$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft File: 989831789EE975B0651609E616352062EEC4FC7B.mft (raw, json) Hash identifier: sum41wPdBp6oRwKRMty/hlOoxSOWJlX/iCgShdy+pUQ= Subject key identifier: 65:CA:97:81:BC:5F:83:07:48:3A:8A:75:E3:6D:21:1F:15:92:89:0F Authority key identifier: 98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B Certificate issuer: /CN=989831789EE975B0651609E616352062EEC4FC7B Certificate serial: 0C9267212BC34CD5604AA072C94ED148CDDA1B16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:21:17 +0000 Manifest this update: Wed 23 Sep 2026 16:16:17 +0000 Manifest next update: Thu 24 Sep 2026 18:11:17 +0000 Files and hashes: 1: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: KvTBLhcA30Q3MMqmIFRVkjBY73ZF22OKBZQ16lHRnEE=) 2: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: S/6ZT3o/2Fmv+v2FgpWjvGc73PZ3p7yRi6Jc6uqyB8o=) 3: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 4ya/nLbwKnzaFlLDgCP1vQb6QrNPPE2m5eJZC9+9BmY=) 4: 989831789EE975B0651609E616352062EEC4FC7B.crl (hash: nnmfkqKoOc+mTjZn5zPkQ582d1rlmRbA/iNeCy/jb74=) 5: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 3eGNVrRCfWRF8h7A0kfY3eB2wBAMxVovdDY1zxUPM6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:92:67:21:2b:c3:4c:d5:60:4a:a0:72:c9:4e:d1:48:cd:da:1b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989831789EE975B0651609E616352062EEC4FC7B Validity Not Before: Sep 23 16:16:17 2026 GMT Not After : Sep 24 18:11:17 2026 GMT Subject: CN=65CA9781BC5F8307483A8A75E36D211F1592890F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:ad:bc:d1:fd:ee:eb:5b:00:93:e4:41:86: 56:42:c0:93:98:22:5b:df:f3:78:bb:c5:09:b1:e1: 5a:59:bd:15:a4:0f:61:7f:30:62:fd:c3:6f:23:29: fb:10:92:f2:81:1b:7d:fc:ac:06:53:c0:26:75:ff: ea:60:7c:f0:35:a1:ff:aa:b7:34:cb:2b:2a:ae:f3: 32:1d:d6:1d:7b:d0:ce:49:17:1a:60:38:ab:c2:04: 88:a1:a7:96:88:c2:e9:27:0e:e5:c5:8d:21:a6:23: 88:ea:9b:f3:b6:4b:48:f3:30:59:65:58:be:a6:6f: 53:98:59:cd:dd:ef:1b:fb:e0:13:ed:7a:e8:97:97: 05:74:9b:56:9a:dd:0c:f1:e3:23:10:bc:f0:56:a3: ab:0c:ac:60:b1:d7:72:f8:f5:4a:91:51:ef:31:ba: 53:55:d4:77:e5:dd:e7:4a:e2:4b:5e:c9:0e:f5:d4: fd:a2:f9:45:6a:24:52:a4:8b:35:a4:46:5b:e5:fe: 3b:9f:8c:79:6b:4d:35:48:25:4e:6c:da:95:ea:61: 36:f5:21:d7:40:40:b4:07:35:d5:ff:98:00:be:ca: 59:ed:49:26:b4:ed:4a:11:c5:64:57:bb:c3:ac:5c: 22:70:92:b1:e7:52:36:43:7a:3f:68:c5:c1:5b:4b: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CA:97:81:BC:5F:83:07:48:3A:8A:75:E3:6D:21:1F:15:92:89:0F X509v3 Authority Key Identifier: keyid:98:98:31:78:9E:E9:75:B0:65:16:09:E6:16:35:20:62:EE:C4:FC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/989831789EE975B0651609E616352062EEC4FC7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/989831789EE975B0651609E616352062EEC4FC7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f7:1c:3c:a2:1d:54:6d:52:6b:d2:66:c0:97:fd:59:fb:bc: c2:47:35:3f:a7:76:65:96:40:0d:95:db:04:0d:7d:86:6a:7e: 6f:90:3f:27:b3:4e:91:21:a9:ee:ea:46:f5:76:62:b2:44:2d: 85:85:6f:9d:d7:29:21:31:03:9f:df:0a:8e:39:39:25:01:3b: 59:20:db:38:f2:0c:59:54:0a:a6:5b:58:e3:8d:ea:aa:d2:84: 6f:7a:cc:7e:bc:21:c1:70:b5:95:ec:cc:d5:93:d4:60:27:03: 0a:9b:c4:2f:24:ef:fe:ff:cd:ca:e7:1e:3a:c5:9b:ad:95:7e: c5:d6:4b:43:da:2b:b4:78:d8:cf:38:93:ba:ee:62:70:10:fc: 1f:4e:3e:eb:02:56:5e:e5:c7:5a:23:2e:e5:96:3e:63:c4:f8: 5f:38:32:0a:e4:45:b8:b3:b9:e3:4c:6a:7e:fe:98:78:04:a2: 80:ec:9c:66:fa:22:22:a5:5d:50:f7:22:b0:cb:35:b3:3a:45: 75:cf:ae:84:ea:d5:f2:cd:22:49:96:ca:41:5b:08:b1:4d:45: 68:87:33:62:bc:ca:d5:61:2d:9a:af:37:2b:3a:af:09:38:10: 54:e9:16:d0:8f:cc:1e:d5:2d:ce:7b:12:87:0e:9f:b5:72:ae: 00:45:f4:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJJnISvDTNVgSqByyU7RSM3aGxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJF RUM0RkM3QjAeFw0yNjA5MjMxNjE2MTdaFw0yNjA5MjQxODExMTdaMDMxMTAvBgNV BAMTKDY1Q0E5NzgxQkM1RjgzMDc0ODNBOEE3NUUzNkQyMTFGMTU5Mjg5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ta280f3u61sAk+RBhlZCwJOY Ilvf83i7xQmx4VpZvRWkD2F/MGL9w28jKfsQkvKBG338rAZTwCZ1/+pgfPA1of+q tzTLKyqu8zId1h170M5JFxpgOKvCBIihp5aIwuknDuXFjSGmI4jqm/O2S0jzMFll WL6mb1OYWc3d7xv74BPteuiXlwV0m1aa3Qzx4yMQvPBWo6sMrGCx13L49UqRUe8x ulNV1Hfl3edK4kteyQ711P2i+UVqJFKkizWkRlvl/jufjHlrTTVIJU5s2pXqYTb1 IddAQLQHNdX/mAC+ylntSSa07UoRxWRXu8OsXCJwkrHnUjZDej9oxcFbS7i7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZcqXgbxfgwdIOop1420hHxWSiQ8wHwYDVR0j BBgwFoAUmJgxeJ7pdbBlFgnmFjUgYu7E/HswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc1OGM4MGUtYTMyOC00ZjhjLWEwM2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5 RUU5NzVCMDY1MTYwOUU2MTYzNTIwNjJFRUM0RkM3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODk4MzE3ODlFRTk3NUIwNjUxNjA5RTYxNjM1MjA2MkVFQzRG QzdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvOTg5ODMxNzg5RUU5NzVCMDY1MTYwOUU2MTYzNTIw NjJFRUM0RkM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACL3HDyiHVRtUmvSZsCX/Vn7vMJHNT+ndmWW QA2V2wQNfYZqfm+QPyezTpEhqe7qRvV2YrJELYWFb53XKSExA5/fCo45OSUBO1kg 2zjyDFlUCqZbWOON6qrShG96zH68IcFwtZXszNWT1GAnAwqbxC8k7/7/zcrnHjrF m62VfsXWS0PaK7R42M84k7ruYnAQ/B9OPusCVl7lx1ojLuWWPmPE+F84MgrkRbiz ueNMan7+mHgEooDsnGb6IiKlXVD3IrDLNbM6RXXProTq1fLNIkmWykFbCLFNRWiH M2K8ytVhLZqvNys6rwk4EFTpFtCPzB7VLc57EocOn7VyrgBF9Kw= -----END CERTIFICATE-----Generated at Thu Sep 24 02:43:20 2026 by rpki-client