$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft File: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft (raw, json) Hash identifier: /wzyQjG4ZnOdyTGsG/Fgd4gDQQudgjy6BG+xTOHlz2g= Subject key identifier: C9:8B:A1:05:6F:28:B3:69:D8:83:46:A0:C6:0C:63:09:C7:A7:63:1D Authority key identifier: 02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 Certificate issuer: /CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Certificate serial: 3D827A463B8BF2E86A7BFCEEBC5F57DC4464E570 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 06:15:26 +0000 Manifest this update: Thu 03 Sep 2026 06:10:26 +0000 Manifest next update: Fri 04 Sep 2026 07:31:26 +0000 Files and hashes: 1: 028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl (hash: iuCfSVi1DNTHx2Q1wM7SnKqi7Ooh+r7NDV0BU0ys8BA=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: BUSB0kLsC7pjKXi5bhLXUPIzYoFZsUEccBkiDUzp6D8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 07:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:82:7a:46:3b:8b:f2:e8:6a:7b:fc:ee:bc:5f:57:dc:44:64:e5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028B72898E0BABCF3470C7E89EC6E1F9C2442AD9 Validity Not Before: Sep 3 06:10:26 2026 GMT Not After : Sep 4 07:31:26 2026 GMT Subject: CN=C98BA1056F28B369D88346A0C60C6309C7A7631D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b2:f7:c9:b0:74:97:f4:16:ea:f4:de:28:a0: a0:b3:4f:61:00:12:cf:d5:33:91:9c:8e:25:41:81: aa:3f:2c:d6:da:ee:15:24:29:9e:90:dc:fe:a3:82: da:b8:09:60:84:5a:13:8e:ee:fa:00:1b:9b:83:87: 98:c7:cb:d4:80:5a:ca:f3:23:ff:39:ac:6f:59:72: d6:84:66:79:46:14:de:54:02:f4:a8:74:bf:45:b6: 8e:08:8e:ed:b2:c4:0d:1d:79:5d:14:45:26:ab:c5: 51:e8:f1:29:61:d6:41:4d:7e:70:7b:3c:ec:0a:58: c7:97:9e:ed:38:61:03:68:fc:61:c3:cf:9e:57:30: c8:28:60:14:63:2a:d0:39:91:94:ac:63:bc:8e:43: 7e:2f:20:47:3d:31:6e:34:8e:88:35:df:8c:6d:8e: 75:8e:2b:9f:e0:c2:6b:7e:90:0a:d2:1a:4f:37:bb: 3a:fc:fb:1d:a9:9c:0c:94:02:b8:0c:c1:2c:9b:63: 89:b1:24:a4:e6:9c:5d:06:19:52:42:09:b2:6a:fa: 71:f5:3e:17:f3:fe:c1:c3:87:f6:1f:b5:03:4b:e5: ff:cb:7f:db:ab:a1:16:dd:19:9a:45:d9:0c:36:ba: 84:3d:ed:36:75:6f:29:1d:ca:d0:7b:d9:cc:b4:d0: 90:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8B:A1:05:6F:28:B3:69:D8:83:46:A0:C6:0C:63:09:C7:A7:63:1D X509v3 Authority Key Identifier: keyid:02:8B:72:89:8E:0B:AB:CF:34:70:C7:E8:9E:C6:E1:F9:C2:44:2A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/028B72898E0BABCF3470C7E89EC6E1F9C2442AD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:56:9d:e9:ed:c0:b4:d0:96:52:ee:4f:ff:ea:07:eb:a0:72: