$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft File: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft (raw, json) Hash identifier: nFP7BBczPqvVclsD4ZG7iZ1BaTjgV1eN0Il63ENCH8I= Subject key identifier: 84:AB:A0:99:7E:E8:2A:FF:F0:6C:C3:BE:29:10:A7:7D:B5:61:24:0C Authority key identifier: A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF Certificate issuer: /CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Certificate serial: 5C734E86BBFB546EDB07B3561B6EA6B7EAEF638A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:49:25 +0000 Manifest this update: Thu 17 Sep 2026 04:44:25 +0000 Manifest next update: Fri 18 Sep 2026 06:12:25 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: rH0EBEYwFNkXIM8Mj3asy0ipU8+X9tTfzMeEAFrvYrM=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: cw9vNPqzj+nbF/8UED+AX3JWM0AiWyBHrefZED5PbbE=) 3: A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl (hash: +Syn/BNlw1eps3ujjsKJLd8PjNmYH0fOEwLSlGIjjDQ=) 4: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 7Xohzs3qzHwElj+iGxc/XgWir/J3Steo6jFstKpP8Y0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:73:4e:86:bb:fb:54:6e:db:07:b3:56:1b:6e:a6:b7:ea:ef:63:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF Validity Not Before: Sep 17 04:44:25 2026 GMT Not After : Sep 18 06:12:25 2026 GMT Subject: CN=84ABA0997EE82AFFF06CC3BE2910A77DB561240C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:53:29:3f:ab:7a:11:96:01:57:ec:d7:ab: ed:15:60:18:c1:6e:fb:b0:e4:78:99:de:5a:16:d5: 2f:21:09:d7:72:11:88:b1:fe:ff:31:fc:44:bb:d9: 81:7e:aa:1a:d3:f9:e5:7f:6c:ab:65:c6:cc:43:7f: 8d:97:b7:2e:1e:9e:3b:e3:7b:4a:c1:4d:3d:b4:b4: b3:ba:ca:2f:19:68:cf:75:74:94:e4:0f:5a:6a:2b: 4d:13:c8:a5:2b:31:4f:d9:80:cd:1e:76:df:9b:10: 5e:ab:99:18:9f:fe:44:ba:be:0b:e9:23:3f:ca:c0: 77:60:11:cf:17:0f:1f:b6:23:05:36:d0:d2:ba:87: a8:79:bf:51:89:cd:0a:5d:6d:95:14:94:28:60:72: b3:a6:d0:fd:26:86:91:c1:66:7d:4a:18:36:3b:86: e3:84:73:57:4b:a9:31:08:f8:5c:4a:9e:58:02:66: e1:84:a9:36:3b:de:f5:8e:c4:d2:46:27:23:6d:86: af:7c:d0:73:96:97:1d:39:b4:25:4d:a4:c2:f0:47: 4c:df:a1:69:5d:d8:01:d2:86:40:73:99:7e:94:6b: 58:df:30:7a:3c:d6:b3:14:ed:36:93:7f:78:43:94: 31:63:fc:df:8a:71:55:e5:ed:6a:0a:61:1f:09:26: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:A0:99:7E:E8:2A:FF:F0:6C:C3:BE:29:10:A7:7D:B5:61:24:0C X509v3 Authority Key Identifier: keyid:A8:9E:28:00:8F:43:B7:04:C2:FD:C3:EA:D3:FA:F0:83:0E:6C:1A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/A89E28008F43B704C2FDC3EAD3FAF0830E6C1AEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:54:9d:0a:39:05:53:51:d8:75:ed:b8:58:be:38:54:bd:45: 