$ rpki-client -vvf rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft File: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft (raw, json) Hash identifier: N4dRgXLyhWShbMBLH4ipyEYY+Koj9j/Se5IMDEbO54I= Subject key identifier: BD:AE:EB:04:E2:A6:06:92:12:BA:2A:AA:CD:D2:1A:FB:2C:B3:52:6D Authority key identifier: 28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 Certificate issuer: /CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Certificate serial: 3762A808BE053D39A995218A4ED8955EE587C472 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:18:44 +0000 Manifest this update: Mon 20 Jul 2026 22:13:44 +0000 Manifest next update: Wed 22 Jul 2026 00:27:44 +0000 Files and hashes: 1: 28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl (hash: y9jonO46llHY7Bm6N9P0YWmZFtTCDiFDKerpREyoZgY=) 2: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: IYkMg6+qZ/xVvXBkVi5WzC87htsBExZ9GFp2XLTOPIo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:62:a8:08:be:05:3d:39:a9:95:21:8a:4e:d8:95:5e:e5:87:c4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28FC473B037990E1B12B22A9BAFB1900D3ACEBD8 Validity Not Before: Jul 20 22:13:44 2026 GMT Not After : Jul 22 00:27:44 2026 GMT Subject: CN=BDAEEB04E2A6069212BA2AAACDD21AFB2CB3526D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:08:77:3a:a9:e6:98:75:16:0d:79:2c:d1: 4f:1e:d4:75:f5:b8:96:31:54:ea:42:59:c0:78:95: e2:62:13:e6:30:05:70:07:28:3b:82:24:94:01:e6: 2f:3c:18:13:35:97:94:ca:ce:3b:d0:19:d2:7e:c5: 54:cc:02:af:18:94:c2:27:52:29:e4:b6:f3:ef:45: bf:f3:26:e5:53:95:e4:77:a9:93:91:23:dc:3a:4f: df:48:20:49:65:56:82:ec:74:d4:9c:6c:27:20:17: 0b:d1:d2:7e:64:43:be:4d:a9:a1:14:0b:01:26:a3: f0:4c:fb:11:77:f4:ce:2e:bc:6f:af:4d:f8:89:90: b5:75:28:37:c5:21:20:44:a3:78:57:59:2c:f8:04: e0:04:3c:98:2e:73:02:5e:29:44:24:b2:a8:31:04: b0:12:a8:36:a6:39:c3:98:51:03:d7:3a:2d:58:07: 44:fc:2c:5d:8a:c4:e8:09:57:70:96:46:6f:07:52: 18:9c:50:71:e0:a2:a3:20:6e:cb:fe:22:aa:5d:97: 71:ea:98:56:a6:3c:fe:65:83:62:85:32:63:ec:af: 83:bf:03:fa:11:0d:c5:55:56:dc:d7:db:e5:65:93: 1d:a0:c4:04:d5:99:72:67:9e:a2:56:71:45:e1:b9: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:EB:04:E2:A6:06:92:12:BA:2A:AA:CD:D2:1A:FB:2C:B3:52:6D X509v3 Authority Key Identifier: keyid:28:FC:47:3B:03:79:90:E1:B1:2B:22:A9:BA:FB:19:00:D3:AC:EB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/28FC473B037990E1B12B22A9BAFB1900D3ACEBD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c7:ab:e0:f0:f0:a2:3a:63:72:9d:c8:0c:40:b2:e5:2e:be: 4d:7c:6d:2d:2d:91:56:47:c7:79:65:44:9a:51:4b:06:b1:60: f5:7c:2a:8d:ae:a6:f3:87:a1:be:28:45:e3:c8:cf:bc:a3:60: 95:90:b6:24:34:1b:64:1a:d2:b2:b4:15:32:b6:7a:83:37:9b: 42:ad:6e:e3:f3:67:60:e6:31:20:fe:57:0a:19:de:4e:8e:d5: 0b:8e:ae:38:35:bf:6a:b0:26:5a:24:36:d0:7d:4f:f1:56:e4: d0:8e:95:f2:13:6e:26:2b:4a:98:67:1a:23:e1:b1:f7:91:d3: 7f:d9:73:8a:00:5b:93:0e:ab:4e:34:38:d3:11:83:7c:e5:39: cb:ed:3f:7d:8b:af:74:59:f3:23:e0:a4:bf:50:39:7e:65:82: 22:cb:4b:da:e9:79:45:38:69:94:72:35:89:42:1b:14:1e:26: 86:35:3e:8b:a2:df:d5:f8:a0:f7:e3:b9:43:d3:29:06:05:40: a4:cd:d1:e7:2f:fa:09:eb:2a:a3:a3:c7:d4:fb:fd:d4:4f:a8: eb:e7:7d:80:99:a5:49:23:e4:25:67:a0:04:bb:8d:4c:14:ba: 1f:5e:22:22:38:15:f0:0b:b9:49:a9:6c:7b:3c:56:f1:49:c7: 0c:69:36:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2KoCL4FPTmplSGKTtiVXuWHxHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBE M0FDRUJEODAeFw0yNjA3MjAyMjEzNDRaFw0yNjA3MjIwMDI3NDRaMDMxMTAvBgNV BAMTKEJEQUVFQjA0RTJBNjA2OTIxMkJBMkFBQUNERDIxQUZCMkNCMzUyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8Ah3OqnmmHUWDXks0U8e1HX1 uJYxVOpCWcB4leJiE+YwBXAHKDuCJJQB5i88GBM1l5TKzjvQGdJ+xVTMAq8YlMIn UinktvPvRb/zJuVTleR3qZORI9w6T99IIEllVoLsdNScbCcgFwvR0n5kQ75NqaEU CwEmo/BM+xF39M4uvG+vTfiJkLV1KDfFISBEo3hXWSz4BOAEPJgucwJeKUQksqgx BLASqDamOcOYUQPXOi1YB0T8LF2KxOgJV3CWRm8HUhicUHHgoqMgbsv+Iqpdl3Hq mFamPP5lg2KFMmPsr4O/A/oRDcVVVtzX2+Vlkx2gxATVmXJnnqJWcUXhuchRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUva7rBOKmBpISuiqqzdIa+yyzUm0wHwYDVR0j BBgwFoAUKPxHOwN5kOGxKyKpuvsZANOs69gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk4OGMwZjItMjgwMC00OGRhLWE4M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0Iw Mzc5OTBFMUIxMkIyMkE5QkFGQjE5MDBEM0FDRUJEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOEZDNDczQjAzNzk5MEUxQjEyQjIyQTlCQUZCMTkwMEQzQUNF QkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvMjhGQzQ3M0IwMzc5OTBFMUIxMkIyMkE5QkFGQjE5 MDBEM0FDRUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXHq+Dw8KI6Y3KdyAxAsuUuvk18bS0tkVZH x3llRJpRSwaxYPV8Ko2upvOHob4oRePIz7yjYJWQtiQ0G2Qa0rK0FTK2eoM3m0Kt buPzZ2DmMSD+VwoZ3k6O1QuOrjg1v2qwJlokNtB9T/FW5NCOlfITbiYrSphnGiPh sfeR03/Zc4oAW5MOq040ONMRg3zlOcvtP32Lr3RZ8yPgpL9QOX5lgiLLS9rpeUU4 aZRyNYlCGxQeJoY1Poui39X4oPfjuUPTKQYFQKTN0ecv+gnrKqOjx9T7/dRPqOvn fYCZpUkj5CVnoAS7jUwUuh9eIiI4FfALuUmpbHs8VvFJxwxpNgg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:38 2026 by rpki-client