$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft File: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft (raw, json) Hash identifier: LK9+1REKBXjvGhyyW2QzrcmPjN74so5D2ULtdMVnDzE= Subject key identifier: FB:EB:66:5D:66:C7:36:D7:44:CD:8C:29:E8:BD:0F:FF:9D:7D:9D:EF Authority key identifier: 1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD Certificate issuer: /CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Certificate serial: 5230639DB189787DB6BCDB656E86B07D3BFBA973 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 21:27:44 +0000 Manifest this update: Mon 20 Jul 2026 21:22:44 +0000 Manifest next update: Tue 21 Jul 2026 23:19:44 +0000 Files and hashes: 1: 1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl (hash: Xa4LDJ53kdtJB4FXVU52W7x751vNUAAwBpvkKWLfn74=) 2: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: Iyu6UGXh6K6YUKWK1Cw0yY2+2dIgfvoG18aCPpAU41Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:30:63:9d:b1:89:78:7d:b6:bc:db:65:6e:86:b0:7d:3b:fb:a9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D28A6E21F28129D4952A008FFF8EE9FB3F798FD Validity Not Before: Jul 20 21:22:44 2026 GMT Not After : Jul 21 23:19:44 2026 GMT Subject: CN=FBEB665D66C736D744CD8C29E8BD0FFF9D7D9DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:07:9a:43:de:88:2f:d3:9d:08:38:75:c9: 91:7a:bd:ea:1e:06:28:9b:e1:af:3e:fd:ea:0a:ea: b5:16:85:27:8b:53:d9:fb:21:30:5f:2e:e9:e1:be: b6:20:ab:c0:48:5d:50:e8:23:e6:7d:99:10:36:62: 4e:9f:78:81:7d:80:b6:b4:0f:83:c7:c6:ed:90:fa: ec:ec:d6:10:09:ff:a2:3d:b1:3e:b1:69:b8:2e:94: ae:72:a1:f2:b9:f4:e6:24:da:db:95:99:be:01:c9: d2:f9:3b:42:14:24:81:1f:0f:f2:b2:99:8a:46:53: 48:65:d6:4c:ac:c3:86:0b:8a:83:91:aa:84:8d:b0: 87:52:1c:ed:1b:20:30:33:7d:86:a9:65:b8:f7:8c: b9:16:77:7d:d2:37:f6:bb:91:e6:69:2b:30:42:81: 37:e5:5a:50:c5:31:70:d6:51:17:79:ba:6e:0b:e3: 6c:ce:9e:ae:64:39:b4:e4:7b:b1:44:0e:64:8b:af: be:18:2a:5d:63:04:70:af:4d:e5:e0:a9:ed:d5:17: 28:c1:c2:42:2f:8b:b3:08:54:6d:b0:89:17:ae:fc: 68:af:92:57:5e:ac:5d:de:8c:ae:19:65:13:ba:21: c2:ff:41:45:6e:72:57:9c:e6:84:b0:a8:55:60:d7: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EB:66:5D:66:C7:36:D7:44:CD:8C:29:E8:BD:0F:FF:9D:7D:9D:EF X509v3 Authority Key Identifier: keyid:1D:28:A6:E2:1F:28:12:9D:49:52:A0:08:FF:F8:EE:9F:B3:F7:98:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/1D28A6E21F28129D4952A008FFF8EE9FB3F798FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3d:22:2a:cb:52:b2:35:26:ef:81:c6:ca:51:8a:96:3c:08: fc:dc:bc:3f:79:76:c5:bd:a0:6f:d0:95:6f:24:8d:3c:49:b4: 6c:15:41:d5:f6:84:c3:48:a5:57:b5:ce:38:8c:c3:51:40:ba: d5:9c:06:6c:20:26:b2:bc:15:81:8a:cd:57:ff:ca:53:8f:09: 0f:ae:86:bc:06:85:8a:9f:c0:3c:53:5d:ec:80:85:11:5b:15: 02:53:cc:3e:63:4a:47:86:f9:16:5f:a1:d0:cc:28:7e:8e:1d: 18:dc:44:5e:f2:c1:9d:43:fe:99:47:46:dc:84:83:ec:06:d6: 49:c8:fe:56:64:f2:15:62:b4:4d:c2:18:c9:60:f2:b7:88:74: 2d:02:60:07:49:52:0a:0e:06:83:b4:8f:e8:58:7c:e9:34:f3: 14:79:e0:42:cd:68:bf:2f:1d:07:8c:cb:58:cb:df:3a:12:fc: 17:3c:67:ee:cc:2a:43:fa:80:52:de:ff:ae:5d:d9:bc:3e:df: fc:ee:54:6d:3a:6e:24:36:d6:e4:e8:ba:03:69:d6:ae:c8:d5: eb:2a:ee:3f:b0:c0:e6:95:fd:e2:40:43:95:57:65:a1:23:e2: 3f:19:a2:6a:3a:15:58:7d:d2:71:4b:09:b8:11:cf:04:94:06: 48:eb:9d:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjBjnbGJeH22vNtlboawfTv7qXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZC M0Y3OThGRDAeFw0yNjA3MjAyMTIyNDRaFw0yNjA3MjEyMzE5NDRaMDMxMTAvBgNV BAMTKEZCRUI2NjVENjZDNzM2RDc0NENEOEMyOUU4QkQwRkZGOUQ3RDlERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rAeaQ96IL9OdCDh1yZF6veoe Biib4a8+/eoK6rUWhSeLU9n7ITBfLunhvrYgq8BIXVDoI+Z9mRA2Yk6feIF9gLa0 D4PHxu2Q+uzs1hAJ/6I9sT6xabgulK5yofK59OYk2tuVmb4BydL5O0IUJIEfD/Ky mYpGU0hl1kysw4YLioORqoSNsIdSHO0bIDAzfYapZbj3jLkWd33SN/a7keZpKzBC gTflWlDFMXDWURd5um4L42zOnq5kObTke7FEDmSLr74YKl1jBHCvTeXgqe3VFyjB wkIvi7MIVG2wiReu/GivklderF3ejK4ZZRO6IcL/QUVuclec5oSwqFVg1xYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU++tmXWbHNtdEzYwp6L0P/519ne8wHwYDVR0j BBgwFoAUHSim4h8oEp1JUqAI//jun7P3mP0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFkMzk0NTAtNDU4NC00ODgyLWI1YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIx RjI4MTI5RDQ5NTJBMDA4RkZGOEVFOUZCM0Y3OThGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDI4QTZFMjFGMjgxMjlENDk1MkEwMDhGRkY4RUU5RkIzRjc5 OEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMUQyOEE2RTIxRjI4MTI5RDQ5NTJBMDA4RkZGOEVF OUZCM0Y3OThGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD89IirLUrI1Ju+BxspRipY8CPzcvD95dsW9 oG/QlW8kjTxJtGwVQdX2hMNIpVe1zjiMw1FAutWcBmwgJrK8FYGKzVf/ylOPCQ+u hrwGhYqfwDxTXeyAhRFbFQJTzD5jSkeG+RZfodDMKH6OHRjcRF7ywZ1D/plHRtyE g+wG1knI/lZk8hVitE3CGMlg8reIdC0CYAdJUgoOBoO0j+hYfOk08xR54ELNaL8v HQeMy1jL3zoS/Bc8Z+7MKkP6gFLe/65d2bw+3/zuVG06biQ21uTougNp1q7I1esq 7j+wwOaV/eJAQ5VXZaEj4j8Zomo6FVh90nFLCbgRzwSUBkjrnfc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:27 2026 by rpki-client