$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft File: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft (raw, json) Hash identifier: XF4HsGcnX+SjgZbN9hmyeIXV29gQ21FFlCUxlo3KWyE= Subject key identifier: BF:B1:EC:BA:36:00:B9:72:D6:15:5C:A9:4A:0F:21:45:93:FD:C2:02 Authority key identifier: 02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 Certificate issuer: /CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Certificate serial: 650C05FC04983454828EFDDFD70264892290D7A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft Manifest number: 72 Signing time: Mon 27 Jul 2026 02:05:16 +0000 Manifest this update: Mon 27 Jul 2026 02:00:16 +0000 Manifest next update: Tue 28 Jul 2026 04:28:16 +0000 Files and hashes: 1: 020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl (hash: RVaAD0Wjtj2MIRIVWAVMMdxkUerN5JmHxOirYzTYu8c=) 2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: Xk7Qw7wFoGRI3rjKCFAl7ffLOSrFJh23uM7+wGfmYww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0c:05:fc:04:98:34:54:82:8e:fd:df:d7:02:64:89:22:90:d7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020628DB16DFDDF442923B09D04B73C68D0A0CB3 Validity Not Before: Jul 27 02:00:16 2026 GMT Not After : Jul 28 04:28:16 2026 GMT Subject: CN=BFB1ECBA3600B972D6155CA94A0F214593FDC202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:67:30:0d:a1:e0:48:df:50:fe:51:9e:f7:10: 4f:44:b7:10:b9:0d:78:f8:7e:1a:f5:22:f9:58:0c: 90:46:51:8a:ee:2c:83:50:a2:41:18:6d:ad:0c:58: f7:f0:2b:5e:f6:8e:7f:7f:d4:bc:14:f1:8f:30:fa: ff:e3:54:0c:00:d1:a8:44:7f:cf:5d:c9:37:e5:66: d2:c9:e0:28:f3:c1:1d:d0:28:45:a4:ad:dd:2f:38: 1b:7c:81:9f:8f:99:e2:53:a2:87:64:86:ed:32:fb: cb:af:7c:19:48:14:5d:19:0f:4d:77:27:68:93:ed: 25:7d:0b:8b:54:b9:35:97:99:42:95:06:75:b8:b2: 89:3a:f9:ca:43:28:90:c2:a8:f4:df:92:6b:9a:3d: d8:22:0c:a0:68:58:3f:40:97:df:83:20:ce:b6:f2: 82:4b:90:e8:27:3a:3f:d1:47:ee:b0:da:9a:89:fc: e7:4c:ba:2d:b1:71:5b:da:be:f7:0a:9c:16:2e:9b: cc:33:f3:e8:12:69:64:91:dd:c1:55:b2:07:b5:f5: 5d:fa:fa:79:71:17:bd:f4:f7:26:8a:eb:e2:6e:20: 88:32:c1:a8:62:93:80:e9:9a:1e:35:a3:fd:73:cd: 3e:85:73:fb:43:bc:7e:b7:6b:69:30:7d:63:01:2d: e7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B1:EC:BA:36:00:B9:72:D6:15:5C:A9:4A:0F:21:45:93:FD:C2:02 X509v3 Authority Key Identifier: keyid:02:06:28:DB:16:DF:DD:F4:42:92:3B:09:D0:4B:73:C6:8D:0A:0C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/020628DB16DFDDF442923B09D04B73C68D0A0CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/020628DB16DFDDF442923B09D04B73C68D0A0CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:94:8e:89:6a:5e:f7:de:ed:ed:b6:6d:2e:0b:43:1c:b0:e0: 