$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft File: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft (raw, json) Hash identifier: rlm5D+WcGM7N8YRRbNMzUGGrKV+hXQST1/xdByv+skY= Subject key identifier: A1:D4:9A:43:3C:24:75:E6:70:DB:69:24:AB:FA:60:92:4E:D0:E2:9C Authority key identifier: 28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 Certificate issuer: /CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Certificate serial: 6A571983ACE94BCE43D9C118971A6606C6E7ABBC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 04:38:45 +0000 Manifest this update: Tue 03 Nov 2026 04:33:45 +0000 Manifest next update: Wed 04 Nov 2026 04:58:45 +0000 Files and hashes: 1: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: QbxtuI4YaAQndGClm2TbpKVghRM330ZkzNpAWirg1ig=) 2: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: cqIEZQxU+EZc9SYrpFqE5pS8nDzAxvnkTbzbHwD4B2w=) 3: 28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl (hash: 8iAM4LEdjQOOJKUf2CoJDff98QZsb+4wDMirqnrAdv4=) 4: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: 3yzCp4wkI3KfVYe4A0JZd3yJ1CphXPMHC1KQXGZTn24=) 5: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: DX9De2RZ1fwPjXYRliJoG3vcnnWQkcrXmm5lY0DlQ8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 04:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:57:19:83:ac:e9:4b:ce:43:d9:c1:18:97:1a:66:06:c6:e7:ab:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28051FF190AD60F286AE69A5C2C2A75002CD5C22 Validity Not Before: Nov 3 04:33:45 2026 GMT Not After : Nov 4 04:58:45 2026 GMT Subject: CN=A1D49A433C2475E670DB6924ABFA60924ED0E29C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:20:52:b1:86:ca:42:b6:c0:51:d6:e2:8c: e8:c8:d1:d6:fb:4f:c1:86:80:42:ce:1d:43:55:ae: e5:ce:b9:25:1b:c2:b7:e3:52:ec:01:8e:92:9b:6a: 0f:ec:2d:85:88:b0:54:6f:38:15:3a:12:fa:c5:d9: 65:b5:c5:f4:37:fd:85:c2:fb:c4:e5:ef:43:1f:69: 4c:e1:1a:8a:f2:52:40:e0:dc:95:29:f9:16:c6:9a: 21:4b:70:6a:78:c6:bf:5c:3d:f3:89:8e:a3:41:04: 6e:95:60:55:ed:35:9f:da:2d:8a:5a:4c:fb:1c:39: c5:41:ae:46:b6:04:76:02:7d:91:c7:98:1d:e5:39: 00:cf:ea:c4:39:2e:34:49:3d:97:3a:5e:c6:3a:91: 11:73:c0:62:15:9e:10:b8:ad:96:44:0b:d0:4b:41: 69:09:b3:2b:a8:93:9d:ef:2b:8d:05:4a:30:01:b2: 01:12:ec:7f:17:62:81:5e:d9:cb:c2:57:2d:82:8b: 44:a1:15:5c:ed:58:64:fb:25:ae:30:d6:d4:02:95: 1d:32:e6:e4:0e:fe:65:bf:59:e1:00:a0:42:b1:86: cb:ab:b8:e5:bc:3c:76:78:d7:1c:19:0c:a5:e7:0f: 10:08:5c:02:53:96:e9:4d:5c:e6:e4:f2:d0:6c:34: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D4:9A:43:3C:24:75:E6:70:DB:69:24:AB:FA:60:92:4E:D0:E2:9C X509v3 Authority Key Identifier: keyid:28:05:1F:F1:90:AD:60:F2:86:AE:69:A5:C2:C2:A7:50:02:CD:5C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/28051FF190AD60F286AE69A5C2C2A75002CD5C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/28051FF190AD60F286AE69A5C2C2A75002CD5C22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:dc:8c:95:e2:c0:85:2a:31:b8:65:3a:57:6b:2f:9d:fa:0f: f9:36:99:f1:f7:38:56:4f:5f:28:56:82:97:38:68:25:00:3e: 6b:29:a4:6f:b6:1f:8d:62:85:3d:8c:b4:7d:68:c3:6b:94:52: 1f:30:47:77:ab:fa:4b:ce:54:7b:4c:c5:db:c8:75:75:48:fb: 2b:5c:2b:05:58:f6:35:8d:12:be:74:ff:89:2d:e4:f2:b6:13: a0:56:73:1a:de:75:24:8a:e3:78:2c:c2:79:8f:28:fe:57:fd: 13:ac:e0:5f:93:e2:e2:a5:28:78:a7:f0:bb:2e:0b:72:94:15: 78:38:4c:a3:8d:09:f4:ea:5f:89:14:d7:87:1d:49:64:e2:82: da:44:ee:21:f1:b5:81:f0:69:61:2a:27:2e:40:c6:94:bf:c8: ab:e9:f1:0b:4c:61:48:c6:0e:c4:02:87:d5:75:cf:8c:5a:18: 22:5d:98:3d:a8:38:ce:57:b8:6c:62:22:71:94:a5:52:76:41: 85:4c:bb:e3:b3:06:39:5d:b6:38:65:d9:47:2e:a7:d0:c8:7c: 9f:a0:2b:df:8c:8e:ad:61:fd:77:71:80:7d:9e:3a:19:5a:a3: 0a:e5:18:59:66:40:42:58:c1:27:4c:ae:31:c2:34:d9:07:2e: 8f:9f:d0:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUalcZg6zpS85D2cEYlxpmBsbnq7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAw MkNENUMyMjAeFw0yNjExMDMwNDMzNDVaFw0yNjExMDQwNDU4NDVaMDMxMTAvBgNV BAMTKEExRDQ5QTQzM0MyNDc1RTY3MERCNjkyNEFCRkE2MDkyNEVEMEUyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiyBSsYbKQrbAUdbijOjI0db7 T8GGgELOHUNVruXOuSUbwrfjUuwBjpKbag/sLYWIsFRvOBU6EvrF2WW1xfQ3/YXC +8Tl70MfaUzhGoryUkDg3JUp+RbGmiFLcGp4xr9cPfOJjqNBBG6VYFXtNZ/aLYpa TPscOcVBrka2BHYCfZHHmB3lOQDP6sQ5LjRJPZc6XsY6kRFzwGIVnhC4rZZEC9BL QWkJsyuok53vK40FSjABsgES7H8XYoFe2cvCVy2Ci0ShFVztWGT7Ja4w1tQClR0y 5uQO/mW/WeEAoEKxhsuruOW8PHZ41xwZDKXnDxAIXAJTlulNXObk8tBsNEmFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUodSaQzwkdeZw22kkq/pgkk7Q4pwwHwYDVR0j BBgwFoAUKAUf8ZCtYPKGrmmlwsKnUALNXCIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZjOGIzYTktNGVmZi00NjBkLWIwMWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5 MEFENjBGMjg2QUU2OUE1QzJDMkE3NTAwMkNENUMyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODA1MUZGMTkwQUQ2MEYyODZBRTY5QTVDMkMyQTc1MDAyQ0Q1 QzIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvMjgwNTFGRjE5MEFENjBGMjg2QUU2OUE1QzJDMkE3 NTAwMkNENUMyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzcjJXiwIUqMbhlOldrL536D/k2mfH3OFZP XyhWgpc4aCUAPmsppG+2H41ihT2MtH1ow2uUUh8wR3er+kvOVHtMxdvIdXVI+ytc KwVY9jWNEr50/4kt5PK2E6BWcxredSSK43gswnmPKP5X/ROs4F+T4uKlKHin8Lsu C3KUFXg4TKONCfTqX4kU14cdSWTigtpE7iHxtYHwaWEqJy5AxpS/yKvp8QtMYUjG DsQCh9V1z4xaGCJdmD2oOM5XuGxiInGUpVJ2QYVMu+OzBjldtjhl2Ucup9DIfJ+g K9+Mjq1h/XdxgH2eOhlaowrlGFlmQEJYwSdMrjHCNNkHLo+f0DU= -----END CERTIFICATE-----Generated at Tue Nov 3 08:22:43 2026 by rpki-client