$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft File: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft (raw, json) Hash identifier: X+INtQ/DCsYcGBTB698aTvJ2Kj0NcXcJNlgpVkwzH2Y= Subject key identifier: 24:3E:6F:AD:D1:CB:D7:E1:DA:70:FF:0B:FB:F7:4E:54:8A:77:E3:93 Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 0FE103548DDCCACCBB37FCB238A6272303E9F8D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:16:52 +0000 Manifest this update: Mon 21 Sep 2026 00:11:52 +0000 Manifest next update: Tue 22 Sep 2026 01:24:52 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: rH0EBEYwFNkXIM8Mj3asy0ipU8+X9tTfzMeEAFrvYrM=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: cw9vNPqzj+nbF/8UED+AX3JWM0AiWyBHrefZED5PbbE=) 3: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 7Xohzs3qzHwElj+iGxc/XgWir/J3Steo6jFstKpP8Y0=) 4: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl (hash: OCnKMSkFivXC/gnF8krg0EmkvFkrBI40sYBDwuI87hU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e1:03:54:8d:dc:ca:cc:bb:37:fc:b2:38:a6:27:23:03:e9:f8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: Sep 21 00:11:52 2026 GMT Not After : Sep 22 01:24:52 2026 GMT Subject: CN=243E6FADD1CBD7E1DA70FF0BFBF74E548A77E393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:ea:ef:14:f2:0a:5f:98:f2:3c:90:08:1c: 23:01:20:bf:91:2b:e9:9d:bc:5f:23:a6:f9:24:d6: e3:1c:3b:fd:95:5d:b6:54:1f:01:0e:6b:b2:96:aa: 0a:64:93:1c:fa:0f:2b:9c:99:4e:b4:76:f6:a9:a0: 5a:ea:2f:bf:83:ec:d7:4c:4e:df:16:b2:91:6d:78: c0:9f:18:eb:c5:06:8c:6d:60:38:81:49:09:b3:9d: 0d:1f:76:15:be:54:87:08:7c:3a:f0:d8:6f:45:83: 52:7d:7f:a6:35:15:cf:80:75:cc:a4:a8:66:bf:78: 93:9d:76:33:d9:74:10:fc:4e:60:bd:d6:27:c4:2f: 7b:2f:93:4d:a8:99:8c:2c:c2:cc:48:24:9f:ed:b6: 8a:fa:c9:43:13:61:8f:b5:74:4b:90:37:24:db:52: 6e:ce:bb:06:5c:69:8f:f8:0f:cf:99:25:cc:80:be: 1c:2a:21:7e:dd:ce:d7:c2:e1:d5:2c:8b:1d:92:91: 16:6a:39:f7:78:c7:00:bc:e7:f0:de:21:2e:ba:af: 1c:20:bd:76:e4:d0:04:3b:ab:0e:1b:60:0d:dd:58: 86:cb:80:74:fe:67:c5:1c:39:15:9c:96:be:05:2a: 75:54:ec:3b:e8:0f:69:78:c5:0e:64:2b:22:3a:08: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3E:6F:AD:D1:CB:D7:E1:DA:70:FF:0B:FB:F7:4E:54:8A:77:E3:93 X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:51:ad:3e:9b:36:e7:85:61:8a:c7:c4:89:fc:b4:04:09:23: b3:9f:88:79:c8:82:6b:07:c1:8d:31:16:95:9a:f5:c2:03:98: f8:9f:7c:f2:08:7d:a8:b3:43:8f:77:ca:1c:60:7a:89:e9:e2: 2d:5c:2b:d1:4d:36:46:bc:2d:40:d2:03:3b:f4:cd:10:68:59: b7:51:ad:2c:4c:f6:e5:b0:83:8e:3f:20:2f:75:0c:d0:4a:86: b3:58:89:f7:ce:cd:16:6a:d6:7b:85:3a:c9:20:86:c5:59:e5: 0a:da:5c:d1:12:1a:e1:58:e1:e0:c5:34:c2:24:1a:a3:67:6e: df:cd:d4:2d:51:79:01:26:e4:68:78:17:af:7f:bc:57:ea:7e: df:c8:25:64:30:94:a8:1c:ac:e6:db:2d:9b:b5:74:3c:16:ac: 82:29:9d:23:68:79:6e:e8:b3:5e:24:a5:fc:65:45:96:33:e0: bc:09:59:33:60:fb:b0:66:47:ae:4f:88:35:e6:29:cd:b6:8b: 8e:ca:89:dd:f9:2e:79:87:71:35:df:d8:3b:99:a2:d8:14:ec: c2:a5:4e:7f:e6:c4:45:c9:6d:6a:f9:32:39:08:74:ce:23:28: d5:ce:de:24:44:b3:60:db:a1:4f:93:bf:8e:31:f7:ff:6f:9b: f0:82:31:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+EDVI3cysy7N/yyOKYnIwPp+NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjA5MjEwMDExNTJaFw0yNjA5MjIwMTI0NTJaMDMxMTAvBgNV BAMTKDI0M0U2RkFERDFDQkQ3RTFEQTcwRkYwQkZCRjc0RTU0OEE3N0UzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDah+rvFPIKX5jyPJAIHCMBIL+R K+mdvF8jpvkk1uMcO/2VXbZUHwEOa7KWqgpkkxz6DyucmU60dvapoFrqL7+D7NdM Tt8WspFteMCfGOvFBoxtYDiBSQmznQ0fdhW+VIcIfDrw2G9Fg1J9f6Y1Fc+Adcyk qGa/eJOddjPZdBD8TmC91ifEL3svk02omYwswsxIJJ/ttor6yUMTYY+1dEuQNyTb Um7OuwZcaY/4D8+ZJcyAvhwqIX7dztfC4dUsix2SkRZqOfd4xwC85/DeIS66rxwg vXbk0AQ7qw4bYA3dWIbLgHT+Z8UcORWclr4FKnVU7DvoD2l4xQ5kKyI6CJG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJD5vrdHL1+HacP8L+/dOVIp345MwHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYw ODMwRTZDMUFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJRrT6bNueFYYrHxIn8tAQJI7OfiHnIgmsH wY0xFpWa9cIDmPiffPIIfaizQ493yhxgeonp4i1cK9FNNka8LUDSAzv0zRBoWbdR rSxM9uWwg44/IC91DNBKhrNYiffOzRZq1nuFOskghsVZ5QraXNESGuFY4eDFNMIk GqNnbt/N1C1ReQEm5Gh4F69/vFfqft/IJWQwlKgcrObbLZu1dDwWrIIpnSNoeW7o s14kpfxlRZYz4LwJWTNg+7BmR65PiDXmKc22i47Kid35LnmHcTXf2DuZotgU7MKl Tn/mxEXJbWr5MjkIdM4jKNXO3iREs2DboU+Tv44x9/9vm/CCMX0= -----END CERTIFICATE-----Generated at Mon Sep 21 04:53:09 2026 by rpki-client