$ rpki-client -vvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft File: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft (raw, json) Hash identifier: SxU7Nm4qNjUCoo7fXjngp/9v2OhpBZOQDJfxLDLS+HA= Subject key identifier: C0:B3:CD:55:DF:C7:18:BC:94:8F:DF:27:92:EB:7D:A3:5D:B0:65:98 Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 100B62C836E24FFD8120CA7CE90E96D48C064768 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 09:20:50 +0000 Manifest this update: Fri 24 Jul 2026 09:15:50 +0000 Manifest next update: Sat 25 Jul 2026 11:33:50 +0000 Files and hashes: 1: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 7Xohzs3qzHwElj+iGxc/XgWir/J3Steo6jFstKpP8Y0=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: cw9vNPqzj+nbF/8UED+AX3JWM0AiWyBHrefZED5PbbE=) 3: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl (hash: +rfyxAQayRs+xX9LmPr1KnEEMu24NMTZ4O13ncSA9PM=) 4: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: rH0EBEYwFNkXIM8Mj3asy0ipU8+X9tTfzMeEAFrvYrM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0b:62:c8:36:e2:4f:fd:81:20:ca:7c:e9:0e:96:d4:8c:06:47:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: Jul 24 09:15:50 2026 GMT Not After : Jul 25 11:33:50 2026 GMT Subject: CN=C0B3CD55DFC718BC948FDF2792EB7DA35DB06598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:03:d5:18:08:29:19:dd:f6:9c:8e:b0:14: c9:6a:6d:4d:94:4f:97:af:d5:65:87:51:8f:34:c2: b3:0a:08:1f:2a:97:16:2f:25:7c:ad:af:ed:da:5e: 23:c0:f9:e7:a1:4f:27:e8:7d:57:a3:db:6e:b3:e2: 0e:a7:54:e9:2d:f9:f0:51:7d:05:a9:c8:7a:6c:91: 9a:e7:1c:3d:9b:82:52:94:8e:c0:39:57:8e:b5:35: e0:e0:a1:ec:97:42:33:ab:84:fb:92:ad:fe:7e:9f: 56:45:4c:ea:e4:98:23:c3:67:ca:e5:44:a1:3f:b7: d0:ce:eb:77:8c:91:2e:0a:59:b6:b9:0a:f2:9a:b1: 4e:3c:44:fa:fe:0a:26:2c:79:54:4c:24:f2:bb:78: f5:2a:e6:4c:a8:1b:4b:bf:dc:4e:c3:fc:81:13:1b: 5b:15:3f:b3:62:b0:3f:5c:87:38:95:b7:df:f1:40: 0f:b0:f1:bf:ea:77:fb:26:bd:61:7c:08:71:b5:9a: 22:60:13:56:e5:c7:90:fa:1e:30:11:0c:dc:99:dd: 6b:e8:29:32:dd:91:cb:f4:ed:8a:a0:10:43:ce:de: 01:d7:2e:4d:34:68:bc:a4:81:23:35:de:94:ef:2f: fc:c2:af:4e:8d:8e:c5:7c:cc:69:1f:ab:10:e1:a0: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B3:CD:55:DF:C7:18:BC:94:8F:DF:27:92:EB:7D:A3:5D:B0:65:98 X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7a:fb:81:47:a7:c9:0a:80:40:30:17:82:7e:9d:7a:5b:c3: 64:a4:6a:46:87:17:39:ab:a1:91:a4:24:8b:3b:bb:c5:d8:34: 40:aa:2c:47:d4:f6:59:5a:ec:7c:2c:f2:99:f9:07:1b:12:f2: 89:da:65:96:af:c8:65:ed:e3:01:e6:e3:da:71:00:64:5b:ee: 40:22:74:4f:cc:49:32:80:6f:d5:0a:35:85:a5:4b:6c:7d:4a: 3c:b9:7c:f7:67:8d:eb:75:16:60:7b:1d:52:29:f6:8f:8c:c4: 55:0a:36:c3:78:a4:24:6c:c4:02:dc:83:be:2b:ea:45:d5:9e: a6:c9:ad:a4:2a:7d:a3:15:83:1c:68:97:b0:b2:88:5f:d4:b3: 89:f0:d9:04:36:8c:ce:db:1e:a1:4c:e7:89:d9:b5:ae:9a:e0: b5:72:87:bc:50:13:28:9b:57:56:1a:83:eb:c3:84:bc:18:42: ca:84:58:30:ab:94:eb:8b:9f:23:7a:07:77:14:60:e2:a1:36: 31:ce:b0:6d:0e:56:bf:38:8d:2b:b4:0b:c0:0d:b4:0d:0e:eb: 6f:4c:fa:c0:26:aa:88:0d:23:4c:69:14:a9:9e:43:44:d4:bc: ba:16:c9:0a:c7:8a:04:fb:c1:4c:50:ef:d4:d5:e9:67:3b:69: 57:3a:92:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAtiyDbiT/2BIMp86Q6W1IwGR2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjA3MjQwOTE1NTBaFw0yNjA3MjUxMTMzNTBaMDMxMTAvBgNV BAMTKEMwQjNDRDU1REZDNzE4QkM5NDhGREYyNzkyRUI3REEzNURCMDY1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3gPVGAgpGd32nI6wFMlqbU2U T5ev1WWHUY80wrMKCB8qlxYvJXytr+3aXiPA+eehTyfofVej226z4g6nVOkt+fBR fQWpyHpskZrnHD2bglKUjsA5V461NeDgoeyXQjOrhPuSrf5+n1ZFTOrkmCPDZ8rl RKE/t9DO63eMkS4KWba5CvKasU48RPr+CiYseVRMJPK7ePUq5kyoG0u/3E7D/IET G1sVP7NisD9chziVt9/xQA+w8b/qd/smvWF8CHG1miJgE1blx5D6HjARDNyZ3Wvo KTLdkcv07YqgEEPO3gHXLk00aLykgSM13pTvL/zCr06NjsV8zGkfqxDhoPKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwLPNVd/HGLyUj98nkut9o12wZZgwHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYw ODMwRTZDMUFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFR6+4FHp8kKgEAwF4J+nXpbw2SkakaHFzmr oZGkJIs7u8XYNECqLEfU9lla7Hws8pn5BxsS8onaZZavyGXt4wHm49pxAGRb7kAi dE/MSTKAb9UKNYWlS2x9Sjy5fPdnjet1FmB7HVIp9o+MxFUKNsN4pCRsxALcg74r 6kXVnqbJraQqfaMVgxxol7CyiF/Us4nw2QQ2jM7bHqFM54nZta6a4LVyh7xQEyib V1Yag+vDhLwYQsqEWDCrlOuLnyN6B3cUYOKhNjHOsG0OVr84jSu0C8ANtA0O629M +sAmqogNI0xpFKmeQ0TUvLoWyQrHigT7wUxQ79TV6Wc7aVc6kuM= -----END CERTIFICATE-----Generated at Fri Jul 24 16:14:27 2026 by rpki-client