$ rpki-client -vvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft File: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft (raw, json) Hash identifier: KfIPfqOyMJpHiW9Vna4gZyNOHtNQ0OdCAVuZVU93SZQ= Subject key identifier: 68:E3:21:31:87:20:22:0F:45:76:6B:13:0E:8A:46:32:7A:22:45:94 Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 301BD0ACCD8B672F29706540F60EC7CF460C4297 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:48:37 +0000 Manifest this update: Mon 20 Jul 2026 13:43:37 +0000 Manifest next update: Tue 21 Jul 2026 15:34:37 +0000 Files and hashes: 1: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 7Xohzs3qzHwElj+iGxc/XgWir/J3Steo6jFstKpP8Y0=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: cw9vNPqzj+nbF/8UED+AX3JWM0AiWyBHrefZED5PbbE=) 3: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: rH0EBEYwFNkXIM8Mj3asy0ipU8+X9tTfzMeEAFrvYrM=) 4: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl (hash: S5DRPKFovKedDKxpvSvt7nN2dc5ZgQXE3z8p0X/473o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1b:d0:ac:cd:8b:67:2f:29:70:65:40:f6:0e:c7:cf:46:0c:42:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: Jul 20 13:43:37 2026 GMT Not After : Jul 21 15:34:37 2026 GMT Subject: CN=68E321318720220F45766B130E8A46327A224594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fe:c9:9c:bb:88:69:3c:cf:32:8f:95:f2:b0: 0f:b7:9f:c0:7a:c5:6b:26:fe:75:bf:18:da:c6:35: 23:28:02:29:a7:fd:fd:dc:30:c5:35:83:21:85:67: 21:66:12:69:54:38:fe:32:a1:ef:47:2c:41:ef:a5: 42:80:e4:00:92:f7:67:57:ac:98:15:52:10:57:42: cf:53:b1:fe:6f:e1:7b:f9:77:84:c4:f1:eb:bf:12: 0c:a6:37:15:c1:61:36:94:d5:2d:15:e8:1b:19:9b: 82:8c:99:8c:de:b8:36:36:c4:40:d6:68:f1:4d:17: c6:7b:2a:51:30:a8:79:af:a8:75:79:48:68:81:24: 25:2e:17:4f:f6:48:a9:52:21:5c:f8:0a:b9:91:26: 80:5a:8d:f3:6e:cd:2e:d4:e2:39:98:15:76:70:c3: b3:e1:20:a9:bb:e4:da:0d:4c:4f:86:b2:e5:70:5b: 25:cf:d4:19:c1:35:4d:f2:4f:9e:ed:db:f7:fd:b2: f7:b7:c1:b9:e6:57:ca:9c:5c:c0:b5:fe:ff:45:64: ec:31:6d:07:8c:b5:16:15:70:c4:da:57:52:ed:7e: a6:ab:da:a3:42:98:61:31:91:7d:8a:3e:a3:f7:de: 4b:e9:12:df:1d:9b:ec:5f:d7:a9:d9:98:2c:f8:4a: 8b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:21:31:87:20:22:0F:45:76:6B:13:0E:8A:46:32:7A:22:45:94 X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ee:a9:95:8d:ce:83:9c:60:52:5b:46:b9:3b:44:bd:15:a9: d4:96:e1:88:bb:cd:09:44:ce:6f:5a:21:5c:51:1b:da:fa:f3: 32:81:5d:31:0e:9b:fd:a1:e9:a8:df:b2:df:03:dd:41:fd:c2: 92:ec:df:9b:a1:87:6b:90:c6:1d:f1:7d:9a:0e:2b:d9:4a:39: 4b:0d:45:5f:c7:ba:f3:59:2e:9f:33:8d:f0:ab:21:7a:24:67: 0b:a1:e8:e2:95:59:e0:b6:92:aa:27:7e:80:f1:d9:1c:92:ac: 56:09:9c:84:84:e9:21:5c:82:c8:74:9d:89:c5:70:57:b5:5a: 77:e5:87:48:69:57:76:40:c5:40:b8:90:cd:2c:17:b0:7a:14: b8:a3:e5:38:65:78:55:a5:0e:5e:86:d5:37:98:04:1d:68:85: f1:85:14:d9:de:e6:74:62:da:08:06:1b:ff:d7:b1:29:ba:a4: 89:8e:ee:65:9f:13:e5:36:26:f1:ec:37:4b:4d:05:6f:93:58: 5c:1e:ae:38:0b:83:5c:ad:6d:3a:a1:14:0d:ae:8f:39:e3:3e: 23:c8:7e:c9:ef:2b:3f:0e:fa:4e:77:df:dc:ea:1b:e9:e4:a5: 02:6c:5a:a4:d1:5d:01:a5:ef:31:ec:c7:8d:e6:08:df:36:85: 34:07:25:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBvQrM2LZy8pcGVA9g7Hz0YMQpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjA3MjAxMzQzMzdaFw0yNjA3MjExNTM0MzdaMDMxMTAvBgNV BAMTKDY4RTMyMTMxODcyMDIyMEY0NTc2NkIxMzBFOEE0NjMyN0EyMjQ1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/smcu4hpPM8yj5XysA+3n8B6 xWsm/nW/GNrGNSMoAimn/f3cMMU1gyGFZyFmEmlUOP4yoe9HLEHvpUKA5ACS92dX rJgVUhBXQs9Tsf5v4Xv5d4TE8eu/EgymNxXBYTaU1S0V6BsZm4KMmYzeuDY2xEDW aPFNF8Z7KlEwqHmvqHV5SGiBJCUuF0/2SKlSIVz4CrmRJoBajfNuzS7U4jmYFXZw w7PhIKm75NoNTE+GsuVwWyXP1BnBNU3yT57t2/f9sve3wbnmV8qcXMC1/v9FZOwx bQeMtRYVcMTaV1Ltfqar2qNCmGExkX2KPqP33kvpEt8dm+xf16nZmCz4Sou9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaOMhMYcgIg9FdmsTDopGMnoiRZQwHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYw ODMwRTZDMUFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITuqZWNzoOcYFJbRrk7RL0VqdSW4Yi7zQlE zm9aIVxRG9r68zKBXTEOm/2h6ajfst8D3UH9wpLs35uhh2uQxh3xfZoOK9lKOUsN RV/HuvNZLp8zjfCrIXokZwuh6OKVWeC2kqonfoDx2RySrFYJnISE6SFcgsh0nYnF cFe1Wnflh0hpV3ZAxUC4kM0sF7B6FLij5ThleFWlDl6G1TeYBB1ohfGFFNne5nRi 2ggGG//XsSm6pImO7mWfE+U2JvHsN0tNBW+TWFwerjgLg1ytbTqhFA2ujznjPiPI fsnvKz8O+k5339zqG+nkpQJsWqTRXQGl7zHsx43mCN82hTQHJQQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:31:58 2026 by rpki-client