$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft File: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft (raw, json) Hash identifier: s+xkPiKbf1IVTRVHQ2JhQDi61jwLRyDAx6051twYQLs= Subject key identifier: 56:F0:D5:C9:79:03:DA:5A:9E:60:9A:0A:6C:30:50:58:AD:09:58:8C Authority key identifier: 02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 Certificate issuer: /CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Certificate serial: 70DC4D159D49EEF6FFE077D322F9D91DE58EA711 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 13:24:51 +0000 Manifest this update: Mon 02 Nov 2026 13:19:51 +0000 Manifest next update: Tue 03 Nov 2026 13:25:51 +0000 Files and hashes: 1: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: GtQhQt5lC+popSxKBpEXClSBs/pxIHaZp5GFBcVq7Ds=) 2: 028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl (hash: fbVhq63y0G6V7rFaJiVzECiWQ0lBDrFf47RrW317fhA=) 3: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: N8zhnsK8z7VxJNfcfyiLUZPoMiisc/2RHnWBqlz/4MI=) 4: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: OyG3mFe6SrJhcLOwFyBCeuQpeyeUH09cXSgAgqZj+fA=) 5: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: OZMHHHmslz7MYh9R9Ib0RjlOxsJyDimPwwAqaL88/ng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:dc:4d:15:9d:49:ee:f6:ff:e0:77:d3:22:f9:d9:1d:e5:8e:a7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B3EA251C3A597AF55D4DB3EF43A07C218A5A6 Validity Not Before: Nov 2 13:19:51 2026 GMT Not After : Nov 3 13:25:51 2026 GMT Subject: CN=56F0D5C97903DA5A9E609A0A6C305058AD09588C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:b7:46:c8:c4:b9:a2:cf:c0:41:a3:0c:4e: 65:3f:b3:b5:9a:85:d4:c2:bb:9f:e1:8a:d9:7d:c2: 36:1c:6e:ea:3a:0b:b1:02:bb:18:98:9b:3e:6e:d9: 4c:64:99:67:4c:eb:dc:94:2a:ea:34:96:d8:60:00: 35:ff:73:68:ac:b2:50:c1:05:fb:90:88:54:ad:a9: 0f:a9:cc:4d:df:17:96:58:27:0e:b1:1c:31:32:2b: ff:52:ab:ce:7d:5c:b7:5b:18:0c:34:5c:b7:36:45: f6:66:d4:1e:22:e5:1b:fb:58:04:9d:b1:64:66:20: fc:f8:8c:ae:31:59:ad:c3:04:da:ac:44:33:d4:3d: 44:d7:38:9e:33:15:79:e2:b1:8d:2e:c2:df:91:bf: 8e:a7:c2:46:89:2c:23:d6:2c:67:89:b7:bd:00:cb: f6:b1:5f:3e:e4:0c:71:4b:2a:f0:8f:77:b5:bb:f5: 6e:e5:69:bc:28:f4:87:b0:8f:ee:ef:66:de:2f:55: 71:66:19:ef:12:db:70:90:09:e7:5a:eb:db:87:9a: 33:1a:6c:c2:5b:ff:a4:06:32:51:7d:46:c2:13:5c: 3d:33:c4:03:4b:18:2f:a6:f0:65:87:46:e0:4b:0d: c4:f4:3e:99:c4:c2:5a:1c:c5:9c:96:ef:a9:46:45: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F0:D5:C9:79:03:DA:5A:9E:60:9A:0A:6C:30:50:58:AD:09:58:8C X509v3 Authority Key Identifier: