81:84:a2:78:d0:59:a8:ce:5f:7d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Mar 24 12:16:11 2026 GMT Not After : Mar 27 21:32:11 2026 GMT Subject: CN=4BD3BFB48705F0319CACBFC9E11275D59737C7AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cc:f6:38:2d:97:28:e5:7a:f9:1e:cc:56:2f: 49:05:db:75:b9:49:c9:f5:e8:92:9a:32:62:b1:3e: 5d:ef:f6:8d:fa:d9:9d:c0:3f:0e:da:60:ed:25:f8: 08:fa:cb:3b:a2:ef:f1:16:5d:3f:e2:ae:1a:fe:0b: 12:3c:a6:a4:3a:ef:64:94:13:f6:ad:d2:ab:c1:b6: 9f:7b:77:bc:be:f3:64:ec:9d:ed:b6:cd:57:d0:c9: a9:51:65:13:ab:30:e3:48:f7:ee:f5:93:81:bb:61: 86:e1:83:71:4b:94:19:6f:76:3d:5c:16:64:43:90: dd:3d:72:3e:46:c5:7f:47:5e:dd:d6:9f:d5:e0:74: 24:d6:95:25:07:bb:95:7b:56:22:08:dd:89:0f:52: 56:ce:d7:b7:1c:f3:e3:37:0a:c8:4e:ca:92:ac:3d: fc:90:45:ad:f9:f1:80:2f:a6:53:fd:be:fe:7d:bd: 6e:02:71:8d:47:1a:be:4c:48:d9:37:2a:b6:15:fd: 16:f9:72:86:01:6b:e5:c6:35:7c:a7:da:95:43:91: 12:ed:68:d2:53:c6:f4:78:e6:d1:ff:86:68:29:10: e2:66:0b:16:bb:85:68:06:cf:7e:7e:44:ee:45:51: 98:a5:67:88:a5:bb:e6:ec:4c:a9:92:66:84:ed:be: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D3:BF:B4:87:05:F0:31:9C:AC:BF:C9:E1:12:75:D5:97:37:C7:AF X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:97:ed:5b:60:2b:68:2e:d7:71:30:df:c2:e2:83:78:3a:38: 26:7d:d5:98:6f:2b:c8:bc:81:81:17:eb:3b:67:51:bb:81:d8: 72:69:7e:01:82:6d:7b:8c:fb:07:2e:49:f4:2d:4c:dc:a9:7a: 0d:ce:e6:ce:32:8d:82:7e:4d:ca:76:54:16:b7:f1:50:fc:40: e2:eb:43:84:67:8c:ae:92:08:24:4e:73:db:7a:94:ed:80:1d: ca:7a:31:35:8b:8c:13:5c:3e:3b:3a:47:11:4f:e8:47:0a:8e: 60:35:19:a6:13:2a:35:30:de:15:41:7c:70:ac:cf:ec:c7:45: bf:89:9d:ba:a4:46:76:bf:84:79:2d:b6:9a:8a:78:fc:18:43: f0:21:4a:d6:10:18:7c:b3:de:9d:2b:92:03:43:00:22:be:17: df:62:69:bf:98:15:36:57:ef:1d:88:b4:ba:3f:50:90:c4:43: 52:87:06:e5:ee:18:41:50:0a:e4:7b:4e:73:19:45:35:9b:65: 8c:e2:60:eb:55:60:6e:dd:b0:75:31:f1:e3:3f:73:cb:37:25: e6:88:8b:da:6f:50:f2:88:84:d8:04:f2:25:44:9c:ac:20:f4: 2f:5f:27:ae:78:30:37:c5:11:5f:93:04:e3:e3:34:a7:97:34: fe:f3:26:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQj2qdCSM995gYSieNBZqM5ffXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNjAzMjQxMjE2MTFaFw0yNjAzMjcyMTMyMTFaMDMxMTAvBgNV BAMTKDRCRDNCRkI0ODcwNUYwMzE5Q0FDQkZDOUUxMTI3NUQ1OTczN0M3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkzPY4LZco5Xr5HsxWL0kF23W5 Scn16JKaMmKxPl3v9o362Z3APw7aYO0l+Aj6yzui7/EWXT/irhr+CxI8pqQ672SU E/at0qvBtp97d7y+82Tsne22zVfQyalRZROrMONI9+71k4G7YYbhg3FLlBlvdj1c FmRDkN09cj5GxX9HXt3Wn9XgdCTWlSUHu5V7ViII3YkPUlbO17cc8+M3CshOypKs PfyQRa358YAvplP9vv59vW4CcY1HGr5MSNk3KrYV/Rb5coYBa+XGNXyn2pVDkRLt aNJTxvR45tH/hmgpEOJmCxa7hWgGz35+RO5FUZilZ4ilu+bsTKmSZoTtviSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS9O/tIcF8DGcrL/J4RJ11Zc3x68wHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuX7VtgK2gu13Ew38Lig3g6OCZ91ZhvK8i8 gYEX6ztnUbuB2HJpfgGCbXuM+wcuSfQtTNypeg3O5s4yjYJ+Tcp2VBa38VD8QOLr Q4RnjK6SCCROc9t6lO2AHcp6MTWLjBNcPjs6RxFP6EcKjmA1GaYTKjUw3hVBfHCs z+zHRb+JnbqkRna/hHkttpqKePwYQ/AhStYQGHyz3p0rkgNDACK+F99iab+YFTZX 7x2ItLo/UJDEQ1KHBuXuGEFQCuR7TnMZRTWbZYziYOtVYG7dsHUx8eM/c8s3JeaI i9pvUPKIhNgE8iVEnKwg9C9fJ654MDfFEV+TBOPjNKeXNP7zJjo= -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:57 2026 by rpki-client