b6:2f:de:29:25:1d:c6:6a:f7:5a:04:70:c4:1a:d3:d5:02:ba: b7:ca:28:f4:ca:4b:71:a7:35:9c:51:75:d6:ae:f7:cd:a2:d3: cc:11:54:1b:34:3c:68:47:76:24:07:86:31:b9:74:57:47:4d: 0c:7c:da:76:55:41:55:85:21:d2:2a:f3:79:18:ce:b3:35:66: e6:b4:ff:cb:38:2e:29:00:20:96:46:f7:3c:e2:ca:84:d3:73: 03:58:46:6d:d9:1d:be:82:84:fe:48:cf:7c:ee:29:dc:ea:a0: 51:80:d0:23:56:91:fc:95:b6:f2:fc:49:43:1b:cc:d7:f2:2f: 97:57:ca:d2:64:a8:16:5e:9e:25:fe:94:d3:86:7d:5a:cd:d2: c1:6f:5f:46:e0:1e:af:3f:86:8e:10:a9:e1:70:87:53:9f:46: ab:fe:f6:93:df:32:49:69:9d:74:64:e5:aa:43:82:30:92:ff: 39:dd:99:ce:69:a8:40:02:83:5d:bd:a3:4d:6c:13:9b:aa:02: 57:da:30:7c:1b:26:6d:1d:05:c5:70:b5:95:b0:85:6e:f9:03: 7a:42:e0:f5:2b:dd:4d:e9:a4:0d:ce:dc:5c:67:e6:fd:70:47: 1c:eb:bb:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPYJ6RjuL8uhqe/zuvF9X3ERk5XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlD MjQ0MkFEOTAeFw0yNjA5MDMwNjEwMjZaFw0yNjA5MDQwNzMxMjZaMDMxMTAvBgNV BAMTKEM5OEJBMTA1NkYyOEIzNjlEODgzNDZBMEM2MEM2MzA5QzdBNzYzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfsvfJsHSX9Bbq9N4ooKCzT2EA Es/VM5GcjiVBgao/LNba7hUkKZ6Q3P6jgtq4CWCEWhOO7voAG5uDh5jHy9SAWsrz I/85rG9ZctaEZnlGFN5UAvSodL9Fto4Iju2yxA0deV0URSarxVHo8Slh1kFNfnB7 POwKWMeXnu04YQNo/GHDz55XMMgoYBRjKtA5kZSsY7yOQ34vIEc9MW40jog134xt jnWOK5/gwmt+kArSGk83uzr8+x2pnAyUArgMwSybY4mxJKTmnF0GGVJCCbJq+nH1 Phfz/sHDh/YftQNL5f/Lf9uroRbdGZpF2Qw2uoQ97TZ1bykdytB72cy00JBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyYuhBW8os2nYg0agxgxjCcenYx0wHwYDVR0j BBgwFoAUAotyiY4Lq880cMfonsbh+cJEKtkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Y2JkOTUtNTc0Zi00MDViLThiZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4 RTBCQUJDRjM0NzBDN0U4OUVDNkUxRjlDMjQ0MkFEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjhCNzI4OThFMEJBQkNGMzQ3MEM3RTg5RUM2RTFGOUMyNDQy QUQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMDI4QjcyODk4RTBCQUJDRjM0NzBDN0U4OUVDNkUx RjlDMjQ0MkFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVWnentwLTQllLuT//qB+ugcrYv3iklHcZq 91oEcMQa09UCurfKKPTKS3GnNZxRddau982i08wRVBs0PGhHdiQHhjG5dFdHTQx8 2nZVQVWFIdIq83kYzrM1Zua0/8s4LikAIJZG9zziyoTTcwNYRm3ZHb6ChP5Iz3zu KdzqoFGA0CNWkfyVtvL8SUMbzNfyL5dXytJkqBZeniX+lNOGfVrN0sFvX0bgHq8/ ho4QqeFwh1OfRqv+9pPfMklpnXRk5apDgjCS/zndmc5pqEACg129o01sE5uqAlfa MHwbJm0dBcVwtZWwhW75A3pC4PUr3U3ppA3O3Fxn5v1wRxzru4s= -----END CERTIFICATE-----Generated at Thu Sep 3 20:51:02 2026 by rpki-client