38:a9:9e:4e:1e:cb:83:a8:1e:57:61:f2:64:13:f8:9b:ac:a4: 27:f4:0f:02:3e:08:eb:53:31:2a:2a:76:7e:0e:fe:b4:23:07: 69:46:a2:f3:20:6f:20:27:da:f2:02:f4:fa:98:d1:ee:6f:b6: 08:72:d8:ca:02:c2:32:4c:1f:22:53:cb:be:2d:b9:d5:a9:24: f7:7e:38:c4:4f:8e:b0:28:0c:fa:b5:d7:6f:e8:40:ec:91:a4: 4a:47:65:82:95:06:71:fe:9f:62:20:f7:37:5d:ce:96:f4:18: f5:9d:79:9b:3c:e0:e8:25:9b:ac:c7:57:65:54:e5:53:f6:46: c3:9b:a8:ee:bf:1b:a2:14:fe:c4:e5:b2:4d:72:f1:e7:0e:9a: 24:c2:a4:10:35:eb:13:46:37:22:6b:76:f7:73:dd:b2:94:c5: 4d:fe:4d:f8:bc:b9:2e:8a:cc:22:2f:68:05:59:c2:09:70:ca: 3d:03:19:64:a8:5e:84:a7:d0:76:1f:78:66:22:d4:8b:5c:e1: ef:60:63:cc:83:5e:95:13:a0:3d:19:f6:a9:c7:b5:4c:08:74: eb:ad:a7:31:2c:03:91:92:5a:51:09:6e:42:63:c5:55:4e:de: a1:3e:30:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHNOhrv7VG7bB7NWG26mt+rvY4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMw RTZDMUFFRjAeFw0yNjA5MTcwNDQ0MjVaFw0yNjA5MTgwNjEyMjVaMDMxMTAvBgNV BAMTKDg0QUJBMDk5N0VFODJBRkZGMDZDQzNCRTI5MTBBNzdEQjU2MTI0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbilMpP6t6EZYBV+zXq+0VYBjB bvuw5HiZ3loW1S8hCddyEYix/v8x/ES72YF+qhrT+eV/bKtlxsxDf42Xty4enjvj e0rBTT20tLO6yi8ZaM91dJTkD1pqK00TyKUrMU/ZgM0edt+bEF6rmRif/kS6vgvp Iz/KwHdgEc8XDx+2IwU20NK6h6h5v1GJzQpdbZUUlChgcrOm0P0mhpHBZn1KGDY7 huOEc1dLqTEI+FxKnlgCZuGEqTY73vWOxNJGJyNthq980HOWlx05tCVNpMLwR0zf oWld2AHShkBzmX6Ua1jfMHo81rMU7TaTf3hDlDFj/N+KcVXl7WoKYR8JJp4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhKugmX7oKv/wbMO+KRCnfbVhJAwwHwYDVR0j BBgwFoAUqJ4oAI9DtwTC/cPq0/rwgw5sGu8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY0MGFiZTYtOGRlZS00YmQxLTgxNGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4 RjQzQjcwNEMyRkRDM0VBRDNGQUYwODMwRTZDMUFFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODlFMjgwMDhGNDNCNzA0QzJGREMzRUFEM0ZBRjA4MzBFNkMx QUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvQTg5RTI4MDA4RjQzQjcwNEMyRkRDM0VBRDNGQUYw ODMwRTZDMUFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5UnQo5BVNR2HXtuFi+OFS9RTipnk4ey4Oo Hldh8mQT+JuspCf0DwI+COtTMSoqdn4O/rQjB2lGovMgbyAn2vIC9PqY0e5vtghy 2MoCwjJMHyJTy74tudWpJPd+OMRPjrAoDPq112/oQOyRpEpHZYKVBnH+n2Ig9zdd zpb0GPWdeZs84Oglm6zHV2VU5VP2RsObqO6/G6IU/sTlsk1y8ecOmiTCpBA16xNG NyJrdvdz3bKUxU3+Tfi8uS6KzCIvaAVZwglwyj0DGWSoXoSn0HYfeGYi1Itc4e9g Y8yDXpUToD0Z9qnHtUwIdOutpzEsA5GSWlEJbkJjxVVO3qE+MAk= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:54 2026 by rpki-client