$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: x2fAMAHYLdYOjZ9uqF0Jay1kcGLFkKHK7SczzfZZOik= Subject key identifier: A5:E0:0C:F3:1A:D8:CB:AB:CE:FC:B0:86:30:57:48:77:3E:E4:53:68 Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 0D681C9975EF870EFD0CFEAA939334AA8E4B2077 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 23:54:06 +0000 Manifest this update: Sat 14 Nov 2026 23:49:06 +0000 Manifest next update: Mon 16 Nov 2026 02:43:06 +0000 Files and hashes: 1: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: D6hiPzA4BWo1+uvb1bCf+lErAw4Lm15UO8qtJ73ztTg=) 2: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) 3: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 4: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 5: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 02:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:68:1c:99:75:ef:87:0e:fd:0c:fe:aa:93:93:34:aa:8e:4b:20:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Nov 14 23:49:06 2026 GMT Not After : Nov 16 02:43:06 2026 GMT Subject: CN=A5E00CF31AD8CBABCEFCB086305748773EE45368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:54:ef:48:cd:7d:7a:80:8a:59:5b:4d:3f:18: c3:fe:87:90:11:ff:44:8a:ab:0c:eb:60:f6:9a:af: 49:16:f8:a0:4f:9b:14:43:cc:9c:3c:63:59:05:f8: c2:f2:4d:6b:3d:2f:c7:c5:ef:30:4f:08:4a:a1:b4: d3:99:f9:5b:9f:4c:99:00:de:91:c7:47:78:cd:44: fc:ae:0c:69:b1:2a:48:cb:a7:15:d4:1f:e4:a6:b1: dc:07:e6:3c:8a:4f:16:d1:a6:92:6f:ca:a0:c3:b7: 0a:44:07:fb:4a:37:ab:ec:e1:fc:35:d7:70:17:89: 71:8e:58:45:43:79:af:2a:85:35:e0:2e:33:0f:d5: 13:1c:75:33:cb:fd:93:77:f4:2b:af:bb:4d:c0:14: cc:9a:43:7a:5d:23:6e:9b:3f:7d:51:71:be:b1:ff: d4:89:38:b0:66:c5:29:07:98:2b:e2:09:65:00:bb: 8e:a1:d2:2e:56:5a:48:bc:4a:5b:f6:61:6e:24:75: ab:f9:0f:49:f8:f8:e2:f3:67:ba:3e:f4:94:ff:df: cf:68:bb:c5:41:ee:1c:96:ac:77:5b:74:22:84:bc: c5:8a:29:e5:e6:20:4f:1b:79:b7:e9:d8:9f:7a:a1: cb:bb:a8:97:9a:6f:7e:43:57:d5:1e:4c:40:06:d7: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:0C:F3:1A:D8:CB:AB:CE:FC:B0:86:30:57:48:77:3E:E4:53:68 X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3c:1f:59:74:56:7f:f7:81:76:01:25:be:26:58:80:1d:23: e7:78:37:44:28:0f:31:b5:2e:0a:77:52:71:f1:10:e3:ab:3a: 53:19:6b:bc:a4:32:97:2a:19:59:90:d8:d4:f3:a8:4c:c4:be: bf:7f:c5:e0:8f:64:90:57:27:50:fa:58:b3:50:cf:73:4d:39: 7d:43:4e:f5:09:6f:bf:7c:ed:bc:da:5e:01:1e:cb:5f:f2:5a: f7:ad:81:48:e2:f7:18:1c:c5:5d:47:b8:27:09:b6:d1:61:32: 95:08:0b:69:4a:f4:8e:ae:f8:ab:42:8e:8b:5e:c2:1a:48:7e: c5:3b:48:8a:98:dc:2f:d1:97:62:66:f3:4f:cb:b5:5a:a4:37: 69:1b:9d:7d:15:6c:b3:b7:e6:0d:69:d6:c0:ea:a0:ee:1f:ea: 12:e2:93:0f:a9:5f:10:f0:4c:85:52:08:8e:8d:f1:66:3e:9d: 07:dc:65:c2:5e:5b:01:8f:d3:ad:ac:1d:7b:f7:4a:45:3f:c0: 77:2c:18:a5:17:e7:8e:bb:04:e0:b5:a5:37:ad:95:ee:75:10: 96:24:de:fe:10:5d:20:3f:fa:0f:45:e9:7d:fc:58:96:70:29: 7a:f8:fb:e8:cc:a8:c9:3c:d2:e3:12:3b:08:5e:7e:15:57:22: f3:6c:e7:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWgcmXXvhw79DP6qk5M0qo5LIHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjExMTQyMzQ5MDZaFw0yNjExMTYwMjQzMDZaMDMxMTAvBgNV BAMTKEE1RTAwQ0YzMUFEOENCQUJDRUZDQjA4NjMwNTc0ODc3M0VFNDUzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpVO9IzX16gIpZW00/GMP+h5AR /0SKqwzrYPaar0kW+KBPmxRDzJw8Y1kF+MLyTWs9L8fF7zBPCEqhtNOZ+VufTJkA 3pHHR3jNRPyuDGmxKkjLpxXUH+SmsdwH5jyKTxbRppJvyqDDtwpEB/tKN6vs4fw1 13AXiXGOWEVDea8qhTXgLjMP1RMcdTPL/ZN39Cuvu03AFMyaQ3pdI26bP31Rcb6x /9SJOLBmxSkHmCviCWUAu46h0i5WWki8Slv2YW4kdav5D0n4+OLzZ7o+9JT/389o u8VB7hyWrHdbdCKEvMWKKeXmIE8bebfp2J96ocu7qJeab35DV9UeTEAG16eJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpeAM8xrYy6vO/LCGMFdIdz7kU2gwHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB48H1l0Vn/3gXYBJb4mWIAdI+d4N0QoDzG1 Lgp3UnHxEOOrOlMZa7ykMpcqGVmQ2NTzqEzEvr9/xeCPZJBXJ1D6WLNQz3NNOX1D TvUJb7987bzaXgEey1/yWvetgUji9xgcxV1HuCcJttFhMpUIC2lK9I6u+KtCjote whpIfsU7SIqY3C/Rl2Jm80/LtVqkN2kbnX0VbLO35g1p1sDqoO4f6hLikw+pXxDw TIVSCI6N8WY+nQfcZcJeWwGP062sHXv3SkU/wHcsGKUX5467BOC1pTetle51EJYk 3v4QXSA/+g9F6X38WJZwKXr4++jMqMk80uMSOwhefhVXIvNs554= -----END CERTIFICATE-----Generated at Sun Nov 15 16:56:21 2026 by rpki-client