$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft File: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft (raw, json) Hash identifier: c/NtN1mMlBEab2cbOhQxKiIZsX7OyyvxhtAmZ3H4igE= Subject key identifier: 95:CE:F3:DF:98:0D:D3:4E:CB:58:4D:E9:AC:ED:F4:7E:F2:24:AE:68 Authority key identifier: 28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA Certificate issuer: /CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Certificate serial: 32FDAD5E8AA96E58ED948C663B6E09BD2D01ECCB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:03:16 +0000 Manifest this update: Tue 21 Jul 2026 01:58:16 +0000 Manifest next update: Wed 22 Jul 2026 05:05:16 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: IW57GOIpsV3XMacGHlka+0CSQgtIywURoK2nG7nWa7w=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: A6nVc+CU4v4uaObx3pcTTBPbO/2k+l19C2GraBAa5qQ=) 3: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl (hash: 413UMBgScvG3BK/xyaMmRkf/bML1CmavLJnVqUJpU28=) 4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: SdAYaKbLY7S/5p5HGrJ4jkCgcURLrEIiXWTRP7lNFqs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fd:ad:5e:8a:a9:6e:58:ed:94:8c:66:3b:6e:09:bd:2d:01:ec:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Validity Not Before: Jul 21 01:58:16 2026 GMT Not After : Jul 22 05:05:16 2026 GMT Subject: CN=95CEF3DF980DD34ECB584DE9ACEDF47EF224AE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e0:95:6c:55:9a:9d:71:14:0a:39:ac:6d:9e: fb:1d:69:83:08:ad:53:a7:41:73:71:da:3c:61:dc: 6f:73:7a:16:39:61:2b:ad:c7:84:e1:0c:64:68:6c: 67:75:c5:00:79:d9:3a:46:9c:ad:92:5e:83:bc:42: 54:1c:33:12:21:63:df:84:61:27:f1:fe:8e:e1:2e: 2b:87:c2:ce:af:20:02:24:aa:98:05:55:90:29:c8: de:96:1e:47:72:4a:b5:54:8f:a7:c9:20:a4:88:6c: 23:af:2a:38:b0:08:e1:4d:14:42:51:98:72:ea:56: 59:7e:2b:14:03:92:9f:45:f2:4a:21:ef:d9:94:d1: 1a:d2:61:16:d8:87:2f:cc:88:f1:dc:ab:5d:c0:13: 08:d4:c2:8c:68:28:98:24:c1:1a:eb:01:a2:4c:53: c9:7a:99:46:2b:e1:fb:16:fa:39:6f:f2:22:62:74: 20:1d:94:86:20:81:a5:d8:c0:c1:97:0b:5e:82:15: 99:57:c6:b8:33:47:d1:b0:ca:3c:ab:4a:34:b0:0b: 3a:7a:7c:de:8d:77:f7:ab:8d:57:ea:fb:93:0b:be: 6e:6e:48:21:a7:d9:7e:73:a0:09:77:07:b1:01:01: 83:3a:86:0f:48:f7:36:ca:e8:50:ad:23:bd:f5:90: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CE:F3:DF:98:0D:D3:4E:CB:58:4D:E9:AC:ED:F4:7E:F2:24:AE:68 X509v3 Authority Key Identifier: keyid:28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:19:d2:18:7f:5c:15:84:7d:06:f7:50:86:9b:c7:50:c7:58: e5:99:af:86:6f:e7:24:6b:5a:f1:88:f7:35:3c:55:62:54:0e: 2c:86:9f:f2:07:67:e8:5b:d2:a5:0c:11:31:a2:2a:72:f9:4e: a3:5f:6c:ed:41:21:eb:51:63:be:06:96:4c:ed:bc:24:14:2a: 81:5f:b5:6d:f5:d9:4c:d2:55:71:bf:7d:50:df:e2:96:96:61: 87:52:7b:b3:d5:68:da:8e:98:c9:2f:b5:74:64:1f:13:7a:ed: 8b:4b:f8:e8:bd:7f:ae:1d:b6:db:a1:5f:bf:08:0b:d9:a7:a8: d0:cb:36:a6:0b:b5:75:fb:c5:7c:b5:be:d6:8e:26:93:9e:7f: ee:66:62:0a:9d:ca:fc:b9:21:18:7e:bc:67:36:c8:02:4d:c1: 6d:01:34:30:69:ac:66:ae:bf:f6:61:9c:b3:2b:73:6b:3e:89: 62:51:fe:2e:df:80:a0:22:8d:6b:3f:9a:7e:47:f7:35:af:3b: c0:d9:26:26:fa:a8:d2:46:09:67:43:03:95:04:d8:7d:65:ab: 0d:55:65:39:61:71:4a:f4:16:56:7b:0d:77:fd:e8:11:c0:9c: 07:db:c5:f9:d3:9e:5e:cd:7e:af:06:3e:82:d0:a2:eb:ac:39: fe:0d:35:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMv2tXoqpbljtlIxmO24JvS0B7MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2 MTlGRTBCQTAeFw0yNjA3MjEwMTU4MTZaFw0yNjA3MjIwNTA1MTZaMDMxMTAvBgNV BAMTKDk1Q0VGM0RGOTgwREQzNEVDQjU4NERFOUFDRURGNDdFRjIyNEFFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD34JVsVZqdcRQKOaxtnvsdaYMI rVOnQXNx2jxh3G9zehY5YSutx4ThDGRobGd1xQB52TpGnK2SXoO8QlQcMxIhY9+E YSfx/o7hLiuHws6vIAIkqpgFVZApyN6WHkdySrVUj6fJIKSIbCOvKjiwCOFNFEJR mHLqVll+KxQDkp9F8koh79mU0RrSYRbYhy/MiPHcq13AEwjUwoxoKJgkwRrrAaJM U8l6mUYr4fsW+jlv8iJidCAdlIYggaXYwMGXC16CFZlXxrgzR9GwyjyrSjSwCzp6 fN6Nd/erjVfq+5MLvm5uSCGn2X5zoAl3B7EBAYM6hg9I9zbK6FCtI731kKrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlc7z35gN007LWE3prO30fvIkrmgwHwYDVR0j BBgwFoAUKIgOajW2yK7LwIMo4ML2OWGf4LowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4ODQ0MmItYzQ4ZS00YmEwLThhZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEz NUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2MTlGRTBCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODg4MEU2QTM1QjZDOEFFQ0JDMDgzMjhFMEMyRjYzOTYxOUZF MEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2 Mzk2MTlGRTBCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMZ0hh/XBWEfQb3UIabx1DHWOWZr4Zv5yRr WvGI9zU8VWJUDiyGn/IHZ+hb0qUMETGiKnL5TqNfbO1BIetRY74GlkztvCQUKoFf tW312UzSVXG/fVDf4paWYYdSe7PVaNqOmMkvtXRkHxN67YtL+Oi9f64dttuhX78I C9mnqNDLNqYLtXX7xXy1vtaOJpOef+5mYgqdyvy5IRh+vGc2yAJNwW0BNDBprGau v/ZhnLMrc2s+iWJR/i7fgKAijWs/mn5H9zWvO8DZJib6qNJGCWdDA5UE2H1lqw1V ZTlhcUr0FlZ7DXf96BHAnAfbxfnTnl7Nfq8GPoLQouusOf4NNRI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:16:35 2026 by rpki-client