2f:9b:5d:4f:5e:0d:20:1e:29:e8:bd:b4:3a:80:b1:d7:67:47: 36:37:1c:97:22:34:c1:d2:7a:76:e1:0b:68:31:f6:58:d5:e6: e3:89:9c:23:47:64:0e:f2:ab:8f:aa:7e:80:0e:f6:6c:7c:12: 52:f1:e4:7b:d8:d9:68:c4:0f:7b:21:eb:e4:73:a4:f2:68:26: 46:09:10:75:5f:ea:3e:7d:7a:ad:c6:69:51:a1:47:47:8d:1a: c4:28:f3:07:6d:81:bb:23:5b:8d:08:8e:76:a0:17:5c:cb:f8: c1:d4:5b:62:fa:45:88:dd:06:a2:c6:b1:44:67:98:82:22:3c: 4f:2a:a0:05:0a:a5:b8:92:63:a2:bd:76:0b:40:8b:3c:3f:a2: 44:05:2e:fe:14:58:d5:4f:fe:de:cf:39:75:af:9a:23:f7:a1: 1c:0c:f7:ed:38:7f:6d:08:01:3f:8f:6e:25:6a:11:38:97:f2: 8b:f7:b1:77:b8:ec:72:12:d8:73:d1:10:4c:12:11:32:95:c5: 49:28:99:db:5c:fd:8f:6e:c9:a3:cc:5b:4c:ce:b2:a5:a0:0f: e2:76:7d:0f:6c:46:63:10:1e:22:37:6d:85:88:ed:23:6a:f8: aa:76:a0:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQwF/ASYNFSCjv3f1wJkiSKQ16QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0QjczQzY4 RDBBMENCMzAeFw0yNjA3MjcwMjAwMTZaFw0yNjA3MjgwNDI4MTZaMDMxMTAvBgNV BAMTKEJGQjFFQ0JBMzYwMEI5NzJENjE1NUNBOTRBMEYyMTQ1OTNGREMyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkZzANoeBI31D+UZ73EE9EtxC5 DXj4fhr1IvlYDJBGUYruLINQokEYba0MWPfwK172jn9/1LwU8Y8w+v/jVAwA0ahE f89dyTflZtLJ4CjzwR3QKEWkrd0vOBt8gZ+PmeJToodkhu0y+8uvfBlIFF0ZD013 J2iT7SV9C4tUuTWXmUKVBnW4sok6+cpDKJDCqPTfkmuaPdgiDKBoWD9Al9+DIM62 8oJLkOgnOj/RR+6w2pqJ/OdMui2xcVvavvcKnBYum8wz8+gSaWSR3cFVsge19V36 +nlxF7309yaK6+JuIIgywahik4Dpmh41o/1zzT6Fc/tDvH63a2kwfWMBLee/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv7HsujYAuXLWFVypSg8hRZP9wgIwHwYDVR0j BBgwFoAUAgYo2xbf3fRCkjsJ0Etzxo0KDLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmM5MDk3MzctMTU2NC00NmNhLTkwMDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIx NkRGRERGNDQyOTIzQjA5RDA0QjczQzY4RDBBMENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjA2MjhEQjE2REZEREY0NDI5MjNCMDlEMDRCNzNDNjhEMEEw Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw MDktOGQyOGE1NmU5OGVlLzAvMDIwNjI4REIxNkRGRERGNDQyOTIzQjA5RDA0Qjcz QzY4RDBBMENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKUjolqXvfe7e22bS4LQxyw4C+bXU9eDSAe Kei9tDqAsddnRzY3HJciNMHSenbhC2gx9ljV5uOJnCNHZA7yq4+qfoAO9mx8ElLx 5HvY2WjED3sh6+RzpPJoJkYJEHVf6j59eq3GaVGhR0eNGsQo8wdtgbsjW40Ijnag F1zL+MHUW2L6RYjdBqLGsURnmIIiPE8qoAUKpbiSY6K9dgtAizw/okQFLv4UWNVP /t7POXWvmiP3oRwM9+04f20IAT+PbiVqETiX8ov3sXe47HIS2HPREEwSETKVxUko mdtc/Y9uyaPMW0zOsqWgD+J2fQ9sRmMQHiI3bYWI7SNq+Kp2oLU= -----END CERTIFICATE-----Generated at Mon Jul 27 15:36:36 2026 by rpki-client