$ rpki-client -vvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft File: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft (raw, json) Hash identifier: KuQ5vd+Frg96vhLwK2HWvF9IFaX9vaFJAjX/TxVnc0o= Subject key identifier: D2:81:D6:AE:DC:9C:97:31:54:D8:CE:2C:E1:96:63:03:5C:18:1D:0E Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 0DDDC69769B75319BD3D4C2B33DE0E38CCB9C0CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 11:58:50 +0000 Manifest this update: Tue 16 Jun 2026 11:53:50 +0000 Manifest next update: Wed 17 Jun 2026 15:53:50 +0000 Files and hashes: 1: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl (hash: PaxHigcbAhVBefFux7jTzsi1j3OYo1GTNRnqWpqd+lA=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: cw9vNPqzj+nbF/8UED+AX3JWM0AiWyBHrefZED5PbbE=) 3: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 7Xohzs3qzHwElj+iGxc/XgWir/J3Steo6jFstKpP8Y0=) 4: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: rH0EBEYwFNkXIM8Mj3asy0ipU8+X9tTfzMeEAFrvYrM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 15:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:dd:c6:97:69:b7:53:19:bd:3d:4c:2b:33:de:0e:38:cc:b9:c0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: Jun 16 11:53:50 2026 GMT Not After : Jun 17 15:53:50 2026 GMT Subject: CN=D281D6AEDC9C973154D8CE2CE19663035C181D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:f4:70:00:53:a7:c8:84:9d:0d:80:35:73: 0c:4c:bb:f6:20:2c:93:8d:4d:98:b3:4b:08:95:b7: 1c:44:1f:e7:ee:e2:10:12:d0:e2:b8:25:1e:b4:d3: 5c:3e:f3:31:7a:a1:27:af:75:9f:86:3b:13:6b:fa: 3f:85:74:f5:e6:22:5d:37:e7:8f:b9:33:b0:df:dc: de:a4:8e:93:79:20:16:29:c2:43:6e:ec:0b:40:93: 44:62:c4:39:4a:b7:13:ce:fb:a7:c2:98:e5:21:59: 62:26:f8:10:33:eb:88:a3:60:a1:7d:81:cd:8d:c7: a9:bf:f6:b3:5f:f3:21:96:19:09:76:4a:5a:30:0f: 65:46:66:92:40:e2:7c:67:b2:88:68:43:a6:c9:6e: 1d:a0:9d:3c:28:2a:b1:10:6a:b2:f6:db:b4:1c:ba: cc:24:61:97:fe:b4:2e:d7:4b:81:61:9f:47:c2:7f: fb:54:c3:ee:34:aa:b2:25:4f:2d:87:72:bb:e2:55: be:94:89:2c:27:71:39:d1:2f:dc:d4:06:14:a2:e7: 01:71:b1:10:e8:24:dc:3b:1b:8e:69:db:4d:46:10: a8:b7:ac:6c:d9:b0:db:97:49:77:e2:68:04:5a:70: a3:0c:9e:48:b9:d0:85:4c:35:7c:06:50:99:d4:09: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:81:D6:AE:DC:9C:97:31:54:D8:CE:2C:E1:96:63:03:5C:18:1D:0E X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ed:4e:b4:5f:bf:45:1e:f8:b6:8f:07:01:37:ee:de:b1:a4: f6:49:fd:d9:9f:31:2d:a1:ec:5b:c1:22:f0:44:59:ab:fb:6e: 80:66:05:9c:3a:14:1c:e4:71:63:4d:ee:9c:02:eb:bb:20:78: 9f:9f:8d:92:0c:be:ba:2e:bc:30:aa:1e:c3:57:5b:48:19:d8: 17:a7:ab:0b:60:99:64:31:0f:cd:d4:a3:4e:58:a3:da:51:e7: c7:06:df:f7:88:ed:29:a8:54:21:1f:70:c5:71:34:76:95:e0: c2:78:63:cf:df:a8:3d:b9:d4:6d:62:ce:be:0a:c4:5e:21:67: ee:3f:d2:97:68:68:f4:e5:75:b7:d6:02:ff:bd:79:da:e1:87: 22:65:1f:d1:ee:75:0d:c1:0b:74:b9:9e:65:6f:13:50:c3:22: 50:5b:df:63:ff:18:f1:a2:f6:e3:9f:92:0c:c2:20:ca:a6:aa: 8b:b2:88:58:3b:42:da:2f:21:3b:c3:31:96:c0:c0:02:76:14: 28:34:81:76:d5:e1:dc:58:7b:cc:30:b8:24:5b:c2:73:45:e7: d5:64:e1:2a:c7:f7:9f:a6:32:4b:3f:64:f0:fc:3f:03:2d:ca: 23:23:ae:7f:32:b9:28:48:92:31:81:b1:01:47:24:96:ea:a5: 3a:68:eb:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDd3Gl2m3Uxm9PUwrM94OOMy5wM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjA2MTYxMTUzNTBaFw0yNjA2MTcxNTUzNTBaMDMxMTAvBgNV BAMTKEQyODFENkFFREM5Qzk3MzE1NEQ4Q0UyQ0UxOTY2MzAzNUMxODFEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX5fRwAFOnyISdDYA1cwxMu/Yg LJONTZizSwiVtxxEH+fu4hAS0OK4JR6001w+8zF6oSevdZ+GOxNr+j+FdPXmIl03 54+5M7Df3N6kjpN5IBYpwkNu7AtAk0RixDlKtxPO+6fCmOUhWWIm+BAz64ijYKF9 gc2Nx6m/9rNf8yGWGQl2SlowD2VGZpJA4nxnsohoQ6bJbh2gnTwoKrEQarL227Qc uswkYZf+tC7XS4Fhn0fCf/tUw+40qrIlTy2HcrviVb6UiSwncTnRL9zUBhSi5wFx sRDoJNw7G45p201GEKi3rGzZsNuXSXfiaARacKMMnki50IVMNXwGUJnUCUyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0oHWrtyclzFU2M4s4ZZjA1wYHQ4wHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYw ODMwRTZDMUFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHtTrRfv0Ue+LaPBwE37t6xpPZJ/dmfMS2h 7FvBIvBEWav7boBmBZw6FBzkcWNN7pwC67sgeJ+fjZIMvrouvDCqHsNXW0gZ2Ben qwtgmWQxD83Uo05Yo9pR58cG3/eI7SmoVCEfcMVxNHaV4MJ4Y8/fqD251G1izr4K xF4hZ+4/0pdoaPTldbfWAv+9edrhhyJlH9HudQ3BC3S5nmVvE1DDIlBb32P/GPGi 9uOfkgzCIMqmqouyiFg7QtovITvDMZbAwAJ2FCg0gXbV4dxYe8wwuCRbwnNF59Vk 4SrH95+mMks/ZPD8PwMtyiMjrn8yuShIkjGBsQFHJJbqpTpo604= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:19 2026 by rpki-client