$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft File: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft (raw, json) Hash identifier: QiC5d720NHrARVEwYMNvZQ/u83IM/Txy8M2oLA0P+a0= Subject key identifier: 7B:A6:B1:84:66:47:00:C3:19:DE:32:0C:B0:7E:2D:D1:0A:FF:81:22 Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 6A8BF57932A6DD0221F908D139E085F3E8569EB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 03:17:10 +0000 Manifest this update: Wed 04 Nov 2026 03:12:10 +0000 Manifest next update: Thu 05 Nov 2026 04:49:10 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: rH0EBEYwFNkXIM8Mj3asy0ipU8+X9tTfzMeEAFrvYrM=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: cw9vNPqzj+nbF/8UED+AX3JWM0AiWyBHrefZED5PbbE=) 3: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl (hash: Sozs/2en/XnYjRcFXS2JyGal7xeFMCrXBszlBmaq0z0=) 4: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 7Xohzs3qzHwElj+iGxc/XgWir/J3Steo6jFstKpP8Y0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 04:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8b:f5:79:32:a6:dd:02:21:f9:08:d1:39:e0:85:f3:e8:56:9e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: Nov 4 03:12:10 2026 GMT Not After : Nov 5 04:49:10 2026 GMT Subject: CN=7BA6B184664700C319DE320CB07E2DD10AFF8122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:ec:0c:36:2b:eb:a1:33:65:ae:88:c0:1d: 86:d4:08:79:b8:72:9b:50:91:63:60:ea:5b:18:a3: fd:6b:cc:57:3f:a1:88:c9:cd:74:9f:0d:fd:8b:d6: 3c:52:e1:64:11:e2:bc:7b:90:fc:81:b4:2c:f1:68: 17:bf:3d:26:f9:f5:c5:63:16:3c:e2:81:4f:4d:19: 9f:04:7a:0a:51:24:31:a4:3d:10:75:e8:af:78:f4: 7c:89:ff:33:ad:9f:fb:45:73:c9:ac:1a:06:2b:2c: 5a:eb:e8:50:18:ec:e8:44:3f:93:3b:17:a9:2b:bc: 59:1a:cc:05:a5:c7:84:4c:8c:29:28:44:98:f9:ab: 57:26:1f:96:73:b0:4e:cc:04:d4:4c:c8:37:41:7f: de:82:b9:07:58:8e:77:8f:1f:24:56:3c:45:8f:94: bb:f1:42:29:34:03:4b:f2:49:a0:d3:fe:5f:fa:23: c7:1f:d7:18:90:13:be:f6:f4:01:63:47:65:8f:e9: 3c:f9:61:61:ae:dc:d1:17:5e:60:a5:cd:86:96:55: c3:20:5e:f9:e7:7b:95:a7:37:50:a0:cf:85:d5:0d: 85:bc:02:7c:19:da:ac:80:3e:e9:f8:73:66:4c:0a: 2c:a2:ea:54:fc:9b:7c:f5:d4:e5:95:e1:19:4e:0d: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A6:B1:84:66:47:00:C3:19:DE:32:0C:B0:7E:2D:D1:0A:FF:81:22 X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:06:1d:46:2d:0b:c0:02:aa:25:05:85:b3:d3:1e:12:48:ee: 31:be:bd:9a:b8:34:aa:61:8d:15:20:e6:22:13:50:0e:51:84: da:71:70:d7:9c:09:4b:71:5d:49:a1:75:80:17:05:0e:91:fa: c6:02:a9:96:70:f9:c2:02:89:ec:ef:e0:e1:90:fc:f3:fe:5e: c9:56:60:bd:7f:7b:19:c2:6d:45:8c:74:bd:4d:d5:a8:a0:30: d2:9b:f4:65:94:11:73:ee:15:44:22:c8:77:aa:90:77:6e:c2: 76:b0:ec:ac:a9:2c:41:86:ec:49:e4:b5:2d:58:e1:61:30:af: 6e:ea:fc:c1:8f:81:24:b0:b8:d9:b4:1f:53:6e:b6:d6:6f:46: ed:54:64:10:95:e3:e9:48:81:6e:32:2c:41:14:69:1a:e1:37: ea:f7:03:06:24:22:39:8e:6c:c8:4a:6f:25:ea:9d:85:8d:9b: 6b:a6:1a:ed:04:55:df:68:61:ea:ec:67:3c:90:aa:a6:2b:60: 1f:fb:0c:ef:e1:54:b7:3e:e8:7c:b0:e1:a4:a0:45:c2:c8:d2: 44:74:fd:c6:bf:db:10:b6:75:28:aa:9c:ac:79:1d:1a:64:10: 96:67:df:94:cb:69:09:83:61:9a:b9:0c:2a:dd:21:d9:00:bb: 02:ee:f4:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaov1eTKm3QIh+QjROeCF8+hWnrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjExMDQwMzEyMTBaFw0yNjExMDUwNDQ5MTBaMDMxMTAvBgNV BAMTKDdCQTZCMTg0NjY0NzAwQzMxOURFMzIwQ0IwN0UyREQxMEFGRjgxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4M+wMNivroTNlrojAHYbUCHm4 cptQkWNg6lsYo/1rzFc/oYjJzXSfDf2L1jxS4WQR4rx7kPyBtCzxaBe/PSb59cVj FjzigU9NGZ8EegpRJDGkPRB16K949HyJ/zOtn/tFc8msGgYrLFrr6FAY7OhEP5M7 F6krvFkazAWlx4RMjCkoRJj5q1cmH5ZzsE7MBNRMyDdBf96CuQdYjnePHyRWPEWP lLvxQik0A0vySaDT/l/6I8cf1xiQE7729AFjR2WP6Tz5YWGu3NEXXmClzYaWVcMg Xvnne5WnN1Cgz4XVDYW8AnwZ2qyAPun4c2ZMCiyi6lT8m3z11OWV4RlODcixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe6axhGZHAMMZ3jIMsH4t0Qr/gSIwHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYw ODMwRTZDMUFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4GHUYtC8ACqiUFhbPTHhJI7jG+vZq4NKph jRUg5iITUA5RhNpxcNecCUtxXUmhdYAXBQ6R+sYCqZZw+cICiezv4OGQ/PP+XslW YL1/exnCbUWMdL1N1aigMNKb9GWUEXPuFUQiyHeqkHduwnaw7KypLEGG7EnktS1Y 4WEwr27q/MGPgSSwuNm0H1NuttZvRu1UZBCV4+lIgW4yLEEUaRrhN+r3AwYkIjmO bMhKbyXqnYWNm2umGu0EVd9oYersZzyQqqYrYB/7DO/hVLc+6Hyw4aSgRcLI0kR0 /ca/2xC2dSiqnKx5HRpkEJZn35TLaQmDYZq5DCrdIdkAuwLu9Jo= -----END CERTIFICATE-----Generated at Wed Nov 4 07:35:46 2026 by rpki-client