$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: sQ1evzcjJJhTJqdjW5QfyFdu8dxIF7EAZdpCnP9DvQU= Subject key identifier: 35:78:59:60:7B:DD:87:B3:6F:22:93:7D:68:14:4F:D4:8A:9B:5E:41 Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 52AA05393B154F3F02F25234EDC6C9BC078A845A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 055B Signing time: Wed 25 Mar 2026 18:01:55 +0000 Manifest this update: Wed 25 Mar 2026 17:56:55 +0000 Manifest next update: Sat 28 Mar 2026 21:35:55 +0000 Files and hashes: 1: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: w9+6tUegeL9kleINTLlL2jQz11woCQNZTYJ8JEurPgw=) 2: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) 3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:aa:05:39:3b:15:4f:3f:02:f2:52:34:ed:c6:c9:bc:07:8a:84:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Mar 25 17:56:55 2026 GMT Not After : Mar 28 21:35:55 2026 GMT Subject: CN=357859607BDD87B36F22937D68144FD48A9B5E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:be:c5:4b:3a:a4:4b:3f:4e:b3:17:87:2d:48: cf:aa:a5:1a:9a:0b:05:5c:c9:48:c1:f2:0b:6d:18: 8c:c9:90:76:93:03:75:95:b7:19:d5:47:18:bd:34: b1:4c:d5:f8:61:e2:91:98:07:34:d5:a6:9e:f4:72: b1:98:a4:31:60:86:b8:a4:78:93:e8:fe:37:af:a3: c4:c3:d2:41:51:bd:5b:ed:65:16:86:0e:1a:c9:63: 2c:37:bc:97:63:ad:d2:21:61:d0:5b:65:0a:c2:c9: 00:f3:8f:ae:b8:e8:79:4a:2b:ec:87:22:3c:c6:91: d6:8f:34:b4:a8:eb:e9:db:01:34:96:27:ee:95:de: 59:73:c5:94:d2:3b:5b:7f:ca:79:65:81:1c:8e:d0: e2:60:da:9d:4b:de:9f:bc:95:7d:81:d0:83:bd:4a: cc:b1:b9:d8:3f:c8:65:78:51:dc:91:6f:3e:0f:08: 42:4f:8d:f2:6b:53:14:12:ff:fe:56:78:10:14:63: 6f:3b:d8:b6:93:0e:98:cf:5c:a9:f2:39:fd:8d:74: 47:4e:9f:1f:51:2c:2b:58:8d:3d:e0:28:dd:89:ce: f1:d7:dc:02:07:f6:fa:d1:b9:d3:b7:84:5d:c6:63: 22:4c:25:e6:57:1c:f9:80:b1:73:b3:21:73:ee:3e: 3a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:78:59:60:7B:DD:87:B3:6F:22:93:7D:68:14:4F:D4:8A:9B:5E:41 X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:36:59:ee:a0:55:59:b7:75:76:a9:e4:7a:2d:74:be:9d:9b: 14:51:38:e9:29:11:e4:07:a9:3d:97:ff:1f:1b:7f:74:23:e2: c7:ab:16:e4:85:8e:5a:e5:2c:52:c3:eb:c7:0b:64:d4:ff:ff: 9f:78:d1:ce:f5:24:45:37:4f:df:a3:04:b9:62:01:a9:a6:d7: 2b:be:d9:4a:31:f8:96:b8:35:e3:8e:f7:5e:19:50:2d:6c:e6: 02:b4:9b:64:d5:bc:c6:70:f7:86:e1:f2:81:a4:ba:a7:35:a1: b0:b5:10:82:2c:a0:91:4b:ff:61:a2:58:05:bd:17:15:d9:32: 22:e1:f5:27:c1:61:f4:a8:4e:74:60:c2:f4:6b:28:0a:bb:f3: b1:be:5f:ec:3e:ce:bd:8c:41:e1:66:f5:65:0e:48:36:d4:4c: b1:86:d6:9e:95:b1:cc:a3:d0:8f:69:f9:2b:ce:1b:57:13:1d: 19:76:fa:56:2e:a7:ba:0b:cd:97:01:86:c8:59:1d:e3:bb:51: 39:13:ef:f3:9a:67:d9:c8:f8:e6:a1:53:ae:e6:3f:65:c6:c0: 9e:4e:e0:43:02:2e:33:61:c2:26:61:c3:7d:89:6b:9e:2b:6c: 9e:10:4a:d8:fd:78:36:e7:b1:4b:1c:4e:64:88:ca:eb:18:c1: 26:c8:11:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqoFOTsVTz8C8lI07cbJvAeKhFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNjAzMjUxNzU2NTVaFw0yNjAzMjgyMTM1NTVaMDMxMTAvBgNV BAMTKDM1Nzg1OTYwN0JERDg3QjM2RjIyOTM3RDY4MTQ0RkQ0OEE5QjVFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYvsVLOqRLP06zF4ctSM+qpRqa CwVcyUjB8gttGIzJkHaTA3WVtxnVRxi9NLFM1fhh4pGYBzTVpp70crGYpDFghrik eJPo/jevo8TD0kFRvVvtZRaGDhrJYyw3vJdjrdIhYdBbZQrCyQDzj6646HlKK+yH IjzGkdaPNLSo6+nbATSWJ+6V3llzxZTSO1t/ynllgRyO0OJg2p1L3p+8lX2B0IO9 Ssyxudg/yGV4UdyRbz4PCEJPjfJrUxQS//5WeBAUY2872LaTDpjPXKnyOf2NdEdO nx9RLCtYjT3gKN2JzvHX3AIH9vrRudO3hF3GYyJMJeZXHPmAsXOzIXPuPjrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXhZYHvdh7NvIpN9aBRP1IqbXkEwHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGA2We6gVVm3dXap5HotdL6dmxRROOkpEeQH qT2X/x8bf3Qj4serFuSFjlrlLFLD68cLZNT//5940c71JEU3T9+jBLliAamm1yu+ 2Uox+Ja4NeOO914ZUC1s5gK0m2TVvMZw94bh8oGkuqc1obC1EIIsoJFL/2GiWAW9 FxXZMiLh9SfBYfSoTnRgwvRrKAq787G+X+w+zr2MQeFm9WUOSDbUTLGG1p6Vscyj 0I9p+SvOG1cTHRl2+lYup7oLzZcBhshZHeO7UTkT7/OaZ9nI+OahU67mP2XGwJ5O 4EMCLjNhwiZhw32Ja54rbJ4QStj9eDbnsUscTmSIyusYwSbIEUg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:37 2026 by rpki-client