$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: aES0Oub7BsMT/jqtuxi0DKp9eEc3CRl8X7Z6M6J01Mg= Subject key identifier: 68:D1:F9:D0:CA:89:0E:5E:81:D9:01:39:5F:24:1A:00:6F:DB:6A:77 Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 57787109F6DF67C4DB4FC3CE5FDA2366AF567BB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 10:13:19 +0000 Manifest this update: Thu 24 Sep 2026 10:08:19 +0000 Manifest next update: Fri 25 Sep 2026 13:16:19 +0000 Files and hashes: 1: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 2: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) 3: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: 1QBBY/atwXAvPxtC8mrKwOxkL5FYgmWf9OZKmidpa10=) 4: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 5: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:78:71:09:f6:df:67:c4:db:4f:c3:ce:5f:da:23:66:af:56:7b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Sep 24 10:08:19 2026 GMT Not After : Sep 25 13:16:19 2026 GMT Subject: CN=68D1F9D0CA890E5E81D901395F241A006FDB6A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:65:7d:9b:cb:fe:e0:72:96:4d:26:90:65: 4c:8c:9a:8f:9e:6d:f9:4a:54:f0:6a:18:0f:05:9b: 91:d8:85:42:4e:d6:a9:75:fd:78:68:2e:88:d5:b8: a8:bb:df:7d:fd:dd:a9:f0:92:18:9b:19:f8:f2:04: 51:20:cd:78:a9:e3:1c:5f:5a:7e:fb:a9:5e:4f:a0: 53:5d:2d:88:ec:89:52:42:c0:71:bb:1e:d5:de:25: 33:3f:81:22:28:b5:08:16:ec:37:08:38:b9:3c:f4: c3:e6:6b:8f:f1:ec:45:a5:0d:c9:00:10:88:ca:18: f3:69:f2:12:ab:18:2b:fe:b3:62:20:b4:95:af:31: 96:93:a8:e4:23:a7:bb:9e:a6:ff:9b:49:c2:f9:5e: dd:fc:cd:5c:03:8d:5f:3d:25:20:4a:cf:8a:ee:f4: 9d:bd:44:6c:a1:ae:42:08:df:0f:72:66:2f:15:7c: f0:15:f1:ca:b1:ba:4f:5d:9c:a2:8b:49:b6:74:f7: 10:33:f1:32:09:6c:29:70:00:a0:4e:1f:fe:e3:90: 02:7d:5d:de:1f:86:80:e6:62:9c:77:63:1e:4e:5a: e4:6e:00:a8:ba:71:93:86:3a:82:a7:ad:34:82:92: 32:a2:10:d3:98:f4:4a:50:16:0a:e3:0f:14:bd:44: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:F9:D0:CA:89:0E:5E:81:D9:01:39:5F:24:1A:00:6F:DB:6A:77 X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:dd:74:d8:0a:3f:9d:ee:1b:eb:be:be:41:75:2a:03:83:b1: 14:eb:48:f9:62:27:41:0b:ed:f3:d0:f4:e6:26:2a:13:5f:12: 31:d5:26:ca:b3:01:e7:11:20:52:90:ab:1b:69:fe:d3:08:b9: db:77:9e:b4:d4:c0:92:16:e9:0d:77:a6:25:69:2a:36:a4:9a: 61:66:7d:3c:fc:3f:12:ab:d9:26:27:21:1c:5f:6b:01:e5:1a: 2b:ba:97:ef:cf:8f:88:92:e1:f3:b2:97:f1:0a:52:20:50:04: 96:34:bc:7b:bc:9d:f7:bb:2e:48:07:a0:41:f9:df:ca:1e:a6: c8:fa:7c:91:7f:83:0f:8b:d8:4c:4f:b7:50:70:dd:88:0b:09: 34:50:12:86:de:69:a1:ee:8e:be:af:8d:69:e7:9b:5f:15:ef: 42:6f:1b:6f:66:7a:eb:c4:04:9c:41:07:db:f6:63:0b:09:f1: 7f:37:2b:2d:fb:40:a8:00:46:43:5e:90:9b:cd:5b:da:a5:8c: 47:27:bc:e0:4b:a0:04:4f:7b:12:1b:fd:18:7a:2d:25:29:b7: c9:05:82:58:e7:b4:49:a8:41:13:0b:eb:1e:23:f1:77:53:44: 52:d7:3e:c0:df:f8:81:b8:3b:7b:c2:ce:22:5e:0d:0b:1f:dd: 62:79:6a:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3hxCfbfZ8TbT8POX9ojZq9We7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjA5MjQxMDA4MTlaFw0yNjA5MjUxMzE2MTlaMDMxMTAvBgNV BAMTKDY4RDFGOUQwQ0E4OTBFNUU4MUQ5MDEzOTVGMjQxQTAwNkZEQjZBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrE2V9m8v+4HKWTSaQZUyMmo+e bflKVPBqGA8Fm5HYhUJO1ql1/XhoLojVuKi733393anwkhibGfjyBFEgzXip4xxf Wn77qV5PoFNdLYjsiVJCwHG7HtXeJTM/gSIotQgW7DcIOLk89MPma4/x7EWlDckA EIjKGPNp8hKrGCv+s2IgtJWvMZaTqOQjp7uepv+bScL5Xt38zVwDjV89JSBKz4ru 9J29RGyhrkII3w9yZi8VfPAV8cqxuk9dnKKLSbZ09xAz8TIJbClwAKBOH/7jkAJ9 Xd4fhoDmYpx3Yx5OWuRuAKi6cZOGOoKnrTSCkjKiENOY9EpQFgrjDxS9RPdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNH50MqJDl6B2QE5XyQaAG/bancwHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTddNgKP53uG+u+vkF1KgODsRTrSPliJ0EL 7fPQ9OYmKhNfEjHVJsqzAecRIFKQqxtp/tMIudt3nrTUwJIW6Q13piVpKjakmmFm fTz8PxKr2SYnIRxfawHlGiu6l+/Pj4iS4fOyl/EKUiBQBJY0vHu8nfe7LkgHoEH5 38oepsj6fJF/gw+L2ExPt1Bw3YgLCTRQEobeaaHujr6vjWnnm18V70JvG29meuvE BJxBB9v2YwsJ8X83Ky37QKgARkNekJvNW9qljEcnvOBLoARPexIb/Rh6LSUpt8kF gljntEmoQRML6x4j8XdTRFLXPsDf+IG4O3vCziJeDQsf3WJ5atQ= -----END CERTIFICATE-----Generated at Fri Sep 25 05:13:59 2026 by rpki-client