keyid:02:8B:3E:A2:51:C3:A5:97:AF:55:D4:DB:3E:F4:3A:07:C2:18:A5:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/028B3EA251C3A597AF55D4DB3EF43A07C218A5A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3e:8f:c5:fb:3d:63:88:7d:03:06:c4:41:76:ba:54:f2:e6: a7:22:dd:07:90:46:24:d9:f3:69:48:57:0e:a4:f8:5f:ae:8c: c5:cc:ae:95:23:f7:6c:4c:55:62:da:31:e7:be:b8:cb:0a:35: 07:3b:8c:05:85:15:04:e2:60:cf:67:1c:70:b7:a9:22:0f:a6: 2a:dc:4a:d4:93:1b:85:b2:ab:e2:67:df:b5:5a:a0:33:ee:bb: bd:9e:e0:53:44:a1:b6:d0:d0:27:67:3b:c0:fe:76:6c:42:41: 6f:53:af:cc:fe:a0:5a:92:fa:82:eb:4f:31:03:43:ef:01:5f: 41:df:71:95:bc:d3:83:87:c2:b0:5f:bc:5b:a6:60:f0:3d:97: b7:7c:07:5d:38:5e:4a:b4:46:22:7e:10:2f:3d:fb:ec:b9:56: f5:0b:ac:b1:bd:52:dc:96:93:7c:f4:ab:39:98:78:6c:32:3d: 53:9b:a6:0c:d9:ba:a3:41:fe:00:32:94:5c:e8:5f:bd:a9:e3: ab:e2:05:a5:1f:f6:34:3f:6c:90:b8:40:8e:d3:c5:c0:61:58: 30:20:8a:7e:49:30:f9:36:b4:a1:96:1d:2b:ae:e8:57:a0:c9: f9:f1:93:28:f3:b9:d3:1c:d7:96:c1:ee:e8:2a:bf:2d:92:e7: 84:1b:39:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcNxNFZ1J7vb/4HfTIvnZHeWOpxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNBMDdD MjE4QTVBNjAeFw0yNjExMDIxMzE5NTFaFw0yNjExMDMxMzI1NTFaMDMxMTAvBgNV BAMTKDU2RjBENUM5NzkwM0RBNUE5RTYwOUEwQTZDMzA1MDU4QUQwOTU4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcnLdGyMS5os/AQaMMTmU/s7Wa hdTCu5/hitl9wjYcbuo6C7ECuxiYmz5u2UxkmWdM69yUKuo0lthgADX/c2isslDB BfuQiFStqQ+pzE3fF5ZYJw6xHDEyK/9Sq859XLdbGAw0XLc2RfZm1B4i5Rv7WASd sWRmIPz4jK4xWa3DBNqsRDPUPUTXOJ4zFXnisY0uwt+Rv46nwkaJLCPWLGeJt70A y/axXz7kDHFLKvCPd7W79W7labwo9Iewj+7vZt4vVXFmGe8S23CQCeda69uHmjMa bMJb/6QGMlF9RsITXD0zxANLGC+m8GWHRuBLDcT0PpnEwlocxZyW76lGRYyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVvDVyXkD2lqeYJoKbDBQWK0JWIwwHwYDVR0j BBgwFoAUAos+olHDpZevVdTbPvQ6B8IYpaYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM2YjJiZDctZDdmMS00ODE1LWE2MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1 MUMzQTU5N0FGNTVENERCM0VGNDNBMDdDMjE4QTVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCM0VBMjUxQzNBNTk3QUY1NUQ0REIzRUY0M0EwN0MyMThB NUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvMDI4QjNFQTI1MUMzQTU5N0FGNTVENERCM0VGNDNB MDdDMjE4QTVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY+j8X7PWOIfQMGxEF2ulTy5qci3QeQRiTZ 82lIVw6k+F+ujMXMrpUj92xMVWLaMee+uMsKNQc7jAWFFQTiYM9nHHC3qSIPpirc StSTG4Wyq+Jn37VaoDPuu72e4FNEobbQ0CdnO8D+dmxCQW9Tr8z+oFqS+oLrTzED Q+8BX0HfcZW804OHwrBfvFumYPA9l7d8B104Xkq0RiJ+EC89++y5VvULrLG9UtyW k3z0qzmYeGwyPVObpgzZuqNB/gAylFzoX72p46viBaUf9jQ/bJC4QI7TxcBhWDAg in5JMPk2tKGWHSuu6FegyfnxkyjzudMc15bB7ugqvy2S54QbOUE= -----END CERTIFICATE-----Generated at Mon Nov 2 22:31:37 2026 by rpki-client