$ rpki-client -vvf rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft File: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft (raw, json) Hash identifier: /DGdlVdzIrTip7/L3GhSQGAoSE9j+Isf9pCPHFkZbrQ= Subject key identifier: B9:61:D4:B4:E9:9C:86:81:0A:67:3F:E2:E0:74:B1:36:5F:28:44:2C Authority key identifier: 28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 Certificate issuer: /CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Certificate serial: 543722DD89D2427425DA9CF7AEFE84C909F2F250 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:29:51 +0000 Manifest this update: Tue 02 Jun 2026 16:24:51 +0000 Manifest next update: Wed 03 Jun 2026 18:38:51 +0000 Files and hashes: 1: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl (hash: b6DgGZ/zrDANet3oJCB4JhE7MJWnj/yHTokOyy1SPgw=) 2: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: IYkMg6+qZ/xVvXBkVi5WzC87htsBExZ9GFp2XLTOPIo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:37:22:dd:89:d2:42:74:25:da:9c:f7:ae:fe:84:c9:09:f2:f2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Validity Not Before: Jun 2 16:24:51 2026 GMT Not After : Jun 3 18:38:51 2026 GMT Subject: CN=B961D4B4E99C86810A673FE2E074B1365F28442C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:f9:e3:d2:2f:96:ca:d9:5c:cd:19:bc:96: 78:6f:1a:35:17:c9:96:52:f5:62:09:2d:04:9b:9d: 71:23:72:6a:b3:55:2f:0b:80:aa:cb:83:21:15:d2: f7:6a:45:20:6c:cc:16:40:37:2d:f4:6f:82:e8:40: ef:b6:97:b3:04:d9:1e:8f:6d:10:e8:a0:0e:9d:bd: 65:25:a4:a2:32:03:17:69:d1:03:7f:02:ca:3b:be: a8:3a:8a:ce:71:b9:32:c3:52:bd:e9:49:fa:e1:ba: 0b:75:fb:d9:4d:0f:06:e0:82:19:77:ac:f8:39:9f: a8:32:86:a4:ca:9c:5e:10:39:69:ac:16:43:6d:91: 08:dd:84:4f:84:23:8a:aa:e0:39:b0:61:d1:cd:41: 21:59:82:41:98:eb:83:55:29:c7:2d:87:d3:69:19: 80:93:f4:ac:85:e6:fb:8e:10:42:59:bd:ed:38:0b: 50:64:46:25:d8:a8:bf:0f:6e:62:44:ff:8d:ed:4d: a4:e4:c2:49:dd:02:f9:dd:03:3a:13:7e:24:90:9d: f2:97:74:c1:ee:1d:98:b5:89:c6:bb:bb:6d:3a:e7: 15:23:a9:19:b1:29:c5:20:dd:e0:d6:ea:3a:0c:8f: 55:7b:94:0e:f6:f4:fd:20:bf:be:36:5d:9a:b2:0b: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:61:D4:B4:E9:9C:86:81:0A:67:3F:E2:E0:74:B1:36:5F:28:44:2C X509v3 Authority Key Identifier: keyid:28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:07:2e:53:54:3f:4f:c3:a3:d5:2e:14:74:01:5d:99:0a:0c: 28:30:ea:29:6a:87:77:4d:3b:38:ab:b0:6e:7d:fb:e3:2a:d7: 06:0a:cc:f1:21:90:c8:f8:f4:45:92:31:c5:9d:96:d0:0a:eb: 9d:7e:68:c4:9d:e3:73:b2:ff:ad:d7:29:f7:d8:a1:c9:71:88: c3:27:17:1e:c1:8d:76:48:6f:c4:d3:7e:2d:a5:73:6e:9b:77: 15:63:86:81:50:fc:0c:b5:6f:c4:27:a0:eb:9c:7c:29:1e:b5: 3f:02:4e:38:56:d0:a9:0a:03:2a:c2:67:9d:11:47:61:a5:7d: 7a:5e:a8:76:a7:c0:9a:4b:0b:f1:40:b6:a0:85:90:43:0b:a5: 6c:52:62:57:50:e0:b1:9c:97:22:99:34:ba:11:70:d2:6e:e6: 69:a7:cc:2b:b2:44:af:19:03:1b:68:53:fb:70:88:dd:10:5a: 16:b4:ca:16:d6:b0:46:95:09:94:26:e7:8f:b0:ee:a8:18:fc: f0:30:bb:bf:e5:53:10:22:56:5d:6b:7c:fa:3c:90:6c:2c:bc: 6b:06:88:ec:88:83:b4:2a:35:41:03:39:f1:18:06:03:aa:0c: d5:3c:84:4e:4d:d7:27:82:5a:9f:95:65:66:9b:f1:d9:c0:2c: cc:ff:6b:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDci3YnSQnQl2pz3rv6EyQny8lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBE M0FDRUJEODAeFw0yNjA2MDIxNjI0NTFaFw0yNjA2MDMxODM4NTFaMDMxMTAvBgNV BAMTKEI5NjFENEI0RTk5Qzg2ODEwQTY3M0ZFMkUwNzRCMTM2NUYyODQ0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ffnj0i+WytlczRm8lnhvGjUX yZZS9WIJLQSbnXEjcmqzVS8LgKrLgyEV0vdqRSBszBZANy30b4LoQO+2l7ME2R6P bRDooA6dvWUlpKIyAxdp0QN/Aso7vqg6is5xuTLDUr3pSfrhugt1+9lNDwbgghl3 rPg5n6gyhqTKnF4QOWmsFkNtkQjdhE+EI4qq4DmwYdHNQSFZgkGY64NVKccth9Np GYCT9KyF5vuOEEJZve04C1BkRiXYqL8PbmJE/43tTaTkwkndAvndAzoTfiSQnfKX dMHuHZi1ica7u2065xUjqRmxKcUg3eDW6joMj1V7lA729P0gv742XZqyC/9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWHUtOmchoEKZz/i4HSxNl8oRCwwHwYDVR0j BBgwFoAUKPxHOwN5kOGxKyKpuvsZANOs69gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk4OGMwZjItMjgwMC00OGRhLWE4M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0Iw Mzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBEM0FDRUJEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOEZDNDczQjAzNzk5MEUxQjEyQjIyQTlCQUZCMTkwMEQzQUNF QkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5 MDBEM0FDRUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQHLlNUP0/Do9UuFHQBXZkKDCgw6ilqh3dN OzirsG59++Mq1wYKzPEhkMj49EWSMcWdltAK651+aMSd43Oy/63XKffYoclxiMMn Fx7BjXZIb8TTfi2lc26bdxVjhoFQ/Ay1b8QnoOucfCketT8CTjhW0KkKAyrCZ50R R2GlfXpeqHanwJpLC/FAtqCFkEMLpWxSYldQ4LGclyKZNLoRcNJu5mmnzCuyRK8Z AxtoU/twiN0QWha0yhbWsEaVCZQm54+w7qgY/PAwu7/lUxAiVl1rfPo8kGwsvGsG iOyIg7QqNUEDOfEYBgOqDNU8hE5N1yeCWp+VZWab8dnALMz/a+0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:39 2026 by rpki-client