$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: BRhEgVXODT4n82jCj6dpw5ul+hIYhfKd2camzRp5rtw= Subject key identifier: 48:A2:D2:98:58:3E:15:43:63:7B:91:45:D8:8B:E5:D7:FE:28:0E:97 Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 3CF56FD3E049DD7DC41746AF87B49FB7763A2403 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 01E5 Signing time: Wed 25 Mar 2026 23:02:35 +0000 Manifest this update: Wed 25 Mar 2026 22:57:35 +0000 Manifest next update: Sat 28 Mar 2026 23:49:35 +0000 Files and hashes: 1: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: Zv8fuUsXlNcSMomK2OEOO59UGappsLZu9bjdvi4DOP8=) 2: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: x3HGhgSt9c8FVoZqtIz9sIauHDAw4TyZpBmo1KIk4yA=) 3: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: ThDgpbBTSfRRealh0FHjoyTHcEPiBLGvmWH7tSYcxdE=) 4: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: JaUrvzsC48sGgo6t/8V56h/3RhAryL32k2OarONQk4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f5:6f:d3:e0:49:dd:7d:c4:17:46:af:87:b4:9f:b7:76:3a:24:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Mar 25 22:57:35 2026 GMT Not After : Mar 28 23:49:35 2026 GMT Subject: CN=48A2D298583E1543637B9145D88BE5D7FE280E97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:98:1e:6f:c6:f1:02:47:c7:76:bd:c1:68: dc:19:14:61:37:ac:f3:4c:a9:09:ce:27:3a:c8:6c: c6:6b:6a:8b:c4:17:7d:b3:55:ec:c7:00:12:67:62: ba:5d:bc:e4:3c:db:ec:ae:96:bc:cb:0d:9d:41:88: 84:c6:10:df:30:3a:a6:a8:19:2b:f7:a9:ff:0f:72: 62:74:0a:44:62:67:ef:93:43:f2:20:e3:10:67:5d: 70:a7:9f:35:1c:a4:30:e9:e6:e1:42:9f:6a:96:74: f6:17:a3:93:46:ce:aa:18:a2:5f:65:24:8e:a2:72: 1a:42:19:97:de:2f:d6:2d:60:46:31:39:de:4e:bf: 5e:ff:6a:e4:da:c7:b5:d7:cb:a0:95:9c:14:51:f9: ab:da:de:59:e9:94:15:70:e7:16:89:b9:33:72:4a: f0:32:f1:92:aa:cb:36:47:dc:0f:89:07:f1:d7:04: e0:90:50:fc:07:f5:be:10:a9:79:98:1d:38:47:49: db:16:99:6d:84:69:a3:bc:ca:3b:da:ea:b5:47:fc: 38:ff:b7:83:e7:45:b9:df:ce:c6:49:cd:77:7c:a9: de:e7:57:79:81:a9:6a:a3:14:f7:c3:61:48:f8:01: 56:b1:f0:b4:22:47:56:d5:c1:e7:b2:e1:ba:b4:c1: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A2:D2:98:58:3E:15:43:63:7B:91:45:D8:8B:E5:D7:FE:28:0E:97 X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:15:6b:82:b0:42:c5:0f:fa:b2:18:a1:86:df:32:ab:7e:64: ac:c2:14:cd:92:dc:ae:00:a7:39:d9:6a:4b:65:a2:02:74:e4: 42:fd:37:b3:15:94:31:10:3d:6a:2d:0e:ba:9f:3c:cc:bb:e5: 4a:cb:66:64:48:77:a4:b9:e3:0f:6c:5d:a9:ee:08:8c:7d:4e: 24:c8:0b:b4:92:28:99:78:e8:06:83:83:bb:4f:33:b4:ea:df: e2:cd:e6:63:34:41:10:41:52:9f:20:66:ee:a1:e0:80:2d:a6: 94:33:3c:89:cd:52:2a:fd:d4:30:23:58:8b:ca:df:59:11:84: 2e:11:6c:d4:7f:d4:92:03:8f:32:77:12:36:9a:81:22:4a:6f: 4f:f8:3c:25:ef:b5:6b:10:fb:9d:eb:bb:bc:b2:97:47:2f:4e: f2:be:5e:6f:24:87:1f:b7:e2:56:e1:e3:d5:8e:a6:c0:03:e2: 3f:61:33:87:12:1e:cb:a2:a5:70:65:60:32:34:1a:e7:f5:61: 2b:cd:20:60:b8:06:38:6e:4c:b6:28:f7:7d:96:35:58:c9:7b: 4c:9f:f7:2b:0e:27:5e:67:cb:05:c9:3d:08:83:22:22:7d:fd: 0e:50:e0:ce:bb:bc:df:99:ac:de:ea:2b:c9:d4:8a:cd:49:5a: e1:7f:ce:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPVv0+BJ3X3EF0avh7Sft3Y6JAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNjAzMjUyMjU3MzVaFw0yNjAzMjgyMzQ5MzVaMDMxMTAvBgNV BAMTKDQ4QTJEMjk4NTgzRTE1NDM2MzdCOTE0NUQ4OEJFNUQ3RkUyODBFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrpgeb8bxAkfHdr3BaNwZFGE3 rPNMqQnOJzrIbMZraovEF32zVezHABJnYrpdvOQ82+yulrzLDZ1BiITGEN8wOqao GSv3qf8PcmJ0CkRiZ++TQ/Ig4xBnXXCnnzUcpDDp5uFCn2qWdPYXo5NGzqoYol9l JI6ichpCGZfeL9YtYEYxOd5Ov17/auTax7XXy6CVnBRR+ava3lnplBVw5xaJuTNy SvAy8ZKqyzZH3A+JB/HXBOCQUPwH9b4QqXmYHThHSdsWmW2EaaO8yjva6rVH/Dj/ t4PnRbnfzsZJzXd8qd7nV3mBqWqjFPfDYUj4AVax8LQiR1bVweey4bq0weuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKLSmFg+FUNje5FF2Ivl1/4oDpcwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0Va4KwQsUP+rIYoYbfMqt+ZKzCFM2S3K4A pznZaktlogJ05EL9N7MVlDEQPWotDrqfPMy75UrLZmRId6S54w9sXanuCIx9TiTI C7SSKJl46AaDg7tPM7Tq3+LN5mM0QRBBUp8gZu6h4IAtppQzPInNUir91DAjWIvK 31kRhC4RbNR/1JIDjzJ3EjaagSJKb0/4PCXvtWsQ+53ru7yyl0cvTvK+Xm8khx+3 4lbh49WOpsAD4j9hM4cSHsuipXBlYDI0Guf1YSvNIGC4BjhuTLYo932WNVjJe0yf 9ysOJ15nywXJPQiDIiJ9/Q5Q4M67vN+ZrN7qK8nUis1JWuF/zgE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:52 2026 by rpki-client