$ rpki-client -vvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft File: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft (raw, json) Hash identifier: 1VSy3Cj9q8VfTYKLsNBeIWUT58fTiV/DierS4sNjiL0= Subject key identifier: 6B:E7:83:D9:A2:F7:EE:E2:02:D2:B9:92:F3:70:C9:3A:6E:35:2B:66 Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 7B69FEF87AD16159F4DDF79DC5BC0130BD8729EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:15:45 +0000 Manifest this update: Tue 02 Jun 2026 21:10:45 +0000 Manifest next update: Wed 03 Jun 2026 22:42:45 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: cw9vNPqzj+nbF/8UED+AX3JWM0AiWyBHrefZED5PbbE=) 2: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: rH0EBEYwFNkXIM8Mj3asy0ipU8+X9tTfzMeEAFrvYrM=) 3: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 7Xohzs3qzHwElj+iGxc/XgWir/J3Steo6jFstKpP8Y0=) 4: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl (hash: ygJR7wa+v+r4Za4u4f3p54AMd3D5nfoKaGDk6tl3+2Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:69:fe:f8:7a:d1:61:59:f4:dd:f7:9d:c5:bc:01:30:bd:87:29:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: Jun 2 21:10:45 2026 GMT Not After : Jun 3 22:42:45 2026 GMT Subject: CN=6BE783D9A2F7EEE202D2B992F370C93A6E352B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:38:ce:ec:8c:af:f1:7a:c5:ca:94:22:8b: ba:d1:5e:86:c0:38:61:10:65:54:6a:a3:95:01:15: ac:7a:83:a3:f6:12:41:12:c8:9c:45:ff:91:fc:33: c7:b8:85:8c:c5:ff:e3:34:b7:9e:15:99:52:bc:8d: f5:d3:e6:f1:af:7e:b5:b2:50:c9:6c:dc:ed:a9:30: ac:f4:11:50:ad:08:22:ef:4e:0c:bd:3d:f1:8a:d9: f4:0c:53:46:16:16:d4:35:f3:24:0b:54:bc:f8:8b: 84:16:1f:8b:49:a6:c3:97:35:41:ee:03:67:29:b0: e6:4e:82:92:a9:c1:4f:48:36:3e:7b:27:49:c5:e9: 3c:02:7e:9b:a3:d6:82:c4:76:e5:da:4d:25:0b:27: d5:f5:cd:10:dc:e9:0f:ba:ba:7c:9e:05:c5:8b:22: b0:37:63:49:1b:e1:da:a9:06:9a:7c:08:27:cb:61: 99:50:ef:cb:ce:9d:e9:3d:ff:2f:a6:21:79:3f:d4: 5b:c3:18:63:c4:7f:0b:94:bf:0a:1e:ae:3e:79:c7: ba:7a:35:c3:24:8e:ab:30:f4:0c:e8:c3:04:75:d0: f9:8f:f6:7b:83:9f:1a:e3:4d:46:b9:f4:84:20:9c: ea:8b:b0:01:ab:95:68:85:7a:9d:27:ec:f5:11:45: 05:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E7:83:D9:A2:F7:EE:E2:02:D2:B9:92:F3:70:C9:3A:6E:35:2B:66 X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f0:4f:ff:02:90:f6:71:e4:10:74:a3:7b:f4:a4:a3:7a:32: f1:3c:39:da:bd:91:81:00:48:89:74:49:cb:1f:da:41:e2:ca: 1b:c1:a9:2e:47:26:05:c6:71:b0:af:cc:2b:de:4c:de:7c:87: 6a:cc:36:0d:dd:54:e3:9a:7e:74:67:9f:5b:39:b1:fc:06:b6: a7:47:17:fe:d1:f5:b3:e5:59:01:d9:ff:ee:7f:b4:81:e2:1e: 96:b7:56:ef:21:68:48:2f:ec:8e:a4:a0:4f:57:19:32:ee:30: c5:43:0c:fc:3a:bd:a3:f5:2a:a7:09:53:c5:3f:e4:a2:4f:ed: 63:5d:c1:f8:d4:f4:4b:e8:37:19:50:d6:ba:bf:63:22:50:35: 2e:72:c0:41:0b:80:58:6b:86:56:29:38:85:ee:62:53:96:4d: 49:1b:3e:23:ac:fb:63:80:82:10:8d:70:96:23:76:ed:3b:dd: 42:45:a1:28:f5:27:83:14:c6:a2:74:a4:b4:60:18:e5:b4:02: a5:aa:67:bd:74:ca:64:74:33:94:89:79:9d:3e:54:5d:6d:8e: 0a:95:1e:ad:79:21:78:58:54:3a:f1:af:2e:d6:cb:54:dc:e9: b7:91:0b:6c:2d:76:42:97:20:df:d0:e6:99:4f:21:bb:fc:de: 34:97:f8:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2n++HrRYVn03fedxbwBML2HKe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjA2MDIyMTEwNDVaFw0yNjA2MDMyMjQyNDVaMDMxMTAvBgNV BAMTKDZCRTc4M0Q5QTJGN0VFRTIwMkQyQjk5MkYzNzBDOTNBNkUzNTJCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5DjO7Iyv8XrFypQii7rRXobA OGEQZVRqo5UBFax6g6P2EkESyJxF/5H8M8e4hYzF/+M0t54VmVK8jfXT5vGvfrWy UMls3O2pMKz0EVCtCCLvTgy9PfGK2fQMU0YWFtQ18yQLVLz4i4QWH4tJpsOXNUHu A2cpsOZOgpKpwU9INj57J0nF6TwCfpuj1oLEduXaTSULJ9X1zRDc6Q+6unyeBcWL IrA3Y0kb4dqpBpp8CCfLYZlQ78vOnek9/y+mIXk/1FvDGGPEfwuUvwoerj55x7p6 NcMkjqsw9AzowwR10PmP9nuDnxrjTUa59IQgnOqLsAGrlWiFep0n7PURRQUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa+eD2aL37uIC0rmS83DJOm41K2YwHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYw ODMwRTZDMUFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXwT/8CkPZx5BB0o3v0pKN6MvE8Odq9kYEA SIl0Scsf2kHiyhvBqS5HJgXGcbCvzCveTN58h2rMNg3dVOOafnRnn1s5sfwGtqdH F/7R9bPlWQHZ/+5/tIHiHpa3Vu8haEgv7I6koE9XGTLuMMVDDPw6vaP1KqcJU8U/ 5KJP7WNdwfjU9EvoNxlQ1rq/YyJQNS5ywEELgFhrhlYpOIXuYlOWTUkbPiOs+2OA ghCNcJYjdu073UJFoSj1J4MUxqJ0pLRgGOW0AqWqZ710ymR0M5SJeZ0+VF1tjgqV Hq15IXhYVDrxry7Wy1Tc6beRC2wtdkKXIN/Q5plPIbv83jSX+M0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:44:15 2026 by rpki-client