$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft File: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft (raw, json) Hash identifier: csNSd7l/YXvXYDGXvVvPPdJpyIrFuc7vWxEI7o77TV0= Subject key identifier: 04:FB:9F:1C:4A:DD:4D:90:DE:31:CA:CA:6A:30:4C:CD:4B:7E:DF:DB Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Certificate serial: 2A3AEB903B96D981411A8E9A7F41094ADB381E51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 12:16:29 +0000 Manifest this update: Mon 20 Jul 2026 12:11:28 +0000 Manifest next update: Tue 21 Jul 2026 14:23:28 +0000 Files and hashes: 1: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: dcn7JjA5cMl377hf4qH/uXB97TvgtDVrGSS8WaneiPA=) 2: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: J9Ppr3YgZsd8hgKwRlpPASzO8XUT6qbE4ua4z+T5rRI=) 3: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl (hash: w07WVy5u1wUrnEFuGTArlhCAAEA1zs2KI4bxknMY28o=) 4: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: sAJt4KOFRGK6/p9H5qEjBboJGlbpIE0n8tuPpLq/ACA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3a:eb:90:3b:96:d9:81:41:1a:8e:9a:7f:41:09:4a:db:38:1e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Validity Not Before: Jul 20 12:11:28 2026 GMT Not After : Jul 21 14:23:28 2026 GMT Subject: CN=04FB9F1C4ADD4D90DE31CACA6A304CCD4B7EDFDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:c6:e4:47:b9:56:99:ea:2d:90:4c:a4:aa: 80:51:97:c5:7a:03:5b:72:4f:da:d3:d6:04:9c:30: 15:70:ea:da:b8:f8:dc:82:1d:11:a5:21:da:bb:6f: f5:e6:b9:76:1a:9e:64:26:71:92:37:76:31:bf:af: 65:18:2a:4f:be:07:dd:12:62:ba:23:d5:be:a7:87: 92:9b:92:a0:02:da:a5:5b:00:b7:28:6e:9b:3c:5d: 87:47:21:f0:e1:4a:61:54:71:b2:6e:e3:8c:1f:fb: 3a:ab:a7:1c:3c:1a:77:84:45:cc:cc:f3:00:2a:2f: 12:9d:2f:eb:cb:54:09:db:5d:2e:e2:b4:05:7b:33: e5:19:83:f9:01:18:aa:62:7f:9c:d2:d3:45:00:d7: 5f:22:bc:a9:6a:83:59:38:0f:6e:9a:ac:fd:e9:2c: db:76:10:92:3c:63:63:2a:a5:bb:b2:af:76:6f:47: 92:29:1e:94:14:58:c6:48:1f:24:ac:ad:3c:cf:db: 86:50:f4:c5:3a:d3:2c:ec:5e:58:ce:6f:b4:0c:15: ff:aa:8a:48:58:c9:fc:87:0b:12:eb:52:14:d8:65: 04:75:93:fa:de:14:0f:b5:96:58:01:e6:33:54:70: 1e:df:d3:75:6f:18:d0:94:36:40:b5:8d:a1:c7:04: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FB:9F:1C:4A:DD:4D:90:DE:31:CA:CA:6A:30:4C:CD:4B:7E:DF:DB X509v3 Authority Key Identifier: keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9f:bd:88:28:4c:fc:3e:22:8e:29:db:44:55:36:0c:22:6c: 67:4b:b0:e8:df:7c:59:df:c5:44:66:6e:83:a3:90:92:d2:33: 1a:a3:b5:c3:48:98:be:b5:46:be:42:4b:43:e5:0b:ae:e6:b5: 5a:35:59:89:fe:fd:09:b9:28:31:ed:ae:49:12:cc:03:8f:fd: cd:af:9d:19:76:0b:a3:46:54:1f:e0:3c:da:d1:a6:84:e5:a3: 29:39:1c:19:06:15:f2:4a:f5:ff:9a:7e:f9:80:1c:8f:99:88: df:88:97:78:e7:8c:b5:1d:47:51:37:f2:81:35:67:04:0d:24: 7a:cf:35:69:b5:7e:55:69:e2:ad:7c:fb:10:c8:28:c0:43:17: 3a:55:cb:d8:b0:b2:01:f8:f5:43:a8:8e:d5:2f:1c:da:d7:c5: 31:43:31:6b:fe:03:64:31:2c:76:92:04:b4:1a:fe:3f:71:88: fc:99:ab:66:b4:be:4d:5a:53:82:9f:92:8a:c0:ef:9f:fd:b8: 05:39:ab:7e:03:84:70:74:de:dd:2c:06:54:b4:95:bb:04:a0: 5c:df:a9:9b:f7:00:2a:d1:d0:84:1c:c5:0e:ac:e9:8f:50:d1: 7b:73:f6:90:38:7c:04:bd:4c:22:98:b5:30:3c:8b:05:6d:3f: 24:3c:77:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjrrkDuW2YFBGo6af0EJSts4HlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB MUM0MEY2RjAeFw0yNjA3MjAxMjExMjhaFw0yNjA3MjExNDIzMjhaMDMxMTAvBgNV BAMTKDA0RkI5RjFDNEFERDREOTBERTMxQ0FDQTZBMzA0Q0NENEI3RURGREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0m8bkR7lWmeotkEykqoBRl8V6 A1tyT9rT1gScMBVw6tq4+NyCHRGlIdq7b/XmuXYanmQmcZI3djG/r2UYKk++B90S Yroj1b6nh5KbkqAC2qVbALcobps8XYdHIfDhSmFUcbJu44wf+zqrpxw8GneERczM 8wAqLxKdL+vLVAnbXS7itAV7M+UZg/kBGKpif5zS00UA118ivKlqg1k4D26arP3p LNt2EJI8Y2Mqpbuyr3ZvR5IpHpQUWMZIHySsrTzP24ZQ9MU60yzsXljOb7QMFf+q ikhYyfyHCxLrUhTYZQR1k/reFA+1llgB5jNUcB7f03VvGNCUNkC1jaHHBEJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPufHErdTZDeMcrKajBMzUt+39swHwYDVR0j BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5 QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw RjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5 NjVBMUM0MEY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKfvYgoTPw+Io4p20RVNgwibGdLsOjffFnf xURmboOjkJLSMxqjtcNImL61Rr5CS0PlC67mtVo1WYn+/Qm5KDHtrkkSzAOP/c2v nRl2C6NGVB/gPNrRpoTloyk5HBkGFfJK9f+afvmAHI+ZiN+Il3jnjLUdR1E38oE1 ZwQNJHrPNWm1flVp4q18+xDIKMBDFzpVy9iwsgH49UOojtUvHNrXxTFDMWv+A2Qx LHaSBLQa/j9xiPyZq2a0vk1aU4KfkorA75/9uAU5q34DhHB03t0sBlS0lbsEoFzf qZv3ACrR0IQcxQ6s6Y9Q0Xtz9pA4fAS9TCKYtTA8iwVtPyQ8d8s= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:46 2026 by rpki-client