$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft File: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft (raw, json) Hash identifier: 9Zh5rARzt/KF6hF3SQcg5v0QlWf/Ow2daLzHE6fWyjc= Subject key identifier: 94:D6:D3:82:4B:13:D1:F8:CB:56:38:EA:1D:BB:0F:F8:6E:BA:A5:CF Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 782B1D57B4DAC3D95076706A001A8C20E2A692CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 05:32:51 +0000 Manifest this update: Wed 23 Sep 2026 05:27:50 +0000 Manifest next update: Thu 24 Sep 2026 09:01:50 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: cw9vNPqzj+nbF/8UED+AX3JWM0AiWyBHrefZED5PbbE=) 2: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl (hash: qIUfIgVw+eThn/6V42nTc5ElJ++fL9KIaQhktwH0VGo=) 3: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: rH0EBEYwFNkXIM8Mj3asy0ipU8+X9tTfzMeEAFrvYrM=) 4: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 7Xohzs3qzHwElj+iGxc/XgWir/J3Steo6jFstKpP8Y0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2b:1d:57:b4:da:c3:d9:50:76:70:6a:00:1a:8c:20:e2:a6:92:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: Sep 23 05:27:50 2026 GMT Not After : Sep 24 09:01:50 2026 GMT Subject: CN=94D6D3824B13D1F8CB5638EA1DBB0FF86EBAA5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:69:ab:77:df:53:a8:c9:2e:5f:43:ca:c9: 96:08:17:12:d0:78:06:96:c4:e5:ac:50:53:80:53: eb:fc:ec:e5:89:34:85:a8:27:96:88:c2:d4:2b:72: f1:17:4d:30:09:dc:f6:d3:2f:a2:18:5a:3b:a6:f8: 94:ce:c2:27:45:b2:3e:52:7c:2d:c3:8c:57:8b:3f: 31:39:49:28:9a:c5:58:f6:7e:83:7a:0a:ca:51:e0: 5b:38:aa:02:f6:a8:b1:1d:60:6e:b1:f1:cf:50:fe: 7a:e5:f5:81:4a:5b:84:4d:e0:f7:2d:f7:b1:9e:ce: 35:1d:1c:5c:07:de:2d:ba:19:39:13:25:1c:38:6d: 3b:26:6b:e0:27:27:0c:bf:42:d7:9e:59:79:16:d6: 1c:b9:76:8e:6c:14:ed:76:f5:6d:bc:97:23:a1:a5: 5c:78:a4:15:b3:96:28:30:d2:65:d1:5c:ab:2a:2d: 7f:32:89:65:98:a5:53:0f:9a:63:e4:7d:f3:d0:68: cd:14:06:fc:a6:12:e8:67:8f:c0:95:7e:5c:b0:c5: 7e:1b:75:e7:71:4c:f1:cb:35:80:79:d4:4a:d0:9a: ce:bb:be:e7:0b:36:76:3d:f9:3e:4b:15:6e:53:7e: 09:76:a7:a6:db:4d:2b:5b:de:13:4f:9e:f9:b2:0a: b0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D6:D3:82:4B:13:D1:F8:CB:56:38:EA:1D:BB:0F:F8:6E:BA:A5:CF X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f7:a5:83:25:ba:1a:7d:44:a9:79:b4:c0:c9:0d:c0:ef:0d: 41:c0:70:7d:1e:96:8f:5d:7f:00:0b:c6:bf:e4:ff:93:23:11: 0d:13:5c:1f:a2:b7:85:94:67:0f:99:9d:02:91:08:15:83:8f: 7e:f8:6d:ff:fb:95:75:a9:87:83:8c:3d:4b:83:61:52:dc:83: 91:29:e7:e5:e1:88:ff:64:0a:0a:f8:29:21:e5:8c:88:07:f8: be:8e:1e:95:dc:11:c6:a4:01:c1:f0:88:cb:f0:68:0f:fa:4e: 6d:92:3e:7d:9a:51:97:7d:b4:01:af:03:ae:1f:83:dd:e3:a6: 62:14:8e:4e:c4:46:8e:59:28:45:9d:a7:a4:5e:75:0d:33:0c: 34:10:bd:85:ff:12:16:45:ea:2b:3f:f7:6c:b4:17:f4:9b:2b: c8:d1:45:65:85:b7:60:8c:14:01:74:06:88:93:07:ed:e5:ec: 97:fc:d4:1d:9b:4e:a2:66:2a:cc:31:a2:23:b5:4e:f8:91:f4: 8a:4c:51:71:32:1a:7e:83:36:7e:19:da:d9:3b:c0:d2:9e:a8: 88:af:2e:9d:c8:d4:ab:86:52:57:01:58:b7:87:d2:63:47:b6: 30:e9:32:aa:fe:c8:32:1f:5a:31:8e:f1:56:7f:c7:a6:77:39: f9:bc:b1:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCsdV7Taw9lQdnBqABqMIOKmks8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjA5MjMwNTI3NTBaFw0yNjA5MjQwOTAxNTBaMDMxMTAvBgNV BAMTKDk0RDZEMzgyNEIxM0QxRjhDQjU2MzhFQTFEQkIwRkY4NkVCQUE1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7Gmrd99TqMkuX0PKyZYIFxLQ eAaWxOWsUFOAU+v87OWJNIWoJ5aIwtQrcvEXTTAJ3PbTL6IYWjum+JTOwidFsj5S fC3DjFeLPzE5SSiaxVj2foN6CspR4Fs4qgL2qLEdYG6x8c9Q/nrl9YFKW4RN4Pct 97GezjUdHFwH3i26GTkTJRw4bTsma+AnJwy/QteeWXkW1hy5do5sFO129W28lyOh pVx4pBWzligw0mXRXKsqLX8yiWWYpVMPmmPkffPQaM0UBvymEuhnj8CVflywxX4b dedxTPHLNYB51ErQms67vucLNnY9+T5LFW5Tfgl2p6bbTStb3hNPnvmyCrDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNbTgksT0fjLVjjqHbsP+G66pc8wHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYw ODMwRTZDMUFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABz3pYMluhp9RKl5tMDJDcDvDUHAcH0elo9d fwALxr/k/5MjEQ0TXB+it4WUZw+ZnQKRCBWDj374bf/7lXWph4OMPUuDYVLcg5Ep 5+XhiP9kCgr4KSHljIgH+L6OHpXcEcakAcHwiMvwaA/6Tm2SPn2aUZd9tAGvA64f g93jpmIUjk7ERo5ZKEWdp6RedQ0zDDQQvYX/EhZF6is/92y0F/SbK8jRRWWFt2CM FAF0BoiTB+3l7Jf81B2bTqJmKswxoiO1TviR9IpMUXEyGn6DNn4Z2tk7wNKeqIiv Lp3I1KuGUlcBWLeH0mNHtjDpMqr+yDIfWjGO8VZ/x6Z3Ofm8sTo= -----END CERTIFICATE-----Generated at Wed Sep 23 23:48:28 2026 by rpki-client