$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft File: 3028A8BB1ECF7550222580449D4FA78158DBF42A.mft (raw, json) Hash identifier: bfbZkONFwtF+0ZiiG5U8KxNmtXVnmfUAfpgMjbCzf0Q= Subject key identifier: 5B:68:C3:9D:C1:C5:9D:FC:55:1B:C3:88:07:8D:A9:34:82:6B:10:82 Authority key identifier: 30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A Certificate issuer: /CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Certificate serial: 527E5909D8B8425E0E84D97EC5E5DC3AE24A0358 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 23:17:01 +0000 Manifest this update: Tue 03 Nov 2026 23:12:01 +0000 Manifest next update: Thu 05 Nov 2026 02:46:01 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: EAY48hYNH/6TUE1xmrb2C7cSV9ZpqN9x7POku5Es1R0=) 2: 3028A8BB1ECF7550222580449D4FA78158DBF42A.crl (hash: Z291uohxzNG2mFRSgokbB9EDuFGvK0R3ZIBBilwmWvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7e:59:09:d8:b8:42:5e:0e:84:d9:7e:c5:e5:dc:3a:e2:4a:03:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Validity Not Before: Nov 3 23:12:01 2026 GMT Not After : Nov 5 02:46:01 2026 GMT Subject: CN=5B68C39DC1C59DFC551BC388078DA934826B1082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0b:c5:07:a1:c0:81:70:09:2e:3a:d2:fe:76: 32:05:6e:bf:2e:bf:0e:60:c0:14:5e:36:e5:38:27: 64:97:02:c6:91:9b:8f:39:ce:f3:6b:d8:e9:ec:4e: 3f:5d:52:b8:f8:e5:9b:09:80:21:67:f6:55:b8:f7: 6a:96:33:e5:62:a2:3d:aa:f6:69:76:88:f7:9f:61: 69:36:6c:0e:47:8f:57:4f:c2:28:64:9b:05:a0:bf: 3b:8c:27:ad:1f:7d:c2:a3:d5:da:9b:73:05:50:ee: 85:0b:5c:d6:b4:4a:44:3c:d0:4c:0c:6e:da:0a:de: 47:46:ef:5e:72:f2:d3:40:a8:68:b8:49:f7:71:05: 2a:75:7d:e1:7f:ec:ba:88:29:0a:07:68:fd:1f:b0: f6:3e:77:e6:f4:e2:86:4b:f1:2e:d1:f8:6e:b9:60: 6a:62:76:2b:db:ab:0c:27:6c:e0:5e:6f:e1:03:56: 0d:92:8e:73:b0:36:ef:70:f0:8b:7b:5f:61:18:cc: 3a:e9:b0:e2:78:52:a1:dd:b3:4b:f6:65:5e:0a:ac: d7:1c:49:1b:a4:22:92:25:ae:64:93:68:9e:32:f2: 3c:a7:6d:39:41:4c:c0:11:d1:91:18:80:b2:9a:d7: ff:fc:db:d4:84:72:59:56:46:f0:e6:cc:68:b2:5c: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:C3:9D:C1:C5:9D:FC:55:1B:C3:88:07:8D:A9:34:82:6B:10:82 X509v3 Authority Key Identifier: keyid:30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b9:b5:b8:eb:26:5c:0a:ac:d7:48:c0:65:1f:6f:65:79:45: 57:83:ef:8a:46:81:7a:49:d1:b2:c9:87:40:bf:27:36:bc:91: d3:e5:2d:08:e0:0a:69:17:8a:6a:13:33:a2:7e:f8:17:95:22: 25:27:89:61:91:50:0e:2a:70:4e:f6:f4:4a:39:f5:29:1d:c2: 11:68:2b:3d:34:b4:bd:25:16:5d:41:15:2b:88:82:65:b1:86: 7c:57:6b:76:a6:0e:82:72:86:77:ae:de:3e:0b:b0:9f:dc:3f: 72:88:99:5f:67:15:18:ea:50:d9:3a:97:f1:0c:63:5d:54:82: 0a:4d:57:45:b1:24:07:29:d5:36:c6:c8:1c:b4:da:59:05:1b: ca:43:0f:f3:d7:b5:ce:34:d0:c6:b4:24:87:9f:b6:9e:4a:0b: 6f:dd:86:a0:e4:fb:c6:d4:d6:53:34:f4:75:a9:8c:7b:f4:cb: 46:a1:86:99:f1:51:c6:27:2b:9b:5c:f4:cc:b1:8f:3e:53:d2: 08:62:75:2d:c1:d1:09:9a:55:eb:15:77:b7:6e:74:1c:ce:bc: 7c:25:19:a8:90:41:96:54:2a:7d:b0:97:0b:be:40:2d:42:3e: 23:83:92:31:a0:a4:5c:97:87:47:d3:32:a1:e1:c8:46:4a:cb: 99:e4:da:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUn5ZCdi4Ql4OhNl+xeXcOuJKA1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1 OERCRjQyQTAeFw0yNjExMDMyMzEyMDFaFw0yNjExMDUwMjQ2MDFaMDMxMTAvBgNV BAMTKDVCNjhDMzlEQzFDNTlERkM1NTFCQzM4ODA3OERBOTM0ODI2QjEwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbC8UHocCBcAkuOtL+djIFbr8u vw5gwBReNuU4J2SXAsaRm485zvNr2OnsTj9dUrj45ZsJgCFn9lW492qWM+Vioj2q 9ml2iPefYWk2bA5Hj1dPwihkmwWgvzuMJ60ffcKj1dqbcwVQ7oULXNa0SkQ80EwM btoK3kdG715y8tNAqGi4SfdxBSp1feF/7LqIKQoHaP0fsPY+d+b04oZL8S7R+G65 YGpidivbqwwnbOBeb+EDVg2SjnOwNu9w8It7X2EYzDrpsOJ4UqHds0v2ZV4KrNcc SRukIpIlrmSTaJ4y8jynbTlBTMAR0ZEYgLKa1//829SEcllWRvDmzGiyXLWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW2jDncHFnfxVG8OIB42pNIJrEIIwHwYDVR0j BBgwFoAUMCioux7PdVAiJYBEnU+ngVjb9CowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmZGQ2ZjktYjc5OS00YTk2LTllMmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIx RUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1OERCRjQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDI4QThCQjFFQ0Y3NTUwMjIyNTgwNDQ5RDRGQTc4MTU4REJG NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3 ODE1OERCRjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW5tbjrJlwKrNdIwGUfb2V5RVeD74pGgXpJ 0bLJh0C/Jza8kdPlLQjgCmkXimoTM6J++BeVIiUniWGRUA4qcE729Eo59SkdwhFo Kz00tL0lFl1BFSuIgmWxhnxXa3amDoJyhneu3j4LsJ/cP3KImV9nFRjqUNk6l/EM Y11UggpNV0WxJAcp1TbGyBy02lkFG8pDD/PXtc400Ma0JIeftp5KC2/dhqDk+8bU 1lM09HWpjHv0y0ahhpnxUcYnK5tc9Myxjz5T0ghidS3B0QmaVesVd7dudBzOvHwl GaiQQZZUKn2wlwu+QC1CPiODkjGgpFyXh0fTMqHhyEZKy5nk2j0= -----END CERTIFICATE-----Generated at Wed Nov 4 18:07:46 2026 by rpki-client