$ rpki-client -vvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: QkqbS9qhWPJC3UT/Xw3KSjwTDC1V6b6JvL317G5CYyE= Subject key identifier: D0:94:7E:BD:E1:D1:C8:CD:B3:D4:DA:C4:DD:8B:17:C9:DE:25:CA:BF Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 2DBF986D41AAC3C11EDACD64511473CD479D1200 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:44:18 +0000 Manifest this update: Tue 12 May 2026 18:39:18 +0000 Manifest next update: Wed 13 May 2026 21:01:18 +0000 Files and hashes: 1: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) 2: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 3: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) 4: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 5: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: bmusWrqRoPJqYli/iqy6w2EcVDTmmAz5mlOU3P+hPGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bf:98:6d:41:aa:c3:c1:1e:da:cd:64:51:14:73:cd:47:9d:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: May 12 18:39:18 2026 GMT Not After : May 13 21:01:18 2026 GMT Subject: CN=D0947EBDE1D1C8CDB3D4DAC4DD8B17C9DE25CABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:7c:32:d3:a9:2f:db:7b:1a:fb:87:a9:93: 9a:da:dc:d5:a3:ce:e9:ba:e0:ee:f9:e0:da:4d:60: fb:3c:ef:80:3f:f1:a1:09:fc:c0:8c:cb:66:ec:9d: a8:31:1e:b9:c1:e2:e0:df:48:1b:56:b1:46:a7:15: 21:f7:31:3c:a3:73:13:31:d8:b6:46:9a:c7:3b:36: 8f:97:0a:fc:b2:1a:05:fb:15:78:fa:6b:ad:53:ae: 89:2b:90:78:55:1c:23:d7:d4:68:23:75:ee:b8:d9: cb:e7:6e:d4:c0:59:e3:08:52:a2:a5:68:64:fb:f8: 13:0e:9f:0a:0e:ab:ce:66:48:7d:5b:5f:10:e8:f5: d7:f0:67:32:34:5e:da:df:c9:e1:4e:d3:8d:b6:e7: 97:da:36:18:36:4b:f1:28:05:98:35:8a:11:d7:a0: 3f:9c:eb:0d:9d:c4:30:75:50:5d:bd:69:4f:24:8a: 48:d5:b6:7e:da:2c:e0:d0:4b:09:c9:e9:90:2f:6a: 83:c6:d2:30:cf:9d:ed:45:57:0f:14:85:97:4d:25: 0c:f9:1f:8a:dd:f1:3f:d2:b5:66:da:f2:40:4e:aa: 71:9c:e0:5e:bb:58:69:cb:17:4f:a5:6d:0b:1b:cc: 8e:71:33:04:86:ff:5c:87:ed:2c:90:2b:e5:a5:8e: ad:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:94:7E:BD:E1:D1:C8:CD:B3:D4:DA:C4:DD:8B:17:C9:DE:25:CA:BF X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:42:ee:e4:56:77:0b:b8:4f:7c:31:c9:20:a5:3c:6a:20:e4: 3c:ff:1f:55:01:6d:e0:41:48:ab:00:5e:80:da:76:81:94:ca: 20:35:15:f2:ca:e9:38:71:6b:59:b7:17:95:d0:05:37:a4:57: ca:9e:df:f3:c4:d9:12:44:2b:18:02:bf:43:64:a2:13:f8:d5: d3:90:2a:88:61:dd:9e:7e:18:e4:46:fd:15:68:14:68:6b:14: a8:da:31:4d:d1:b1:80:d6:b1:b9:7d:85:7e:ce:fd:3d:ac:ee: 3f:ed:28:12:bc:ea:ab:78:2d:77:14:74:93:c9:7d:ec:61:dc: 7c:7e:bb:2d:0b:00:3c:da:aa:27:f5:21:2a:af:87:a3:e5:dd: 0d:d4:2c:31:7b:9c:cd:79:47:af:5d:d2:2a:c5:78:26:b2:14: 55:45:93:f7:f1:d9:ca:27:b3:b0:a5:f5:aa:1f:9d:c5:b2:b0: ab:c2:22:36:c9:98:e5:7a:63:63:d8:c6:5f:25:57:b1:f7:8c: 8e:96:e4:eb:1e:1b:67:b6:26:c1:b9:a0:de:90:3c:55:5e:82: 23:fc:54:af:80:aa:d0:e0:2b:df:8d:93:30:77:35:ee:62:be: 5d:4e:d8:6d:b2:29:1b:56:38:b7:c7:a5:ad:e7:49:31:da:f6: 0e:76:05:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULb+YbUGqw8Ee2s1kURRzzUedEgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjA1MTIxODM5MThaFw0yNjA1MTMyMTAxMThaMDMxMTAvBgNV BAMTKEQwOTQ3RUJERTFEMUM4Q0RCM0Q0REFDNEREOEIxN0M5REUyNUNBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdHwy06kv23sa+4epk5ra3NWj zum64O754NpNYPs874A/8aEJ/MCMy2bsnagxHrnB4uDfSBtWsUanFSH3MTyjcxMx 2LZGmsc7No+XCvyyGgX7FXj6a61TrokrkHhVHCPX1Ggjde642cvnbtTAWeMIUqKl aGT7+BMOnwoOq85mSH1bXxDo9dfwZzI0XtrfyeFO042255faNhg2S/EoBZg1ihHX oD+c6w2dxDB1UF29aU8kikjVtn7aLODQSwnJ6ZAvaoPG0jDPne1FVw8UhZdNJQz5 H4rd8T/StWba8kBOqnGc4F67WGnLF0+lbQsbzI5xMwSG/1yH7SyQK+Wljq3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0JR+veHRyM2z1NrE3YsXyd4lyr8wHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpC7uRWdwu4T3wxySClPGog5Dz/H1UBbeBB SKsAXoDadoGUyiA1FfLK6Thxa1m3F5XQBTekV8qe3/PE2RJEKxgCv0NkohP41dOQ Kohh3Z5+GORG/RVoFGhrFKjaMU3RsYDWsbl9hX7O/T2s7j/tKBK86qt4LXcUdJPJ fexh3Hx+uy0LADzaqif1ISqvh6Pl3Q3ULDF7nM15R69d0irFeCayFFVFk/fx2con s7Cl9aofncWysKvCIjbJmOV6Y2PYxl8lV7H3jI6W5OseG2e2JsG5oN6QPFVegiP8 VK+AqtDgK9+NkzB3Ne5ivl1O2G2yKRtWOLfHpa3nSTHa9g52BdM= -----END CERTIFICATE-----Generated at Wed May 13 01:35:27 2026 by rpki-client