$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft File: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft (raw, json) Hash identifier: OQA3r2Fure7P5Q8B6wClBw3bZiwJsVH+AD1LVaOXoZ8= Subject key identifier: 45:52:AF:B3:BF:CD:6D:2A:F2:94:87:42:D6:18:F5:80:FE:7D:40:C4 Authority key identifier: 28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA Certificate issuer: /CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Certificate serial: 0891F27A96B77911028C2E4BF011B16AC7BC7A11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:13:31 +0000 Manifest this update: Tue 02 Jun 2026 15:08:31 +0000 Manifest next update: Wed 03 Jun 2026 16:27:31 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: A6nVc+CU4v4uaObx3pcTTBPbO/2k+l19C2GraBAa5qQ=) 2: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: IW57GOIpsV3XMacGHlka+0CSQgtIywURoK2nG7nWa7w=) 3: 28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl (hash: fN9QzzRGlgzsUaye2LzHR0fnePNdbLsxjsiWV0X6rvI=) 4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: SdAYaKbLY7S/5p5HGrJ4jkCgcURLrEIiXWTRP7lNFqs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:91:f2:7a:96:b7:79:11:02:8c:2e:4b:f0:11:b1:6a:c7:bc:7a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28880E6A35B6C8AECBC08328E0C2F639619FE0BA Validity Not Before: Jun 2 15:08:31 2026 GMT Not After : Jun 3 16:27:31 2026 GMT Subject: CN=4552AFB3BFCD6D2AF2948742D618F580FE7D40C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:7d:a9:f6:1e:8a:eb:5e:71:04:2c:ba:a9: 7f:71:33:4e:25:87:50:3c:a4:d0:b7:57:3c:fd:34: c1:b2:00:2a:8e:48:59:d3:b8:f4:e3:61:2c:2a:87: 01:05:17:71:2c:62:c1:62:97:fd:89:61:a6:17:88: 3a:42:5a:a0:ce:1d:5f:b1:1a:90:f5:ed:43:1e:29: 91:0a:16:c7:77:83:01:9c:a0:a7:f3:78:41:c0:64: 03:c3:f3:63:be:2e:57:92:a2:99:d1:cf:12:0c:ed: 7f:4b:8a:8e:1c:01:8c:10:b1:01:0e:c8:f5:ee:b4: 5f:8f:66:1f:cd:06:00:ce:72:70:16:a9:00:b2:55: 7e:4a:43:28:09:99:a4:71:dc:39:88:7d:e6:b4:64: 41:48:eb:7d:b9:a8:34:df:0c:15:b6:cb:f1:d6:50: dc:ff:17:00:e8:f8:2d:07:89:62:10:54:f9:a6:7a: 3c:da:96:30:ea:cd:bd:8b:0c:3f:59:50:61:ef:40: 45:b0:9d:cb:35:2f:33:4e:bb:16:75:87:85:25:74: 7c:66:43:20:b7:a5:eb:a9:fe:34:a2:be:4d:9f:41: b6:ab:1d:9a:c6:dd:a3:fc:40:1e:f8:c1:b7:07:fe: 16:be:6f:cb:69:7e:70:09:af:61:7b:6d:56:46:7c: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:52:AF:B3:BF:CD:6D:2A:F2:94:87:42:D6:18:F5:80:FE:7D:40:C4 X509v3 Authority Key Identifier: keyid:28:88:0E:6A:35:B6:C8:AE:CB:C0:83:28:E0:C2:F6:39:61:9F:E0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/28880E6A35B6C8AECBC08328E0C2F639619FE0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:66:83:2c:bd:64:1f:92:ff:b1:27:79:8a:e1:02:a6:1d:2d: c0:20:e8:59:56:e4:90:3b:7c:80:f6:25:fd:58:32:04:fb:37: 44:e4:ba:22:5d:92:b4:0f:bc:33:30:e6:8c:9a:3e:e2:99:21: c1:a5:19:72:d2:63:a1:24:c3:db:50:04:5b:81:a2:1b:c7:53: 0d:6e:c1:d8:94:98:c6:f1:85:8b:c3:bb:2a:0b:17:92:2e:74: f3:c3:e5:dd:c1:a3:02:7c:49:4e:b2:72:9f:38:40:50:5b:41: 81:09:1d:71:f6:59:c7:20:ff:5e:38:e5:01:1c:1b:d1:3a:e0: ae:ce:85:30:28:ad:14:53:e5:52:61:9a:02:7e:6d:02:aa:a1: 75:89:86:8a:7f:29:c0:2f:54:e5:8f:cc:a8:0e:88:bb:8b:b0: d9:f5:dd:d8:bf:3b:4c:0d:60:ea:e7:cf:e9:6e:e0:55:aa:a7: b6:84:57:db:ef:92:e4:48:18:44:64:b5:55:dc:72:96:aa:fe: 5b:70:1d:08:96:4d:40:74:de:d8:23:86:87:ca:d7:55:9c:f5: f5:ac:35:9d:9a:a2:b1:db:85:c8:b9:30:7e:e2:18:2c:01:42: 5a:d3:9c:3d:d1:ae:f0:89:96:61:c6:f1:21:43:5b:84:b1:38: aa:43:ef:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJHyepa3eRECjC5L8BGxase8ehEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2 MTlGRTBCQTAeFw0yNjA2MDIxNTA4MzFaFw0yNjA2MDMxNjI3MzFaMDMxMTAvBgNV BAMTKDQ1NTJBRkIzQkZDRDZEMkFGMjk0ODc0MkQ2MThGNTgwRkU3RDQwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZH2p9h6K615xBCy6qX9xM04l h1A8pNC3Vzz9NMGyACqOSFnTuPTjYSwqhwEFF3EsYsFil/2JYaYXiDpCWqDOHV+x GpD17UMeKZEKFsd3gwGcoKfzeEHAZAPD82O+LleSopnRzxIM7X9Lio4cAYwQsQEO yPXutF+PZh/NBgDOcnAWqQCyVX5KQygJmaRx3DmIfea0ZEFI6325qDTfDBW2y/HW UNz/FwDo+C0HiWIQVPmmejzaljDqzb2LDD9ZUGHvQEWwncs1LzNOuxZ1h4UldHxm QyC3peup/jSivk2fQbarHZrG3aP8QB74wbcH/ha+b8tpfnAJr2F7bVZGfBHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURVKvs7/NbSrylIdC1hj1gP59QMQwHwYDVR0j BBgwFoAUKIgOajW2yK7LwIMo4ML2OWGf4LowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4ODQ0MmItYzQ4ZS00YmEwLThhZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEz NUI2QzhBRUNCQzA4MzI4RTBDMkY2Mzk2MTlGRTBCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODg4MEU2QTM1QjZDOEFFQ0JDMDgzMjhFMEMyRjYzOTYxOUZF MEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvMjg4ODBFNkEzNUI2QzhBRUNCQzA4MzI4RTBDMkY2 Mzk2MTlGRTBCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBmgyy9ZB+S/7EneYrhAqYdLcAg6FlW5JA7 fID2Jf1YMgT7N0TkuiJdkrQPvDMw5oyaPuKZIcGlGXLSY6Ekw9tQBFuBohvHUw1u wdiUmMbxhYvDuyoLF5IudPPD5d3BowJ8SU6ycp84QFBbQYEJHXH2Wccg/1445QEc G9E64K7OhTAorRRT5VJhmgJ+bQKqoXWJhop/KcAvVOWPzKgOiLuLsNn13di/O0wN YOrnz+lu4FWqp7aEV9vvkuRIGERktVXccpaq/ltwHQiWTUB03tgjhofK11Wc9fWs NZ2aorHbhci5MH7iGCwBQlrTnD3RrvCJlmHG8SFDW4SxOKpD7/c= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:22 2026 by rpki-client